Antivirus in Google Kubernetes Engine

5/2/2019

I am looking for a way to install an Antivirus in Google Kubernetes Engine(GKE). However, I could only find this Kubernetes ClamAV tutorial.
Here is the link of Installing antivirus and file integrity monitoring on Container-Optimized OS.

There are two issues I am facing with this ClamAV on GKE:

  1. Ensure scan-required paths within other pods are mounted as named volumes so they will be included in the scan of the node. This requirement in the overview suggests that only named volumes can be scanned and we want to scan almost every file inside the container.
  2. Trying the steps mentioned in this tutorial I got stuck on the step which says get all pods and exec into one to initiate a full scan.
    After creating the resources using kubectl apply -f clamav-daemonset.yaml I don't see any pods being created.

How do I solve the above-mentioned issues?
Also, is there any other alternative for Antivirus (and file integrity) on GKE apart from ClamAV?

-- Amit Yadav
antivirus
google-cloud-platform
google-kubernetes-engine
kubernetes

0 Answers