Installing Calibo Accelerate Orchestrator Agent in Google Kubernetes Engine (GKE) Cluster by Using mTLS

The Calibo Accelerate platform is a SaaS offering hosted on AWS. When you install and set up an Orchestrator Agent in a Google Kubernetes Engine (GKE) cluster, you must use the mutual Transport Layer Security (mTLS) method to establish a secure and authenticated connection between the Calibo Accelerate Orchestrator Agent deployed within your Google Cloud Platform (GCP) account and the Calibo Accelerate platform hosted on AWS.

Mutual TLS (mTLS) is a mutual authentication method that ensures the identity of both parties at each end of a network connection by validating that each possesses the correct private key associated with its X.509 certificate. In this deployment model, the Orchestrator Agent service must be exposed through a public DNS.

In mTLS, both the client and the server use X.509 digital certificates to authenticate each other.

Note:

You need a public DNS to connect to the Calibo Accelerate Orchestrator Agent from the Calibo Accelerate platform. Register the external IP address of your GKE Ingress or external load balancer with a public DNS record. This DNS record is used as the Orchestrator Agent DNS. You must provide this DNS in the Calibo Accelerate platform UI when registering the Orchestrator Agent.

To understand the complete procedure for installing the Calibo Accelerate Orchestrator Agent in a Google Kubernetes Engine (GKE) cluster by using mTLS, refer to the following topics: