Skip to content

A K8s operator to inject agents into existing K8s workloads.

License

Notifications You must be signed in to change notification settings

Contrast-Security-OSS/agent-operator

Repository files navigation

agent-operator

contrast/agent-operator

A K8s operator to inject agents into existing K8s workloads.

Managed by the Contrast .NET agent team. Images are built from agent-operator-images.

Layout

Features:

  • Automatic injection of agents into cluster workloads without modifying "golden images" or maintaining base images.
  • Management of automatic agent updates.
  • Declarative configuration using Kubernetes native objects.
  • Centralized agent configuration/connection management across an entire cluster.

Getting Started

Make sure the operator supports your cluster version.

Kubernetes Version OpenShift Version Operator Version End-of-Support
v1.30 v0.14.0+ 2025-06-28
v1.29 v4.16 v0.14.0+ 2025-02-28
v1.28 v4.15 v0.14.0+ 2024-10-28
v1.27 v4.14 v0.14.0+ 2024-06-28
v1.26 v4.13 v0.14.0+ 2024-02-28

To install the latest version of the operator into a cluster, apply the installation YAML containing all the required manifests, including the CRDs and RBACs.

kubectl apply -f https://github.com/Contrast-Security-OSS/agent-operator/releases/latest/download/install-prod.yaml

The operator can also be deployed using Helm - see contrastsecurity.dev/helm-charts.

Further documentation and examples can be found on docs.contrastsecurity.com (en/jp).

Releases

Builds released into the the public environment are published to DockerHub and Quay. Manifests are uploaded to the GitHub releases page.

Releases are tagged using the following format:

contrast/agent-operator:1.0.0
contrast/agent-operator:1.0
contrast/agent-operator:1
contrast/agent-operator:latest

See DockerHub tags or Quay tags for a list of all available tags.

Contributing

See ./CONTRIBUTING.md.

Security

See ./SECURITY.md.