1 - Event Streams

1.1 - Overview

Service Overview

Event Streams provides fully managed creation and configuration of the open-source Apache Kafka for large-scale, high-volume message data processing. Samsung Cloud Platform automates the creation and configuration of Apache Kafka through a web-based console, allowing users to configure the main components of Apache Kafka—Broker, Zookeeper, and AKHQ—in either a single or clustered setup.

The Event Streams cluster consists of multiple Broker nodes; you can install between 1 and 10 Brokers, typically deploying three or more. Zookeeper can be installed separately to manage the distributed Brokers, but if not installed separately, it is installed on the Broker nodes. Additionally, we provide AKHQ (Apache Kafka HQ), a tool for managing Kafka, allowing users to perform cluster operation and management through it.

Provided features

Event Streams provides the following features.

  • Auto Provisioning: You can configure and set up an Apache Kafka cluster via the UI.
  • Operation Control Management: Provides functionality to control the status of running servers. In addition to starting and stopping the cluster, restarting is possible to apply configuration changes.
  • AKHQ provision: We provide AKHQ, a tool for managing Kafka, enabling users to manage and monitor clusters.
  • Add Broker node: If expansion is required to improve cluster performance and stability, you can add a node with the same specifications as the existing Broker nodes.
  • Parameter management: You can configure and modify parameters related to performance improvement and security.
  • Monitoring: CPU, memory, performance monitoring information can be accessed via Cloud Monitoring and Servicewatch.

Component

Event Streams provides pre‑validated engine versions and various server types in accordance with its open‑source support policy. Users can select and use them based on the scale of the service they wish to configure.

Engine version

The engine versions supported by Event Streams are as follows.

Technical support can be used until the supplier’s EoTS (End of Technical Service) date, and the EOS date when new creation is stopped is set to six months before the EoTS date.

The EOS and EoTS dates may change according to the supplier’s policy, so please refer to the supplier’s license management policy page for details.

Provided versionEoS DateEoTS Date
3.8.02026-07 (planned)2026-12-02
3.9.12026-09 (planned)2027-02-19
Table. Event Streams Supported Engine Versions

Server Type

The server types supported by Event Streams are as follows.

For detailed information about the server types provided by Event Streams, refer to Event Streams Server Types.

Standard ess1v2m4
CategoryexampleDetailed description
Server typeStandardProvided server types
  • Standard: Standard configuration (vCPU, Memory) commonly used
  • High Capacity: Large-capacity server specifications of 24 vCores or more
Server specificationsess1Provided server specifications
  • ess1, ess2: Standard specifications (vCPU, Memory) commonly used
  • esh2: Large-capacity server specifications
    • Providing servers with 24 vCores or more
Server specificationsv2Number of vCores
  • v2: 2 virtual cores
Server specificationsm4Memory capacity
  • m4: 4GB Memory
Table. Event Streams Server Type Components

Preliminary Service

This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service and prepare in advance.

Service CategoryserviceDetailed description
NetworkingVPCA service that provides an isolated virtual network in a cloud environment
Table. Event Streams Preliminary Services

1.1.1 - Server Type

Event Streams server type

Event Streams provides server types composed of various combinations such as CPU, Memory, and Network Bandwidth. When creating Event Streams, Apache kafka is installed according to the server type selected for the intended purpose.

The server types supported by Event Streams are as follows.

Standard ess1v2m4
Category
exampleDetailed description
Server typeStandardProvided server type classifications
  • Standard: Configured with commonly used standard specifications (vCPU, Memory)
  • High Capacity: Large-capacity server specifications exceeding Standard
Server specificationsess1Provided server type classification and generation
  • ess1: s means standard specification, and 1 indicates the generation
  • esh2: h means high-capacity server specification, and 2 indicates the generation
Server specificationsv2Number of vCores
  • v2: 2 virtual cores
Server specificationsm4Memory capacity
  • m4: 4GB Memory
Table. Event Streams server type format
Reference

Check the node’s minimum specifications as shown below and select the server type.

CategoryvCPUMemory
Broker2 vCore4 GB
Zookeeper1 vCore2 GB

ess1 server type

The ess1 server type of Event Streams is offered with standard specifications (vCPU, Memory) and is suitable for various database workloads.

