Node agent and Connector environment
Separate Linux host-agent and hosted Connector service environment settings.
Agent and Connector environment variables configure the separately deployed Linux host agent and optional hosted-capacity connection service.
Read environment loading before setting
values. Edit deployment values in the release bundle's infra.env or the corresponding
Kubernetes ConfigMap and Secret, then restart the affected service.
Node agent identity and execution
INFRA_AGENT_CONTROL_PLANE_URL
Type: HTTPS origin. Default: required.
Control plane managing this node. It must match the installation trust and enrolled identity; it is not a hosted resource API URL.
INFRA_AGENT_CONFIG_FILE
Type: absolute input path. Default: /etc/infra-agent/config.yaml.
Enrollment-generated host configuration. Explicit supported environment values override its corresponding fields; unsupported keys reject startup.
INFRA_AGENT_STATE_DIR
Type: absolute directory. Default: /var/lib/infra-agent.
Persistent, host-unique identity and reconciliation state. Never clone it into another active host.
INFRA_AGENT_LISTEN_ADDRESS
Type: IP address and port. Default: 0.0.0.0:9443.
Authenticated management endpoint. Restrict network access to required control-plane paths; no anonymous guest-management listener is created.
INFRA_AGENT_CA_FILE
Type: absolute input path. Default: enrollment trust bundle.
Optional explicit CA bundle for the control-plane path. Invalid trust prevents connection rather than reenrolling the node.
INFRA_AGENT_CERT_FILE
Type: absolute input path. Default: enrolled certificate in agent state.
Optional externally mounted node certificate. Must identify this enrolled node and be paired with its matching key.
INFRA_AGENT_KEY_FILE
Type: absolute secret path. Default: enrolled key in agent state.
Node private identity. When supplied externally, it must match INFRA_AGENT_CERT_FILE; it is not an organization API key.
INFRA_AGENT_HEARTBEAT_SECONDS
Type: integer seconds. Default: 5.
Inclusive range 1–60. Observation schedule, not a guarantee of delivery through a broken management path.
INFRA_AGENT_METRICS_INTERVAL_SECONDS
Type: integer seconds. Default: 5.
Inclusive range 5–60. Local sampling cadence for supported host sources. Lower values than the installation permits are rejected during admission.
INFRA_AGENT_JOURNAL_BUFFER_BYTES
Type: positive integer bytes. Default: 268435456.
Inclusive range 1048576–4294967296. Local undelivered-event buffer. Exhaustion can lose old undelivered observations and reports a health condition.
INFRA_AGENT_HYPERVISOR_URI
Type: string. Default: qemu:///system.
Approved local QEMU connection. Compute admission fails when the configured hypervisor cannot be opened.
INFRA_AGENT_RESERVED_MEMORY_MIB
Type: non-negative integer MiB. Default: 2048.
Host memory reserve excluded from droplet admission. It must fit physical memory; it does not resize current guests.
INFRA_AGENT_RESERVED_VCPUS
Type: non-negative integer. Default: 1.
Host CPU reserve excluded from ordinary scheduling. It must fit reported capacity and the pool's supported admission model.
INFRA_AGENT_MESH_INTERFACE
Type: string. Default: automatic underlay selection.
Optional explicit host transport interface. A nonexistent or unsuitable interface blocks mesh health; it does not change project subnet routing.
INFRA_AGENT_MESH_MTU
Type: integer bytes. Default: regional mesh policy.
Optional host override, inclusive range 576–9000; IPv6 paths require at least 1280. It must satisfy regional policy and the real underlay budget.
INFRA_AGENT_CLOCK_MAX_OFFSET_MS
Type: positive integer milliseconds. Default: 2000.
Inclusive range 100–60000. Offset threshold for time health. It does not configure NTP or move the host clock.
INFRA_AGENT_LOG_LEVEL
Type: enum. Default: info.
Accepts debug, info, warn, or error. Applies to this host agent independently of control-plane logging.
Connector service
INFRA_CONNECTOR_ENABLED
Type: boolean. Default: false.
Enables the separate Connector service. Local fleet functionality remains available without it.
INFRA_CONNECTOR_CONTROL_PLANE_URL
Type: HTTPS origin. Default: required when enabled.
Self-hosted management origin receiving hosted reconciliation results. It must match the authorized installation.
INFRA_CONNECTOR_HOSTED_URL
Type: HTTPS URL. Default: endpoint issued by authorization.
Hosted service endpoint from the approved grant. Required when enabled; there is no fallback to an unrelated hosted organization.
INFRA_CONNECTOR_TOKEN
Type: string secret. Default: unset.
Authorization credential issued by the Connector exchange, or use its file alternative. It is not the operator's browser session.
INFRA_CONNECTOR_TOKEN_FILE
Type: absolute secret path. Default: unset.
Alternative to INFRA_CONNECTOR_TOKEN. Both sources are rejected. Required identity material must remain available after restart.
INFRA_CONNECTOR_STATE_DIR
Type: absolute directory. Default: /var/lib/infra-connector.
Persistent hosted-operation references and local identity state. Keep it with the installation recovery set.
INFRA_CONNECTOR_POLL_INTERVAL_SECONDS
Type: integer seconds. Default: 15.
Inclusive range 5–300. Inventory and unresolved-operation poll schedule, not a guarantee of hosted result delivery.
INFRA_CONNECTOR_CA_FILE
Type: absolute input path. Default: system trust.
Optional approved CA bundle for the hosted endpoint. Trust failure leaves hosted actions disconnected rather than disabling verification.
Inspect and apply host settings
On a node, update the infra-agent service's environment file or systemd override,
then restart that service during the approved maintenance procedure. Inspect the
result at Fleet → Nodes → Node → Agent → Effective configuration.
For the Connector container, update its deployment Secret or infra.env binding
and inspect Installation settings → Connectors → Connector → Health. Changing
identity file paths does not authorize cloning an identity into another host.