Skip to main content
Solved

Kasten Dashboard configure HTTPS with External Gateway


I deployed kasten k10 in my test kubernetes environment with 

--set externalGateway.create=true 

via helm.

and I config metallb, now I can access Kastern Dashboard with IP/http protocol
dashboard is now available but I need enable https and embed certificate for Veeam kasten Integration to Veeam Backup&Replication. 

but i can’t find any instruction. Does Anyone know this?

Best answer by jaiganeshjk

@swnam1226 Thank you for creating this topic. 

The external gateway service is a loadbalancer type of service that allows you to configure the loadbalancer as per your requirement. 
Some external loadbalancer controllers like aws/azure allows configuring TLS based on the annotations. 

I am not sure if metallb has something like that.

I would recommend using an ingress in front of the metallb and use it for tls termination. That way you can natively configure tls certs and keys with k8s secrets. 

Let me know if it makes sense. 

View original
Did this topic help you find an answer to your question?

4 comments

jaiganeshjk
Forum|alt.badge.img+2
  • Experienced User
  • 274 comments
  • Answer
  • December 30, 2024

@swnam1226 Thank you for creating this topic. 

The external gateway service is a loadbalancer type of service that allows you to configure the loadbalancer as per your requirement. 
Some external loadbalancer controllers like aws/azure allows configuring TLS based on the annotations. 

I am not sure if metallb has something like that.

I would recommend using an ingress in front of the metallb and use it for tls termination. That way you can natively configure tls certs and keys with k8s secrets. 

Let me know if it makes sense. 


  • Comes here often
  • 7 comments
  • January 1, 2025

@swnam1226 are you getting an error of some kind?

Yes, as mentioned Kasten listens on port 80 and you need to put an ingress in front of it to terminate the TLS and use port 443.

But I dont see anything in the requirements that you specifically need HTTPS to connect Kasten to Veeam Backup & Replication via the Kasten Plug-In. It only references the requirement that the dashboard must be accessible and if you are using HTTPS VBR needs to trust the cert, or it will give you a warning with options to View, Continue (Trust) or Cancel (Not Trust) a self-signed cert. 


jaiganeshjk
Forum|alt.badge.img+2
  • Experienced User
  • 274 comments
  • January 2, 2025

@NPatel Kasten VBR integration needs https to work.

I am not sure why its not part of the requirements in the documentation. 

There should be some ways to bypass this in VB&R but we don’t recommend that and suggest to use HTTPS for the connectivity to Veeam Kasten


  • Author
  • New Here
  • 1 comment
  • January 3, 2025
I registered a secret, installed ingress nginx, and passed the ingress settings to the gateway to resolve https accessthank you

Comment