The steps described in this article assume familiarity with kubernetes. The required images are available in the Dockerhub registry under the organization FydeInc.

Prerequisites:

Running kubernetes cluster or local minikube installation
kubectl and helm
User Directory connector token
Directory Provider authorization token. See CloudGen Access User Directory Connector for more information.

Helm chart

The helm chart is available at Artifactory and covers the Barracuda CloudGen Access Directory Connector.

Check the Artifactory link or ‘values.yaml’ file for all the configuration parameters.

Deployment

Create a ‘custom-values.yaml’ file with the desired values. The minimum required configurations for a successful deployment are:

‘authToken.existingSecret.*’ or ‘authToken.newSecret.value’
‘authToken.type’
‘enrollmentToken.existingSecret.*’ or ‘enrollmentToken.newSecret.value’

Add the helm repo and install the chart:

helm repo add barracuda-cloudgen-access https://barracuda-cloudgen-access.github.io/helm-charts 
helm install my-release barracuda-cloudgen-access/cga-directory-connector --namespace  my-namespace --set-file custom-values.yaml

Optionally, instead of using “helm install”, export the yaml files and deploy using your preferred method:

 helm template barracuda-cloudgen-access/cga-directory-connector --set-file custom-values.yaml

Example

Extended example for Google Workspaces directory with Prometheus service monitors:

nameOverride: cga-directory-connector-my-deploy 
serviceMonitor: true 
priorityClassName: high-priorityauthToken:  
  type: google 
  existingSecret:  
    name: cga-directory-connector-secret 
    key: auth-token 
  
enrollmentToken: 
   existingSecret: 
     name: cga-directory-connector-secret 
     key: enrollment-token 
 
logLevel: info 
 
customEnv:   - name: FYDE_GROUPS_INCLUDED 
    value: "Engineering"   - name: FYDE_ONLY_MATCHED_GROUPS 
	value: “true” resources: 
  limits: 
    cpu: 100m 
    memory: 128Mi   requests:  
    cpu: 100m
    memory: 128Mi