  • Intel 3rd‑generation (Ice Lake) Xeon Gold 6342 Processor up to 3.3 GHz
  • Supports up to 16 vCPUs and 64 GB of memory
  • Maximum networking speed of 12.5 Gbps
CategoryServer typevCPUMemoryNetwork Bandwidth
Standardess1v1m21 vCore2 GBUp to 10 Gbps
Standardess1v2m42 vCore4 GBUp to 10 Gbps
Standardess1v2m82 vCore8 GBUp to 10 Gbps
Standardess1v4m84 vCore8 GBUp to 10 Gbps
Standardess1v4m164 vCore16 GBUp to 10 Gbps
Standardess1v8m168 vCore16 GBUp to 10 Gbps
Standardess1v8m328 vCore32 GBUp to 10 Gbps
Standardess1v16m3216 vCore32 GBUp to 12.5 Gbps
Standardess1v16m6416 vCore64 GBUp to 12.5 Gbps
Table. Event Streams server type specifications - ess1 server type

ess2 server type

The ess2 server type of Event Streams is offered with standard specifications (vCPU, Memory) and is suitable for various database workloads.

  • Intel 4th‑generation (Sapphire Rapids) Xeon Gold 6448H Processor up to 3.2 GHz
  • Supports up to 16 vCPUs and 64 GB of memory
  • Maximum networking speed of 12.5 Gbps
CategoryServer typeCPU vCoreMemoryNetwork Bandwidth(Gbps)
Standardess2v1m21 vCore2 GBUp to 10 Gbps
Standardess2v2m42 vCore4 GBUp to 10 Gbps
Standardess2v2m82 vCore8 GBUp to 10 Gbps
Standardess2v4m84 vCore8 GBUp to 10 Gbps
Standardess2v4m164 vCore16 GBUp to 10 Gbps
Standardess2v8m168 vCore16 GBUp to 10 Gbps
Standardess2v8m328 vCore32 GBUp to 10 Gbps
Standardess2v16m3216 vCore32 GBUp to 12.5 Gbps
Standardess2v16m6416 vCore64 GBUp to 12.5 Gbps
Table. Event Streams server type specifications - ess2 server type

esh2 server type

The esh2 server type of Event Streams is offered with high-capacity server specifications and is suitable for database workloads that require large-scale data processing.

  • Intel 4th‑generation (Sapphire Rapids) Xeon Gold 6448H Processor up to 3.2 GHz
  • Supports up to 32 vCPUs and 128 GB of memory
  • Up to 25 Gbps networking speed
CategoryServer typevCPUMemoryNetwork Bandwidth
High Capacityesh2v32m6432 vCore64 GBUp to 25 Gbps
High Capacityesh2v32m12832 vCore128 GBMaximum 25 Gbps
Table. Event Streams server type specifications - esh2 server type

1.1.2 - Monitoring Metrics

Cloud Monitoring Service Termination Notice

According to the policy of Samsung Cloud Platform, the Cloud Monitoring service is scheduled to be terminated.

Accordingly, Event Streams will no longer be able to monitor resources via Cloud Monitoring after the service improvement work in July 2026.
After that, resource monitoring can be continuously performed through the ServiceWatch service, which was released in October 2025.

  • Resources created after the service improvement work in March 2026 are provided with monitoring based on the ServiceWatch service by default.

Detailed information about ServiceWatch can be found in the ServiceWatch Overview.

Event Streams monitoring metrics

The table below shows the performance monitoring metrics for Event Streams that can be viewed through Cloud Monitoring. For detailed Cloud Monitoring usage, see the Cloud Monitoring guide.

For Event Streams server monitoring metrics, refer to the Virtual Server Monitoring Metrics guide.

Performance itemsDetailed descriptionunit
AKHQ State [PID]AHKQ process PIDPID
Connections [Zookeeper Client]Number of ZooKeeper connectionscnt
Disk Useddatadir usagebytes
Failed [Client Fetch Request]Client fetch request processing failure countcnt
Failed [Produce Request]Procucer request processing failure countcnt
Incomming MessagesNumber of messages received by the brokercnt
Instance State [PID]kafka process PIDPID
Kibana state [PID]Kibana process PIDPID
Leader ElectionsNumber of Leader Election occurrencescnt
Leader Elections [Unclean]Number of Unclean Leader Election occurrencescnt
Log FlushesNumber of log flush occurrencescnt
Network In BytesTotal bytes received by the entire Topicbytes
Network Out BytesTotal bytes transmitted by the Topicbytes
Rejected BytesTotal bytes rejected by the Topicbytes
Request Queue LengthRequest queue sizecnt
ShardsCluster shard countcnt
Zookeeper Sessions [Closed]ZooKeeper closed sessions per secondcnt
Zookeeper Sessions [Expired]ZooKeeper expired sessions per secondcnt
Zookeeper State [PID]zookeeper process PIDPID
Table. Event Streams monitoring metrics

1.1.3 - ServiceWatch Metrics

Event Streams sends metrics to ServiceWatch. The metrics provided by default monitoring are data collected at 1‑minute intervals.

