Skip to content

K8S Connector

Purpose

Kubernetes deployment of the SailPoint Entro Connector via Helm. Use when you run Kubernetes and prefer cluster deployment.

Cluster / Pod Requirements

SailPoint Entro deploys 3 pods (scanner, connector, nats). Per‑pod minimum:

  • 2 CPU cores

  • 4 GB RAM

  • 10 GB SSD (minimum)

Instance OS: Linux Architecture: AMD64 Root level access required for installation.

Installation (High Level)

SailPoint Entro provides:

  • Helm chart location (OCI): oci://ghcr.io/entro-security-registry/entro-connector-helm

  • Chart version (provided by SailPoint Entro)

  • Secrets and values to be set by your team

Complete the following:

  1. Set environment variables.

    Set the environment variables required for the installation, for example:

    export ENTRO_AWS_ACCESS_KEY_ID=""
export ENTRO_AWS_SECRET_ACCESS_KEY=""
export ENTRO_CONNECTOR_UID=""
export ENTRO_LOG_GROUP=""
export ENTRO_HELM_CHART_VERSION=""
export ENTRO_KUBERNETES_NAMESPACE="entro"
export ENTRO_HELM_RELEASE_NAME="entro"

export ENTRO_HELM_CHART="oci://ghcr.io/entro-security-registry/entro-connector-helm"

  2. Authenticate to GitHub Container Registry.

    Login to ghcr.io to allow pulling the Helm chart:

    echo "$CR_PAT" | helm registry login ghcr.io  --username entro-registry --password-stdin

  3. Pull the Helm chart.

    Download the specified chart version:

    helm pull "$ENTRO_HELM_CHART" --version "$ENTRO_HELM_CHART_VERSION"

  4. Install the Helm release.

    Install the chart into the target namespace with required overrides:

    helm install "$ENTRO_HELM_RELEASE_NAME" "$ENTRO_HELM_CHART" -n "$ENTRO_KUBERNETES_NAMESPACE" --create-namespace \
  --set scanner.replicaCount=1 \
  --set connector.replicaCount=1 \
  --set-string entro.awsAccountId="937217723901" \
  --set entro.awsAccessKeyId="$ENTRO_AWS_ACCESS_KEY_ID" \
  --set entro.awsSecretAccessKey="$ENTRO_AWS_SECRET_ACCESS_KEY" \
  --set entro.password="$CR_PAT" \
  --set entro.connectorId="$ENTRO_CONNECTOR_UID" \
  --set env.HTTP_PROXY="$ENTRO_HTTP_PROXY" \
  --set env.NO_PROXY="$ENTRO_NO_PROXY" \
  --set env.LOG_GROUP="$ENTRO_LOG_GROUP"

    Note

    Helm values and secrets will be provided by SailPoint Entro. Ensure network access for outbound egress to SailPoint Entro API and connectivity to target services.