This is a draft document that was built and uploaded automatically. It may document beta software and be incomplete or even incorrect. Use this document at your own risk.

Navigation←→

SUSE CaaS Platform 4.5.2

Administration Guide

This guide describes general and specialized administrative tasks for SUSE CaaS Platform 4.5.2.

Authors: Markus Napp and Nora Kořánová

Publication Date: 2021-06-23

1 About This Guide

1.1 Required Background
1.2 Available Documentation
1.3 Feedback
1.4 Documentation Conventions

2 Cluster Management

2.1 Prerequisites
2.2 Bootstrap and Initial Configuration
2.3 Adding Nodes
2.4 Removing Nodes
2.5 Reconfiguring Nodes
2.6 Node Operations
2.7 Graceful Cluster Shutdown & Startup
2.8 Post Startup Activities

3 Software Management

3.1 Software Installation

4 Cluster Updates

4.1 Update Requirements
4.2 Updating Kubernetes Components
4.3 Updating Nodes
4.4 Base OS Updates

5 Upgrading SUSE CaaS Platform

5.1 Migration to SUSE CaaS Platform 4.5

6 Security

6.1 Network Access Considerations
6.2 Access Control
6.3 Authentication
6.4 Managing LDAP Users and Groups
6.5 Role-Based Access Control (RBAC)
6.6 Admission Controllers
6.7 Pod Security Policies
6.8 NGINX Ingress Controller
6.9 Certificates

7 Logging

7.1 Introduction
7.2 Logging in skuba
7.3 Audit Log
7.4 Centralized Logging

8 Monitoring

8.1 Monitoring Stack
8.2 Health Checks
8.3 Horizontal Pod Autoscaler
8.4 Stratos Web Console

9 Storage

9.1 vSphere Storage

10 Integration

10.1 SUSE Enterprise Storage Integration
10.2 SUSE Cloud Application Platform Integration

11 GPU-Dependent Workloads

11.1 NVIDIA GPUs

12 Cluster Disaster Recovery

12.1 Backing Up etcd Cluster Data
12.2 Recovering Master Nodes

13 Backup and Restore with Velero

13.1 Limitations
13.2 Prerequisites
13.3 Known Issues
13.4 Deployment
13.5 Operations
13.6 Backup
13.7 Restore
13.8 Use Cases
13.9 Uninstall

14 Miscellaneous

14.1 Configuring HTTP/HTTPS Proxy for CRI-O
14.2 Configuring Container Registries for CRI-O
14.3 FlexVolume Configuration
14.4 Configuring kubelet
14.5 Changes from Kubernetes 1.17 to 1.18

15 Troubleshooting

15.1 The supportconfig Tool
15.2 Cluster definition directory
15.3 Log collection
15.4 Debugging SLES Nodes provision
15.5 Debugging Cluster Deployment
15.6 Error x509: certificate signed by unknown authority
15.7 Error Invalid client credentials
15.8 Replacing a Lost Node
15.9 Rebooting an Undrained Node with RBD Volumes Mapped
15.10 ETCD Troubleshooting
15.11 Kubernetes debugging tips
15.12 AWS Deployment fails with cannot attach profile error

16 Glossary

A Contributors

B GNU Licenses

B.1 GNU Free Documentation License

Print this page