Installation

Prerequisites

Before proceeding, ensure you have:


Getting Started

All commands are run on the client system.

  1. Download and install the AWS CLI (Instructions)

  2. Access your unique AWS credentials from the link provided in the onboarding email from Manifest Cyber

  3. Configure the AWS CLI profile

aws configure --profile manifest
AWS Access Key ID [None]: <Access Key ID>
AWS Secret Access Key [None]: <Secret Access Key>
Default region name [None]: us-east-1
Default output format [None]: json
  1. Set your AWS_PROFILE environment variable
export AWS_PROFILE=manifest
  1. Verify AWS CLI access
aws sts get-caller-identity
  1. Create a temporary directory for the installation and navigate to the directory
mkdir ~/manifest-install && cd ~/manifest-install
  1. Using the aws cli tool, download the installation bundle and install-tools container image (Manifest will provide the latest and correct version during an installation support call)
export VERSION=<version>
export INSTALL_TOOLS_VERSION=<install-tools-version>
aws s3 cp "s3://manifest-deployables/on-prem/k3s-on-prem-${VERSION}.tar" k3s-on-prem-${VERSION}.tar
aws ecr get-login-password --region us-east-1 | docker login --username AWS --password-stdin 623542229617.dkr.ecr.us-east-1.amazonaws.com

docker pull 623542229617.dkr.ecr.us-east-1.amazonaws.com/install-tools:${INSTALL_TOOLS_VERSION}

Installation

All commands are run on the client system.

  1. Run the install-tools container with the following command to properly mount the required AWS and SSH secrets (if you have make installed on the host machine you can run make shell)
docker run -it \
  --tmpfs "${HOME}:uid=$(id -u),gid=$(id -g)" \
  -v "${HOME}/.aws:${HOME}/.aws:rw" \
  -v "${HOME}/.ssh:${HOME}/.ssh:rw" \
  -v /etc/passwd:/etc/passwd:ro \
  -u $(id -u):$(id -g) \
  -v "${PWD}:${HOME}/setup:rw" \
  -w "${HOME}/setup" \
  -e AWS_PROFILE="${AWS_PROFILE}" \
  -e INSTALL_TOOLS_VERSION=${INSTALL_TOOLS_VERSION} \
  -e HOME="${HOME}" \
  -e KUBECONFIG="${HOME}/setup/.kube/config" \
  -e SOPS_AGE_KEY_FILE="${HOME}/setup/age.key" \
  -e VERSION=${VERSION} \
  623542229617.dkr.ecr.us-east-1.amazonaws.com/install-tools:${INSTALL_TOOLS_VERSION} \
  /bin/bash --login
  1. Extract the contents of the bundle
tar -xf k3s-on-prem-${VERSION}.tar
  1. Run make setup to generate new age.key and .sops.yaml files
make setup
  1. Run the wizard to configure your deployment (e.g. manifest-pilot)
./wizard configure <deployment-name>
  1. Start the installation
./wizard start <deployment-name>

Next Steps

After installation completes: