Skip to content

Commit 37c78ef

Browse files
Merge pull request #260489 from yishayna/docs-editor/how-to-test-attack-path-and-se-1701877351
Update charts origin to MCR
2 parents 89093f8 + ff1d170 commit 37c78ef

File tree

1 file changed

+15
-8
lines changed

1 file changed

+15
-8
lines changed

articles/defender-for-cloud/how-to-test-attack-path-and-security-explorer-with-vulnerable-container-image.md

Lines changed: 15 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -42,24 +42,31 @@ If there are no entries in the list of attack paths, you can still test this fea
4242

4343
```
4444
az aks update -n myAKSCluster -g myResourceGroup --attach-acr <acr-name>
45+
```
4546

4647
1. Authenticate your Cloud Shell session to work with the cluster:
4748

4849
```
49-
az aks get-credentials --subscription <cluster-suid> --resource-group <your-rg> --name <your-cluster-name>
50+
az aks get-credentials --subscription <cluster-suid> --resource-group <your-rg> --name <your-cluster-name>
51+
```
52+
53+
1. Install [ngnix ingress Controller](https://docs.nginx.com/nginx-ingress-controller/installation/installation-with-helm/) :
5054
55+
```
56+
helm install ingress-controller oci://ghcr.io/nginxinc/charts/nginx-ingress --version 1.0.1
57+
```
58+
59+
1. Deploy the mock vulnerable image to expose the vulnerable container to the internet by running the following command:
60+
```
61+
helm install dcspmcharts oci://mcr.microsoft.com/mdc/stable/dcspmcharts --version 1.0.0 --namespace mdc-dcspm-demo --create-namespace --set image=<your-image-uri> --set distribution=AZURE
62+
```
63+
5164
1. Verify success by doing the following steps:
5265
5366
- Look for an entry with **mdc-dcspm-demo** as namespace
5467
- In the **Workloads-> Deployments** tab, verify “pod” created 3/3 and **dcspmcharts-ingress-nginx-controller** 1/1.
5568
- In services and ingresses look for-> services **service**, **dcspmcharts-ingress-nginx-controller and dcspmcharts-ingress-nginx-controller-admission**. In the ingress tab, verify one **ingress** is created with an IP address and nginx class.
5669
57-
1. Deploy the mock vulnerable image to expose the vulnerable container to the internet by running the following command:
58-
59-
```
60-
helm install dcspmcharts oci://dcspmtesting.azurecr.io/dcspmcharts --version 1.0.0 --namespace mdc-dcspm-demo --create-namespace --set registry=<your-registry>
61-
```
62-
6370
> [!NOTE]
6471
> After completing the above flow, it can take up to 24 hours to see results in the cloud security explorer and attack path.
6572
@@ -108,4 +115,4 @@ The results are listed below the query.
108115
109116
## Next steps
110117
111-
- Learn more about the Defender for Cloud [Defender plans](defender-for-cloud-introduction.md#protect-cloud-workloads).
118+
- Learn more about the Defender for Cloud [Defender plans](defender-for-cloud-introduction.md#protect-cloud-workloads).

0 commit comments

Comments
 (0)