1. Docs
  2. Tutorials
  3. AI agents
  4. Self-hosting

Self-hosting Muster

Operate your own Muster aggregator. Deploy the Helm charts, protect the endpoint with OAuth and Dex, and bridge single sign-on across multiple management clusters.

Applies to self-hosted Muster only. These guides are for teams who operate their own Muster aggregator. On the managed Giant Swarm platform, Muster is deployed and protected for you, so you can skip this section and go straight to the operational guides such as managing MCP servers and authoring workflows.

If you run Muster yourself, these guides take you from an empty cluster to a single-sign-on-protected endpoint that an entire fleet can reach.

In this section

  • Deploy Muster: install the CRD and application Helm charts and run the aggregator in custom-resource discovery mode.
  • Set up OAuth: protect the endpoint with Dex and configure the proxy that authenticates to downstream servers.
  • Multi-cluster token exchange: bridge single sign-on to remote management clusters with RFC 8693.
  • Deploy Muster
    Install the CRD and application Helm charts for Muster on a management cluster, and run the aggregator in custom-resource discovery mode.
  • Set up OAuth for Muster
    Protect the Muster endpoint with OAuth and Dex, configure the proxy that authenticates to downstream servers, and handle large enterprise tokens.
  • Multi-cluster token exchange
    Compare the single-cluster and central deployment shapes, set up RFC 8693 token exchange to remote management clusters, and grant the kubeconfig access each needs.