In Kaspersky Container Security 1.2, you can completely disable the File Threat Protection component. This can be necessary if you experience problems with the component.
You can forcibly disable the File Threat Protection component in two ways—by modifying the file for deploying agents on the cluster, and by modifying running agents.
To forcibly disable File Threat Protection using an agent deployment file:
DaemonSet
section for the node-agent, set the FILE_THREAT_PROTECTION_ENABLED
environment variable to false
.name: FILE_THREAT_PROTECTION_ENABLED
value: false
kubectl apply -f agents.yaml
The orchestrator redeploys the node-agent pods with File Threat Protection disabled.
To forcibly disable File Threat Protection when agents are running:
kubectl edit
command.DaemonSet
section for the node-agent, set the FILE_THREAT_PROTECTION_ENABLED
environment variable to false
.name: FILE_THREAT_PROTECTION_ENABLED
value: false
The orchestrator applies the saved changes and disables File Threat Protection.