Skip to main content

Deployment

Overview​

The following sections provide step-by-step guidance for deploying and troubleshooting the Upwind Cloud Scanner across different deployment types.

Deploy​

Step 1: Initiate the deployment process​

Navigate to the Inventory page and access the Upwind components section. Once there, click on Cloud Scanners tab and select Deploy Cloud Scanner button located at the top-right corner of the page.

Step 2: Select a cloud provider​

Select Google Cloud as your cloud provider to proceed with the Cloud Scanner deployment.

note

It is important to enable the Cloud Scheduler API in the target project before deploying a Cloud Scanner. This can be enabled by visiting the Google Cloud Console , selecting the target project and clicking enable.

Step 3: Select Cloud Scanner credentials​

Select existing client credentials for the Upwind Cloud Scanner deployment from the credentials dropdown. If you need new credentials, click on Generate a new one, provide a name and click Generate. Alternatively, you can generate credentials on the Credentials page in the console.

For more information, refer to the documentation on Credentials .

Step 4: Define the Cloud Scanner configuration​

Enter a name for the Cloud Scanner and click Save to confirm and create the Managed Instance Group configuration. By default, all scanning capabilities are enabled, including detection of vulnerabilities, secrets, and malware. To modify the Cloud Scanner settings, use Edit mode in the side panel of the Cloud Scanner.

Step 5: Deploy the Cloud Scanner​

note

The available deployment option for the Upwind Cloud Scanner on a Google Cloud project is currently limited to Terraform.

Apply Terraform Template​

Copy the Terraform module code snippet from the Upwind Management Console and save it to a file named main.tf. Replace the placeholders with the appropriate values, either directly or by setting Terraform variables.

To deploy the Upwind Cloud Scanner, run the following command:

terraform init && terraform apply

Step 6: Test connectivity​

Once the deployment is complete, click on Test Cloud Scanner connectivity. Wait while the following stages are completed:

  • Cloud Scanner configuration is created – This stage confirms that all initial configuration parameters for the Cloud Scanner are set according to your specified requirements.
  • Managed Instance Group is set up – This stage confirms the existence and proper configuration of the Managed Instance Group for the Cloud Scanner.
  • Cloud Scanner is operational – This stage confirms that the Cloud Scanner is fully deployed, operational, and ready to execute its scanning operations.
note

This process may take a few moments. Please avoid refreshing the page during this time.

Once all stages show as successfully completed, connectivity is confirmed, and the deployment process is concluded. The scanner will then automatically adjust its scale according to the predefined schedule.