Managing Kubernetes clusters

Kubernetes clusters are created and managed by self-service users, as described in "Managing Kubernetes clusters" in the Self-Service Guide. In the admin panel, you can view Kubernetes cluster details, view master and worker groups, change service parameters, update the Kubernetes version, and delete Kubernetes clusters.

Virtuozzo Hybrid Infrastructure uses the soft anti-affinity policy for Kubernetes cluster nodes. According to this policy, Kubernetes nodes are distributed across compute nodes by groups: master nodes are distributed separately from workers. In this case, a compute node can host both a master node and a worker node. However, if there are not enough compute nodes to evenly distribute Kubernetes nodes from the same group, some of them can be placed on one compute node.

Limitations

• Kubernetes versions 1.15.x–1.20.x are no longer supported. Kubernetes clusters created with these versions are marked with the Deprecated tag.

• When a Kubernetes cluster is created, its configuration files contain the IP address or DNS name of the compute API endpoint. Modifying this IP address of DNS name will lead to inability to perform Kubernetes management operations. You can have one of the following scenarios:

  • If the high availability for the management node is disabled

    The compute API is accessed via the IP address of the management node. In this case, changing this IP address or creating the management node HA is prohibited.

  • If the high availability for the management node is enabled

    The compute API is accessed via the virtual IP address. In this case, changing this virtual IP address or destroying the management node HA is prohibited.

  • If a DNS name for the compute API is configured

    Changing the DNS name is prohibited.

• Kubernetes cluster certificates are issued for five years. To renew the certificates, use the vinfra service compute k8saas rotate-ca command. Alternatively, you can use the openstack coe ca rotate command, as described in the OpenStack documentation.

Prerequisites

• The compute cluster is created, as described in Creating the compute cluster.
• The Kubernetes service is installed during the compute cluster deployment or later, as described in Provisioning Kubernetes clusters.

To view the details of a Kubernetes cluster

To view master and worker groups

1. On the Compute > Kubernetes screen, click a Kubernetes cluster.
2. On the cluster right pane, navigate to the Groups tab.
3. List all of the nodes in a group by clicking the arrow icon next to the required node group.

To renew the Kubernetes cluster certificates

Use the following command:

vinfra service compute k8saas rotate-ca <cluster>

<cluster>

Cluster ID or name

For example, to renew the CA certificates for the Kubernetes cluster k8s1, run:

# vinfra service compute k8saas rotate-ca k8s1

To delete a Kubernetes cluster