AcornOps has two deployment layers:Documentation Index
Fetch the complete documentation index at: https://docs.acornops.dev/llms.txt
Use this file to discover all available pages before exploring further.
- The central platform, which runs the management console, control plane, execution engine, and LLM gateway.
- A k8s agent in each workload cluster that AcornOps should observe or operate on.
1. Choose a platform target
Use Kubernetes for production-like installs. Use VM Compose when you want a smaller single-machine platform host for early operations testing.Kubernetes
Deploy the central platform with the
acornops-platform Helm chart.VM Compose
Deploy the central platform with Docker Compose on one VM.
2. Prepare public routes
For the default production hostnames, expose:| Surface | URL |
|---|---|
| Management console | https://console.acornops.dev/ |
| Public docs | https://docs.acornops.dev/ |
| Browser and control-plane API | https://acornops.dev/api/v1 |
| Agent WebSocket | wss://acornops.dev/api/v1/agent/connect |
/api to the control plane for browser session flows.
Execution engine and LLM gateway are internal services. Do not expose them through public ingress in production.
3. Prepare dependencies
Before deploying the central platform, prepare:- External Postgres for control-plane state and LLM-gateway state.
- External Redis for control-plane run/event coordination, execution-engine reservations, and gateway rate limits.
- OIDC client configuration for browser sign-in.
- LLM provider credentials for at least one enabled provider.
- TLS certificates and ingress for
acornops.devandconsole.acornops.dev. - A secret bundle for database URLs, Redis URLs, OIDC credentials, internal service tokens, and gateway secrets encryption.
4. Deploy the central platform
For Kubernetes, create the secret expected by the chart, then install the platform chart:5. Sign in and create a workspace
Openhttps://console.acornops.dev/ and sign in through your configured OIDC provider. If no workspace exists for your account, the management console should prompt you to create one.
A workspace groups:
- members and roles,
- workload clusters,
- tool and MCP server settings,
- troubleshooting sessions and run history,
- webhook subscriptions.
6. Register a workload cluster
In the workspace, register a cluster. The control plane returns:- the cluster record,
- an agent key,
- generated install instructions.
7. Verify the connection
After the k8s agent starts, verify that the cluster shows as connected in the management console. A healthy connected cluster should report snapshots with resources, events, and metrics when the cluster metrics API is available. You can then:- review cluster inventory and findings,
- inspect pod logs when your role allows it,
- configure tool availability,
- add remote MCP servers,
- start a read-only or read-write troubleshooting session based on your workspace role.