Kubernetes

Kubernetes version

groundcover supports any K8s version from v1.21.

groundcover may work on many other K8s flavors, but we might just didn't get a chance to test it yet. Can't find yours in the list? let us know over Slack.

Kubernetes distributions

K8s distribution	Status	Comments
EKS	supported
AKS	supported
GKE	supported
OKE	supported
OpenShift	supported
Rancher	supported
Self-managed	supported
minikube	supported
kind	supported
Rancher Desktop	supported
k0s	supported
k3s	supported
k3d	supported
microk8s	supported
AWS Fargate	not supported
Docker-desktop	not supported

Kubernetes RBAC permissions

For the installation to complete successfully, permissions to deploy the following objects are required:

• StatefulSet

• Deployment

• DaemonSet (With privileged containers for loading our eBPF sensor)

• ConfigMap

• Secret

• PVC

To learn more about groundcover's architecture and components visit our Architecture Section

Outgoing traffic

groundcover's portal pod sends HTTP requests to the cloud platform app.groundcover.com on port 443.

This unique architecture keeps the the data inside the cluster and fetches it on-demand keeping the data encrypted all the way without the need to open the cluster for incoming traffic via ingresses.