Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updating k8s satellite installation for authn #270

Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
34 changes: 17 additions & 17 deletions docs/install-satellite/satellite-kubernetes.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -182,23 +182,12 @@ Add below config to `values.yml` file to enable authentication for satellite API
Refer to [Accessing Organization IDs](/integrations/common-tasks.md#accessing-organization-ids) for fetching the Organization ID.

```yaml
levoai-collector:
config:
data:
extensions:
levoauth:
org_id: <your-org-id>
receivers:
otlp:
protocols:
grpc:
auth:
authenticator: levoauth
http:
auth:
authenticator: levoauth
service:
extensions: [health_check, memory_ballast, levoauth]
global:
levoai_config_override:
onprem-api:
org-id: <your-org-id>
haproxy:
satelliteAuthnEnabled: false
```

Install satellite using this `values.yml`.
Expand All @@ -210,6 +199,16 @@ helm upgrade --install -n levoai --create-namespace \
levoai-satellite levoai/levoai-satellite
```

Otherwise, you can pass the `org-id` and `authnEnabled` as arguments to the helm command.

```bash
helm upgrade --install -n levoai --create-namespace \
--set global.levoai_config_override.onprem-api.refresh-token=$LEVOAI_AUTH_KEY \
--set global.levoai_config_override.onprem-api.org-id=<your-org-id> \
--set haproxy.authnEnabled=true \
levoai-satellite levoai/levoai-satellite
```

### 7. Optionally, access Satellite through a CNAME and HTTPS
Add below config to `values.yml` file to add an ingress route for Satellite APIs so that it can be accessed through a CNAME and HTTPS.

Expand All @@ -232,6 +231,7 @@ haproxy:

Please reach out to [email protected] if you're using a custom ingress controller.


Please proceed to [install Traffic Capture Sensors](/install-traffic-capture-sensors).

---------------------------------------------------------
Expand Down
Loading