Prerequisites

Standard deployments require a cluster of three nodes. Each node serves as both a controlling node and a worker node. Minimum hardware requirements for each node in the cluster are:

An open-source relational database. Download the latest version at https://mariadb.com/kb/en/what-is-mariadb-106/.

Internet access is required during installation. If your servers require a proxy to reach the internet, they will need to be configured in three different places:

You must have access to these URLs from DigiCert ONE:

A client workstation is required to install, configure, and deploy applications on the target virtual machines.

We recommend using Linux, though MacOS Mojave is supported.

To install, configure, and deploy applications on a Kubernetes cluster, you must install three client tools on the client computer. Download the appropriate tools for the chosen client workstation platform.

Kubernetes

A command-line tool for running commands against Kubernetes clusters.

Helm

A command-line tool for installing applications in Kubernetes clusters.

Rancher Kubernetes Engine (RKE)

Command line tool for installing Rancher Kubernetes Engine (RKE): Each version of RKE has a specific list of supported Kubernetes versions. Use the version that supports Kubernetes version <= 1.21.x

For all DigiCert ONE configurations, you must open these ports:

Other ports you need to open depend on how you have configured RKE, MariaDB, and other DigiCert ONE dependencies. For more information, refer to the product documentation for these services.

This table describes the DNS entries you need to configure to allow access to DigiCert ONE services.

All DNS entries^* should be set to be either external (if your instance of DigiCert ONE is meant to be publicly available on the internet) or internal (if you are installing DigiCert ONE is an isolated, air-gapped network).