Installing Kubescape with Plural

Plural is a free, open-source tool that enables you to deploy Kubescape on Kubernetes with the cloud provider of your choice. Plural is an open-source DevOps platform for self-hosting applications on Kubernetes without the management overhead. With baked-in SSO, automated upgrades, and secret encryption, you get all the benefits of a managed service with none of the lock-in or cost.

Kubescape is available as a direct install with Plural, providing immediate access to risk analytics, compliance checks, and vulnerability scanning.

Getting started

First, create an account on https://app.plural.sh. This is only to track your installations and allow for the delivery of automated upgrades. You will not be asked to provide any infrastructure credentials or sensitive information.

Next, install the Plural CLI by following steps 1-3 of these instructions.

You'll need a Git repository to store your Plural configuration. This will contain the Helm charts, Terraform config, and Kubernetes manifests that Plural will autogenerate for you.

You have two options:

Run plural init in any directory to let Plural initiate an OAuth workflow to create a Git repo for you.
Create a Git repo manually, clone it down, and run plural init inside it.

Running plural init will start a configuration wizard to configure your Git repo and cloud provider for use with Plural. You're now ready to install Kubescape on your Plural repo.

Installing Kubescape

To find the console bundle name for your cloud provider, run:

plural bundle list kubescape

Now, to add it to your workspace, run the install command. If you are on AWS, this is what the command would look like:

plural bundle install kubescape kubescape-aws

Plural's Kubescape distribution has support for AWS, GCP, and Azure, so feel free to pick whichever best fits your infrastructure.

The CLI will prompt you to choose whether you want to use Plural OIDC. OIDC allows you to log in to the applications you host on Plural with your login to app.plural.sh, acting as an SSO provider.

To generate the configuration and deploy your infrastructure, run:

plural build
plural deploy --commit "deploying kubescape"

Note: Deploys will generally take 10-20 minutes, based on your cloud provider.

Installing the Plural Console

To make management of your installation as simple as possible, we recommend installing the Plural Console. The console provides tools to manage resource scaling, receive automated upgrades, create dashboards tailored to your Kubescape installation, and log aggregation. This can be done using the exact same process as above, using AWS as an example:

plural bundle install console console-aws
plural build
plural deploy --commit "deploying the console too"

Accessing your Kubescape installation

Now, head over to kubescape.YOUR_SUBDOMAIN.onplural.sh to access the Kubescape UI. If you set up a different subdomain for Kubescape during installation, make sure to use that instead.

Accessing your Plural Console

To monitor and manage your Kubescape installation, head over to the Plural Console at console.YOUR_SUBDOMAIN.onplural.sh.

Uninstalling Kubescape on Plural

To bring down your Plural installation of Kubescape at any time, run:

plural destroy kubescape

To bring your entire Plural deployment down, run:

plural destroy

Note: Only do this if you're absolutely sure you want to bring down all associated resources with this repository.

Troubleshooting

If you have any issues with installing Kubescape on Plural, feel free to join our Discord Community and we can help you out.

If you'd like to request any new features for our Kubescape installation, feel free to open an issue or PR at https://github.com/pluralsh/plural-artifacts.