Comment on page
Kubernetes
To deploy and use Defguard on your cluster you'll need:
- helm binary https://github.com/helm/helm/releases/latest
git clone https://github.com/DefGuard/deployment.git && cd deployment/charts
Then create namespace for Defguard on your cluster:
kubectl create namespace defguard
Copy and fill in values file:
cp defguard/values.yaml ./
Required values (the rest should work if left as-is):
ingress.hosts.grpc: GRPC ingress address - grpc clients like defguard-gateway, youbi-bridge etc. will connect here.ingress.hosts.web: Web ingress address - Defguard webapp will be available here.publicUrl: Public URL your Defguard will be available under. Usually the same as ingress.hosts.web, but differ depending on your loadbalancer and/or reverse-proxy setup.
If you want to deploy the enrollment service along with your Defguard instance you also need to configure values related to the
defguard-proxsubchart: defguard-proxy.enabled: enable the enrollment servicedefguard-proxy.upstreamGrpcUrl: defguard server gRPC endpoint URLdefguard-proxy.publicUrl: public URL of the enrollment servicedefguard-proxy.ingress.hosts.web: enrollment service ingress address
And finally install the Helm chart in the namespace:
publicUrl: Public URL your Defguard will be available under. Usually the same as ingress.hosts.web, but differ depending on your loadbalancer and/or reverse-proxy setup.
helm install --wait=true --namespace defguard defguard defguard -f values.yaml
Last modified 3mo ago