Deploy on Kubernetes Enterprise

Trapster Enterprise can be deployed on Kubernetes using the official manifest.

Service limitations

Port scan plugin and some services are not available on Kubernetes deployments. Use a VM deployment if you need these services.

Before you start

• Kubernetes 1.25+
• Outbound HTTPS access to <domain_id>.trapster.cloud on port 443
• A valid Enterprise license
• Registry credentials to pull the Trapster image -- if you do not have these, contact your Trapster account representative

Get the manifest

1. Open Trapsters → click the + card → Deploy a new Trapster
2. Click Kubernetes -- the wizard shows the deployment manifest pre-filled with your organization's domain and registration code
3. Copy the manifest

See Deployment overview for the full wizard flow.

Deploy

1. Authenticate with the registry

docker login <registry-url>

Use the registry URL and credentials provided by your account representative.

2. Create the registration secret

The manifest reads TRAPSTER_CODE from a Kubernetes secret. Create it before applying:

kubectl create secret generic trapster-secrets \
  --namespace trapster \
  --from-literal=code="<your-registration-code>"

Your registration code is shown in the deploy wizard.

3. Apply the manifest

kubectl apply -f trapster.yaml

The node boots and connects to your dashboard automatically.

Networking

The manifest runs with hostNetwork: true by default. The Trapster binds service ports directly on the Kubernetes node's network interface, giving it visibility on that segment without additional port mapping configuration.

Docker and Kubernetes deployments

These deployments share the host's network stack and have no separate network identity.

Storage

The manifest uses emptyDir for the Trapster data volume. This means data does not persist if the pod is restarted or rescheduled. For persistent storage, replace the emptyDir volume with a PersistentVolumeClaim before deploying.

Accept registration

After the pod starts, the Trapster appears as a pending device on the Trapsters page within a few minutes.

See Trapsters: accept registration.

Next steps

• Configure services: enable and configure emulated protocols from the Trapster detail page
• Review networking requirements