Note
For checking metrics in ServiceWatch, refer to the ServiceWatch guide.

Basic Metrics

The following are the basic metrics for the Event Streams namespace.

Indicators whose names are shown in bold below are the indicators selected as key metrics among the default metrics provided by Event Streams. Key metrics are used to build service dashboards that are automatically created for each service in ServiceWatch.

Each metric provides guidance in the user guide about which statistical value is meaningful when querying that metric, and among the meaningful statistics, the statistical values displayed in bold text are the primary statistics. In the service dashboard, primary metrics can be viewed using the primary statistical values.

OS Basic Metrics

Category
Performance itemsunitDetailed descriptionmeaningful statistics
CPUCPU UsagePercentCPU usage
  • maximum
DiskDisk UsagePercentDisk usage
  • Maximum
DiskDisk Write BytesBytes/SecondWrite throughput (bytes/second) on block device
  • average
  • maximum
  • minimum
DiskDisk Read BytesBytes/SecondRead capacity (bytes/second) from block device
  • average
  • maximum
  • minimum
DiskDisk Write RequestsCount/SecondNumber of write requests on block device (requests per second)
  • average
  • maximum
  • minimum
DiskDisk Read RequestsCount/SecondNumber of read requests on block device (requests per second)
  • average
  • maximum
  • minimum
DiskAverage Disk I/O Queue SizeNoneAverage queue length of requests issued to the block device
  • average
  • maximum
  • minimum
DiskDisk I/O UtilizationPercentThe proportion of time the block device actually spent handling I/O operations
  • average
  • maximum
  • minimum
MemoryMemory UsagePercentMemory usage
  • Maximum
NetworkNetwork In BytesBytes/SecondReceived data rate (bytes/second) on the network interface
  • average
  • maximum
  • minimum
NetworkNetwork Out BytesBytes/SecondTransmitted capacity (bytes/second) on the network interface
  • average
  • maximum
  • minimum
NetworkTCP ConnectionsCount/SecondCurrent total number of successfully established TCP connections
  • average
  • maximum
  • minimum
NetworkNetwork In PacketsCountNumber of packets received on the network interface
  • Average
  • Maximum
  • Minimum
NetworkNetwork Out PacketsCountNumber of packets transmitted on the network interface
  • average
  • maximum
  • minimum
NetworkNetwork In DroppedCountNumber of packet drops received on the network interface
  • average
  • maximum
  • minimum
NetworkNetwork Out DroppedCountNumber of packet drops transmitted from the network interface
  • average
  • maximum
  • minimum
NetworkNetwork In ErrorsCountNumber of packet errors received on the network interface
  • average
  • maximum
  • minimum
NetworkNetwork Out ErrorsCountNumber of packet errors transmitted on the network interface
  • average
  • maximum
  • minimum
Table. OS basic metrics

