Use StackRox images built with UBI

Deploy the StackRox Kubernetes Security Platform using images built on the Red Hat Universal Base Image (UBI).

1 minute read

The StackRox Kubernetes Security Platform components are available as images and they install as services in your Kubernetes or OpenShift cluster. If you prefer to use images based on Red Hat Enterprise Linux (RHEL), you can use the StackRox Kubernetes Security Platform images built on top of the Red Hat Universal Base Image (UBI).

These images are available for:

  • Central, Sensor, and Compliance: stackrox.io/main-rhel
  • Scanner: stackrox.io/scanner-rhel and stackrox.io/scanner-db-rhel
  • Collector: collector.stackrox.io/collector-rhel

Use UBI-based images

To use these UBI-based images, provide the image tags during the installation.

Central and Scanner

  • For the interactive installer, enter:

    • the main image as stackrox.io/main-rhel:3.0.59.1,
    • the Scanner DB image as stackrox.io/scanner-db-rhel:2.13.0, and
    • the Scanner image as stackrox.io/scanner-rhel:2.13.0

    when answering the prompts:

    Copy
    ...
    Enter main image to use (default: "stackrox.io/main:3.0.59.1"): stackrox.io/main-rhel:3.0.59.1
    ...
    Enter Scanner DB image to use (default: "stackrox.io/scanner-db:2.13.0"): stackrox.io/scanner-db-rhel:2.13.0
    Enter Scanner image to use (default: "stackrox.io/scanner:2.13.0"): stackrox.io/scanner-rhel:2.13.0
    ...
  • For the non-interactive installer, use the --main-image, --scanner-image, and --scanner-db-image options:

    Copy
    roxctl central generate --main-image=stackrox.io/main-rhel:3.0.59.1 --scanner-image=stackrox.io/scanner-rhel:2.13.0 --scanner-db-image=stackrox.io/scanner-db-rhel:2.13.0

Sensor and Collector

  • On the StackRox portal:

    1. Navigate to Platform Configuration > Clusters.

    2. Select + New Cluster.

    3. In the cluster configuration panel,

      • enter stackrox.io/main-rhel in the Main Image Repository box.
      • enter collector.stackrox.io/collector-rhel in the Collector Image Repository box.

      See the Install a Sensor section for more information.

  • If you are using the roxctl CLI, use the --image stackrox.io/main-rhel and --collector-image collector.stackrox.io/collector-rhel options:

    Copy
    roxctl cluster generate --image=stackrox.io/main-rhel --collector-image=collector.stackrox.io/collector-rhel

Questions?

We're happy to help! Reach out to us to discuss questions, issues, or feature requests.

© 2021 StackRox Inc. All rights reserved.