Configuration Fields
The following configuration fields pertain to Kubernetes Orchestrator configuration in the Orchestrator Object.
| Field |
Description |
|---|---|
|
Name |
User specified name of the orchestrator. |
|
Description |
User specified description of the orchestrator. |
|
Delta Interval |
Interval (in seconds) to check the Kubernetes endpoint for changes |
|
Full Snapshot Interval |
Interval (in seconds) to perform a full snapshot of Kubernetes data |
|
Username |
Username for the orchestration endpoint. |
|
Password |
Password for the orchestration endpoint. |
|
Certificate |
Client certificate used for authentication. |
|
Key |
Key corresponding to client certificate. |
|
Auth Token |
Opaque authentication token (bearer token). |
|
CA Certificate |
CA Certificate to validate orchestration endpoint. |
|
Accept Self-Signed Cert |
Checkbox to disable strictSSL checking of the Kubernetes API server certificate |
|
Verbose TSDB Metrics |
Maintain per Kubernetesorchestrator metrics - if set to False, only Secure Workload clusterwide metrics are maintained. |
|
Secure connector Tunnel |
Tunnel connections to this orchestrator’s hosts through the Secure Connector tunnel |
|
Hosts List |
Array of { “host_name”, port_number} pairs that specify how Secure Workload must connect to the orchestrator |
|
K8s manager type |
Manager type for the kubernetes cluster(None for Vanilla/Openshift kubernetes deployments) |
|
AWS cluster name |
Name of the orchestrator as specified at time of creation of cluster (Pre-existing EKS) |
|
AWS Access ID |
ACCESS KEY associated with the account for which orchestrator config is being created (Pre-existing EKS) |
|
AWS Secret Access Key |
The SECRET KEY associated with the account the orchestrator configuration is created. Re-enter the SECRET KEY every time the config is edited. (Pre-existing EKS) |
|
AWS Region |
The Region in which workload has been deployed. If a workload is spread across multiple regions, a separate config is required for every region. See the link below for correct region values. :ref: https://docs.aws.amazon.com/general/latest/gr/rande.html. (Pre-existing EKS) |
|
AWS Assume Role ARN |
Amazon resource number of the roles to assume while connecting to the orchestrator ref: https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html (Pre-existing EKS) . |
|
Azure Tenant ID |
Tenant ID associated with Azure subscription. (Pre-existing AKS only) |
|
Azure Client ID |
Globally unique ID associated with the application that needs to authenticate with Azure AD. (Pre-existing AKS only) |
|
Azure Client Secret |
Password associated with the service principal for the application that needs to authenticate with Azure AD. (Pre-existing AKS only) |