Skip to content

Prerequisites

The following prerequisites are required for a Self-managed deployment or a PrivaceraCloud Data-plane deployment:

  1. Cloud Provider - Privacera supports the following cloud providers: AWS, Azure and Google Cloud
  2. Kubernetes Cluster - Privacera supports the following managed Kubernetes distributions: AWS EKS, Azure AKS, Google Cloud GKE. The versions for the supported Kubernetes distributions are in Compatibility & Versions section.

  3. Host / CPU Architecture - The server (bastion host, jump host, or virtual machine) used to run Privacera Manager must be x86_64 (AMD64) architecture.

    ARM64 / Graviton is not supported

    Privacera Manager and all Privacera application container images are built for x86_64/AMD64 only. ARM64/aarch64 architecture (including AWS Graviton instances) is not supported. Attempting to run Privacera Manager on an ARM64 host fails with an error similar to:

    Text Only
    1
2
    WARNING: The requested image's platform (linux/amd64) does not match the detected host platform (linux/arm64/v8) and no specific platform was requested
exec /usr/bin/bash: exec format error
    If your primary bastion or jump host is ARM64-based, provision a separate, dedicated x86_64 instance for all Privacera Manager operations (installation, upgrades, and configuration changes).

  4. Cloud resources - Various cloud resources are required for Privacera deployment. These include:

    • Managed RDBMS - to store policies and metadata
    • Managed NoSQL - to store Privacera Discovery metadata (only if you are using Privacera Discovery module
    • Object store bucket - to store configuration and audit logs
    • Managed Kubernetes cluster - to run Privacera software
    • Cloud compute (virtual server) - to run Privacera Manager software. Must be x86_64/AMD64 (see Host / CPU Architecture above)
    • IAM policies and roles - to allow Privacera software to access cloud resources
    • Network Setup - VPC, subnets, security groups, VPC peering or transit gateways. As Privacera will be connecting to your data-sources you will need to think about the network connectivity.
    • Load balancer, DNS entries, TLS certificates - for securing the service endpoints
  5. Privacera Manager - This is the installation software used to configure and install Privacera software. Your Privacera Sales representative will give you the following,
    • Credentials for Privacera docker registry
    • Download URL of Privacera Manager software
  6. Air gap network (optional) - If you are in an air gap (no Internet access) network, you will need to host the docker images in your own docker registry. Refer to prerequisites for air gap Installation

For the installation, there are two parallel tracks - Creating Cloud Resources and Installing Privacera using Privacera Manager. In most organizations, these two are done by different teams or same person with different privileges. Most cloud resources need to be created before Privacera installation can start.

The prerequisites for each cloud provider are detailed in the following sections: