managed-security-inspector

更新时间:
复制 MD 格式

managed-security-inspector is a fully managed add-on that scans your ACK cluster workloads for configuration-level security risks in real time. It is the managed version of the security-inspector add-on, with Alibaba Cloud handling all deployment, upgrades, and availability so you can start scanning without any setup or ongoing O&M.

image

Overview

managed-security-inspector integrates the open-source tool Polaris to scan workload configurations across five dimensions:

  • Health checks

  • Image security

  • Networking

  • Resource limits

  • Other security settings

After each scan, the add-on generates an inspection report with findings and remediation suggestions. Use the report to prioritize and fix configuration issues before they become exploitable vulnerabilities.

For step-by-step instructions, see Configure an inspection to check cluster workloads.

Key features

Fully managed, zero O&M

Alibaba Cloud manages the entire lifecycle of the add-on — deployment, upgrades, and availability. Enable it from the ACK console and start scanning immediately.

Multi-dimensional configuration scanning

Polaris checks workload configurations across health, image, networking, resource, and security dimensions. Each check produces a finding with a specific remediation action.

Real-time security insights

Scan results reflect the current state of your workloads. Review the inspection report at any time to see which workloads are at risk and what actions to take.

Changelog

December 2025

Version

Image

Release date

Description

Impact

0.17.5

registry-cn-hangzhou.ack.aliyuncs.com/acs/security-inspector:v0.17.5

December 03, 2025

The Go version used by the add-on is upgraded to 1.24.11 to improve stability.

This upgrade has no impact on running services.

August 2025

Version

Image

Release date

Description

Impact

0.17.4

registry-cn-hangzhou.ack.aliyuncs.com/acs/security-inspector:v0.17.4

August 11, 2025

The Go version used by the add-on is upgraded to 1.24.6 to improve stability.

This upgrade has no impact on running services.