JupiterOne Kubernetes Standalone Integration

This repository contains the necessary files to run a standalone version of the JupiterOne Kubernetes integration in your local Kubernetes cluster. This integration allows you to collect and upload Kubernetes configuration data to your JupiterOne account.

Prerequisites

• Access to a Kubernetes cluster
• kubectl CLI tool installed and configured
• Docker installed (for building and pushing the image)
• Access to a container registry
• JupiterOne account with administrative access

Setup Instructions

1. Collect Required Environment Variables

You'll need to gather the following information from your JupiterOne account:

• JupiterOne Account ID

  • Navigate to Settings > Account Management
  • Copy the Account ID

• Integration Instance ID

  • Go to Integrations > Kubernetes Native
  • Click "New Instance"
  • Fill in the required details and click "Create"
  • The Instance ID will be displayed in the instance properties (look for 'id')

• Integration API Key

  • In the new integration instance
  • Click "API Keys"
  • Click "New API Key"
  • Click "Reveal" to view the key
  • Copy the API key

• JupiterOne URL (usually https://api.us.jupiterone.io)

• Proxy URL (if required)

• Proxy PEM Certificate (if required)

2. Build and Push Docker Image

Navigate to the Image directory and run:

1. docker build -t your-registry/jupiterone-integration:latest .
2. docker push your-registry/jupiterone-integration:latest

3. Update Configuration Files

Update the jupiterone.yaml file with your collected environment variables and Docker image reference.

Required environment variables:

• JUPITERONE_ACCOUNT: your account ID
• INTEGRATION_INSTANCE_ID: your instance ID
• INTEGRATION_API_KEY: your API key
• JUPITERONE_API_BASE_URL: JupiterOne API URL

Optional proxy configuration:

• HTTPS_PROXY: your proxy URL
• NODE_EXTRA_CA_CERTS: path to proxy certificate

Update the image reference to point to your uploaded Docker image.

4. Apply RBAC Configuration

Run: kubectl apply -f rbac.yaml

5. Deploy the Integration

Run: kubectl apply -f jupiterone.yaml

Verification

To verify the integration is running:

1. Check pod status: kubectl get pods -l app=jupiterone
2. View logs: kubectl logs -l app=jupiterone

Troubleshooting

If you encounter issues:

1. Ensure all environment variables are correctly set in jupiterone.yaml
2. Verify the pod has the necessary permissions by checking the logs
3. Confirm the Docker image is accessible from your cluster
4. Check if proxy settings are correctly configured (if applicable)

Support

For additional support, please contact JupiterOne support or refer to the JupiterOne documentation.