Event Streams basic metrics

Category
Performance itemsunitDetailed descriptionmeaningful statistics
JVMJVM Threads CurrentCountNumber of currently active threads
  • Total
  • Average
  • Maximum
  • Minimum
JVMJVM Memory UsageBytesCurrent amount of memory used by the JVM
  • Total
  • Average
  • Maximum
  • Minimum
JVMTime spent in GCNoneJVM time spent on garbage collection (GC seconds per minute)
  • Total
  • Average
  • Maximum
  • Minimum
JVMCount in GCCount/MinuteNumber of times the JVM executed the garbage collection method
  • Total
  • Average
  • Maximum
  • Minimum
kafka_controllerOffline PartitionsCountNumber of partitions that cannot be written to or read from because there is no active leader
  • Total
  • Average
  • Maximum
  • Minimum
kafka_controllerActive ControllerCountNumber of active controllers in the cluster
  • Total
  • Average
  • Maximum
  • Minimum
kafka_controllerTotal of TopicsCountNumber of global topics observed in the active controller
  • Total
  • Average
  • Maximum
  • Minimum
kafka_controllerLeader ElectionsCount/MinuteLeader election when a broker fails
  • Total
  • Average
  • Maximum
  • Minimum
kafka_controllerUnclean Leader ElectionsCount/MinuteElect a broker with OSR (out-of sync replica) as the leader
  • Total
  • Average
  • Maximum
  • Minimum
kafka_networkRequest QueueCountRequest queue size
  • Total
  • Average
  • Maximum
  • Minimum
kafka_serverZookeeper Expired SessionsCount/MinuteZookeeper expired session
  • Total
  • Average
  • Maximum
  • Minimum
kafka_serverIncoming MessagesCount/SecondMessage received by the Broker
  • Total
  • Average
  • Maximum
  • Minimum
kafka_serverProducer requestsCount/SecondRequest (Produce) received by the Broker
  • Total
  • Average
  • Maximum
  • Minimum
kafka_serverConsumer requestsCount/SecondRequest (Fetch) received by the Broker
  • Total
  • Average
  • Maximum
  • Minimum
kafka_serverFailed Fetch RequestsCount/MinuteNumber of failed fetches by the Consumer
  • Total
  • Average
  • Maximum
  • Minimum
kafka_serverFailed Produce RequestsCount/MinuteNumber of failed requests by the Producer
  • Total
  • Average
  • Maximum
  • Minimum
kafka_serverIncoming Byte RateBytes/SecondsByte transmission rate received from client (per broker)
  • Total
  • Average
  • Maximum
  • Minimum
kafka_serverOutgoing Byte RateBytes/SecondsByte transmission rate to the client (by broker)
  • Total
  • Average
  • Maximum
  • Minimum
kafka_serverRejected Byte RateBytes/SecondsBytes rejected per broker because the record batch size exceeds the max.message.bytes setting
  • Total
  • Average
  • Maximum
  • Minimum
kafka_serverOnline PartitionsCountTotal number of partitions
  • Total
  • Average
  • Maximum
  • Minimum
kafka_serverLeader PartitionsCountleader partition count
  • Total
  • Average
  • Maximum
  • Minimum
kafka_serverUnder Replicated PartitionsCountNumber of partitions with insufficient replica count
  • Total
  • Average
  • Maximum
  • Minimum
kafka_serverUnder Minisr PartitionsCountNumber of partitions whose in-sync replica count is less than minIsr
  • Total
  • Average
  • Maximum
  • Minimum
SystemdActive Systemd UnitNoneService Status
  • 1 - Service Running
  • 0 - Service Stopped
-
Table. Event Streams basic metrics

1.2 - How-to guides

Users can create the service by entering the required information for Event Streams and selecting detailed options through the Samsung Cloud Platform Console.

Cloud Monitoring service termination notice

According to the policy of Samsung Cloud Platform, the Cloud Monitoring service is scheduled to be terminated.

Accordingly, Event Streams will no longer be able to monitor resources via Cloud Monitoring after the service improvement work in July 2026.
After that, resource monitoring can be continuously performed through the ServiceWatch service released in October 2025.

  • Resources created after the service improvement work in March 2026 are provided with monitoring based on the ServiceWatch service by default.

Detailed information about ServiceWatch can be found in the ServiceWatch 개요.

Create Event Streams

You can create and use the Event Streams service in the Samsung Cloud Platform Console.

Information

Before creating the service, configure the VPC’s subnet type as General.

  • If the subnet type is Local, the creation of the corresponding Database service is not possible.

To create Event Streams, follow these steps.

