Kubernetes

Prerequisites

To deploy and use Defguard on your cluster, you'll need:

circle-exclamation

Kubernetes configuration can be found in the git repositoryarrow-up-right.

Deployment

Add Defguard Helm chart repository:

helm repo add defguard https://defguard.github.io/deployment

In Kubernetes cluster, create a namespace for Defguard:

kubectl create namespace defguard

Examine available values for the Helm chart:

helm show values defguard/defguard

To set some values, either crate a file named values.yaml, or use --set option for helm command.

circle-exclamation

Install the Helm chart in the namespace:

Defguard Edge

If you want to deploy Defguard Edge service along with your Defguard instance, you also need to configure values related to the defguard-proxysubchart:

  • defguard-proxy.enabled: enable the enrollment service

  • proxyUrl: proxy gRPC endpoint URL (based on defguard-proxy.ingress.grpc.host)

  • defguard-proxy.publicUrl: public URL of the enrollment service

  • defguard-proxy.ingress.web.host: enrollment service web ingress address (the enrollment website)

  • defguard-proxy.ingress.grpc.host: enrollment service gRPC ingress address (for communicating with core)

Defguard Gateway

If you want to deploy Defguard Gateway service along with your Defguard instance, you need to configure values related to the defguard-gateway subchart:

  • defguard-gateway.enabled: enable the VPN gateway service

Last updated

Was this helpful?