# Deploy with Control Plane managed stores ```json metadata { "title": "Deploy with Control Plane managed stores", "description": "Deploy Redis Agent Memory with stores managed by the self-managed Control Plane.", "categories": ["docs","develop","ai"], "tableOfContents": {"sections":[{"id":"create-the-namespace","title":"Create the namespace"},{"id":"create-shared-secrets","title":"Create shared Secrets"},{"id":"create-the-control-plane-config","title":"Create the Control Plane config"},{"id":"create-helm-values","title":"Create Helm values"},{"id":"install-the-chart","title":"Install the chart"},{"id":"verify-the-deployment","title":"Verify the deployment"}]} , "codeExamples": [] } ``` Use Control Plane managed stores when operators need to create stores or agent keys at runtime. In this mode, the Data Plane reads store and agent-key records from Metadata Redis. Before you begin, review [prerequisites](https://redis.io/docs/latest/develop/ai/context-engine/agent-memory/self-managed/prerequisites) and create `memory-dataplane.config.yaml` from the [Control Plane managed stores example](https://redis.io/docs/latest/develop/ai/context-engine/agent-memory/self-managed/data-plane-configuration#control-plane-managed-stores-example). ## Create the namespace ```bash kubectl create namespace ``` ## Create shared Secrets Create the license Secret: ```bash kubectl -n create secret generic ram-license \ --from-file=license=./license ``` Create the Data Plane config Secret: ```bash kubectl -n create secret generic ram-config \ --from-file=memory-dataplane.config.yaml=./memory-dataplane.config.yaml ``` ## Create the Control Plane config Create `controlplane-onprem.config.yaml`: ```yaml profile: prod auth: type: admin-token admin_token: token_file: /etc/controlplane-onprem/admin/token license: license_path: /etc/redis-agent-memory/license metadata: urls: - redis://redis-meta:6379 namespace: iris:memory store_db: urls: - redis://redis-store:6379 embedding: dimensions: 3072 ``` The Control Plane only needs `embedding.dimensions` for Control Plane managed store metadata. Configure the embedding provider, model, credentials, and batching settings in the Data Plane config. Create the Control Plane config Secret: ```bash kubectl -n create secret generic ram-controlplane-config \ --from-file=controlplane-onprem.config.yaml=./controlplane-onprem.config.yaml ``` Bring your own admin token: ```bash kubectl -n create secret generic ram-controlplane-admin-token \ --from-literal=token='' ``` To read the admin token from the Secret used in this guide: ```bash kubectl -n get secret \ ram-controlplane-admin-token \ -o jsonpath="{.data.token}" | base64 -d ``` ## Create Helm values Create SHA-256 checksums for externally managed Secrets. These values are used by Helm values to roll pods after Secret changes; they are not used to validate Secret integrity. **Linux:** ```bash LICENSE_CHECKSUM="$(sha256sum ./license | awk '{print $1}')" CONFIG_CHECKSUM="$(sha256sum ./memory-dataplane.config.yaml | awk '{print $1}')" CONTROLPLANE_CONFIG_CHECKSUM="$(sha256sum ./controlplane-onprem.config.yaml | awk '{print $1}')" ``` **macOS:** ```bash LICENSE_CHECKSUM="$(shasum -a 256 ./license | awk '{print $1}')" CONFIG_CHECKSUM="$(shasum -a 256 ./memory-dataplane.config.yaml | awk '{print $1}')" CONTROLPLANE_CONFIG_CHECKSUM="$(shasum -a 256 ./controlplane-onprem.config.yaml | awk '{print $1}')" ``` Create `ram-values.yaml`: ```yaml license: existingSecret: ram-license existingSecretChecksum: "" config: existingSecret: ram-config existingSecretChecksum: "" image: repository: redislabs/agent-memory tag: "" controlplane: enabled: true image: repository: redislabs/agent-memory-control-plane tag: "" config: existingSecret: ram-controlplane-config existingSecretChecksum: "" adminToken: existingSecret: ram-controlplane-admin-token secretKey: token autoGenerate: false ``` ## Install the chart Add the Helm repository when installing from the public repository: ```bash helm repo add redis-ai https://helm.redis.io/ai helm repo update redis-ai helm search repo redis-ai/redis-agent-memory --versions ``` Install with `redis-agent-memory` as the Helm release name: ```bash helm install redis-agent-memory redis-ai/redis-agent-memory \ --version \ --namespace \ --create-namespace \ -f ram-values.yaml ``` On small clusters, install without `--atomic --wait`, then watch pod status: ```bash kubectl -n get pods -w ``` If you want Helm to wait, set an explicit timeout that matches the environment: ```bash helm install redis-agent-memory redis-ai/redis-agent-memory \ --version \ --namespace \ --create-namespace \ -f ram-values.yaml \ --wait \ --timeout 15m ``` ## Verify the deployment Check pods: ```bash kubectl -n get pods -l app.kubernetes.io/name=redis-agent-memory ``` Port-forward the Data Plane: ```bash kubectl -n port-forward svc/redis-agent-memory 9000:9000 ``` Check Data Plane health: ```bash curl http://localhost:9000/health curl http://localhost:9000/health/liveness curl http://localhost:9000/health/readiness ``` Port-forward the Control Plane: ```bash kubectl -n port-forward svc/redis-agent-memory-controlplane 9100:9100 ``` Verify the admin API: ```bash curl -H "Authorization: Bearer " \ http://localhost:9100/v1/stores ``` For the full self-managed admin API schema, see the [Control Plane API reference](https://redis.io/docs/latest/develop/ai/context-engine/agent-memory/self-managed/control-plane-api-reference). After you deploy Control Plane managed stores, configure Data Plane auth in [Authentication and authorization](https://redis.io/docs/latest/develop/ai/context-engine/agent-memory/self-managed/authentication).