A K8s operator to inject agents into existing K8s workloads.
Managed by the Contrast .NET agent team. Images are built from agent-operator-images.
Features:
- Automatic injection of agents into cluster workloads without modifying "golden images" or maintaining base images.
- Management of automatic agent updates.
- Declarative configuration using Kubernetes native objects.
- Centralized agent configuration/connection management across an entire cluster.
Make sure the operator supports your cluster version.
| Kubernetes Version | OpenShift Version | Operator Version | End-of-Support |
|---|---|---|---|
| v1.31 | v0.14.0+ | 2025-10-28 | |
| v1.30 | v0.14.0+ | 2025-06-28 | |
| v1.29 | v4.16 | v0.14.0+ | 2025-02-28 |
| v1.28 | v4.15 | v0.14.0+ | 2024-10-28 |
| v1.27 | v4.14 | v0.14.0+ | 2024-06-28 |
| v1.26 | v4.13 | v0.14.0+ | 2024-02-28 |
To install the latest version of the operator into a cluster, apply the installation YAML containing all the required manifests, including the CRDs and RBACs.
kubectl apply -f https://github.com/Contrast-Security-OSS/agent-operator/releases/latest/download/install-prod.yamlThe operator can also be deployed using Helm - see contrastsecurity.dev/helm-charts.
Further documentation and examples can be found on docs.contrastsecurity.com (en/jp).
Builds released into the the public environment are published to DockerHub and Quay. Manifests are uploaded to the GitHub releases page.
Releases are tagged using the following format:
contrast/agent-operator:1.0.0
contrast/agent-operator:1.0
contrast/agent-operator:1
contrast/agent-operator:latest
See DockerHub tags or Quay tags for a list of all available tags.
See ./CONTRIBUTING.md.
See ./SECURITY.md.