Hi All, Is it possible to enable the Auto Scan onl...
# neuvector-security
w
Hi All, Is it possible to enable the Auto Scan only on specific namespaces? for example: enable the auto scan on all pods/containers in prod, dev and tst namespaces, but no need to scan in cattle-* namespaces? Thanks for your help
r
you don't interested in security problems in the system namespaces? brave move
👀 1
🎯 1
w
Are you asking about the image autoscan or the monitoring modes? If image autoscanning you could scan specific image sources, perhaps choosing not to autoscan images from the secure images registry.
If monitoring groups, you could apply empty rulesets via security as code for the system namespaces with the appropriate groups. That would effectively disable discovery for those groups.
Agreed that you shouldn't blindly trust the system namespaces, but there's a use-case for everything.
q
Plus, what problem are you trying to solve?