Fundamental questions on kubescape operator on kubernetes

[jaiprasad266]

1. Does kubescape-scheduler cron job trigger "configuration scan" by internally firing /v1/scan endpoint and by default scan all the namespaces ?

If yes , after kubescape-scheduler completes scanning and generates the report and submit to the armo cloud account , how can I download it ?

What am I looking for/want to do ?

Schedule the kubescape-scheduler cron job to run every midnight and then once it completes the scanning , I want the report in my github repository.

2. I understand that kubevuln-scheduler crob job does a scanning for image vulnerabilites in the cluster and uploads the report to armo cloud.

How can I download this report ? I do not want to download manually from the portal , how can I automate this as part of github actions and download it to github repo.

3. On similar lines how to download the rbac visualizer as a file ?

Why we want to do this ?

Basically we want to schedule the cron to scan and then have a evidence report for each scan in a github repo.

Reference to Document followed:

https://hub.armosec.io/docs/installation-of-armo-in-cluster

[Bezbran]

@jaiprasad266 ,
I will just write here what I wrote in discord, for the sake of the next people coming with the same need:

You can generate an API token in Kubescape cloud. Then you can use it to access the Kubescape cloud API directly.
Follow the "how to get a cookie" instructions in Kubescape Cloud swagger.

You can store the API token as a Github secret for example.

[jaiprasad266]

Thank you @Bezbran , this helps.

[jaiprasad266]

@Bezbran
getting this error while trying to fetch bearer token
{"errors":["We're facing some difficulties. Please try again"]}

[jaiprasad266]

I was not able to use the kubescape cloud api as I am blocked with fetching the bear token for authentication.

[amirkCA]

@jaiprasad266 My name is Amir, I am the VP Product@ARMO. You can send the scanned reports to a Slack channel. Look at settings-> integrations. LMK if you want something similar to Github.
At this point, it is for configuration scanning, not image scanning.
Feel free to contact me directly amirk@armosec.io

[jaiprasad266]

@amirkCA yes want to store the scanned report in github.