Installing Protegrity Agent

The Protegrity Agent v1.2.0 can be installed using helm chart 2.0.0. The helm chart deploys the following components.

Installing Protegrity Agent

Perform the following steps to install Protegrity Agent.

1. Creating Namespaces and Database Secrets

The namespaces and Database secrets must be created only once per cluster. These can be reused for subsequent upgrades and re-installs. Ensure to only replace the Secret when rotating credentials.

To create Namespaces and Database Secrets, run the following command:

kubectl create namespace pty-protegrity-agent --dry-run=client -o yaml | kubectl apply -f -

kubectl -n pty-protegrity-agent create secret generic database-secrets \
  --from-literal=postgres_user=agentuser \
  --from-literal=postgres_password="$(openssl rand -base64 32)"

2. Copying the Registry Pull Secret

Before installing the Helm chart, copy the registry pull secret into the pty-protegrity-agent namespace. By default, the secret is named harbor-secret in the default namespace:

kubectl get secret harbor-secret -n default -o json |
  jq '{
    apiVersion, kind, type, data,
    metadata: {name: "harbor-secret", namespace: "pty-protegrity-agent"}
  }' |
  kubectl create -f -

Note: This is one-time provisioning. When credentials are rotated, the destination secret in pty-protegrity-agent must be updated separately.

3. Verifying the secret exists

To verify that the secret exists and has the expected type kubernetes.io/dockerconfigjson, run the following command:

kubectl get secret harbor-secret -n pty-protegrity-agent

4. Installing the Helm Chart

To install the helm chart, run the following command:

helm upgrade --install protegrity-agent \
  oci://<Container_Registry_Path>/protegrity-agent/helm/protegrity-agent \
  --version 2.0.0 \
  --namespace pty-protegrity-agent

Note: If deploying from the Protegrity Container Registry, use registry.protegrity.com:9443

Verifying the installation

To verify the installation, run the following command:

kubectl get pods -n pty-protegrity-agent -w

Ensure the status of the pods is Ready.