Deployment
Prerequisites
What your environment needs before installing the initializ AI Platform.
Have the following in place before installation. Each item is a requirement — the concrete setup steps for your choices are covered in the onboarding runbook.
Kubernetes cluster
- A cluster you administer, with permission to create namespaces, deployments, services, network policies, and secrets.
- A load balancer or gateway capable of terminating HTTPS for the platform's hostnames.
DNS and TLS
- A DNS domain (or subdomain) for the platform's hostnames — the console and the platform API each get one.
- A TLS certificate covering those hostnames (a wildcard certificate for the chosen subdomain is the simplest option).
Identity provider (OIDC)
- An OIDC-compliant identity provider — Okta is a verified choice —
with:
- a confidential (server-side) client for the console, and
- access tokens that carry the user's email claim (the platform keys access on verified email).
- Users are authenticated by your IdP; platform roles are granted inside the platform by an organization admin.
Database
- A MongoDB-compatible database reachable from the cluster. MongoDB and Amazon DocumentDB are supported; DocumentDB deployments have specific connection-string requirements covered during onboarding.
Container registry
- An OCI registry the cluster can pull from, used for the agent images the platform builds. Amazon ECR is supported with IAM-based (credential-less) access; any registry with push/pull credentials also works.
LLM endpoint
- An OpenAI-compatible endpoint reachable from the cluster for agents and platform AI features: a model gateway you operate (for example Kong), a provider's API directly, or a managed gateway provided with the platform.
- If your cluster restricts egress, allow outbound access to the endpoint you choose.
Optional integrations
- Slack — a Slack app (bot + app-level tokens) if you want agents reachable in Slack or Slack-based approval flows.