Content Comparison

...

Kubernetes In-Cluster Helm Chart Integration

...

Overview

This integration uses a Helm chart to creates a discovery deployment in the datatheorem namespace in your Kubernetes cluster.

It uses a datatheorem-cluster-role with the following permissions:

rules:
  - apiGroups:
      - "*"
    resources:
      - deployments
      - pods/log
      - pods
      - services
      - endpoints
      - persistentvolumeclaims
      - ingresses
      - gateways

    verbs:
      - list
      - get
      - watch 

and a cluster role binding the datatheorem-cluster-role to the datatheorem-service-account.

Installation

Step 1 : Extract all the items which you should receive during the onboarding process.

unzip DataTheorem-APIProtect-K8S_PROTECT.zip

Step 2 : Verify you are configured for the correct kubernetes cluster

kubectl config current-context

Step 3 : Install API Protect

Add mirroring to the chosen endpoint. This step must be repeated for each endpoint.

helm install k8s-protect    \
    ./k8s-protect           \
    --create-namespace      \
    --namespace datatheorem \
    --wait

Step 5 : Verify the deployment

It should look something like this

helm list -n datatheorem

NAME        NAMESPACE   REVISION UPDATED                                 STATUS   CHART             APP VERSION
k8s-protect datatheorem 1        2023-06-20 11:56:08.223009524 +0100 CET deployed k8s_protect-1.0.0 1.0.5

Test the deployment

helm test -n datatheorem k8s-protect

Finished.

Un-Installation should it be required

helm uninstall -n datatheorem k8s-protect

Kubernetes Control-Plane Integration

...