Getting Started: BYOC
Getting Started
BYOC is built on a Zero Trust architecture. Your data and processing stay inside your own cloud account, reached only by a one-way agent. Read how Zero Trust by Design works before you deploy.
This guide walks you through deploying BYOC on your own cloud provider. By the end of the guide, you will have a Ververica Agent installed and running on your cluster and be able to create new BYOC workspaces that use your own cloud environment.
Ververica recommends reviewing About BYOC before deploying BYOC. It covers several important factors for you to consider, including:
- Is this the right option for your needs?
- What are the core components of the BYOC framework?
- What is the security model, and how does it support a Zero Trust design?
- What are the operational responsibilities for BYOC?
Overview
- Get a high-level understanding of how the BYOC Agent communicates with Ververica Cloud.
- Learn how the key components of the architecture work together.
Choose Your Cloud Provider
Select your cloud provider to proceed with the installation:
AWS (Amazon Web Services)
- Complete the prerequisites.
- Ensure your EKS cluster meets the minimum version, capacity, and operating system requirements.
- Whitelist outbound traffic to Ververica endpoints.
- Assign IAM roles, permissions, and S3 bucket configurations.
- Create AWS resources.
- Configure IAM roles, policies, and an S3 bucket for Flink artifacts.
- Enable Kubernetes OIDC (IRSA) to manage the Ververica Agent.
- Install and configure the Ververica agent.
- Link your Ververica account with AWS Marketplace.
- Install the Ververica Agent using Helm.
- Create a new BYOC workspace.
Azure (Microsoft Azure)
- Complete the prerequisites.
- Ensure your AKS cluster meets the requirements.
- Prepare your Resource Group and Storage Account.
- Configure outbound networking rules.
- Create Azure resources.
- Create a Managed Identity and assign roles.
- Enable OIDC and Workload Identity on your AKS cluster.
- Install and configure the Ververica agent.
- Link your Ververica account with Azure Marketplace.
- Install the Ververica Agent using Helm.
- Create a new BYOC workspace.
After you complete these steps for your chosen provider, you are ready to run your Flink workloads in your own cloud environment while maintaining central control and visibility using BYOC.