Skip to main content

Orchestrator Management

Orchestrators are the individual SecureLink platform instances that manage tenants, edges, and VPN configurations. The Global VSA acts as a central authority over all orchestrator instances. Navigate to Orchestrators in the Global VSA sidebar to manage them.

Orchestrator List​

The Orchestrators page displays a table of all provisioned orchestrator instances.

Table columns:

ColumnDescription
NameDisplay name of the orchestrator
Client IDAuthentication identifier (displayed in monospace)
URLThe orchestrator's base URL
StatusCurrent operational status
Last UsedTimestamp of the most recent API call from this orchestrator

Provisioning a New Orchestrator​

To add a new orchestrator instance to Global VSA:

  1. Click the Provision Orchestrator button (+ icon) in the top-right corner of the Orchestrators page.

  2. Step 1 -- Fill in details:

    • Orchestrator Name (required): A descriptive name for this instance (e.g., "US-East Production")
    • Contact Email (required): Administrative contact for this orchestrator
    • Orchestrator URL (optional): The base URL of the orchestrator instance. This can be added or updated later.

  3. Step 2 -- Credential Display: After submitting, the system generates a unique Client ID and Client Secret pair. These credentials are displayed on screen with copy buttons next to each field.

danger

Copy the client credentials immediately. The client secret will NOT be shown again and cannot be recovered. If lost, you must deprovision and re-provision the orchestrator.

After Provisioning​

Once you have the client credentials, the orchestrator must be configured to use them:

  1. Log in to the orchestrator's admin panel.
  2. Navigate to System Settings and then Global VSA Integration.
  3. Enter the Client ID and Client Secret provided during provisioning.
  4. Enter the Global VSA URL (the URL of your Global VSA instance).
  5. Save the configuration.

After configuration, the orchestrator will:

  • Sync feature flags from Global VSA every 5 minutes
  • Report tenant metrics (edge counts, device counts) every 10 minutes
  • Register new tenants with Global VSA for approval

Click an orchestrator name in the list to view its detail page, including associated tenants and usage information.