Install the Agent Operator
Contrast provides a single-file installation YAML that can be directly applied to a cluster and provides reasonable defaults. Additional modifications may be desired based on your specific circumstances.
Custom registries
If you want to use Agent Operator in an air-gapped environment (or you cannot use DockerHub), use the Contrast custom registry examples to guide you.
Steps
Executing as a cluster administrator, apply the operator manifests using
kubectl
(Kubernetes) oroc
(OpenShift).kubectl apply -f https://github.com/Contrast-Security-OSS/agent-operator/releases/latest/download/install-prod.yaml
oc apply -f https://github.com/Contrast-Security-OSS/agent-operator/releases/latest/download/install-prod.yaml
The manifests:
Create the contrast-agent-operator namespace.
Install the operator Deployment workload.
Install the required Custom Resource Definitions.
Configure RBAC with the minimum necessary permissions.
Register the operator for admission webhooks.
Note
It is possible to install into a namespace other than the default
contrast-agent-operator
, although modifications to the deployment manifests will be required.After applying the operator manifests, wait for the cluster to converge.
kubectl -n contrast-agent-operator wait pod --for=condition=ready --selector=app.kubernetes.io/name=operator,app.kubernetes.io/part-of=contrast-agent-operator --timeout=30s
oc -n contrast-agent-operator wait pod --for=condition=ready --selector=app.kubernetes.io/name=operator,app.kubernetes.io/part-of=contrast-agent-operator --timeout=30s
When the wait command succeeds the operator is ready to be configured.