With provider BasisDynamix

For information about the cluster creation process, see Creating a cluster.

Basic data #

The screen provides fields for defining basic cluster settings. Filling in data is available in basic mode and advanced settings mode.

By default, Basic mode is enabled. To enable advanced settings mode, move the Show advanced settings toggle switch to active. When switching from advanced settings mode to basic mode, the data entered in the fields that will be hidden is lost.

Basic data for the Basis Dynamix provider in basic mode #

• Instance of provider. Dropdown list. If there is only one instance available, it will be selected automatically.
• Platform version. After selecting the provider instance, you have the opportunity to select the platform version. In the drop-down list, platform versions are available that are compatible with the Kubernetes version specified in the VM templates of this provider instance, as well as with the current version of the platform. By default, the highest platform version compatible with the selected VM template is selected.

Advanced information security settings are not installed. Subnets of pods and services take on default values. Options are not displayed in the interface in Basic mode. To change parameter values, enable advanced settings.

To configure the cluster IP address, after creating the cluster, go to the Basis Dynamix virtualization platform in the Network section. On the Load Balancers page for the balancer you are using, on the Schema tab, add frontend for the created CLUSTERNAME-ingress-backend and make the server binding frontend, port 30443. The IP address specified for the frontend will be assigned as the IP address for the Ingress cluster.

Basic data for the Basis Dynamix provider in advanced settings mode #

• Use an external balancer for Ingress. To configure the cluster IP address, after creating the cluster, go to the Basis Dynamix virtualization platform in the Network section. On the Load Balancers page for the balancer being used, on the Schema tab, add frontend for the created CLUSTERNAME-ingress-backend and make the frontend server binding, port 30443. The IP address specified for the frontend will be assigned as the IP address for the Ingress cluster.
• DNS record Ingress. Register Wildcard FQDN for Ingress. FQDNs will be generated according to: *..
• Instance of provider. Dropdown list. If there is only one instance available, it will be selected automatically.
• Platform version. After selecting the provider instance, you have the option to select the platform version. In the drop-down list, platform versions are available that are compatible with the Kubernetes version specified in the VM templates of this provider instance, as well as with the current version of the platform.
• Set advanced information security settings. Sets up Secret Encryption for ETCD, a pre-configured Audit Policy, and a TLS connection to the Kubelet.
• Pod subnet. The subnet from which IPv4 addresses will be assigned to the Pods. The subnet must not overlap with the network of hosts and services. Recommended range: 172.16.0.1-172.16.255.254.
• Subnet of services. The subnet from which IPv4 addresses will be assigned for services with type: ClusterIP. The subnet is not routed to and should not intersect with the host and pod network. Recommended range: 10.96.0.0/12 (kubeadm won’t understand it any other way).
• Cluster profile. By default, the default profile is used.

Before configuring subnets, check the ranges for overlap. For more on subnet allocation in a cluster, see Cluster network configuration.

Node configuration #

To determine system requirements for Control Plane, Worker nodes, please review Minimum and Recommended Requirements.

###Configuration of Control Plane nodes

• Number of Control Plane nodes (must be an odd value. No more than 5 is recommended)
• Number of cores (default: 4, recommended: 12)
• Amount of RAM (MB) (default: 8,192)
• Disk capacity, (GB) (default: 60, recommended: 120)

The default values ​​correspond to the minimum resource requirements (CPU, Memory, Disk). The interface blocks the ability to create a client cluster with a resource configuration (number of cores, amount of RAM) less than the minimum required.

Worker node configuration #

By default, 2 groups of Worker nodes are created with three nodes in each group:

• default;
• infra.

They are protected from being deleted when creating a cluster. If, when creating a cluster, worker nodes in these groups are not required, enter the value “0” in the “Number of worker nodes” field. MachineDeployments will be created, and in the future you can easily add nodes to groups if necessary. In addition to the default and infrastructure groups, it is possible to add additional groups of Worker nodes.

A group of infrastructure nodes will preferably be used to deploy the cluster’s infrastructure services. If there are no free nodes in the group, services will be deployed on Worker nodes of other groups. The default group of Worker nodes, as well as any additional groups, can be used to deploy custom workloads.

It is possible to copy the settings of the default group to other groups of Worker nodes. To do this, click on the copy icon on the right side of the node group line.

