Installation Checklist

Step-by-step checklist to track installation progress
You're viewing a development version of manager, the latest released version is v1.4.1

Page not available in that version

The current page Installation Checklist doesn't exist in version v1.4.1 of the documentation for this product.
We can take you to the closest parent section instead: /docs/acd/components/manager/v1.4.1/installation/

Overview

Use this checklist to track your installation progress. Print this page or keep it open during your installation to ensure all steps are completed correctly.

Pre-Installation

Hardware and Software

  • Verify hardware meets System Requirements
  • Confirm operating system is supported (RHEL 9 or compatible clone)
  • Configure firewall rules between nodes (details)
  • Apply recommended sysctl settings (details)
  • Obtain installation ISO (esb3027-acd-manager-X.Y.Z.iso)

Air-Gapped Deployments

  • Obtain Extras ISO (esb3027-acd-manager-extras-X.Y.Z.iso)
  • Mount OS ISO on all nodes before installation
  • Verify OS packages are accessible from mounted ISO

Special Requirements

  • Oracle Linux UEK: Install kernel-uek-modules-extra-netfilter-$(uname -r) package
  • Control Plane Only nodes: Set SKIP_REQUIREMENTS_CHECK=1 if below lab minimums
  • SELinux: Set to “Enforcing” mode before running installer (cannot enable after)

Cluster Installation

Single-Node Deployment

Follow the Single-Node Installation Guide.

  • Mount installation ISO (Step 1)
  • Install the base cluster (Step 2)
  • Verify cluster status (Step 3)
  • Air-gapped only: Load container images (Step 4)
  • Create configuration file (Step 5)
  • Optional: Load MaxMind GeoIP databases (Step 6)
  • Deploy the Manager Helm chart (Step 7)
  • Verify deployment (Step 8)

Multi-Node Deployment

Follow the Multi-Node Installation Guide.

Primary Server Node

  • Mount installation ISO (Step 1)
  • Install the base cluster (Step 2)
  • Verify system pods are running (Step 2)
  • Retrieve the node token (Step 3)

Additional Server Nodes

  • Mount installation ISO (Step 5)
  • Join the cluster (Step 5)
  • Verify each node joins (Step 5)
  • Optional: Taint Control Plane Only nodes (Step 5b)

Agent Nodes (Optional)

  • Mount installation ISO (Step 6)
  • Join the cluster as an agent (Step 6)
  • Verify each agent joins (Step 6)

Cluster Verification

  • Verify all nodes are ready (Step 7)
  • Verify system pods running on all nodes (Step 7)
  • Air-gapped only: Load container images on each node (Step 9)

Application Deployment

  • Create configuration file (Step 10)
  • Optional: Load MaxMind GeoIP databases (Step 11)
  • Optional: Configure TLS certificates from trusted CA (Step 12)
  • Deploy the Manager Helm chart (Step 13)
  • Verify all pods are running and distributed (Step 14)
  • Configure DNS records for manager hostname (Step 15)

Post-Installation

Initial Access

  • Access the system via HTTPS
  • Accept self-signed certificate warning (if using default certificate)
  • Log in with default credentials (see Glossary)

Security Configuration

  • Create new administrator account in Zitadel
  • Delete or secure the default admin account
  • Configure additional users and permissions
  • Review Zitadel Administrator Documentation for role assignments

Monitoring and Operations

  • Access Grafana dashboards at /grafana
  • Review pre-built monitoring dashboards
  • Configure alerting rules (optional)
  • Set up notification channels (optional)

Next Steps

  • Review Next Steps Guide for additional configuration
  • Configure CDN routing rules
  • Set up GeoIP-based routing (if using MaxMind databases)
  • Review Operations Guide for day-to-day procedures

Troubleshooting

If you encounter issues during installation:

  1. Check pod status: kubectl describe pod <pod-name>
  2. Review logs: kubectl logs <pod-name>
  3. Check cluster events: kubectl get events --sort-by='.lastTimestamp'
  4. Review the Troubleshooting Guide for common issues