Before you install the Phonemos Helm chart, make sure the items on this page are in place. Sizing guidance for virtual machines and storage is also on System Requirements and Infrastructure Dependencies.

What we send you

A versioned Helm chart archive (phonemos-<version>.tgz), including the default values.yaml. A Google Cloud service-account JSON key that can pull images from Artifact Registry and GCR. Feature flags for your instance, if they differ from the chart defaults.

What runs in the cluster

The chart deploys the Phonemos application: the frontend, an optional public frontend, the backend, Hasura, converters, in-cluster Redis, and, by default, in-cluster PostgreSQL with pgvector. See Deployment Architecture for the component overview.

What you provide

A Kubernetes cluster, Helm 3, and kubectl. An Ingress controller (set ingress.ingressClass; leave ingress.traefik.enabled false unless you use Traefik IngressRoutes). cert-manager with a ClusterIssuer named letsencrypt-prod. DNS for the hosts in sites, and for the console host if the Hasura console is enabled. Keycloak 26 or newer, which you operate. S3-compatible object storage with three buckets or prefixes for uploaded, derived, and temporary files. A StorageClass for the in-cluster PostgreSQL and Redis volumes. A CNI that enforces NetworkPolicy if you enable the chart default-deny, which we recommend.

Network egress

Nodes must pull application images from europe-west6-docker.pkg.dev/linkyard-191615/phonemos-docker/phonemos, shared images such as postgres-wait from eu.gcr.io/linkyard-191615/linkyard-cloud, and the public images redis:7.4, busybox, and envoyproxy/envoy. If you enable Traefik console authentication, also quay.io/oauth2-proxy/oauth2-proxy.

Use a pull-through cache if the cluster has no direct egress. You do not need docker.linkyard.ch for this installation.

PostgreSQL

The documented path is the in-chart postgres-standalone database (PostgreSQL 18 with pgvector). Application pods always connect to the Service named after the Helm release, on port 5432. The database collation must be en_US.utf8.

If you already run PostgreSQL outside the chart, see the Postgres section on Infrastructure Dependencies and ask support@linkyard.ch how to point the release at that instance.

Out of scope

This guide does not cover the single-server Linux or Docker Compose installation, hosted Phonemos SaaS, or end-user product usage.