PoT v3.8.0 uses embedded OIDC by default. You do not need Keycloak or an external IdP for a greenfield deploy. Set auth.mode: embedded and bootstrap credentials in your Control Plane YAML before you deploy.
Download and install potctl from the potctl download page before continuing.
Try the Quick Start Guide before this guide. It covers the same potctl workflows on a single machine.
Introduction
An Edge Compute Network (ECN) has two main parts: a Control Plane (Controller, Router, optional NATS) and Edgelet nodes at the edge.
potctl deploys and manages both from YAML manifests. This guide walks through a distributed ECN on remote hosts or a Kubernetes cluster.
For architecture context, see PoT Architecture.
Deployment pathâ
Follow these steps in order:
- Embedded OIDC - Set
auth.mode: embeddedand bootstrap credentials in your Control Plane YAML. For a corporate IdP, see External OIDC. - Prepare your network - Open firewall ports for Controller, Router, NATS, and EdgeOps Console.
- Prepare remote hosts - SSH keys and passwordless sudo for potctl.
- Deploy the Control Plane - Choose remote or Kubernetes (potctl or Helm).
- Setup Edgelet nodes - Install Edgelet v1.0.0 on edge hosts.
Deployment optionsâ
Remote Control Planeâ
Deploy the Controller on one or more Linux hosts over SSH. Prepare the Controller host and each Edgelet node host. See Remote Control Plane.
Kubernetes Control Planeâ
Deploy the Controller, Operator, Router, and NATS on a Kubernetes cluster. You only need remote hosts for Edgelet nodes. Start at Kubernetes - Prepare A Cluster.
Air-gapped networksâ
For hosts that cannot reach the internet or container registries, see Airgap Deployment. That page covers Edgelet image bundles, multi-arch offline transfer, and OfflineImage for microservice images.
Start with Embedded OIDC Authentication, then Prepare your network.