Compute assets - Learn about the Compute asset class, providing specialized views for containerized environments, virtual machines, and Kubernetes environments. - Administrator Guide - Cortex CLOUD

CaaS Resources: Clicking a CaaS asset opens a detailed side card with specialized tabs that vary based on the specific resource type. Common tabs across CaaS assets include an Overview of highlights and properties, a Configurations tab displaying the asset configuration JSON, and a Compliance tab. Depending on the resource type, additional tabs may include:

Note that for the actual runtime units spawned from these blueprints, Cortex Cloud generates CaaS Container Instance assets only when a runtime drift is detected, limiting creation to a maximum of 50 instances per workload.

Container Images are fundamental, immutable assets that package applications and their dependencies for consistent deployment across cloud environments. Each image is uniquely identified by a SHA256 digest, ensuring content verifiability throughout its lifecycle across build, deploy, and run stages. You can assign multiple names and tags to a single container image, allowing you to reference the same image in various contexts and versions within container registries. For more information, see Container images assets.Container images assets

Container instances are not just a list of running containers; they are dynamically added to the Asset Inventory specifically when a drift is detected between a running container and its original base image. This drift is critical because it may reveal vulnerabilities, compliance violations, or misconfigurations indicating unauthorized changes were introduced at runtime. The asset side card includes:

For physical and virtual endpoints, the asset card tracks vital connectivity data including Endpoint Status (Connected, Disconnected, or Lost) and Operational Status (Protected, Partially Protected, or Unprotected). Furthermore, General Devices support Host Insights, which collects extensive business and IT operational data (like installed applications, autoruns, mounted disks, local user groups, and running services) to help analysts quickly identify anomalies on the machine.

Cortex Cloud provides comprehensive visibility into the security posture of your serverless functions without the need to install agents or disrupt your workloads. The inventory supports AWS Lambda functions, Google Cloud Functions, and Microsoft Azure functions. The system automatically scans these functions during periodic scans or configuration modifications to detect vulnerabilities, malware, and exposed secrets early in the development process. You can proactively detect and address threats across your cloud environment using three categories of serverless function rules:

Select any cluster, to view all resources within it and any connected clusters. The Cluster details panel provides a detailed breakdown of assets, and the nodes within each cluster. Choose any of the following tabs for additional information:

Select Kubernetes Connectivity Management to manage the connector-connectivity of cluster assets, including connector versions, upgrades, statuses, and more. Here, you can check if a cluster is connected, view the status, and see the connector version. You can also update to a new connector version when one is released.