Skip to main content

Google Cloud Kubernetes Engine

The Cado platform will collect key logs and forensic artifacts from Google Cloud Kubernetes Engine containers.

info

Please use Cado Host to acquire from distroless containers.

Import Steps​

  1. Go to Import > Cloud

Cado Import Screen showing the Kubernetes Engine options

  1. Go through the steps to choose your Cluster, Pod and Container:

Cado Import Screen showing the available Kubernetes Engine Clusters

  1. Confirm the details and click Start Import

Cado will now automatically collect all the key logs and forensic artifacts from the container to enable an investigation. For a typical acquisition, import and processing will take a few minutes to complete.

Cado showing the confirmation screen of a successful Kubernetes Engine container capture

info

To import GKE containers with Cado Response, the iam.serviceAccounts.implicitDelegation IAM permission added to the Service Account.

Currently, for GKE import Cado only suports GCP accounts configured using Workload Identity Federation. See more in the GCP Import Settings page.