Cluster Profile Variables
When you deploy the cluster from Local UI, the Profile Config step opens a PaletteAI Inference Launchpad custom
wizard that collects the settings the platform packs need in order to install correctly on your hardware and network.
This page documents every variable the wizard collects, in six sections, in the order the wizard presents them.
For the step-by-step procedure, refer to
Install the Appliance.
| Variable | Type | Required | Default | Description |
|---|
| Pod Network Range | IPv4 CIDR | Yes | 100.64.0.0/18 | Kubernetes pod network CIDR. Read-only after day 1. Pick a range that will not collide with your existing network. |
| Service Network Range | IPv4 CIDR | Yes | 100.64.64.0/18 | Kubernetes ClusterIP service CIDR. Read-only after day 1. Must not overlap the Pod Network Range or your existing network. |
| Platform IP Address | IPv4 | Yes | — | Single IPv4 address (not a range or CIDR) that MetalLB assigns to Traefik; the console and API are reached at it. Must be in the same subnet as the Cilium and MetalLB interface and must not overlap the node's management IP or any other address in use. |
| Cilium and MetalLB interface | string | Yes | — | Host NIC that Cilium and MetalLB use to advertise the Platform IP Address on the local network. Select the bond that carries the node's management IP. |
| Variable | Type | Required | Default | Description |
|---|
| System Reserved CPU Cores | string | Yes | 0-1 | Range of CPU cores Kubelet reserves for the operating system (--reserved-cpus). Validated against the regex \d-\d, so only single-digit endpoints are accepted. |
| Maximum Pods per Node | number | Yes | 110 | Kubelet --max-pods setting. |
| Metrics Retention Period | string | Optional | 30d | How long Victoria Metrics keeps time-series data. |
| Metrics Storage Size | string | Optional | 20Gi | Size of the persistent volume Victoria Metrics uses for retained metrics. Increase in step with the retention period. |
| Variable | Type | Required | Default | Description |
|---|
| Registry Username | string | Yes | admin | Username for the on-cluster Zot registry that hosts platform and application images. |
| Registry Password | string (sensitive) | Yes | — | Password for the Zot registry account. Must satisfy the password complexity requirements. |
| Variable | Type | Required | Default | Description |
|---|
| Local Admin Username | string | Yes | admin | Administrator username shared by the appliance console and the Grafana dashboard. |
| Local Admin Password | string (sensitive) | Yes | — | Administrator password shared by the appliance console and Grafana. Must satisfy the password complexity requirements. |
| Variable | Type | Required | Default | Description |
|---|
| Storage Replica Count | string | Optional | 1 | Number of Piraeus replicas kept for each stored volume. Allowed values are 1, 2, or 3. Values above 1 require a matching number of nodes in the cluster, so a single-node install must use 1. |
The appliance needs a certificate authority (CA) for its OIDC endpoint. Each certificate field offers two options:
- Generate. Select Generate and the wizard creates a self-signed certificate and fills in the field for you. Use
this for internal or lab deployments, where a browser trust warning is acceptable.
- Provide. Paste your own base64-encoded CA certificate and its private key. Use this in production, where you want
the appliance certificates signed by your organization's CA so clients trust them without an exception.
| Variable | Type | Required | Default | Description |
|---|
| OIDC CA cert | base64 | Yes | — | Base64-encoded CA certificate. Provide your own, or select Generate for a self-signed one. |
| OIDC CA key | base64 | Yes | — | Base64-encoded private key that pairs with the OIDC CA cert. The wizard fills this in when you select Generate. |
The Registry Password and Local Admin Password must both satisfy all of the following (rules inherited from
PVM-723):
- Between 15 and 64 characters long.
- At least 1 uppercase letter.
- At least 1 lowercase letter.
- At least 1 digit.
- At least 1 special character.
- Must not contain a double quote (
"), single quote ('), backslash (\), or any whitespace.