Prerequisites

Outbound connectivity— Your system instance must always have access to the following internet services for the proper functioning of Lightup. You should modify your firewall rules if you cannot access any of these services.

Service	Domains to whitelist
Linux package repositories (apt/yum repositories): For support packages needed on the VM host environment.	One of the following, depending on which Linux version you install: - .fedoraproject.org (yum/dnf Repositories— enables RHEL/Fedora System Update Packages) - .ubuntu.com (apt Repositories— enables Ubuntu System Update Packages)
Replicated (replicated.com): Lightup application software is packaged and licensed using Replicated. The application bundle (Kubernetes binaries, Docker containers, license file) are pulled from Replicated during the installation sequence and subsequent upgrades.	- .replicated.com (enables Upstream Docker images via proxy.replicated.com. The on-prem docker client uses a license ID to authenticate to proxy.replicated.com. This domain is owned by Replicated, Inc., headquartered in Los Angeles, CA.) - quay.io (source of replicated images for releases) - .gcr.io (source of replicated images for releases) - *.docker.io (source of replicated images for releases) - k8s.kurl.sh (source of Kubernetes cluster installation scripts and artifacts: an application identifier is sent in a URL path, and bash scripts and binary executables are served from kurl.sh. This domain is owned by Replicated, Inc., headquartered in Los Angeles, CA) - amazonaws.com (source of tar.gz: packages are downloaded from Amazon S3. The IP ranges to whitelist for accessing these can be scraped dynamically from the AWS IP Address Ranges documentation.)
Datadog: Lightup uses Datadog for container logging, metric monitoring and Kubernetes pod health monitoring	*.datadoghq.com (enables Lightup monitoring)
Lightup AWS Services: Lightup leverages a dedicated single-tenant service for install and upgrade requirements.	*.lightup.ai (enables Lightup system updates and calls)

VM hardware— You need a minimum of 8 vCPUs, 64GB RAM, and 200GB of persistent, flat, unpartitioned hard disk capacity (EBS or similar).
VM OS— You can install Ubuntu 20.04, RHEL8, or RHEL7.

Installation

Step 1: Set up Postgres Server 14

Install Postgres Server 14.
Set up regular snapshots— we recommend daily backups.
When your Postgres instance is ready, log in and complete the following steps:
a. Make note of the Postgres host, TCP port, username and password - you'll need them during the next installation step (when you bootstrap the Lightup data plane).
b. Create three databases: adb, udb, sdb.
c. In each database, set max_connection >= 500 and run the following code:

CREATE EXTENSION IF NOT EXISTS pg_stat_statements;
SELECT * FROM pg_stat_statements LIMIT 1;
CREATE EXTENSION IF NOT EXISTS uuid-ossp;
SELECT * FROM uuid-ossp LIMIT 1;

Step 2: Bootstrap the Lightup data plane

Set up a new VM running Ubuntu 20.04, RHEL8, or RHE7.
SSH into the VM.
Make sure curl is installed.

Run the following command, using the tla and token values from Lightup:

curl -H 'Cache-Control: no-cache' -L \
https://s3.us-west-2.amazonaws.com/www.lightup.ai/launch_lightup.sh | \
LIGHTUP_TLA=<tla> LIGHTUP_TOKEN=<token> bash -s install

Follow the prompts to complete Postgres configuration, entering the values you noted when you set up Postgres.
Wait for about 10 minutes, then browse to https://app.tla.lightup.ai (using the tla value from Lightup) and log in to the Lightup app to get started.

Step 3 (optional): Set up a NAT gateway

If the Lightup application needs to use a singular, consistent IP address to access your datasources, you can configure a NAT gateway for your VM on any of the following platforms: