Worker Node Sampling Options

To avoid malicious actors from using samples to pull PII from systems, you have the option to manually override the data sampling settings with a configuration control at the worker node level.

The IS_SAMPLE_COLLECTION_ALLOWED environment variable in the installer script can be set to false (default is true) so the worker node does not send any samples back to the cloud, even if the below settings are enabled. The datadiscovery-onprem-agent will log a warning stating: "The job had sampling enabled, but sampling is not allowed on this worker node. Overriding to 'false'."

CODE

kubectl config set-context --current --namespace="$NAMESPACE"
kubectl set env deploy/datadiscovery-onprem-agent  IS_SAMPLE_COLLECTION_ALLOWED=false

#This value is set to true by default.

kubectl config set-context --current --namespace="$NAMESPACE"
kubectl set env deploy/datadiscovery-onprem-agent  IS_SAMPLE_COLLECTION_ALLOWED=false

#This value is set to true by default.

For more information on controls for worker nodes, see Data Retrieval & Sampling Security Controls for Worker Nodes.