Ankra guide

Moyai on-prem · 3 November 2026

For sites connected to Ankra: the same stacks Moyai runs in production, installed in order from Git and kept in sync. The agent only dials out, so the site can sit behind a firewall.

1. Connect the cluster

In Ankra, Clusters → Import, then run the helm command it shows. Allow outbound HTTPS to platform.ankra.app.

2. Install the dependencies from Moyai's profiles

ankra stack-profiles apply moyai-postgres-operator --cluster acme-prod --deploy
ankra stack-profiles apply moyai-monitoring        --cluster acme-prod --deploy
ankra stack-profiles apply moyai-data              --cluster acme-prod --set-file <secret>=<file>

Moyai makes these from its production stacks and shares them once: Profile & share.

3. Install Moyai

ankra helm credentials create --name moyai-registry --username 'robot$<project>+user-acme-prod'

spec:
  helm_registries:
    - name: moyai
      url: oci://registry.ankra.cloud/org-f9c93374-f280-4cbd-bb46-56458301b9ef
      credential_name: moyai-registry
  stacks:
    - name: moyai
      deploy_wave: 4
      addons:
        - name: easterisland
          chart_name: easterisland
          chart_version: <release from Moyai>
          registry_name: moyai
          namespace: easterisland-system

ankra cluster apply -f cluster.yaml

Secrets go in the same stack, sealed with ankra cluster encrypt. Upgrading Moyai is a one-line chart_version change.