Install a Java agent with a Kubernetes Helm Chart
Use this workflow to install and configure a Contrast CVE Shield agent in a Kubernetes cluster using a Helm Chart with Contrast Security’s Flex Agent. The Flex Agent lets CVE Shield scan your Java applications. CVE Shield only supports Java applications currently. Check that your application uses Java before you continue.
You'll need an active CVE Shield account. Learn more about signing up for CVE Shield and trying Contrast for free.
開始する前に
開始する前に、必要なものが揃っているか事前に確認してください。
エージェントが、Contrastインスタンスにアクセスできる必要があります。ローカル/オンプレミスのインスタンスでも、SaaS版のインスタンスでも良いです。ネットワークアクセスが制限されている環境では、プロキシを設定することができます。
WebアプリケーションがJARファイルとしてパッケージ化されていること。
Contrastでサポートされているバージョン、フレームワーク、ツールを使用していること。
設定した値が有効になる優先順位を理解していること。
また、コマンドラインインターフェイス(エージェントをダウンロードするために選択したディレクトリを含む)と、ご利用になる組織のContrastサーバへのアクセスも必要です。
Install an agent
In NorthstarNorthstar, go to Administration > Agent management, and select + Add Agent.
In the Agent Wizard, select Flex Agent via Kubernetes.
Select Helm charts (recommended), then install Helm, if you haven't already.
注記
If you can't install Helm, you can alternatively install the agent using a manifest instead by selecting the Manifest option. See Install Agent Operator with manifest files documentation for details.
Download the Helm Chart configured for you by selecting the Download YAML button.
You can skip this step if the Contrast Agent Operator is already installed in your cluster.
If you need a Helm chart with all possible Helm settings, you can generate a comprehensive YAML file in NorthstarNorthstar. The full YAML file will not come with your
tokenValueinserted. If you decide to work with the full YAML file, ensure you copy yourtokenValueand the values in the Download YAML code block displayed the wizard.Install the Helm Chart by running the commands show in the wizard.
You can skip this step if the Contrast Agent Operator is already installed in your cluster.
Label your namespace by running the command shown in the wizard to tell Kubernetes which namespace should use the agent. Replace
<your_namespace_name>with your own namespace.Find your deployment name by running the command shown in the wizard to see a list of your deployments.
In the list that returns, find the deployment you want to scan and make note of its name for the validation step.
Verify agent deployment
Open your Java application. Click a few links or send a few requests. This gives the agent something to detect.
Select View agent activity. If your application appears, the agent is working.
Your application should appear in NorthstarNorthstar on the Agent management screen soon after you start using it.
When your application appears, CVE Shield starts finding vulnerabilities in that application.