Register a Sidecar
Registering a sidecar in ALTR provides the information the sidecar needs to securely connect to ALTR and retrieve its policy and configuration information. The sidecar always initiates this communication — ALTR never reaches into your environment.
Prerequisites
Section titled “Prerequisites”- A hostname is established that can be used to access a sidecar instance.
- An RSA key pair has been generated for sidecar authentication — see Sidecar Authentication.
To register a sidecar in ALTR:
-
Log in to ALTRNet through your identity provider (IdP).
-
Select Settings > Sidecars in the navigation menu.
-
Click Register Sidecar.
-
Enter a Display Name to identify your sidecar.
-
Enter the Hostname of the sidecar in RFC 1123 format — a URL without
http://. This is the DNS name of the network load balancer. -
Enter the Public Key of the sidecar — the public key from your RSA key pair.
-
(Optional) Expand Advanced Settings and enable Allow unsupported queries if you want queries that ALTR can’t parse to run instead of fail. This setting applies only to Access Management Policy, not Impersonation Policy.
-
Click Register. If Allow unsupported queries is enabled, ALTRNet displays a confirmation modal.
-
Note the Sidecar ID, the Data Plane URL, and the ALTR Organization ID — these are used to install the sidecar in your environment. Once a sidecar is registered, ALTRNet displays information for every instance of that sidecar that has connected. A single registered sidecar can have multiple installed instances.
Remove a Sidecar
Section titled “Remove a Sidecar”Removing a sidecar from ALTR prevents any data consumer from accessing a repository through it. Remove the sidecar’s listener port bindings first — see Remove a Binding.
To remove a sidecar from ALTR:
- Log in to ALTRNet through your IdP.
- Select Settings > Sidecars in the navigation menu.
- Click the sidecar to view its details.
- Click Remove Sidecar. ALTRNet displays a confirmation modal.
- Click Remove Sidecar to confirm.