Deploying NeuVector

NeuVector is an end-to-end container security system plugin that provides enterprise-level zero-trust security solutions for containerized computing components in a cluster after deployment.

Prerequisites

When deploying the component, you need to configure storage classes (for persistent storage of security data). Please create a storage class that supports RWX (multi-node read-write) in the current cluster in advance.

Procedure

1. In the left navigation bar, click Clusters > Clusters.

2. Click the Cluster Name to be deployed with the plugin.

3. On the Plugins tab, click > Deployments on the right side of NeuVector.

4. Configure the relevant parameters according to the following instructions.

   Parameter	Description
   StorageClass	Select the storage class that supports RWX (multi-node read-write) that has been deployed in the current cluster.
   Container Runtime	Must be consistent with the type of Runtime Component in the current cluster.
   Container Runtime Socket Path	The socket file path of the container runtime. Specify it when there are multiple container runtime sockets or non-standard sockets in the node.

5. Click Deployments.

   Tip:

• After the plugin is successfully deployed, you can access NeuVector by entering <platform access address>/clusters/<current cluster name>/neuvector/ in your browser. You need to log in with OpenID: Sign In with OpenID > OpenID Login.

• If the login to NeuVector fails, please log out and log in again to the Full Stack Cloud Native Open Platform before trying to log in to NeuVector again.