Q: What should I pay attention to when using CSG?
The security probe supports only three container runtimes, including docker, containerd, and crio.
The security probe mounts the /data (non-crio) and /root (crio) directories of the k8s node host during runtime. Make sure the privileges of the directories are correct.
The security probe needs to communicate with the center. Make sure your k8s cluster allows outbound policy TCP ports: 31080, 30432, and 32345.
Q: Does access CSG affect existing service and server operations?
You do not need to interrupt the existing service when accessing CSG, which does not affect the running status of the server. This means that you do not need to conduct any operations on it (such as shutdown or restart).
The protection probe occupies certain resources of the host, which may have a certain impact on the host. However, please rest assured that the CSG conducts resource monitoring and downgrading on the protection probe to ensure service stability and security.