Enterprise guide library
On this page
ClusterPilot Enterprise documentation
Install, validate and operate ClusterPilot in your own environment. Follow task-based guides with prerequisites, commands, expected results and recovery checks.
61 technical guidesRelease-specific references · reviewed source 9552586
Start with a task
Evaluate the platform
Check architecture, supported profiles and acceptance criteria before choosing a deployment.
Install and verify
Prepare trust, storage and networking, choose Helm or Compose, then validate administrator and agent access.
Create a first cluster
Configure your provider, review the plan and prove the result in a disposable environment.
Operate and recover
Follow lifecycle changes, inspect failures and verify recovery rather than assuming a backup is sufficient.
Operating responsibilities
| Area | Enterprise Self-Hosted | Start here |
|---|---|---|
| Deployment | Your environment, network, storage, registry and trust configuration. | Installation |
| Identity and security | Your administrators manage access, secrets and operating policies. | Security |
| Lifecycle and recovery | Review supported operations and verify acceptance and recovery in your environment. | Cluster lifecycle |
Use the support matrix and the reviewed source shown on each article. A documented capability does not imply a managed Cloud service, SLA or support commitment for every configuration.
Documentation library
Evaluate
5 guidesPlatform overviewWhat ClusterPilot does and how the operating model fits together.→Product tourFollow provider onboarding, infrastructure, Kubernetes Core, add-ons, operations and evidence.→ArchitectureControl plane, persistence, provider adapters, agent boundary and evidence flow.→Enterprise evaluationA bounded proof with measurable platform, security and operations outcomes.→Support matrixDeployment, operating system, Kubernetes, tools, providers and add-ons.→
Install
8 guidesInstallation overviewChoose a deployment profile and prepare the customer environment.→System requirementsCompute, OS, data, storage, registry, trust, time and target-node prerequisites.→Sizing & capacitySingle-node, split and HA-ready resource envelopes and capacity signals.→Network, ports & trustRequired flows, default ports, TLS, allow-lists and firewall validation.→Install with HelmDeploy on Kubernetes with external PostgreSQL and durable artifacts.→Install with ComposeRun the release-owned single-node profile on Linux.→First login & bootstrapCreate the first administrator and establish the identity boundary.→Install the agentPlace, trust, bootstrap, verify and upgrade the lifecycle agent.→
First success
5 guidesConfigure a providerSelect by maturity, enter write-only credentials, validate and discover.→Hetzner CloudConfigure the strongest v0.0.5 provider path and its constraints.→Create the first clusterReview prerequisites and plan, then follow the OperationRun.→UI walkthroughFind the main workflows and verify each screen safely.→Customer-zero acceptanceProve install, lifecycle, add-on, Sonobuoy and restore end to end.→
Operate
6 guidesOperationRunsPlans, steps, events, logs, artifacts, cancellation, retry and recovery.→Cloud providersMaturity, credential boundaries, discovery, quotas and resilience.→IONOS providerIONOS network, VDC, LAN and VXLAN lifecycle workflow.→Cluster lifecycleCreate, prepare, scale, upgrade, replace, inspect and delete.→Drift & reconcileDesired state, observed state, drift classification and guarded convergence.→Kubernetes operationsCluster inventory, diagnostics, logs and day-to-day operations.→
Services & validation
21 guidesBuilt-in add-onsCatalog, locks, preflight, installation, health and dependencies.→Argo CDGitOps application delivery add-on.→cert-managerCertificate issuance and renewal add-on.→FluxGitOps controllers and automation add-on.→GatekeeperOPA admission policy add-on.→GrafanaMetrics and dashboard visualization add-on.→HarborPrivate registry, promotion and scanning add-on.→ingress-nginxNGINX ingress controller add-on.→KyvernoKubernetes-native policy add-on.→LokiCluster log aggregation add-on.→OpenSearchSearch, analytics and dashboards add-on.→PrometheusMetrics and alerting add-on.→Rook CephOperator-managed cluster storage add-on.→TraefikTraefik ingress controller add-on.→VeleroKubernetes backup add-on.→Generic HelmValidated operator-supplied Helm add-on.→Generic manifestValidated operator-supplied manifest bundle.→Generic operatorValidated operator-supplied operator bundle.→Custom add-onsHelm, OCI, Git/Kustomize, manifest and upload workflows.→Dashboard accessDirect and brokered access posture, sessions and diagnostics.→Conformance validationSonobuoy modes, admission, execution, evidence and cleanup.→
Administer
11 guidesUsers, teams & RBACRoles, memberships, sessions and machine identities.→Configuration modelProfiles, secret references, storage, leader election and feature flags.→Helm values referenceSearch every schema-backed chart setting.→Security modelTrust, authentication, authorization, secrets, audit and safe failure.→Registry & air gapDigest locks, Harbor, private CA and disconnected distribution.→Backup & restoreProtect PostgreSQL, artifacts, release metadata and master key.→Upgrade & rollbackPreflight, compatibility, signed rollout, rollback and restore.→Observability & supportHealth, metrics, logs, evidence, correlation and support bundles.→Operator runbooksSymptom-first routing and stop conditions.→TroubleshootingCommon symptoms, stable codes and safe recovery actions.→Support handoffBuild a complete secret-safe escalation case.→
Reference
5 guidesAPI & automationHeadless principles, authentication, idempotency and endpoint families.→API endpoint catalogSearch routes, permissions, purpose and mutation posture.→Error code catalogSearch stable codes, meaning and safe next action.→Source build & validationReproduce maintainer and independent validation gates without treating them as customer installation steps.→Upstream referencesAuthoritative Kubernetes, Helm, Sonobuoy, PostgreSQL, Harbor and provider sources.→
Support and technical evaluation
For a bounded technical evaluation, agree environment, responsibilities, deliverables and acceptance criteria using the separate evaluation offer. For an incident, include release, affected operation, time, expected and observed result, and redacted diagnostics. Never send tokens, passwords or private keys.