Installation
Prerequisites
Before proceeding, ensure you have:
- Met all server and client requirements
- Gathered all required credentials
Getting Started
All commands are run on the client system.
-
Download and install the AWS CLI (Instructions)
-
Access your unique AWS credentials from the link provided in the onboarding email from Manifest Cyber
-
Configure the AWS CLI profile
aws configure --profile manifestAWS Access Key ID [None]: <Access Key ID>
AWS Secret Access Key [None]: <Secret Access Key>
Default region name [None]: us-east-1
Default output format [None]: json
- Set your AWS_PROFILE environment variable
export AWS_PROFILE=manifest- Verify AWS CLI access
aws sts get-caller-identity- Create a temporary directory for the installation and navigate to the directory
mkdir ~/manifest-install && cd ~/manifest-install- Using the aws cli tool, download the installation bundle and
install-toolscontainer image (Manifest will provide the latest and correct version during an installation support call)
export VERSION=<version>
export INSTALL_TOOLS_VERSION=<install-tools-version>aws s3 cp "s3://manifest-deployables/on-prem/k3s-on-prem-${VERSION}.tar" k3s-on-prem-${VERSION}.taraws ecr get-login-password --region us-east-1 | docker login --username AWS --password-stdin 623542229617.dkr.ecr.us-east-1.amazonaws.com
docker pull 623542229617.dkr.ecr.us-east-1.amazonaws.com/install-tools:${INSTALL_TOOLS_VERSION}Installation
All commands are run on the client system.
- Run the
install-toolscontainer with the following command to properly mount the required AWS and SSH secrets (if you havemakeinstalled on the host machine you can runmake shell)
docker run -it \
--tmpfs "${HOME}:uid=$(id -u),gid=$(id -g)" \
-v "${HOME}/.aws:${HOME}/.aws:rw" \
-v "${HOME}/.ssh:${HOME}/.ssh:rw" \
-v /etc/passwd:/etc/passwd:ro \
-u $(id -u):$(id -g) \
-v "${PWD}:${HOME}/setup:rw" \
-w "${HOME}/setup" \
-e AWS_PROFILE="${AWS_PROFILE}" \
-e INSTALL_TOOLS_VERSION=${INSTALL_TOOLS_VERSION} \
-e HOME="${HOME}" \
-e KUBECONFIG="${HOME}/setup/.kube/config" \
-e SOPS_AGE_KEY_FILE="${HOME}/setup/age.key" \
-e VERSION=${VERSION} \
623542229617.dkr.ecr.us-east-1.amazonaws.com/install-tools:${INSTALL_TOOLS_VERSION} \
/bin/bash --login- Extract the contents of the bundle
tar -xf k3s-on-prem-${VERSION}.tar- Run
make setupto generate newage.keyand.sops.yamlfiles
make setup- Run the wizard to configure your deployment (e.g. manifest-pilot)
./wizard configure <deployment-name>- Start the installation
./wizard start <deployment-name>Next Steps
After installation completes:
- Review the Configuration Reference for host and OIDC configuration options
- Complete the Post-Install steps to configure certificate trust
- If you encounter issues, see the Troubleshooting Guide
Updated 5 days ago