Security Fabric connector integration with Kubernetes

You can use FortiManager to create Fabric connectors for Kubernetes, and then install the Fabric connectors to FortiOS.

The Fabric connectors in FortiManager define the type of connector and include information for FortiOS to communicate with and authenticate with the products. In some cases the FortiGate must communicate with products through the Fabric connector, and in other cases the FortiGate communicates directly with the products.

FortiOS works with the Fabric connector to communicate with Kubernetes.

For information about the Fabric connector, see the Fortinet Document Library.

You cannot import a policy package for the Fabric connector from FortiOS to FortiManager.

Following is an overview of creating Fabric connectors for Kubernetes using FortiManager:

1. Create a Fabric connector. See Creating a Fabric connector for Kubernetes.
2. Import address names from Kubernetes to the Fabric connector. See Importing address names to a Fabric connector. FortiManager imports the address names and converts them to dynamic firewall address objects. The objects do not include IP addresses and display in Firewall Objects > Addresses.
3. In the policy package in which you are creating the new policy, create an IPv4 policy and include the firewall address objects for Kubernetes. See Creating an IP address policy.
4. Install the policy package to FortiOS. See Installing a policy package.

   FortiGate communicates with Kubernetes to dynamically populate the firewall address objects with IP addresses.