Skip to content
Access Broker Deployment

Access Broker Deployment

The Britive Access Broker is a lightweight Java service that runs inside your infrastructure and lets the Britive platform manage just-in-time access to resources that aren’t reachable as cloud applications — servers, databases, network devices, and Kubernetes clusters. The broker opens an outbound HTTPS connection to Britive, so no inbound firewall rules or public endpoints are required.

Deploy it once, then point any broker-based integration (Linux, Windows, databases, Cisco, VyOS, and more) at the broker pool it registers with.

How It Works

    flowchart LR
    subgraph YourInfra["Your Infrastructure"]
        Broker["Access Broker<br/>(runs in your env)<br/>Runs checkout / checkin routines against targets"]
    end

    subgraph BritivePlatform["Britive Platform"]
        SaaS["Britive SaaS<br/>&lt;tenant&gt;.britive-app.com"]
    end

    Broker -->|"outbound HTTPS:443"| SaaS
  

At startup the broker reads broker-config.yml, registers with the Britive platform using a broker pool token, and waits for checkout/checkin instructions. Network requirement: outbound HTTPS (port 443) to *.britive-app.com. No inbound rules needed.

Choose a Deployment Option

OptionPlatformKubernetes requiredSecret storageBest for
ECS FargateAWSNoAWS Secrets ManagerAWS-native, serverless, no cluster to manage
EKSAWSYesKubernetes SecretsExisting AWS EKS clusters
AKSAzureYesKubernetes SecretsExisting Azure AKS clusters
GKEGoogle CloudYesKubernetes SecretsExisting Google GKE clusters

No Kubernetes cluster yet? Use ECS Fargate — it runs the broker as a serverless container with secrets in AWS Secrets Manager. Already running Kubernetes? Use the deployment that matches your cloud.

In This Section

  • Deploy on ECS Fargate

    Run the Britive Access Broker as a serverless container on AWS ECS Fargate, with secrets stored in AWS Secrets Manager.

  • Deploy on EKS

    Run the Britive Access Broker as a Kubernetes Deployment on an existing AWS EKS cluster, with configuration in a ConfigMap.

  • Deploy on AKS

    Run the Britive Access Broker as a Kubernetes Deployment on an existing Azure AKS cluster, using Azure Container Registry for the image.

  • Deploy on GKE

    Run the Britive Access Broker as a Kubernetes Deployment on an existing Google GKE cluster, using Google Container Registry for the image.

Last updated on