Self-Hosting Guide
This guide is for everyone who runs a Katta Server instance on their own infrastructure. It covers deploying the server, and preparing AWS or MinIO so the server can hand out storage credentials.
A managed Katta Server, hosted and maintained by shift7 GmbH, is not currently available. You must self-host Katta Server.
Each deployment option configures a default storage profile — AWS S3 with Terraform, the bundled MinIO with the Helm chart and Docker Compose — so vaults can be created right after deployment. To add further storage providers, the Admin Guide covers the storage profiles that put them to use.
Deployment
Deploy Katta Server with Terraform on AWS, the Helm chart on Kubernetes, or Docker Compose for local testing.
AWS S3
Prepare an AWS account so Keycloak-issued tokens can be exchanged for temporary S3 credentials.
MinIO
Prepare a MinIO server so Keycloak-issued tokens can be exchanged for temporary S3 credentials.
Troubleshooting
Common setup pitfalls — CORS on the bucket, CSP on the server, and MinIO OIDC configuration.