Configure Client Workload

Overview

Assuming your Client Workload is already deployed, and your Aembit Edge components are deployed, you will need to update your deployment to enable Aembit Edge to intercept requests from the Client Workload. Specifically, add the following annotation:

aembit.io/agent-inject: "enabled"

Example

Here is an example YAML excerpt showing this annotation:

apiVersion: apps/v1
kind: Deployment
metadata:
  name: example
spec:
  replicas: 1
  selector:
    matchLabels:
      app: example
  template:
    metadata:
      labels:
        app: example
      annotations:
        aembit.io/agent-inject: "enabled"
    spec:

Next, redeploy your application and verify the Aembit Edge components were added to your Client Workload by running the following command:

kubectl get pods

You should see an additional container listed as part of your pod.

NAME                             READY   STATUS    RESTARTS   AGE

example-558b4cbdb8-kqlhr         2/2     Running   0          3h4m

Once you have verified your application continues to work as expected, remove the credentials stored in your application, and enable Aembit to inject these credentials.