steampipe-powerpipe-kubernetes

A Helm chart to deploy Steampipe and Powerpipe to Kubernetes.

Helm

Add Repo

helm repo add steampipe-powerpipe-kubernetes https://steampipe-powerpipe-kubernetes.github.io/steampipe-powerpipe-kubernetes

helm repo update steampipe-powerpipe-kubernetes

Helm Install (latest version)

helm repo update steampipe-powerpipe-kubernetes

helm upgrade --install steampipe-powerpipe \
    -n turbot --create-namespace \
    steampipe-powerpipe-kubernetes/steampipe-powerpipe-kubernetes

Helm Install (specific version)

helm show values steampipe-powerpipe-kubernetes/steampipe-powerpipe-kubernetes --version X.Y.Z > steampipe-powerpipe-values.yaml

# update the steampipe-powerpipe-values.yaml on your own accord

helm upgrade --install steampipe-powerpipe \
    -n turbot \
    -f steampipe-powerpipe-values.yaml \
    --create-namespace \
    --version X.Y.Z \
    steampipe-powerpipe-kubernetes/steampipe-powerpipe-kubernetes

ArgoCD

You can use the argocd-application.yaml manifest in the Github repo: https://github.com/oguzhan-yilmaz/steampipe-powerpipe-kubernetes/blob/main/argocd-application.yaml

kubectl apply -f https://raw.githubusercontent.com/oguzhan-yilmaz/steampipe-powerpipe-kubernetes/refs/heads/main/argocd-application.yaml

Configuration

Quick Start

Basic Setup:

global:
  steampipeDatabasePassword: "your-secure-password"

steampipe:
  envVars:
    INSTALL_PLUGINS: "steampipe kubernetes aws gcp azure"

powerpipe:
  installMods:
    - github.com/turbot/steampipe-mod-aws-compliance
    - github.com/turbot/steampipe-mod-gcp-compliance
    - github.com/turbot/steampipe-mod-kubernetes-compliance

Connection Configuration

Parameter	Description
steampipe.config	Steampipe connection configuration files

AWS Multi-Account:

steampipe:
  config:
    aws.spc: |
      connection "aws_production" {
        plugin  = "aws"
        profile = "production"
        regions = ["us-east-1", "us-west-2", "eu-west-1"]
      }
      connection "aws_staging" {
        plugin  = "aws"
        profile = "staging"
        regions = ["us-east-1", "us-west-2"]
      }

Multi-Profile AWS Configuration

To use multiple AWS profiles, create both credentials and config files:

steampipe:
  secretCredentials:
    - name: aws-credentials
      directory: ".aws"
      filename: "credentials"
      content: |
        [production]
        aws_access_key_id = PROD_ACCESS_KEY
        aws_secret_access_key = PROD_SECRET_KEY
        region = us-east-1
        
        [staging]
        aws_access_key_id = STAGING_ACCESS_KEY
        aws_secret_access_key = STAGING_SECRET_KEY
        region = us-west-2
        
        [development]
        aws_access_key_id = DEV_ACCESS_KEY
        aws_secret_access_key = DEV_SECRET_KEY
        region = eu-west-1
    
    - name: aws-config
      directory: ".aws"
      filename: "config"
      content: |
        [profile production]
        region = us-east-1
        output = json

GCP Service Account:

steampipe:
  secretCredentials:
    - name: gcp-service-account
      directory: "."
      filename: "gcp-service-account.json"
      content: |
        {
          "type": "service_account",
          "project_id": "my-project",
          "private_key_id": "...",
          "private_key": "...",
          "client_email": "..."
        }

Powerpipe Configuration

Module Management

Parameter	Description	Default
powerpipe.installMods	List of Powerpipe modules to install	["github.com/turbot/steampipe-mod-kubernetes-insights", "github.com/turbot/steampipe-mod-kubernetes-compliance"]

# Multi-cloud compliance
powerpipe:
  installMods:
    - github.com/turbot/steampipe-mod-aws-compliance
    - github.com/turbot/steampipe-mod-gcp-compliance
    - github.com/turbot/steampipe-mod-kubernetes-compliance

# Security and compliance
powerpipe:
  installMods:
    - github.com/turbot/steampipe-mod-aws-compliance
    - github.com/turbot/steampipe-mod-aws-security
    - github.com/turbot/steampipe-mod-kubernetes-compliance

Useful Commands

# Check status
kubectl get pods -n turbot

# Test plugin functionality
kubectl exec -n turbot deployment/steampipe -- steampipe query "select * from aws_ec2_instance"

# Check module dashboards
kubectl exec -n turbot deployment/powerpipe -- powerpipe dashboard list

References

Name	URL
Github Repo	https://github.com/oguzhan-yilmaz/steampipe-powerpipe-kubernetes
Github Releases	https://github.com/oguzhan-yilmaz/steampipe-powerpipe-kubernetes/releases
Github Pages	https://oguzhan-yilmaz.github.io/steampipe-powerpipe-kubernetes/
Github Pages — Helm index	https://oguzhan-yilmaz.github.io/steampipe-powerpipe-kubernetes/index.yaml