Wiz and Google Cloud preview native Wiz Sensor add-on for GKE
Original title: Wiz Sensor on GKE. 1-Click Runtime Protection, Now Native.
GKE Standard and Autopilot can enable the sensor with one flag; credentials stay in Secret Manager.
Google Cloud and Wiz announced a preview of the Wiz Runtime Sensor add-on for Google Kubernetes Engine. GKE deploys the sensor, injects credentials and handles lifecycle updates for Standard and Autopilot clusters. The sensor uses eBPF to watch system calls, processes and sockets, and flags behaviors such as reverse shells, binaries run from /tmp, image drift and privilege escalation. Detection rules update separately from cluster patches.
Unconfirmed: The add-on is in preview; general availability is not stated.
- Enablement uses --addons=WizSensor=ENABLED or the Google Cloud Console.
- Organization Policy can block creation of clusters without the sensor.
- API keys and pull tokens are stored off-cluster via Secret Manager and Workload Identity Federation.
- Alerts in the Wiz Portal include pod, namespace, image and execution context.
- Vendors
- WizGoogle Cloud
From the original article
5 min read at wiz.io
Enable native runtime protection for GKE in just one click. The Wiz Runtime Sensor add-on now automates deployment and credential management while delivering predictable, kernel-level eBPF threat detection for your GKE Kubernetes fleets.
By Shahar Yakov · wiz.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.