Skip to content

Operator Lifecycle Manager

The Operator Lifecycle Manager (OLM) provides a declarative way to install and upgrade operators and their dependencies.

You can install the Trivy operator from or ArtifactHUB by creating the OperatorGroup, which defines the operator's multitenancy, and Subscription that links everything together to run the operator's pod.

As an example, let's install the operator from the OperatorHub catalog in the trivy-system namespace and configure it to watch the default namespaces:

  1. Install the Operator Lifecycle Manager:

    curl -L -o
    chmod +x
    ./ v0.20.0

  2. Create the namespace to install the operator in:

    kubectl create ns trivy-system

  3. Create the OperatorGroup to select all namespaces:
    cat << EOF | kubectl apply -f -
    kind: OperatorGroup
      name: trivy-operator-group
      namespace: trivy-system
  4. Install the operator by creating the Subscription:

    cat << EOF | kubectl apply -f -
    kind: Subscription
      name: trivy-operator-subscription
      namespace: trivy-system
      channel: alpha
      name: trivy-operator
      source: operatorhubio-catalog
      sourceNamespace: olm
      installPlanApproval: Automatic
         value: "kube-system"
    The operator will be installed in the trivy-system namespace and will select all namespaces, except kube-system and trivy-system.

  5. After install, watch the operator come up using the following command:

    $ kubectl get clusterserviceversions -n trivy-system
    NAME                        DISPLAY              VERSION   REPLACES                     PHASE
    trivy-operator.v0.11.0  Trivy Operator   0.11.0    trivy-operator.v0.10.2   Succeeded
    If the above command succeeds and the ClusterServiceVersion has transitioned from Installing to Succeeded phase you will also find the operator's Deployment in the same namespace where the Subscription is:
    $ kubectl get deployments -n trivy-system
    NAME                 READY   UP-TO-DATE   AVAILABLE   AGE
    trivy-operator   1/1     1            1           11m
    If for some reason it's not ready yet, check the logs of the Deployment for errors:
    kubectl logs deployment/trivy-operator -n trivy-system


To uninstall the operator delete the Subscription, the ClusterServiceVersion, and the OperatorGroup:

kubectl delete subscription trivy-operator-subscription -n trivy-system
kubectl delete clusterserviceversion trivy-operator.v0.11.0 -n trivy-system
kubectl delete operatorgroup trivy-operator-group -n trivy-system
kubectl delete ns trivy-system

You have to manually delete custom resource definitions created by the OLM operator:


Deleting custom resource definitions will also delete all security reports generated by the operator.

kubectl delete crd
kubectl delete crd
kubectl delete crd
kubectl delete crd