Prerequisites

Have these in place before installing.

cert-manager

The bundled PMIx admission webhook (kubepmix) is issued a TLS certificate via cert-manager Issuer and Certificate resources, so helm install fails if cert-manager is not present. Install it first:

kubectl apply -f https://github.com/cert-manager/cert-manager/releases/latest/download/cert-manager.yaml

If you do not need kubepmix, you can skip cert-manager by disabling it:

--set kubepmix.enabled=false

Kubernetes version

• 1.27 or later for the core stack.

• 1.33 or later if you use the Dynamic Resource Allocation driver, which relies on the DynamicResourceAllocation feature being available on the API server and kubelet.

Registry access

The component images are hosted on GitHub Container Registry (ghcr.io). Nodes must be able to pull from it, directly or through your mirror. Pods stuck in ImagePullBackOff indicate a registry-access gap. See Troubleshooting.

Host requirements for the driver

The Driver Manager builds tt-kmd against the running kernel on each target node, so nodes must have the matching kernel headers available. See the Driver Manager component page.