- install the consul agent on all nodes, except consul servers
- generate policy/token to add nodes - generate policy/token for all nodes - add base::root profile to manage aspects of the root user