  1. All Services > Data Analytics > Event Streams click the menu. 1. Navigate to the Service Home page of Event Streams.

  2. On the Service Home page, click the Create Event Streams button. 2. Go to the Create Event Streams page.

  3. Event Streams creation page, enter the information required to create the service and select detailed options.

    • Select the required information in the Image and version selection area.
      Category
      required status
      Detailed description
      Image versionRequiredProvide a list of Event Streams versions
      Table. Event Streams service information input items
    • In the Service Information Input area, enter or select the required information.
      Category
      required status
      Detailed description
      Server name PrefixRequiredThe server name where Apache Kafka will be installed
      • must start with a lowercase English letter and be entered using lowercase letters, numbers, and the special character (-) with a length of 3 to 13 characters
      • A postfix such as 001, 002 is appended to the base server name to generate the actual server name
      Cluster nameRequiredCluster name of the servers
      • Enter using English letters, 3 ~ 20 characters
      • A cluster is a unit that groups multiple servers
      Broker > Number of Broker NodesRequiredNumber of Broker Nodes
      Broker > server typeRequiredServer type for installing the Broker
      • Standard: Standard specification commonly used
      • High Capacity: Large-capacity server with 24 vCores or more
      Broker > Planned ComputeSelectStatus of resources with Planned Compute configured
      • In Use: Number of resources with Planned Compute that are currently in use
      • Configured: Number of resources with Planned Compute configured
      • Coverage Preview: Amount applied per resource by Planned Compute
      Broker > Block StorageRequiredBlock Storage type to be used for the Broker node
      • Base OS: The area where the engine is installed
      • DATA: Data file storage area
        • Select the storage type and then enter the capacity (for details on each Block Storage type, see Block Storage 생성하기)
          • SSD: High‑performance general volume
          • HDD: General volume
          • SSD_KMS/HDD_KMS: Additional encrypted volume using Samsung Cloud Platform KMS (Key Management System) encryption keys
        • Enter the capacity as a multiple of 8 within the range 16 to 5,120
      Zookeeper separate installation > useSelectWhether to install Zookeeper nodes separately
      • If you select Use, install Zookeeper nodes separately
      • If Zookeeper nodes are not installed separately, the Broker node also performs the Zookeeper role
      Zookeeper separate installation > server typeSelectServer type on which Zookeeper will be installed
      • Zookeeper nodes provide vCPU 1, Memory 2G or vCPU 2, Memory 4G
      Zookeeper separate installation > Planned ComputeSelectStatus of resources with Planned Compute configured
      • In Use: Number of resources with Planned Compute that are currently in use
      • Configured: Number of resources with Planned Compute configured
      • Coverage Preview: Amount applied per resource by Planned Compute
      • Apply for Planned Compute Service: Go to the Planned Compute service application page
      Separate Zookeeper installation > Block StorageRequiredBlock Storage type to be used for Zookeeper nodes
      • Default OS: Area where the engine is installed
      • DATA: Data file storage area
        • After selecting the storage type, enter the capacity (see Block Storage 생성하기 for details on each Block Storage type)
          • SSD: High‑performance general volume
          • HDD: General volume
          • SSD_KMS/HDD_KMS: Additional encrypted volume using Samsung Cloud Platform KMS (Key Management System) encryption keys
        • Enter the capacity as a multiple of 8 within the range 16 to 5,120
      AKHQ > UseRequiredWhether to install AKHQ
      • If you select Use, AKHQ will be installed
      AKHQ > Server TypeRequiredServer type on which AKHQ will be installed
      • AKHQ only provides the vCPU 2, Memory 4G type
      AKHQ > Planned ComputeSelectStatus of resources with Planned Compute configured
      • In Use: Number of resources with Planned Compute that are currently in use
      • Configured: Number of resources with Planned Compute configured
      • Coverage Preview: Amount applied per resource by Planned Compute
      AKHQ > Block StorageRequiredBlock Storage type to be used on the server where AKHQ is installed
      • Base OS: area where the engine is installed
      AKHQ > AKHQ accountRequiredAKHQ account
      • Enter using lowercase English letters, 2 ~ 20 characters
      AKHQ > AKHQ passwordRequiredAKHQ account password
      • English letters, numbers, and special characters ( excluded) including 8 ~ 30 characters
      AKHQ > Verify AKHQ passwordRequiredConfirm AKHQ account password
      • Re-enter the AKHQ account password identically
      AKHQ > AKHQ Port numberRequiredAKHQ connection port number
      • The port number is automatically set to 8080 and cannot be modified
      Network > Common SettingsRequiredNetwork settings for servers created by the service
      • Select when you want to apply the same settings to all installed servers
      • Select a pre‑created VPC and Subnet
      • IP: only automatic generation is possible
      • For Public NAT settings, it is only possible in per‑server configuration
      Network > Server-specific SettingsRequiredNetwork settings where servers generated by the service are installed
      • Select if you want to apply different settings per installed server
      • Select a pre‑created VPC and Subnet
      • IP: Enter the IP for each server
      • Public NAT feature is available only when the VPC is connected to an Internet Gateway; checking Use allows selection from the reserved IPs in the VPC product’s Public IP pool. For details, see Public IP 생성하기
      IP access controlSelectService Access Policy Configuration
      • Since the access policy is set for the IP entered on the page, you do not need to configure a separate Security Group policy
      • Enter the IP in IP format (e.g., 192.168.10.1) or CIDR format (e.g., 192.168.10.0/24, 192.168.10.1/32) and click the Add button
      • To delete an entered IP, click the x button next to the IP
      maintenance periodSelectEvent Streams maintenance window
      • If you select Use, set the day of week, start time, and duration
      • It is recommended to set a maintenance window for stable service management. Patch operations will be performed at the scheduled time, and service interruption may occur
      • We are not responsible for issues arising from patches not being applied (set as not used)
      Table. Event Streams service configuration items
    • Enter required database configuration information In this area, enter or select the required information.
      Category
      required status
      Detailed description
      Zookeeper SASL accountRequiredZookeeper account
      • Enter using lowercase English letters, 2 to 20 characters
      Zookeeper SASL passwordRequiredZookeeper account password
      • including English letters, numbers, and special characters ( excluded) and enter 8 to 30 characters
      Check Zookeeper SASL passwordRequiredVerify Zookeeper account password
      • Re-enter the Zookeeper SASL account password identically
      Zookeeper Port numberRequiredZookeeper port number
      • 1200 ~ 65535 must be entered as one of them, and the Broker port or 2888, 3888 cannot be used
      Broker SASL accountRequiredKafka login account
      • Enter using lowercase English letters, 2 ~ 20 characters
      Broker SASL passwordRequiredKafka login account password
      • Enter 8 to 30 characters, including English letters, numbers, and special characters (excluding )
      Verify Broker SASL passwordRequiredVerify Kafka connection account password
      • Re-enter the Broker SASL account password identically
      Broker Port numberRequiredKafka port number
      • 1200 ~ 65535 can be entered as one of , and the Broker port or 2888, 3888
      • cannot be used
      ParameterRequiredEvent Streams configuration parameters
      • View button can be clicked to view detailed information of the parameters
      • Parameters can be modified after the service creation is complete, and a restart is required when modified
      time zoneSelectStandard time zone for the service
      ServiceWatch log collectionSelectServiceWatch log collection status
      • Use to configure the ServiceWatch log collection feature
      • It is provided free of charge up to 5 GB for all services within the account, and charges apply based on storage usage for amounts exceeding 5 GB
      • When collecting, log groups and log streams are created automatically, and they cannot be deleted until the resources are removed
      • To prevent exceeding 5 GB, it is recommended to delete log data directly or shorten the retention period
      Table. Required input items for configuring Event Streams Database
    • In the Additional Information Input area, enter or select the required information.
      Category
      required status
      Detailed description
      tagSelectAdd Tag
      • Add Tag Click the button to create and add a tag, or add an existing tag
      • You can add up to 50 tags
      • The newly added tags are applied after the service creation is completed
      Table. Event Streams service additional information input fields
  4. Summary Check the detailed information and estimated charges generated in the panel, and click the Create button.

