Skip to content

Self-Hosting

Deploy Dreadnode on your own infrastructure with a Replicated enterprise license.

Dreadnode ships as a Helm chart distributed through the Replicated vendor platform. You install it on your own Kubernetes cluster or on a fresh VM — the platform, data stores, and sandbox runtime all run inside your infrastructure.

The platform control plane launches portable runtimes — managed cluster sandboxes, the operator TUI, or remote-deployed — which reach targets through their tools. In an air-gapped deployment, platform, runtimes, and targets all sit inside your enclave.

The work splits into six phases. The middle three matter most, because each one is a different plane — a setting changed on one plane does not change the others.

PhaseWhat it coversWhere the change lands
PlanTopology, ports, network requirements, install-path choiceNothing yet
InstallGetting a running clusterYour cluster
Set upRun-once steps after pods are ReadyMixed — mostly in-product
ConfigureDomain, TLS, data stores, sandboxes, auth, loggingHelm values, Admin Console, or KOTS ConfigValues; restarts pods
AdministerModel deployments, credentials, users, organizations, signup rulesThe running product; no redeploy
OperateHealth, backups, rotation, scaling, upgrades, troubleshootingDay-2 runbooks

Read that table as the answer to “where does this setting live?” — the question that costs operators the most time. Configure is declarative and rolls pods. Administer is in-product and takes effect immediately. Operate is what you do to a deployment that is already correct.

Start here if a security review or a network change has to happen before the install does.

Helm CLI is the right choice when you already run Kubernetes and manage your own ingress controller, DNS, and TLS. You pull the chart from the Replicated registry, pass a values overlay, and run helm install.

Embedded Cluster is the right choice when you want a single VM with everything bundled — k0s, Traefik, storage, and the Admin Console for configuration and updates. One curl, one install command, done.

Both paths use the same chart and produce the same running platform. The difference is who manages the cluster: you (Helm) or the installer (Embedded Cluster). Both require two DNS records, and for HTTPS, a certificate covering the main Dreadnode hostname and its storage subdomain.

Pods running is not a finished install. These steps run once, and are identical on both install paths.

Use a Helm values overlay, Admin Console fields, or a KOTS ConfigValues file. Changing any of these rolls pods. The configuration tabs stay synchronized as you move between pages.

In-product settings under Admin. They take effect on the running platform — no chart change, no redeploy, same on both install paths.