Skip to main content

Install Agent Operator with manifest files

Contrast provides a single-file installation YAML that can be directly applied to a cluster and provides reasonable defaults. Additional modifications may be desired based on your specific circumstances.

Before you begin

Make sure you have everything you need before you start:

Steps

Note

It is possible to install into a namespace other than the default contrast-agent-operator, although modifications to the deployment manifests will be required.

  1. Executing as a cluster administrator, apply the operator manifests using kubectl (Kubernetes) or oc (OpenShift).

    kubectl apply -f https://github.com/Contrast-Security-OSS/agent-operator/releases/latest/download/install-prod.yaml
    oc apply -f https://github.com/Contrast-Security-OSS/agent-operator/releases/latest/download/install-prod.yaml

    The manifests:

    • Create the contrast-agent-operator namespace.

    • Install the operator Deployment workload.

    • Install the required Custom Resource Definitions.

    • Configure RBAC with the minimum necessary permissions.

    • Register the operator for admission webhooks.

  2. After applying the operator manifests, wait for the cluster to converge.

    kubectl -n contrast-agent-operator wait pod --for=condition=ready --selector=app.kubernetes.io/name=operator,app.kubernetes.io/part-of=contrast-agent-operator --timeout=30s
    oc -n contrast-agent-operator wait pod --for=condition=ready --selector=app.kubernetes.io/name=operator,app.kubernetes.io/part-of=contrast-agent-operator --timeout=30s

  3. When the wait command succeeds the operator is ready to be configured.

Upgrades

If the Agent Operator requires an upgrade follow the steps here to complete the upgrade process.

In this section: