ContainerImage.Pinniped/site/content/docs/howto/install-concierge.md

title	description	cascade	menu
Install the Pinniped Concierge	Install the Pinniped Concierge service in a Kubernetes cluster.	layout docs	docs name weight parent Install Concierge 20 howtos

This guide shows you how to install the Pinniped Concierge. You should have a [supported Kubernetes cluster]({{< ref "../reference/supported-clusters" >}}).

With default options

1. Install the latest version of the Concierge into the pinniped-concierge namespace with default options:

   • kubectl apply -f https://get.pinniped.dev/latest/install-pinniped-concierge.yaml

Warning: the default configuration may create a public LoadBalancer Service on your cluster.

With specific version and default options

1. Choose your preferred release version number and use it to replace the version number in the URL below.

2. Install the Concierge into the pinniped-concierge namespace with default options:

   • kubectl apply -f https://get.pinniped.dev/v0.9.0/install-pinniped-concierge.yaml

     Replace v0.9.0 with your preferred version number.

With custom options

Pinniped uses ytt from Carvel as a templating system.

1. Install the ytt command-line tool using the instructions from the Carvel documentation.

2. Clone the Pinniped GitHub repository and visit the deploy/concierge directory:

   • git clone git@github.com:vmware-tanzu/pinniped.git
   • cd pinniped/deploy/concierge

3. Customize configuration parameters:

   • Edit values.yaml with your custom values.
   • See the default values for documentation about individual configuration parameters.

4. Render templated YAML manifests:

   • ytt --file .

5. Deploy the templated YAML manifests:

   • If you're using kubectl:

     ytt --file . | kubectl apply -f -

   • If you're using kapp from Carvel:

     ytt --file . | kapp deploy --yes --app pinniped-concierge --diff-changes --file -

Next, configure the Concierge for [JWT]({{< ref "configure-concierge-jwt.md" >}}) or [webhook]({{< ref "configure-concierge-webhook.md" >}}) authentication.