Install SeekrFlow

Install SeekrFlow from its chart, using the values file you prepared. Before you start, finish the steps in Prepare to install. Your values file must be complete, and its secrets and databases must exist.

Kustomize isn’t supported. Install and upgrade SeekrFlow with Helm or sfe directly. Applying the chart through Kustomize can cause SeekrFlow to delete its own resources.

With the sfe CLI
Without the sfe CLI

Run preflight

sfe preflight -p <profile-name> -r <version>

Preflight checks that your cluster and cloud resources are ready, such as cloud identity, storage, secrets, PostgreSQL, OpenSearch, and GPUs. sfe install doesn’t run it for you.If SeekrFlow creates its own ingress on Amazon Web Services (AWS), the dns check fails on a first install. You create that Domain Name System (DNS) record after install, once the load balancer exists. Checks that can’t run before install, such as storage and models, show as skipped. Fix any other failure before you continue.

Install

sfe install -p <profile-name> -r <version>

sfe downloads the chart for the release and installs it. To see what it would install without changing anything, add --dry-run.

Let the catalog sync pull its image

SeekrFlow loads its model catalog with a job that runs as the seekrflow-operator service account. That service account doesn’t get your image pull secret. Add it:

kubectl patch serviceaccount seekrflow-operator -n seekrflow \
  -p '{"imagePullSecrets":[{"name":"seekrflow-artifacts-pull-access"}]}'

If the seekrflow-model-sync pod already shows ImagePullBackOff, delete the job and restart the operator, which runs the job again:

kubectl delete job seekrflow-model-sync -n seekrflow
kubectl rollout restart deployment/seekrflow-operator -n seekrflow

Use this path if you’re experienced with Helm and Kubernetes, and you’re building your own automation.

Download the chart

If you pulled the chart when you created the values file, skip this step.Sign in to Seekr’s registry:

echo "$REGISTRY_PASSWORD" | helm registry login seekr.repo.sonatype.app \
  --username "$REGISTRY_USERNAME" \
  --password-stdin

Pull the chart and unpack it:

helm pull oci://seekr.repo.sonatype.app/seekr-docker-release/seekr/flow-helm-chart --version <version>
tar -xzf flow-helm-chart-<version>.tgz

Install

From the folder that contains the unpacked chart, run:

helm install seekrflow flow-helm-chart --namespace seekrflow -f my-values.yaml

Helm reports the release as deployed. If the install fails, fix the values file and run helm upgrade --install with the same options.

Let the catalog sync pull its image

SeekrFlow loads its model catalog with a job that runs as the seekrflow-operator service account. That service account doesn’t get your image pull secret. Add it:

kubectl patch serviceaccount seekrflow-operator -n seekrflow \
  -p '{"imagePullSecrets":[{"name":"seekrflow-artifacts-pull-access"}]}'

If the seekrflow-model-sync pod already shows ImagePullBackOff, delete the job and restart the operator, which runs the job again:

kubectl delete job seekrflow-model-sync -n seekrflow
kubectl rollout restart deployment/seekrflow-operator -n seekrflow

SeekrFlow Self-Managed

Plan a SeekrFlow deployment

Provision SeekrFlow dependencies

Prepare to install SeekrFlow

Deploy SeekrFlow

Operate SeekrFlow

Reference