Advanced Configuration
The platform is designed so that every bundled dependency can be replaced by one your environment already provides. This section covers those bring-your-own paths.
The Bring-Your-Own Model
Every dependency the platform relies on has three paths:
- Bring your own: point the platform at the service your environment already runs, and leave the bundled one off.
- Install it alongside the platform: follow the cluster dependencies section of the Deploy guide, or enable the bundled component in
dynamoai-basevalues (<component>.enabled: true) where one ships. - Run without it, where the application supports that; features degrade accordingly.
Effect of Disabling Each Component
| Component | If You Bring Your Own | If You Run Without It |
|---|---|---|
| DNS automation | Your DNS automation manages the platform records | DNS records for the API, UI, and identity domains are managed manually |
| Secrets management | Your secrets operator syncs the platform Secrets | Secrets are provided as plain Kubernetes Secrets |
| KEDA | Your KEDA installation serves the platform ScaledJobs | Evaluation and fine-tuning workloads cannot scale from events |
| NVIDIA device plugin | Your GPU operator or device plugin schedules GPUs | GPU workloads cannot schedule; GPU-dependent features are unavailable |
| GPU metrics (DCGM) | Your GPU metrics pipeline | No GPU metrics |
| Prometheus | Your Prometheus stack scrapes the platform | No metrics and alerting |
| OpenTelemetry collector | Your collector receives platform telemetry | No telemetry pipeline |
| Ingress or load-balancer controller | Your ingress controller, or OpenShift Routes, exposes the platform | The platform endpoints are not reachable from outside the cluster |
Keycloak (keycloak.enabled) | Your own OIDC provider fronts the platform | No identity provider; the platform cannot authenticate users |
MongoDB (mongodb.enabled) | A managed endpoint such as Atlas, see External MongoDB | No document store; the platform cannot start |
PostgreSQL (postgresql.enabled) | A managed instance, which is the production default | No relational store; the platform cannot start |
MinIO (minio.enabled) | Native object storage, see Model Storage | No object storage; model weights cannot be fetched |
External Data Services
- External MongoDB: a customer-provided managed MongoDB endpoint instead of the in-cluster deployment.
- Model Storage: the three accepted patterns for making model weights available to the cluster.
- External Redis: managed Redis (AWS ElastiCache, Azure Cache for Redis) with authentication and TLS is configured through the Redis authentication and TLS guide, which also covers disabling the bundled Redis (
redis.enabled: false).
Authentication to AI Systems
- Microsoft Entra Workload Identity: authenticate to Entra-protected AI endpoints, such as Azure AI Foundry behind Azure API Management, with tokens minted from an AKS workload identity instead of a stored credential. Variables and save-time behavior are in the Entra Workload Identity Reference.