Removing Intelligence from Kubernetes Clusters

You can remove Intelligence from your Kubernetes Kubernetes, often abbreviated as “K8s”, orchestrates containerized applications to run on a cluster of hosts. cluster. This process removes all applicable CloudGuard agents deployed on your cluster during onboarding. As a result, CloudGuard stops to receive all Traffic activity (Flow Logs) from your cluster.

To remove Intelligence:

1. Navigate to Assets > Environments and find your Kubernetes cluster with Filter and Search fields.

2. Click the cluster to enter it.

3. On the Blades tab, in the Threat Intelligence row, move the slider to Off.

4. The Threat Intelligence window opens. It contains a command to uninstall the agent from your cluster. Copy the command and run it in your cluster with correct parameters for strings in <    >.

5. In the Threat Intelligence window, click Yes.

6. CloudGuard notifies you of the successful removal of Intelligence from your cluster.

No more logs are sent to Intelligence, and you cannot see the existing logs on the CloudGuard portal.

Note: CloudGuard stores the existing logs until the end of your retention period. If you onboard your cluster to Intelligence again during this retention period, you can see the logs for the period before the offboarding.