Deploy to a cluster

Last published : Oct 15, 2026
Citrix SecurSpaces™ runs on any Kubernetes-compatible cluster, including OpenShift. Preparing that cluster is the part that differs between platforms; everything after it is the same.
Note
This page is for a production deployment. If you only need to evaluate SecurSpaces, you do not need a cluster at all — the 1-Click VM runs the whole platform on a single virtual machine, and is the quickest route to a working environment for a proof of concept or a demonstration. See Deploy an evaluation environment. It is not intended for production use.
Related information
index

The deployment sequence

  1. Prepare your infrastructure — a Kubernetes cluster, a container registry, and a MongoDB database. This is platform-specific; use the page for your platform below.
  2. Install with the Strong Installer CLI — pull the Helm chart, push images to your registry, and create the configuration file.
  3. Deploy to the cluster — install the ingress controller, upload the TLS secret, and apply the Helm chart.
  4. Configure the platform — identity, repositories, and access. See the table at the end of the install page.
Important:
Every deployment needs an ingress controller, and the chart installs one for you only if you use NetScaler CPX. Decide which controller you are using before you start, because it affects the cluster you build and how workspace SSH is exposed. See Ingress.

Choose your platform

Platform Page Notes
Amazon EKS Amazon EKS EKS, ECR, and MongoDB Atlas
Azure AKS Azure AKS AKS, ACR, and MongoDB Atlas or Cosmos DB
Google GKE Google GKE GKE Standard, Artifact Registry, and MongoDB Atlas. Autopilot is not supported
Red Hat OpenShift Red Hat OpenShift Self-contained guide, including the OpenShift-specific wildcard route policy
Nutanix Kubernetes Platform Nutanix Kubernetes Platform NKP 2.17 or later, with NetScaler CPX ingress
Self-hosted clusters and other managed distributions follow the same sequence: create the cluster, provide a registry and a database, then install. See System requirements for the supported Kubernetes versions and sizing.

Before you start

Requirement Detail
Domains A host domain, and a wildcard subdomain for proxy support such as *.proxy.example.com
TLS Certificates for both domains
Database MongoDB, hosted or in-cluster. See The SecurSpaces database
Registry A container registry you control, which the installer pushes images to
Sizing Node pools for the service and workspace tiers. See Sizing
Licence A SecurSpaces licence. See Licensing
For an evaluation rather than a production deployment, the 1-Click VM is considerably faster. See Deploy an evaluation environment.
  • Architecture
  • System requirements
  • NGINX
  • Multiple regions
  • Upgrade