# Platform deployment

> **📝 Note**
>
> An LLM-optimized bundle of this entire section is available at [`section.md`](https://www.union.ai/docs/v2/flyte/oss-deployment/section.md).
> This single file contains all pages in this section, optimized for AI coding agent context.

This section covers how to deploy **Flyte** to your own Kubernetes cluster using the
`flyte-binary` Helm chart.

Flyte ships as a single unified binary that bundles the runs service, the
task/actions controller, the data proxy, and the app service, served alongside the
Flyte web console. You point it at three things you provision yourself — a Kubernetes
cluster, a PostgreSQL database, and an object store — and it runs as one Deployment
that you scale vertically.

Read these pages in order:

1. [Deployment overview](https://www.union.ai/docs/v2/flyte/oss-deployment/overview/page.md) — architecture and the external
   dependencies you need to provision.
2. [Kind deployment](https://www.union.ai/docs/v2/flyte/oss-deployment/kind-deployment/_index) — spin up the whole stack on a kind cluster
   (on your machine or a DigitalOcean cloud VM) for evaluation,
   including an optional self-contained authentication setup with
   [Dex](https://www.union.ai/docs/v2/flyte/oss-deployment/kind-deployment/local-oidc/page.md) (or an
   [external OIDC provider](https://www.union.ai/docs/v2/flyte/oss-deployment/kind-deployment/external-oidc/page.md)).
3. [AWS deployment](https://www.union.ai/docs/v2/flyte/oss-deployment/aws-deployment/page.md) — a minimal `values.yaml`, the `helm install`
   command, object-storage access, ingress, and a worked AWS/EKS example.
4. [Authentication and SSO](https://www.union.ai/docs/v2/flyte/oss-deployment/authentication/page.md) — securing the API and putting single
   sign-on in front of the console.
5. [Enable app serving](https://www.union.ai/docs/v2/flyte/oss-deployment/app-serving/page.md) — running long-running apps on Knative,
   including how to install the Knative Serving prerequisite.

## Subpages

- [Deployment overview](https://www.union.ai/docs/v2/flyte/oss-deployment/overview/page.md)
  - Architecture
  - Networking
  - External dependencies
  - Kubernetes cluster
  - Relational database
  - Object store
  - Optional dependencies
  - Ingress controller
  - DNS
  - SSL/TLS
  - Container images
- [Kind deployment](https://www.union.ai/docs/v2/flyte/oss-deployment/kind-deployment/page.md)
  - 1. Prerequisites
  - Local machine
  - DigitalOcean VM
  - 2. Create the kind cluster
  - 3. Deploy the dependencies
  - PostgreSQL
  - Object store
  - AWS S3
  - Cloudflare R2
  - 4. Write the values file
  - 5. Install Flyte
  - 6. Access Flyte
  - Local machine
  - DigitalOcean VM
  - Submitting runs from the SDK
  - 7. Add authentication with a local IdP (optional)
  - Install the ingress controller
  - Deploy Dex
  - Deploy oauth2-proxy
  - Create the ForwardAuth middleware
  - Create the Flyte ingress with the middleware
  - Local machine
  - DigitalOcean VM
  - Verify the browser flow
  - Letting the SDK/CLI authenticate (with auth enabled)
  - Troubleshooting
  - 8. Load a local image into kind (optional)
  - 9. Tear down
- [AWS deployment](https://www.union.ai/docs/v2/flyte/oss-deployment/aws-deployment/page.md)
  - 1. Add the Helm repository
  - 2. Write a values file
  - 3. Install
  - 4. Grant object-store access
  - 5. Expose Flyte with an ingress
  - 6. Verify the installation
  - 7. Tear down
  - Full Values File Example
  - Default task resources
  - Default scheduling for task pods
  - OpenTelemetry
  - Database password from a Secret
- [Authentication and SSO](https://www.union.ai/docs/v2/flyte/oss-deployment/authentication/page.md)
  - Advertise your identity provider
  - Enforce auth at the ingress
  - Single sign-on for the console at the ALB
  - Prerequisites
  - 1. Configure the OIDC app
  - 2. Create the client Secret
  - 3. Allow the LB controller to read the Secret
  - 4. Add the auth annotations
  - 5. Verify
  - Troubleshooting
  - Annotation reference
  - Run attribution (`executed_by`)
  - Behind a non-ALB proxy (oauth2-proxy / Traefik)
- [Enable app serving](https://www.union.ai/docs/v2/flyte/oss-deployment/app-serving/page.md)
  - How it works
  - Prerequisites
  - 1. Install Knative Serving and Kourier
  - 2. Configure the apps domain
  - 3. Expose Kourier
  - LoadBalancer (simplest)
  - AWS (ALB in front)
  - 4. Enable app serving in Flyte
  - 5. Verify
  - Troubleshooting

---
**Source**: https://github.com/unionai/unionai-docs/blob/main/content/oss-deployment/_index.md
**HTML**: https://www.union.ai/docs/v2/flyte/oss-deployment/