v5.0.1

Version v5.0.1 released!

• Add support for patching an existing PYTHONPATH for python-agent injection

---

contrast/agent-operator:5.0.1
contrast/agent-operator@sha256:6508b4bbb6dcd5de1c12fe38087f88c7a66f19e3b289ffaebb84cc2dc978d962

quay.io/contrast/agent-operator:5.0.1
quay.io/contrast/agent-operator@sha256:6508b4bbb6dcd5de1c12fe38087f88c7a66f19e3b289ffaebb84cc2dc978d962

v5.0.0

Version v5.0.0 released!

• CRDs have been updated
  • If you are updating the helm chart, please run kubectl apply -f https://github.com/Contrast-Security-OSS/agent-operator/releases/latest/download/crds.yaml before upgrading to update the CRDs. https://docs.contrastsecurity.com/en/helm-upgrades.html#major-upgrades-292514
• Add ClusterAgentInjectors https://github.com/Contrast-Security-OSS/agent-operator/blob/v5.0.0/docs/public/03-configuration-reference.md#clusteragentinjector
• Add support for mounting AgentConnection secrets as a volume
  • Set mountAsVolume: true on an AgentConnection or ClusterAgentConnection to enable https://github.com/Contrast-Security-OSS/agent-operator/blob/v5.0.0/docs/public/03-configuration-reference.md#agentconnection
• Add support for namespaceLabelSelector on ClusterAgentConnection, ClusterAgentConfiguration, and ClusterAgentInjector
  • Added read-only permissions for namespaces to ClusterRole
  • The helm chart includes a default selector for ClusterAgentInjectors, add agents.contrastsecurity.com/agent-injectors: 'true' label to a namespace to add agent injectors to that namespace
• Allow setting contrast-agent-operator pod requests/limits in the helm chart
• Allow setting contrast-agent-operator pod labels/annotations in the helm chart
• Increased default init-container memory limit
• Fixed an issue that caused pod patching to fail if the init-container requests/limits were empty

Breaking Changes

• The helm chart will now create ClusterAgentInjectors instead of AgentInjectors
  • To create AgentInjectors instead, set agentInjectors.useClusterAgentInjectors to false
• Removed agentInjectors.lookupNamespaces.deployToAllAccessibleNamespaces from the helm chart, this is replaced by:

agentInjectors:
  useClusterAgentInjectors: true
  namespaces:
    - '*'

---

contrast/agent-operator:5.0.0
contrast/agent-operator@sha256:1fabb779107815b6e39fd44321cdf9e058a2b8c49fc22a6a497ad992336574b4

quay.io/contrast/agent-operator:5.0.0
quay.io/contrast/agent-operator@sha256:1fabb779107815b6e39fd44321cdf9e058a2b8c49fc22a6a497ad992336574b4

v4.1.1

Version v4.1.1 released!

• Publish CRDs as a separate manifest to make helm upgrades easier
  • kubectl apply -f https://github.com/Contrast-Security-OSS/agent-operator/releases/latest/download/crds.yaml can be run before helm upgrade to update the CRDs

---

contrast/agent-operator:4.1.1
contrast/agent-operator@sha256:8c1d7e47ebbfa430d4531ef7ec14832aa1e530880cba56410a0abbbe484cfb0c

quay.io/contrast/agent-operator:4.1.1
quay.io/contrast/agent-operator@sha256:8c1d7e47ebbfa430d4531ef7ec14832aa1e530880cba56410a0abbbe484cfb0c

v4.1.0

Version v4.1.0 released!

• Add support for Contrast Flex Agent
• Adds flex AgentInjector to default helm values.yaml
• Updated AgentInjector crd to add flex agent type

---

contrast/agent-operator:4.1.0
contrast/agent-operator@sha256:6620b94ee17353146ce55a78ab30b122ff5d6d92b41cdd6fde5d7b8b9ed6d356

quay.io/contrast/agent-operator:4.1.0
quay.io/contrast/agent-operator@sha256:6620b94ee17353146ce55a78ab30b122ff5d6d92b41cdd6fde5d7b8b9ed6d356

v4.0.0

Version v4.0.0 released!