    • Once creation is complete, check the created resource on the Resource List page.

View Event Streams details

The Event Streams service lets you view and modify the complete list of resources and their detailed information. The Event Streams Details page consists of the Details, Tags, Activity Log tabs.

To view detailed information about the Event Streams service, follow these steps.

  1. All Services > Data Analytics > Event Streams Click the menu. 1. Navigate to the Service Home page of Event Streams.
  2. On the Service Home page, click the Event Streams menu. 2. Go to the Event Streams list page.
  3. On the Event Streams List page, click the resource to view detailed information. 3. Go to the Event Streams Details page.
    • Event Streams Details At the top of the page, status information and additional feature details are displayed.
      CategoryDetailed description
      Cluster statusCluster status
      • Creating: The cluster is being created
      • Editing: The cluster is being changed to an operational state
      • Error: The cluster encountered a failure while performing a task
        • If this persists, contact the administrator
      • Failed: The cluster failed during creation
      • Restarting: The cluster is restarting
      • Running: The cluster is operating normally
      • Starting: The cluster is starting
      • Stopped: The cluster is stopped
      • Stopping: The cluster is stopping
      • Synchronizing: The cluster is synchronizing
      • Terminating: The cluster is being terminated
      • Unknown: The cluster status is unknown
        • If this persists, contact the administrator
      • Upgrading: The cluster is being upgraded
      Cluster controlButton to change the cluster state
      • Start: Start a stopped cluster
      • Stop: Stop a running cluster
      • Restart: Restart a running cluster
      See more featuresCluster management buttons
      • Service status synchronization: Retrieve the current server status and synchronize it to the Console
      • Parameter management: View and modify service configuration parameters
      • Add Broker Node: Add a Broker Node
        • When configured as a cluster, the Add Broker Node button is displayed
      Service cancellationCancel service button
      Table. Event Streams status information and additional features

Detailed information

Event Streams List page allows you to view detailed information of the selected resource and, if necessary, edit the information.

