Access Broker Deployment
The Britive Access Broker is a lightweight Java service that runs inside your infrastructure and lets the Britive platform manage just-in-time access to resources that aren’t reachable as cloud applications — servers, databases, network devices, and Kubernetes clusters. The broker opens an outbound HTTPS connection to Britive, so no inbound firewall rules or public endpoints are required.
Deploy it once, then point any broker-based integration (Linux, Windows, databases, Cisco, VyOS, and more) at the broker pool it registers with.
How It Works
flowchart LR
subgraph YourInfra["Your Infrastructure"]
Broker["Access Broker<br/>(runs in your env)<br/>Runs checkout / checkin routines against targets"]
end
subgraph BritivePlatform["Britive Platform"]
SaaS["Britive SaaS<br/><tenant>.britive-app.com"]
end
Broker -->|"outbound HTTPS:443"| SaaS
At startup the broker reads broker-config.yml, registers with the Britive platform using a broker pool token, and waits for checkout/checkin instructions. Network requirement: outbound HTTPS (port 443) to *.britive-app.com. No inbound rules needed.
Choose a Deployment Option
| Option | Platform | Kubernetes required | Secret storage | Best for |
|---|---|---|---|---|
| ECS Fargate | AWS | No | AWS Secrets Manager | AWS-native, serverless, no cluster to manage |
| EKS | AWS | Yes | Kubernetes Secrets | Existing AWS EKS clusters |
| AKS | Azure | Yes | Kubernetes Secrets | Existing Azure AKS clusters |
| GKE | Google Cloud | Yes | Kubernetes Secrets | Existing Google GKE clusters |
No Kubernetes cluster yet? Use ECS Fargate — it runs the broker as a serverless container with secrets in AWS Secrets Manager. Already running Kubernetes? Use the deployment that matches your cloud.
In This Section
- Deploy on ECS Fargate
Run the Britive Access Broker as a serverless container on AWS ECS Fargate, with secrets stored in AWS Secrets Manager.
- Deploy on EKS
Run the Britive Access Broker as a Kubernetes Deployment on an existing AWS EKS cluster, with configuration in a ConfigMap.
- Deploy on AKS
Run the Britive Access Broker as a Kubernetes Deployment on an existing Azure AKS cluster, using Azure Container Registry for the image.
- Deploy on GKE
Run the Britive Access Broker as a Kubernetes Deployment on an existing Google GKE cluster, using Google Container Registry for the image.