Integrate with GKE

Create an integration to manage access to Kubernetes clusters on Google Cloud

Overview

With a Kubernetes cluster in GKE on Google Cloud, GKE handles the complexities of Kubernetes management. Google Cloud provides a reliable, scalable database service.

Through this integration, Apono helps you securely manage access to your Google Cloud Kubernetes cluster.



Prerequisites

Before starting this integration, create the items listed in the following table.

ItemDescription
Apono ConnectorOn-prem connection installed on the GKE cluster that serves as a bridge between a Kubernetes cluster and Apono
Kubernetes Engine Cluster RoleGoogle Cloud role that grants the Apono connector's service account access to retrieve and list GKE clusters

Apono does not require admin permissions to the Kubernetes environment.


Integrate with Google Kubernetes Engine (GKE)

Use the following steps to complete the integration:

  1. On the Catalog tab, click Google Kubernetes Engine (GKE). The Connect Google Kubernetes Engine (GKE) page appears.
  2. From the dropdown menu, select a connector.

    💡

    If the desired connector is not listed, click + Add new connector and follow the instructions for creating a Kubernetes connector.


  1. Click Next. The Complete setup page appears.
  2. Enter a unique, alphanumeric, user-friendly Integration Name. This name is used to identify this integration when constructing an Access Flow.
  3. (Optional) Enter the Server URL where the cluster is deployed. Leave this field blank to connect the cluster where the Apono connector is installed.
  4. (Optional) Enter the Certificate Authority. Leave this field blank to connect the cluster where the Apono connector is installed.
  5. (Optional) Enter Resource Group where the cluster is deployed.
  6. (Optional) Enter the Cluster Name to connect. The cluster name should be the same as it appears in GKE.
  7. Click Connect.

    📘

    When the Apono connector is installed on the GKE cluster, you do not need to enter values for the optional fields or to provide a secret.


Now that you have completed this integration, you can create access flows that grant permission to your Google Cloud Kubernetes cluster.