Third-Party Clients

Setup third-party clients on your users' machines

The BastionZero product is maintained for existing BastionZero customers only.

Moving forward, we are natively rebuilding BastionZero’s technology as Cloudflare’s Access for Infrastructure service.

Kubernetes

kubectl

Our Kubernetes agent is fully compatible with kubectl. Ensure that your kubeconfig is set to the correct context, and you are good to go.

Example of kubectl context to interact with BastionZero

k9s

Our Kubernetes agent is fully compatible with k9s!

If you don't already have k9s downloaded, do so by following the k9s GitHub here.

Next, ensure that your Kube context is correctly configured. See the example below.

Example of the k9s context needed to interact with BastionZero

You are ready to go! Run the command k9s to get started.

Example of using k9s with BastionZero

Lens

Our Kubernetes agent is fully compatible with Lens.

To get started, follow these instructions:

• If you don't have Lens installed, instructions can be found here.
• Lens should automatically detect and display your “bctl-agent-context,” but if it doesn’t you can manually add it by following these instructions on Lens' documentation page.
• You are ready to go and start using Lens.

Example of what lens looks like when it is being used with BastionZero

Databases

Once you have your local port forwards established, you can now use any client to connect to your database through BastionZero. For example, we've used DBeaver, Tableplus, DataGrip, and psql, just to name a few.

Your database authentication scheme is private to you. BastionZero secures your connection by ensuring it is authenticated with a user in your organization and authorized via policy. Once completed, an end user can then connect to and authenticate to the database.

DBeaver

A DBeaver configuration will include the server and authentication schemes and may look something like the example below.

DBeaver configuration example of connecting to a database secured through BastionZero

PSQL

Echoing the same setup as above using psql, you must specify the username (U), host (h), and port (p).

psql -U postgres -h localhost -p 6101