• MutatingWebhook no longer triggers for resources in kube-system or kube-node-lease namespaces
• ClusterRole permissions are now explicit

Breaking Changes

• AgentInjector type nodejs now uses --import instead of --require for injecting the NodeJS Agent
  • Please use nodejs for NodeJS LTS >= 18.19.0 and nodejs-legacy for NodeJS LTS < 18.19.0
• AgentInjector type nodejs-esm is deprecated
• Removed default injector for nodejs-esm from helm chart

---

contrast/agent-operator:4.0.0
contrast/agent-operator@sha256:ae1e3c2be97756e2788273b5b0a9975c74ffd3eef7102a0ff84b4f3c62e14c31

quay.io/contrast/agent-operator:4.0.0
quay.io/contrast/agent-operator@sha256:ae1e3c2be97756e2788273b5b0a9975c74ffd3eef7102a0ff84b4f3c62e14c31

v3.2.1

Version v3.2.1 released!

• Increase default ephemeral-storage request/limit on agent init-containers to 400Mi to reflect agent size on disk

contrast/agent-operator:3.2.1
contrast/agent-operator@sha256:59f29799efd91d6006f4b23b63877866e8ca8548c6ce6312e204bf0a53805c2a

quay.io/contrast/agent-operator:3.2.1
quay.io/contrast/agent-operator@sha256:59f29799efd91d6006f4b23b63877866e8ca8548c6ce6312e204bf0a53805c2a

v3.2.0

Version v3.2.0 released!

• Default ephemeral-storage request/limit on agent init-containers to 10Mi to resolve issues with GKE Autopilot

contrast/agent-operator:3.2.0
contrast/agent-operator@sha256:e9b475d33288f65e545bc88f7ab92c9598ce093e71c6981c7820791cbd2a874c

quay.io/contrast/agent-operator:3.2.0
quay.io/contrast/agent-operator@sha256:e9b475d33288f65e545bc88f7ab92c9598ce093e71c6981c7820791cbd2a874c

v3.1.0

Version v3.1.0 released!

• Added support for specifying ephemeral-storage requests/limits on init-containers
  • Can be set either in the helm chart values or as an environment variable on the agent-operator CONTRAST_INITCONTAINER_EPHEMERALSTORAGE_REQUEST and CONTRAST_INITCONTAINER_EPHEMERALSTORAGE_LIMIT

contrast/agent-operator:3.1.0
contrast/agent-operator@sha256:b6c3e785eca6806a350e7a9e04a70d906c226e3b130854895786334cba8ff57d

quay.io/contrast/agent-operator:3.1.0
quay.io/contrast/agent-operator@sha256:b6c3e785eca6806a350e7a9e04a70d906c226e3b130854895786334cba8ff57d

v3.0.0

Version v3.0.0 released!

• Added ARM64 support

Breaking Changes

• Helm Chart: The namespace setting in values.yaml will now default to empty. This is to support using --namespace helm argument as the primary way of specifying which namespace the operator should be installed. If namespace is already specified in your values.yaml it will continue to work as expected.
• Agent Injection: If you are using the Agent Operator with the Dynatrace Operator or using CONTRAST_ENABLE_EARLY_CHAINING please update the dotnet-core agent to 4.3.10 or greater

contrast/agent-operator:3.0.0
contrast/agent-operator@sha256:e6188885c07e6348714d12f724d46bb080768aa50c22dff747b4139a654c083c

quay.io/contrast/agent-operator:3.0.0
quay.io/contrast/agent-operator@sha256:e6188885c07e6348714d12f724d46bb080768aa50c22dff747b4139a654c083c

v2.0.1

Version v2.0.1 released!

• Upgraded the Agent Operator to .NET 8 🎉
• Added agent token support, example configuration
  • The minimum agent version for token support is: java 6.10.1, dotnet-core 4.3.2, nodejs 5.15.0, python 8.6.0, php 1.34.0
• Added support for helm --namespace <namespace> and --create-namespace arguments
  • Note: namespace: needs to be set to empty in the values.yaml for these arguments to be used
• Added a writable tmp mount for the Agent Operator to fix buffering issues under high load
• Fixed deprecated kustomize warnings
• Updated CRDs

Breaking Changes

• MutatingWebhookConfiguration: endpoint changed from /v1/pods/podmutationwebhook/mutate to /mutate/v1pod
• AgentInjector: nodejs-protect agent type has been removed. Please use the nodejs or nodejs-esm agent type

---

contrast/agent-operator:2.0.1
contrast/agent-operator@sha256:035a11f3c34a7ab8a39d3d2c1be72e522042972ea33601d2d0ef9238c4150a79

quay.io/contrast/agent-operator:2.0.1
quay.io/contrast/agent-operator@sha256:035a11f3c34a7ab8a39d3d2c1be72e522042972ea33601d2d0ef9238c4150a79