Integrate with Self-Managed Kubernetes

Overview

With a connector installed on your Kubernetes platform, the next step is setting permissions for Apono to manage access control.

Prerequisites

• Cluster admin access to the cluster you'd like to integrate

• Helm

• An Apono Kubernetes connector

Please note! If you installed the Apono connector on the cluster, there is no need to provide the secret in the Add Integration form in the UI.

The connector already handles the secret ;)

Integrate Apono with Kubernetes

Select a Connector

1. Select Kubernetes from the Catalog.

2. On the next page, select an existing connector from the drop-down list.

3. Click Next to view the Kubernetes integration form.

Integration Form

1. Name the integration.

2. Enter the following Kubernetes parameters, which can be found with kubectl:

• Cluster Name

1. Secret

   1. If you installed the Apono connector on the cluster, leave this empty. Otherwise:

• With a GCP secret manager:

  • Project

  • Secret ID

• With Kubernetes secret manager:

  • Namespace

  • Secret Name

• With an Azure secret manager:

  • Vault URL

  • Secret Name

Results

Integration of Apono with self-managed Kubernetes is now complete.

Next Steps

1. Manage users and groups. If you have and IdP set up, for example Okta or Azure AD, you may want to integrate Apono in order to sync users and groups.
2. You can now control access to this resource by defining Access Flows.
3. Make it easy for your users to request access by integrating your Slack or Teams organization with Apono.