DevSecOps in Practice

NeuVector: Installation and Configuration

To install NeuVector, we are going to use Helm. Before you proceed, make sure your cluster satisfies the requirements to run NeuVector. You may need to scale up your cluster to meet the minimum requirements.

Start by adding the NeuVector Helm repository:

helm repo add neuvector \
  https://neuvector.github.io/neuvector-helm/

Create the NeuVector namespace:

kubectl create namespace neuvector

Label the NeuVector namespace with a privileged profile for deploying on a PSA-enabled cluster.

kubectl label namespace neuvector \
  "pod-security.kubernetes.io/enforce=privileged"

To install the chart with the release name neuvector.

helm upgrade --install neuvector neuvector/core \
  --namespace neuvector \
  --set tag=5.4.2 \
  --set enforcer.privileged=true \
  --set containerd.enabled=true \
  --set containerd.path="/run/containerd/containerd.sock"

ℹ️ The values above are used with a DigitalOcean managed Kubernetes service (DOKS). If you are using a different Kubernetes service or an on-premises cluster (K3s, RKE2, etc.), you may need to adjust the values accordingly.