# Installation Guide

### Install the Subsalt CLI

The Subsalt CLI allows you to perform administrator operations on your instance.

{% tabs %}
{% tab title="Linux" %}
**arm64:**

<pre class="language-bash"><code class="lang-bash"><strong>wget https://subsalt-cli-public.s3.us-west-2.amazonaws.com/releases/latest/linux/arm64/subsalt.tar.gz &#x26;&#x26; \
</strong><strong>    tar -xvzf subsalt.tar.gz
</strong></code></pre>

**amd64:**

```bash
wget https://subsalt-cli-public.s3.us-west-2.amazonaws.com/releases/latest/linux/amd64/subsalt.tar.gz && \
    tar -xvzf subsalt.tar.gz
```

{% endtab %}

{% tab title="Mac" %}
**arm64:**

```bash
wget https://subsalt-cli-public.s3.us-west-2.amazonaws.com/releases/latest/darwin/arm64/subsalt.tar.gz && \
    tar -xvzf subsalt.tar.gz
```

**amd64:**

```bash
wget https://subsalt-cli-public.s3.us-west-2.amazonaws.com/releases/latest/darwin/amd64/subsalt.tar.gz && \
    tar -xvzf subsalt.tar.gz
```

{% endtab %}

{% tab title="Windows" %}
**arm64:**

```bash
wget https://subsalt-cli-public.s3.us-west-2.amazonaws.com/releases/latest/windows/arm64/subsalt.tar.gz && \
    tar -xvzf subsalt.tar.gz
```

**amd64:**

```bash
wget https://subsalt-cli-public.s3.us-west-2.amazonaws.com/releases/latest/windows/amd64/subsalt.tar.gz && \
    tar -xvzf subsalt.tar.gz
```

{% endtab %}
{% endtabs %}

### Create a cluster

Generate a Terraform template for your cluster by running:

```bash
$ subsalt generate-infrastructure
```

Follow the instructions provided by the CLI, including reviewing configuration values to confirm that they're accurate for your environment. It's important to configure `backend.tf` to target a bucket/storage account container that you have access to when running the terraform commands.

Create your cluster by running:

```wasm
$ terraform apply
```

{% hint style="warning" %}
Make sure you're authenticated into a cloud account with sufficient permissions in your terminal before running `terraform apply` .
{% endhint %}

### Configuring Subsalt team access

Subsalt support engineering needs access to your Kubernetes cluster in order to manage the instance.&#x20;

#### Azure guest accounts

This method provides "contributor" access to your Subsalt cluster for Subsalt's support engineering team, which will allow us to monitor system health and apply configuration changes or updates as needed.

To issue the invites:

1. Log in to the Azure portal
2. Navigate to **Users**
3. Click on the arrow to the left of **+ New User** and click **Invite external user**
4. Fill out the form for user `managed-support-eng@getsubsalt.com`
   1. No initial Groups or Roles are required to be assigned in this part of flow
5. Find the resource group with the name starting with **MC\_subsalt-cluster**
6. Assign the **Contributor** role on this resource group for the invited user
   1. You can do this in the **Access Control (IAM)** page for the resource group
   2. The **Contributor** role will be under **Privileged administrator roles**
7. Find the resource group with the name **subsalt-cluster**
8. Assign the **Contributor** role on this resource group for the invited user
   1. You can do this in the **Access Control (IAM)** page for the resource group
   2. The **Contributor** role will be under **Privileged administrator roles**