Adding Kubernetes to CloudGuard Controller

Prerequisite

• K8s version 1.12 and above

Note - Island Mode (NATed IP address for Nodes) is not supported.

1. Configure the settings in Kubernetes:

   1. Create a service account for CloudGuard Controller Provisions SDDC services as Virtual Data Centers that provide virtualized computer networking, storage, and security. that includes access to: endpoints, pods, services, and nodes.

   2. Get the Kubernetes URL:

      kubectl cluster-info

   3. Export the service account token to a Base64 encoded file.

      kubectl get secret $(kubectl get serviceaccount cloudguard-controller -o jsonpath="{.secrets[0].name}") -o jsonpath="{.data.token}" | base64 --decode > token_file

   4. To check that the query matches the object, click Preview.

2. Configure the settings in SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on.:

   1. In SmartConsole, create a new Data Center Virtual centralized repository, or a group of physical networked hosts, Virtual Machines, and datastores. They are collected in a group for secured remote storage, management, and distribution of data. object in one of these ways:

      • In the top left corner, click Objects menu > More object types > Server > Data Center > Kubernetes.

      • In the top right corner, click Objects Pane > New > More > Server > Data Center > Kubernetes.

   2. Enter a name for the Data Center object.

   3. Enter the Kubernetes URL (from Step 1-b).

   4. Import the service account token file (from Step 1-c).

   5. Click Test Connections and check that the connection works.

   6. Click OK.

   7. Publish the SmartConsole session.

Fore more information, see CloudGuard Controller for Kubernetes.