Guides
Step-by-step pages for common tasks: publish a service, connect an agent client, enroll machines that cannot log in, use Keycloak as the identity provider, put agentgateway in front of the mesh, put an agent in an OpenShell sandbox or a Substrate actor on the mesh, and deploy a control plane on Kubernetes, Cloud Run, SkyPilot or a GitHub codespace. Each page assumes that you have read the quick start.
Google APIs with a federated credential
Give mesh members access to Google APIs through an egress node that exchanges the control plane’s token at Google STS. No Google credential is stored anywhere.
OpenShell and Substrate
Put NVIDIA OpenShell sandboxes and Agent Substrate actors on one mesh, on Kubernetes you manage or on GKE, and move a workload between the two runtimes with a policy change.