Self-hosting Muster
Operate your own Muster aggregator. Deploy the Helm charts, protect the endpoint with OAuth and Dex, and bridge single sign-on across multiple management clusters.
Applies to self-hosted Muster only. These guides are for teams who operate their own Muster aggregator. On the managed Giant Swarm platform, Muster is deployed and protected for you, so you can skip this section and go straight to the operational guides such as managing MCP servers and authoring workflows.
There are two self-hosting tracks. This section covers running just the MCP gateway: Muster, its OAuth protection, and multi-cluster single sign-on, assembled piece by piece. If you want the whole Agent Platform (the gateway plus agentgateway, the agent runtime, and the developer portal), install it with one Helm chart instead: Install the Agent Platform on your own cluster.
If you run Muster yourself, these guides take you from an empty cluster to a single-sign-on-protected endpoint that an entire fleet can reach.
In this section
- Deploy Muster: install the CRD and application Helm charts and run the aggregator in custom-resource discovery mode.
- Set up OAuth: protect the endpoint with Dex and configure the proxy that authenticates to downstream servers.
- Multi-cluster token exchange: bridge single sign-on to remote management clusters with RFC 8693.