PrivX on Kubernetes

Architecture Diagram for PrivX on Kubernetes

The following diagram shows the resources deployed when installing PrivX on Kubernetes. It also shows the flow of traffic from outside the cluster in to PrivX.

Renewing Internal Nginx Certificates on Kubernetes

You can trigger the internal certificate regeneration by re-running the Helm release with a modified hook setting:

helm upgrade -n <privx namespace> <privx helm release name> charts/privx --set jobs.internal-cert-updater.hook=pre-upgrade --reuse-values

info

Changing the hook to pre-upgrade causes any subsequent helm upgrade to re-trigger the internal-cert-updater job.