Add-ons are deployed and managed using manifests, Helm charts, or operators. They interact with Kubernetes resources to observe, secure, or control workloads. Proper lifecycle management—upgrades, configuration, and compatibility—is critical to keep clusters stable and secure.