Installation Guide

Install the Subsalt CLI

The Subsalt CLI allows you to perform administrator operations on your instance.

Linux

arm64:

wget https://subsalt-cli-public.s3.us-west-2.amazonaws.com/releases/latest/linux/arm64/subsalt.tar.gz && \
    tar -xvzf subsalt.tar.gz

amd64:

wget https://subsalt-cli-public.s3.us-west-2.amazonaws.com/releases/latest/linux/amd64/subsalt.tar.gz && \
    tar -xvzf subsalt.tar.gz

Mac

arm64:

wget https://subsalt-cli-public.s3.us-west-2.amazonaws.com/releases/latest/darwin/arm64/subsalt.tar.gz && \
    tar -xvzf subsalt.tar.gz

amd64:

wget https://subsalt-cli-public.s3.us-west-2.amazonaws.com/releases/latest/darwin/amd64/subsalt.tar.gz && \
    tar -xvzf subsalt.tar.gz

Windows

arm64:

wget https://subsalt-cli-public.s3.us-west-2.amazonaws.com/releases/latest/windows/arm64/subsalt.tar.gz && \
    tar -xvzf subsalt.tar.gz

amd64:

wget https://subsalt-cli-public.s3.us-west-2.amazonaws.com/releases/latest/windows/amd64/subsalt.tar.gz && \
    tar -xvzf subsalt.tar.gz

Create a cluster

Generate a Terraform template for your cluster by running:

$ subsalt generate-infrastructure

Follow the instructions provided by the CLI, including reviewing configuration values to confirm that they're accurate for your environment. It's important to configure backend.tf to target a bucket/storage account container that you have access to when running the terraform commands.

Create your cluster by running:

$ terraform apply

Make sure you're authenticated into a cloud account with sufficient permissions in your terminal before running terraform apply .

Configuring Subsalt team access

Subsalt support engineering needs access to your Kubernetes cluster in order to manage the instance.

Azure guest accounts

This method provides "contributor" access to your Subsalt cluster for Subsalt's support engineering team, which will allow us to monitor system health and apply configuration changes or updates as needed.

To issue the invites:

1. Log in to the Azure portal

2. Navigate to Users

3. Click on the arrow to the left of + New User and click Invite external user

4. Fill out the form for user [email protected]

   1. No initial Groups or Roles are required to be assigned in this part of flow

5. Find the resource group with the name starting with MC_subsalt-cluster

6. Assign the Contributor role on this resource group for the invited user

   1. You can do this in the Access Control (IAM) page for the resource group

   2. The Contributor role will be under Privileged administrator roles

7. Find the resource group with the name subsalt-cluster

8. Assign the Contributor role on this resource group for the invited user

   1. You can do this in the Access Control (IAM) page for the resource group

   2. The Contributor role will be under Privileged administrator roles