Installation Guide

How to install Verrazzano

The following instructions show you how to install Verrazzano in a single Kubernetes cluster.


Verrazzano requires the following:

  • A Kubernetes cluster and a compatible kubectl.
  • At least 2 CPUs, 100GB disk storage, and 16GB RAM available on the Kubernetes worker nodes. This is sufficient to install the development profile of Verrazzano. Depending on the resource requirements of the applications you deploy, this may or may not be sufficient for deploying your applications.

For a list of the open source components and versions installed with Verrazzano, see Software Versions.

Prepare for the install

Before installing Verrazzano, see instructions on preparing the following Kubernetes platforms:

NOTE: Verrazzano can create network policies that can be used to limit the ports and protocols that pods use for network communication. Network policies provide additional security but they are enforced only if you install a Kubernetes Container Network Interface (CNI) plug-in that enforces them, such as Calico. For instructions on how to install a CNI plug-in, see the documentation for your Kubernetes cluster.

Install the Verrazzano platform operator

Verrazzano provides a platform operator to manage the life cycle of Verrazzano installations. You can install, uninstall, and update Verrazzano installations by updating the Verrazzano custom resource.

To install the Verrazzano platform operator:

  1. Deploy the Verrazzano platform operator.

    $ kubectl apply -f
  2. Wait for the deployment to complete.

    $ kubectl -n verrazzano-install rollout status deployment/verrazzano-platform-operator
    deployment "verrazzano-platform-operator" successfully rolled out
  3. Confirm that the operator pod is correctly defined and running.

    $ kubectl -n verrazzano-install get pods
    NAME                                            READY   STATUS    RESTARTS   AGE
    verrazzano-platform-operator-59d5c585fd-lwhsx   1/1     Running   0          114s

Perform the install

Verrazzano supports the following installation profiles: development (dev), production (prod), and managed cluster (managed-cluster).

  • The production profile, which is the default, provides a 3-node Elasticsearch and persistent storage for the Verrazzano Monitoring Instance (VMI).
  • The development profile provides a single node Elasticsearch and no persistent storage for the VMI.
  • The managed cluster profile installs only managed cluster components of Verrazzano. In order to take full advantage of multicluster features, the managed cluster should be registered with an admin cluster.

To change profiles in any of the following commands, set the VZ_PROFILE environment variable to the name of the profile you want to install.

For a complete description of Verrazzano configuration options, see the Verrazzano Custom Resource Definition.

According to your DNS choice, (wildcard DNS) or Oracle OCI DNS, install Verrazzano using one of the following methods:

Install using

Run the following commands:

$ kubectl apply -f - <<EOF
kind: Verrazzano
  name: my-verrazzano
  profile: ${VZ_PROFILE:-dev}
$ kubectl wait --timeout=20m --for=condition=InstallComplete verrazzano/my-verrazzano

Install using OCI DNS


  • A DNS zone is a distinct portion of a domain namespace. Therefore, ensure that the zone is appropriately associated with a parent domain. For example, an appropriate zone name for parent domain domain is

  • Create a public OCI DNS zone using the OCI CLI or the OCI Console.

    To create an OCI DNS zone using the OCI CLI:

    $ oci dns zone create -c <compartment ocid> --name <zone-name-prefix> --zone-type PRIMARY

    To create an OCI DNS zone using the OCI console, see Managing DNS Service Zones.

  • Create a secret in the default namespace. The secret is created using the script which reads an OCI configuration file to create the secret.

    Download the script:

    $ curl -o ./

    Run the script:

    $ chmod +x
    $ export KUBECONFIG=<kubeconfig-file>
    $ ./ -o <oci-config-file> -s <config-file-section> -k <secret-name>
    -o defaults to the OCI configuration file in ~/.oci/config
    -s defaults to the DEFAULT properties section within the OCI configuration file
    -k defaults to a secret named oci


Installing Verrazzano using OCI DNS requires some configuration settings to create DNS records.

Download the sample Verrazzano custom resource install-oci.yaml for OCI DNS:

$ curl -o ./install-oci.yaml

Edit the downloaded install-oci.yaml file and provide values for the following configuration settings:

  • spec.environmentName
  • spec.certificate.acme.emailAddress
  • spec.dns.oci.ociConfigSecret
  • spec.dns.oci.dnsZoneCompartmentOCID
  • spec.dns.oci.dnsZoneOCID
  • spec.dns.oci.dnsZoneName

For the full configuration information for an installation, see the Verrazzano Custom Resource Definition.

When you use the OCI DNS installation, you need to provide a Verrazzano name in the Verrazzano custom resource (spec.environmentName) that will be used as part of the domain name used to access Verrazzano ingresses. For example, you could use sales as an environmentName, yielding as the sales-related domain (assuming the domain and zone names listed previously).

Run the following commands:

$ kubectl apply -f ./install-oci.yaml
$ kubectl wait --timeout=20m --for=condition=InstallComplete verrazzano/my-verrazzano

To monitor the console log output of the installation:

$ kubectl logs -f $(kubectl get pod -l job-name=verrazzano-install-my-verrazzano -o jsonpath="{.items[0]}")

Verify the install

Verrazzano installs multiple objects in multiple namespaces. In the verrazzano-system namespaces, all the pods in the Running state, does not guarantee, but likely indicates that Verrazzano is up and running.

$ kubectl get pods -n verrazzano-system
coherence-operator-controller-manager-7557bc4c49-7w55p   1/1     Running   0          27h
fluentd-fzmsl                                            1/1     Running   0          27h
fluentd-r9wwf                                            1/1     Running   0          27h
fluentd-zp2r2                                            1/1     Running   0          27h
oam-kubernetes-runtime-6ff589f66f-r95qv                  1/1     Running   0          27h
verrazzano-api-669c7d7f66-rcnl8                          1/1     Running   0          27h
verrazzano-application-operator-b5b77d676-7w95p          1/1     Running   0          27h
verrazzano-console-6b469dff9c-b2jwk                      1/1     Running   0          27h
verrazzano-monitoring-operator-54cb658774-f6jjm          1/1     Running   0          27h
verrazzano-operator-7f4b99d7d-wg7qm                      1/1     Running   0          27h
vmi-system-es-master-0                                   2/2     Running   0          27h
vmi-system-grafana-74bb7cdf65-k97pb                      2/2     Running   0          27h
vmi-system-kibana-85565975b5-7hfdf                       2/2     Running   0          27h
vmi-system-prometheus-0-7bf464d898-czq8r                 4/4     Running   0          27h
weblogic-operator-7db5cdcf59-qxsr9                       1/1     Running   0          27h

(Optional) Install the example applications

Example applications are located here.

To get the consoles URLs and credentials, see Operations.

Uninstall Verrazzano

To delete a Verrazzano installations:

# Get the name of the Verrazzano custom resource
$ kubectl get verrazzano

# Delete the Verrazzano custom resource
$ kubectl delete verrazzano <name of custom resource>

To monitor the console log of the uninstall:

$ kubectl logs -f $(kubectl get pod -l job-name=verrazzano-uninstall-my-verrazzano -o jsonpath="{.items[0]}")

Last modified June 3, 2021: add network policy note (#134) (d4e80b8)