Kubernetes Operator

Use the thoth-operator when you want Kubernetes-native, GitOps-friendly reconciliation of Thoth control-plane tenant configuration.

Source repository

• GitHub: github.com/atensecurity/thoth-operator

What it reconciles

• Tenant settings
• MDM provider configuration
• Pack assignments
• Policy sync triggers
• Optional governance evidence backfill jobs
• Optional decision-field backfill jobs

Recommended deployment pattern

Use both infrastructure-as-code and operator workflows together:

1. Use Terraform/Pulumi providers for account-level and long-lived platform resources.
2. Use thoth-operator for cluster-local tenant bootstrap and day-2 reconciliation.
3. Use optional backfill blocks in ThothTenant when you need to recover evidence completeness after rollout changes.

Endpoint model

By default, the operator derives tenant endpoint URLs as:

https://grid.<tenant_id>.<apex_domain>

For most deployments, set tenantId and keep apexDomain=atensecurity.com.

Next steps

1. Quickstart
2. CRD Reference
3. Public runbook