You can edit group parameters by clicking on the group name in the table. When editing you have the option to:

• duplicate the configuration of the created group of Worker nodes. To do this, click Duplicate configuration from group and select from the list the name of the group whose settings you want to copy.
• create a duplicate group with configured parameters. Click on the copy element in the upper left corner of the modal window to add a group with the same parameters. In the duplicate, you must fill in the name of the new group.

The following options are available for group configuration:

Node scaling: Manual/Automatic

• If manual node scaling is selected, determine the number of Worker nodes.
• When automatic node scaling is selected, define the range for automatic scaling of Worker nodes (by default, the minimum and maximum number is not set). The minimum number of nodes can be 2. In the graphical interface, the ability to set the minimum replicas to less than 2 is limited.
• Number of cores (default: 4, recommended: 12)
• Amount of RAM (MB) (default: 8,192)
• Disk capacity, (GB) (default: 60, recommended: 240)

The default values ​​correspond to the minimum resource requirements (CPU, Memory, Disk). The interface blocks the ability to create a client cluster with a resource configuration (number of cores, amount of RAM) less than the minimum required.

If the Number of Worker nodes field is set to 0, Worker nodes will not be created.

Installing certificates #

You can create a cluster with a certificate:

• Self-signed (does not require additional configuration).
• Intermediate. Upload the certificate chain in PEM (intermediate certificate) format and the private key of the intermediate CA certificate. You can set the certificate and key by uploading files or entering data in text format;
• ACME (Automatic Certificate Management Environment). Upload the CA root certificate file for ACME and provide the ACME server address with port and resource path. You can upload a certificate file or provide the certificate in text format. You can specify the email associated with your ACME account;
• Corporate. Upload the enterprise certificate in PEM format and the private key of the Ingress enterprise certificate. You can set the certificate and key by uploading files or entering data in text format. The certificate must be issued by a Certificate Authority (CA) (in which case there will be a certificate chain in the file) or self-signed for the Ingress domain name.
• Let’s Encrypt. Enter the Email associated with your Let’s Encrypt account. The root CA certificate for Let’s Encrypt is loaded automatically, the Let’s Encrypt server address is set by default - https://acme-v02.api.letsencrypt.org/directory.

Please note! If an ACME certificate is installed in the cluster, you need to monitor the operation of the ACME server. In the event of a server failure, clusters with ACME certificates will be unavailable.

After successful installation of the cluster, the installed certificates will be available in the Administration section on the ClusterIssuers page of the created cluster.

Selecting services #

This step is common to all providers.

At this step, you can select services to automatically enable services in the cluster in basic mode or advanced settings mode. When creating a cluster, services critical for the operation of the cluster are automatically installed; they cannot be disabled in any of the modes. When switching between modes, the selected selection is canceled.

By default, the basic mode is enabled, where you can select services grouped by functionality to be automatically turned on:

• Backup and restore
• Logging
• Application delivery
• Monitoring
• Load balancing
• Information security tools

If you need to independently select services to enable in the cluster, go to the advanced settings mode. To do this, move the Show advanced settings toggle switch to the active state and select the services to enable. The list of services is displayed in alphabetical order.

Please note! When selecting a service, dependent services will be selected automatically. This is necessary for the main service to work correctly.

Services selected for inclusion are installed with the latest version, automatic control mode, and service instance name equal to the service name. For each version of the Shturval platform, the composition of services and their versions will be different.

After successful cluster installation, the included services are available in the Services and Repositories section on the Installed Services page. During the cluster installation process, the necessary configuration of services to operate in the cluster is performed. Therefore, services that were not selected to be automatically enabled are set to disabled in the cluster and are available in the Services and Repositories section on the Installed Services page. This allows you to avoid manual configuration of services in the deployed cluster if you need to enable them later.

Data verification #

The screen is a page containing all the information you filled out in the previous steps. Information is displayed in reading mode. If you need to change the selected parameters, you can return to the desired step by clicking on the step name on the left side of the screen or on the Back button.

To create a cluster, click on the Create cluster button.

Creation status #

After initializing the creation of a client cluster, a graphical dashboard of the cluster deployment status is available. This process is common to all providers. For information about the client cluster deployment status model, see Cluster deployment status.