Background
RealTheory can scan public images used in your Kubernetes cluster deployments for vulnerabilities; however, if you have container registries that host private images used in your Kubernetes cluster deployments, you must register the registry credentials with RealTheory before vulnerability scanning can occur.
Solution
-
As a user with one of the following roles, navigate to Settings > Security > Container Vulnerability Scanning:
- sys_admin
- container_registry_admin
-
Click Add container registry.
The Add container registry modal will open.
-
In Name, type a user-friendly, descriptive name for the registry.
-
In URL, type the address of a repository that hosts private container images you want RealTheory to scan.
-
In Username, type the username used to authenticate with the container registry.
-
In Secret, type the secret used to authenticate with the container registry.
-
Click
(Show/hide this secret) to view the Secret.
-
Click Add container registry.
RealTheory can now scan private images hosted in each specified registry for vulnerabilities.