Getting Started

Deploy the Saviour Agent Suite to your Kubernetes cluster to start monitoring events, topology, host metrics, and eBPF network flows.

Prerequisites

• Kubernetes 1.23+
• kubectl configured for your cluster
• An ingestion key from the Saviour UI → Settings → Ingestion Keys

---

Install

Helm (recommended)

Step 1 — Add your ingestion key as a Secret

kubectl create namespace saviour
kubectl create secret generic saviour-secret \
  --from-literal=api-key=YOUR_INGESTION_KEY \
  --namespace saviour

Step 2 — Install the chart

helm upgrade --install saviour \
  oci://ghcr.io/saviourops-labs/charts/saviour \
  --namespace saviour \
  --set global.existingSecret=saviour-secret \
  --set global.server.url=https://api.saviourops.com \
  --set global.cluster.name=my-cluster

Step 3 — Verify agents are running

kubectl get pods -n saviour
# NAME                              READY   STATUS    RESTARTS
# saviour-centurion-xxxxx           1/1     Running   0
# saviour-sentinel-xxxxx (node 1)   1/1     Running   0
# saviour-sentinel-xxxxx (node 2)   1/1     Running   0

Step 4 — Confirm in UI

Open app.saviourops.com → Infrastructure → your cluster appears within 30 seconds.

kubectl (no Helm)

Step 1 — Download the manifest

curl -L https://github.com/saviourops-labs/saviour/releases/latest/download/saviour-agents.yaml \
  -o saviour-agents.yaml

Step 2 — Create namespace and secret

kubectl create namespace saviour
kubectl create secret generic saviour-secret \
  --from-literal=api-key=YOUR_API_KEY \
  --namespace saviour

Step 3 — Edit and apply

Open saviour-agents.yaml and replace YOUR_BACKEND_URL and YOUR_CLUSTER_NAME, then:

kubectl apply -f saviour-agents.yaml

Step 4 — Verify

kubectl get pods -n saviour

---

Common configuration

Parameter	Description	Example
global.existingSecret	Pre-existing Secret name with API key	saviour-secret
global.server.url	Saviour backend URL	https://api.saviourops.com
global.cluster.name	Cluster name shown in the UI	prod-east-1
sentinel.ebpf.enabled	Enable eBPF (requires kernel 4.18+)	true
centurion.enabled	Deploy Centurion	true
sentinel.enabled	Deploy Sentinel	true

Production install (PDB + NetworkPolicy + VPA enabled):

helm upgrade --install saviour \
  oci://ghcr.io/saviourops-labs/charts/saviour \
  -f https://raw.githubusercontent.com/saviourops-labs/saviour/main/agents/helm/saviour/values-production.yaml \
  --set global.existingSecret=saviour-secret \
  --set global.server.url=https://api.saviourops.com \
  --set global.cluster.name=prod-east-1 \
  --namespace saviour

---

Next Steps

• Centurion configuration reference →
• Sentinel + eBPF setup →
• Upgrading agents →
• Troubleshooting →