CategoryDetailed description
Server InformationServer information configured in this cluster
  • Category: Server type (Zookeeper&Broker,Broker, Zookeeper, AKHQ)
  • Server name: Server name
  • IP:Port: Server IP and port
  • NAT IP: NAT IP
  • Status: Server status
ServiceService name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
  • means the cluster SRN
Resource nameresource name
  • means the cluster name
Resource IDUnique resource ID in the service
ConstructorUser who created the service
Creation date and timeService creation date and time
ModifierUser who edited the service information
Modification dateDate and time the service information was modified
Image versionInstalled service image and version information
  • Edit Click the button to upgrade the version
Cluster nameCluster name of the configured servers
Planned ComputeResource status with Planned Compute configured
maintenance periodPatch work period configuration status
  • If maintenance period configuration is required, click the Edit button to set it
time zoneStandard time zone for the service
Zookeeper Port numberZookeeper port number
Broker Port numberKafka port number
AKHQ connection informationAKHQ connection information
ServiceWatch log collectionServiceWatch Log Collection Configuration Status
  • If log collection configuration is required, click the Edit button next to Log Collection to configure
NetworkInstalled network information (VPC, Subnet)
IP access controlService access policy settings
  • If you need to add or remove IPs, click the Edit button to configure
ZookeeperServer type, base OS, and additional Disk information
  • If you need to modify the server type, click the Edit button next to the server type to configure it
    • Modifying the server type requires a server restart
  • If additional storage is needed, click the Edit button next to the storage capacity to expand it
BrokerServer type, base OS, and additional Disk information for the Broker node
  • If you need to modify the server type, click the Edit button next to the server type to configure
    • Modifying the server type requires a server restart
  • If you need to expand storage, click the Edit button next to the storage capacity to expand
AKHQServer type and basic OS information for the AKHQ node
  • If you need to modify the server type, click the Edit button next to the server type to configure it
    • Modifying the server type requires a server restart
Table. Event Streams detailed information items

tag

Event Streams List page lets you view the tag information of the selected resource, and you can add, modify, or delete it.

CategoryDetailed description
Tag listTag list
  • You can view the Key, Value information of the tag
  • Up to 50 tags can be added per resource
  • When entering a tag, you can search and select from the list of previously created Keys and Values
Table. Event Streams tag tab items

Work History

On the Event Streams List page, you can view the operation history of the selected resource.

CategoryDetailed description
Task History ListResource Change History
  • Task details, task date/time, resource type, resource ID, resource name, event topic, task result, operator information verification
  • Provides detailed search functionality via the Detailed Search button
Table. Event Streams Job History Tab Detailed Information Items

Managing Event Streams Resources

If you need to change the existing configuration options of a created Event Streams resource, manage parameters, or add a Broker Node configuration, you can perform the tasks on the Event Streams Details page.

Control operation

If changes occur to a running Event Streams resource, you can start, stop, or restart it.

To control the operation of Event Streams, follow these steps.

  1. All Services > Data Analytics > Event Streams Click the menu. 1. Navigate to the Service Home page of Event Streams.
  2. On the Service Home page, click the Event Streams menu. 2. Go to the Event Streams list page.
  3. On the Event Streams list page, click the resource you want to control. 3. Go to the Event Streams Details page.
  4. Check the Event Streams status and complete the change using the control button below.
    • Start: Event Streams service is installed on the server and the Event Streams service is running (Running).
    • Stop: The server where the Event Streams service is installed and the Event Streams service will be stopped (Stopped).
    • Restart: Only the Event Streams service will be restarted.

Synchronize service status

You can query the current server status and synchronize it to the Console.

To synchronize the service status of Event Streams, follow these steps.

