How-to Guides

Configure the installer with a settings document, and how it resolves flags, environment, and config.

PostgreSQL roles and connections for the bundled database and for bring-your-own databases.

How clients authenticate to ate-api.

How ate-api checks every call against an OpenFGA model, and how to manage roles and access.

Attach CSI volumes to actors.

Deploy CSI drivers for use with Agent Substrate.

Supported outbound actor protocols, DNS relay filtering, and what actors see when egress is refused.

How atunnel and the egress gateway tunnel, authenticate, and apply policy to outbound actor traffic.

Configure actors to trust the egress gateway’s MITM CA for HTTPS header and credential injection.

Put secrets into an actor’s outbound HTTPS requests without the actor ever holding them.

Logs, metrics, and traces for actors and the Agent Substrate components.

Define SLIs, SLOs, and Prometheus alerting rules to monitor Agent Substrate in production.

Runbook for a rolling upgrade of Agent Substrate.