Autopilot partners

Attribute offers zero-tagging technology that analyzes runtime data with eBPF to reveal costs associated with customers, features, and apps automatically, including across shared and multi-tenant setups. Attribute provides real-time insights for margin optimization, pricing strategy, and cost accountability.

Allowlist path: Attribute/sensor/*

For more information, refer to Attribute installation guide for GKE Autopilot (login required).

Checkmk helps organizations monitor the reliability and availability of their applications, optimize resource usage, and address issues that may arise. Checkmk can automatically discover and collect cluster-wide data, providing visibility into GKE Autopilot performance and health, and visualize the information with dashboards.

Allowlist path: Checkmk/checkmk_kube_agent/*

For more information, refer to Checkmk installation instructions for GKE Autopilot.

CrowdStrike Falcon helps secure cloud infrastructure and prevent breaches by leveraging machine learning and human-driven threat intelligence to reduce the attack surface and provide visibility of events in the environment. CrowdStrike Falcon's user space sensor provides visibility and protection for GKE Autopilot using a single agent, protecting both the node and containers running on it.

Allowlist path: CrowdStrike/falcon-sensor/*

For more information, refer to CrowdStrike Falcon Deployment Guide for GKE (login required).

Datadog provides visibility into containerized apps running on GKE Autopilot by collecting metrics, logs, and traces, which helps to identify performance issues and provide context for troubleshooting.

Allowlist path: Datadog/datadog/*

For more information, refer to Monitor GKE Autopilot with Datadog.

Dynatrace provides enterprise observability for security platform modernization and cloud adoption with real-time discovery and AI-powered causal context. You can deploy the Dynatrace OneAgent in your Google Cloud environment to get automated insights into the usage and performance of your GKE clusters.

Allowlist paths:

• Dynatrace/csidriver/*
• Dynatrace/csijob/*
• Dynatrace/logmonitoring/*

For more information, refer to the Dynatrace installation instructions for GKE Autopilot.

Gremlin helps enterprises to build more reliable systems by identifying and addressing potential failure points. Its cloud-native platform integrates with Google Cloud, allowing DevOps teams to test reliability and detect risk across cloud infrastructure and applications.

Allowlist path: Gremlin/agent/*

For more information, refer to the Installing Gremlin on GKE Autopilot.

Harness Chaos Engineering lets you to introduce faults into applications and infrastructure to test the resilience of business services. The platform provides tools to build a scalable resilience testing practice, with features like Experiments, ChaosGuard for governance, and AI-powered recommendations. It also offers enterprise capabilities such as RBAC, SSO, and auditing.

Allowlist path: Harness/allowlists/*

For more information, refer to the Harness Chaos Engineering documentation for GKE Autopilot.

Orca Sensor is an eBPF-based sensor that can be deployed to GKE Autopilot clusters to provide runtime visibility and protection that's integrated with the Orca Cloud Security Platform.

Allowlist path: Orca-Security/orca-allowlist/*

For more information, refer to the Orca Sensor installation guide (login required).

Prisma Cloud DaemonSet Defenders enforce policies for your environment. Prisma Cloud Radar displays a visualization of your nodes and clusters so you can identify risks and investigate incidents.

Allowlist path: Palo-Alto-Networks/prisma-cloud-defender/*

For more information, refer to the Prisma Cloud Kubernetes installation guide.

SentinelOne provides an AI-powered threat protection solution for containerized workloads. This solution lets you monitor, detect, and analyze process, file, and binary-based threats across nodes and containers within GKE Autopilot clusters.

Allowlist path: SentinelOne/s1-agent/*

For more information, refer to the SentinelOne Kubernetes installation guide (login required).

Steadybit is a platform for chaos engineering that helps teams improve the reliability and resilience of their systems by injecting failures and testing how applications respond. It offers automation tools to simulate disruptions in cloud-native environments.

Allowlist path: Steadybit/extension-container/*

For more information, see Steadybit on GKE Autopilot.

The Sysdig Secure Devops Platform helps you implement container security practices in your GKE Autopilot clusters, including monitoring and securing workloads using the Sysdig agent. The Sysdig agent is a host component that processes syscall, creates capture files, and performs auditing and compliance.

Allowlist path: Sysdig/agent/*

For more information, refer to Visibility and Security for GKE Autopilot.

Trend Vision One Container Security provides protection for containers from development through deployment and in production. It helps prevent pre-runtime and runtime vulnerabilities, attacks, and misconfigurations in containerized applications.

Allowlist path: Trend-Vision-One/trendmicro-scout/*

For more information, refer to the Trend Vision One installation guide for Container Security on GKE.

Upwind is a Cloud Security Platform that uses runtime context to identify risks, threats, and insights from cloud infrastructure and workloads. Its eBPF-based sensor for GKE Autopilot clusters provides runtime context for posture management, real-time threat detection, and defense measures, to help ensure security.

Allowlist path: Upwind/upwind-agent/*

For more information, refer to the Upwind GKE Autopilot compatibility update.

Uptycs Container Security Platform helps you implement security best practices for GKE Autopilot clusters through its eBPF runtime sensor-based monitoring solution. The platform offers visibility into processes, connections, and Kubernetes RBAC security controls by providing security monitoring, compliance capabilities, and threat detection across containerized workloads and nodes.

Allowlist path: Uptycs/uptycs-runtime-sensor/*

For more information, refer to the Uptycs GKE Autopilot compatibility update.

Virtana Container Observability provides visibility into Kubernetes, OpenShift, and containerized environments. Built on open-source telemetry, it helps teams detect and resolve issues, optimize resource usage, and maintain performance.

Allowlist paths:

• Virtana/cadvisor/*
• Virtana/node-exporter/*

For more information, refer to Deploy Virtana on GKE Autopilot clusters.

The Wiz Runtime Sensor provides detection and response capabilities for cloud workloads. It is an eBPF-based agent that can be deployed to GKE clusters to provide real-time visibility and monitoring of running processes, network connections, file activity, and system calls to detect, investigate, and respond to malicious behavior affecting the workload.

Allowlist path: Wiz/wiz-sensor/*

For more information, refer to the Wiz Runtime Sensor overview.