Monitor vulnerabilities in Kubernetes/OpenShift

You can keep track of security vulnerabilities in your Kubernetes environments on the cluster and workload pages.

Prerequisites

• In Dynatrace, go to your Kubernetes cluster settings page and make sure that Monitor Kubernetes namespaces, services, workloads, and pods is turned on.
• Activate and enable Application Security
• To view code-level vulnerabilities Activate and enable Application Protection

Vulnerability section

The Vulnerabilities section is displayed on the Kubernetes

• Cluster details page
• Workloads page

It shows the five most severe related third-party vulnerabilities and code-level vulnerabilities.

• Select a vulnerability to view the details and understand the severity and impact of a vulnerability within your environment.
• For a complete list of the detected vulnerabilities for your Kubernetes environment, select Show all third-party vulnerabilities/Show all code-level vulnerabilities.

Example third-party vulnerabilities:

Example code-level vulnerabilities:

Note: If you're missing the security permissions for the selected management zone,

• On the Kubernetes cluster page, the Vulnerabilities section is not displayed.
• On the Kubernetes workload page, the Vulnerabilities tab on the notification bar shows Not analyzed.