Prerequisites

UMKIM requires a Rocky Linux 10 hub host, a non-root operator account with passwordless sudo, private management connectivity for cluster enrollment, and control of the intended DNS and firewall boundaries. Workload nodes for join are Rocky Linux 10 as well.

Prepare the release checkout

Harbor fleet image builds use this checkout only. Sibling service-provider repositories are not required for hub install or cluster join.

sudo dnf install -y ansible-core git python3-pip python3-libselinux \
  httpd-tools podman containernetworking-plugins
pip install netaddr

git clone https://github.com/rborso/umkim.git <workspace>/umkim
cd <workspace>/umkim
ansible-galaxy collection install -r requirements.yml

Hub host sizing and ports

Roughly 4+ vCPU, 8+ GiB RAM, and 100+ GiB disk. Public IPv4 with WAN TCP 22/80/443 and UDP 51820 (WireGuard). DNS and firewall control for intended public application endpoints.

Inventory bootstrap

Start from the hub-only inventory template; never publish or reuse a filled-in inventory.

./scripts/bootstrap-hub-inventory.sh
./scripts/preflight-hub-inventory.sh

Edit the generated inventory and replace every template value before continuing. The hub-only template is documented in examples/inventory/hub-only/.

Use the release checkout’s version guidance for component pins. Do not copy commit IDs from documentation.