Skip to main content
Version: Spectra Detect 5.5.1

Installing multiple Spectra Detect worker groups in the same Kubernetes cluster

You can install multiple Spectra Detect Worker releases (instances of a Helm chart) in the same cluster and connect them to the same Spectra Detect Manager. Each Worker release should be installed in a separate Kubernetes namespace, which will represent a Spectra Detect configuration group.

By default, a Spectra Detect worker connects to the Spectra Detect Manager in the same namespace. When a Spectra Detect worker is installed in a separate namespace, it connects to the Spectra Detect Manager by setting the values c1000.releaseName and c1000.releaseNamespace during chart installation:

  • c1000.releaseName: Spectra Detect Manager release name (default is "c1000").
  • c1000.releaseNamespace: Spectra Detect Manager release namespace. The default is the same namespace as tiscale-worker.

Values c1000.releaseName and c1000.releaseNamespace are stored as Pod annotations:

spec:
  template:
    metadata:
      annotations:
        c1000/c1000-release-name: "c1000"
        c1000/c1000-release-namespace: "c1000"

Associating a Worker with Spectra Detect manager​

In this example, the Spectra Detect manager release named c1000 is installed in the namespace c1000:

helm install c1000 oci://<registry>/<path>/c1000 \
  --namespace c1000

To connect a Worker chart installed in the group1 namespace to the Spectra Detect Manager release c1000 in the c1000 namespace, run:

helm upgrade --install worker oci://<registry>/<path>/tiscale-worker \
  --set "ingress.enabled=true" \
  --set c1000.releaseName=c1000 \
  --set c1000.releaseNamespace=c1000 \
  --namespace group1

Once the pods are up and running, they appear on the Spectra Detect Manager dashboard.

You can also add a Hub to the group:

helm upgrade --install tiscale-hub oci://<registry>/<path>/tiscale-hub \
  --set c1000.releaseName=c1000 \
  --set c1000.releaseNamespace=c1000 \
  --namespace group1

Associating Workers with Groups​

Once the Worker (or Hub) releases are installed in the appropriate namespace, create a group in Spectra Detect Manager to automatically associate them with that group.