Collecting Kubernetes Agent Information

A Kubernetes Agent provides the agentinfo utility to collect system and CTE configuration data. The agentinfo utility takes a configuration snapshot of the system that you can send to Thales Customer Support to debug an issue.

The latest information about individual Kubernetes Agents can also be collected and downloaded on the CipherTrust Manager GUI. The collected information about all the Kubernetes Agents is stored in a dedicated volume on the CipherTrust Manager. An option is provided to clean the Agent information about all the Kubernetes Agents from the volume.

Collecting the Kubernetes Agent Information

To collect the latest Kubernetes Agent information:

1. Open the Transparent Encryption application.

2. In the left pane, click Kubernetes (K8s) > Clients.

3. Under Client Name, click the desired client.

   Alternatively, click the expand icon () to the left of the desired client in the clients list.

4. Next to the Agent Information label, click Collect. A request is sent to the Kubernetes Agent to send the latest Agent information to the CipherTrust Manager.

Fetching the latest Agent information from the Kubernetes Agent might take some time. You need to refresh the page to download the latest Agent information. As soon as the information is available, the Collect link is replaced with the Recollect and Download links.

Recollecting the Kubernetes Agent Information

After you have fetched the Kubernetes Agent information from the Kubernetes client, a CTE Client Administrator might make some confirmation changes. To get the updated Kubernetes Agent configuration on the CipherTrust Manager, use the Recollect option.

To recollect the updated Kubernetes Agent information:

1. Open the Transparent Encryption application.

2. In the left pane, click Kubernetes (K8s) > Clients.

3. Under Client Name, click the desired client.

   Alternatively, click the expand icon () to the left of the desired client in the clients list.

4. Next to the Agent Information label, click Recollect. A request is sent to the Kubernetes Agent to send the updated Agent information to the CipherTrust Manager. The Recollect and Download links are replaced with Collect.

Fetching the latest Agent information from the Kubernetes Agent might take some time. You need to refresh the page to download the latest Agent information. As soon as the information is available, the Collect link is replaced with the Recollect and Download links.

Downloading the Kubernetes Agent Information

After you have fetched the Agent information from a Kubernetes client, you can download this information from the CipherTrust Manager GUI. The information is downloaded in a tar file.

After the download, the Agent information is removed from the CipherTrust Manager. In a CipherTrust Manager cluster, the information will be downloaded from the node where the Agent information is requested.

To download the Kubernetes Agent information:

1. Open the Transparent Encryption application.

2. In the left pane, click Kubernetes (K8s) > Clients.

3. Under Client Name, click the desired client.

   Alternatively, click the expand icon () to the left of the desired client in the clients list.

4. Next to the Agent Information label, click Download.

The Kubernetes Agent information currently available on the CipherTrust Manager is downloaded in a tar file, and removed from the CipherTrust Manager.

Cleaning the Kubernetes Agent Information Volume

When you fetch the Agent information from a Kubernetes Agent, this information is stored in a file in a dedicated volume on the CipherTrust Manager. This volume contains information about all the Kubernetes Agents from which you have collected the information.

The CipherTrust Manager provides an option to clean the Agent information volume any time to remove all the files containing the Agent information from the CipherTrust Manager. Also, when the volume is 80% full, you are prompted to clean it while collecting the latest Agent information from clients.

Clean the Volume Any Time

To clean the volume containing the Kubernetes Agent information:

1. Log on to the CipherTrust Manager GUI.

2. Open the Transparent Encryption application.

3. Navigate to Settings > Client Information and Capabilities.

4. Under Empty CTE Agent Information Log Volume, click Remove Agent Information. A warning message is displayed.

   Warning

   The Agent information currently available on the CipherTrust Manager will be removed. You will have to regenerate the Agent information.

5. Select Yes, clean up the entire volume containing the Agent information.

6. Click Clean.

Clean the Volume When 80% Full

When the volume containing the Agent information is 80% full, a warning message is displayed while collecting the Agent information from a client. You need to clean the volume to collect the latest information.

To clean the volume, click Clear Volume. All the files containing the Agent information are removed from the volume. You can now retry collecting the latest Agent information.