Infrastructure
¶
What this is¶
Infrastructure shows where your AI applications run: the clusters, nodes, Fargate tasks and
endpoint devices your scanners report from, how traffic reaches them from the internet, and
whether each scanner is healthy.
Everything here was reported by a scanner. A cluster with no scanner does not appear — absence
means "not observed", not "not there".
What is on the screen¶
Two tabs: Clusters and Graph.
Clusters¶
One sheet per cluster or device, with what the scanner learned about it:
- Name, Distribution, ID.
- Cloud provider — Provider, Region, Account, Instance types,
Architectures, Total CPU, Total memory, Zones, OS image, Kernel. - Network — CNI, DNS, Service Mesh, Pod CIDRs, Service CIDR, Ingress.
- Deploy technologies found in the cluster.
- Security — RBAC, Cluster roles, Network Policies, SELinux, TLS.
On Fargate the sheet shows the Task (Launch type, Family, Revision,
Containers). On an endpoint it shows the Device (Console user, Capture mode,
MDM managed).
Graph¶
One map of your estate, in tiers: environments, the Front door (addresses reachable from the
internet and the entry points behind them), services, nodes, and your scanners with their live
status.
- Environments start collapsed, showing totals of their services and ingresses. Open an
environment's contents to page through what it holds; long lists end in a +N more card. - Click a card to open it in place. A front-door card shows what reached the applications behind
it: request rate, errors and status codes, latency, paths, which applications received the
traffic, callers from inside and From outside the cluster, blocks, personal data and threats. - A scanner card shows its capture coverage, config propagation and enforcement state.
When this page is empty¶
- Clusters: No cluster context data yet.
- Graph: No infrastructure reported yet — a scanner must finish one discovery cycle first.
Both fill after a scanner reports. See Getting started.
How to use it¶
Check coverage before trusting a quiet page¶
Open Clusters and confirm every cluster you expect is listed. A missing cluster has no
scanner: nothing from it reaches any other page.
See what the internet can reach¶
-
Open Graph.
-
Click a Front door card.
-
Read which applications received the traffic and who called From outside.
Check a scanner's health¶
On Graph, click the scanner's card. For per-application scan status and upgrade commands, use
Settings → Scanners.
Where to go next¶
- Settings → Scanners — install, upgrade and manage scanners.
- Traffic → Flow — which applications talk to which services.
How you get here¶
- Sidebar → Observe → Infrastructure.