  1. All Services > Data Analytics > Event Streams Click the menu. 1. Navigate to the Service Home page of Event Streams.
  2. On the Service Home page, click the Event Streams menu. 2. Go to the Event Streams list page.
  3. On the Event Streams List page, click the resource to view the service status. 3. Go to the Event Streams Details page.
  4. Service Status Sync Click the button. 4. The query takes a short amount of time, and while it is being performed, the cluster changes to the Synchronizing state.
  5. When the query completes, the status in the server information field is updated, and the cluster changes to the Running state.

Manage Parameters

Provides parameter lookup and edit functionality.

To view and modify configuration parameters, follow the steps below.

  1. Click the All Services > Data Analytics > Event Streams menu. 1. Navigate to the Service Home page of Event Streams.
  2. On the Service Home page, click the Event Streams menu. 2. Navigate to the Event Streams list page.
  3. On the Event Streams List page, click the resource whose parameters you want to view and edit. 3. Go to the Event Streams Details page.
  4. Click the Parameter Management button. 4. Go to the Parameter Management page.
  5. On the Parameter Management page, click the Search button. 5. Database query The popup window opens.
  6. To view the Parameter information, click the Confirm button. 6. Retrieving may take a short amount of time.
    • You can modify the Parameter information after performing a query.
  7. To edit the Parameter information, click the Edit button and then enter the changes in the Custom Value field of the Parameter you want to modify.
    • When the Application Type is Dynamic, it takes effect immediately, and when it is Static, a service restart is required, causing service interruption.
  8. When the input is complete, click the Save button.

Change server type

You can change the configured server type.

To change the server type, follow these steps.

Caution
  • If the server type is configured as Standard, it cannot be changed to High Capacity. * If you want to change to High Capacity, create a new service.
  • If you modify the server type, a server restart is required. * Please separately verify any SW license modifications or SW settings and their implementation due to specification changes.
  1. All Services > Data Analytics > Event Streams Click the menu. 1. Navigate to the Service Home page of Event Streams.
  2. On the Service Home page, click the Event Streams menu. 2. Event Streams List navigate to the page.
  3. On the Event Streams list page, click the resource whose server type you want to change. 3. Go to the Event Streams Details page.
  4. Click the Edit button for the server type you want to change at the bottom of the detailed information. 4. Edit Server Type popup window opens.
  5. Server Type Edit After selecting the server type in the popup window, click the Confirm button.

Expand storage

Storage added to the data area can be expanded up to a maximum of 5 TB based on the initially allocated capacity. You can expand storage without stopping Event Streams, and when configured as a cluster, all nodes are expanded simultaneously.

Guide
  • If encryption is configured on the existing Block Storage, encryption will also be applied to the additional Disk.
  • Disk size modification is only possible by increasing it by at least 16 GB over the current disk size.

To increase storage capacity, follow the steps below.

  1. All Services > Data Analytics > Event Streams click the menu. 1. Navigate to the Service Home page of Event Streams.
  2. On the Service Home page, click the Event Streams menu. 2. Go to the Event Streams list page.
  3. On the Event Streams list page, click the resource for which you want to change the server type. 3. Go to the Event Streams Details page.
  4. Click the Edit button for the added Disk you want to expand at the bottom of the detailed information. 4. Disk Edit The popup window opens.
  5. Disk Edit After entering the expanded capacity in the popup window, click the Confirm button.

Add Broker Node

If you need to expand the Event Streams cluster, you can add nodes with the same specifications as the Broker Node you are using. The added nodes are incorporated into the existing cluster without server downtime, and the existing data is automatically redistributed.

Guide
  • You can use up to 10 nodes within the cluster. * Please note that additional charges apply to the created nodes.
  • During node addition, the cluster’s performance may degrade.

To add a Broker node, follow these steps.

  1. All Services > Data Analytics > Event Streams menu, please click. 1. Navigate to the Service Home page of Event Streams.
  2. On the Service Home page, click the Event Streams menu. 2. Go to the Event Streams list page.
  3. On the Event Streams resource list page, click the resource you want to recover. 3. Navigate to the Event Streams Details page.
  4. Click the Add Broker Node button. 4. Go to the Add Broker Node page.
  5. After entering the relevant information in the Enter required information area, click the Complete button.
    Category
    required status
    Detailed description
    Server nameRequiredThe server name where the Broker is installed
    • It is set to the server name configured in the original cluster.
    Cluster nameRequiredCluster name
    • It is set to the cluster name configured in the original cluster.
    Additional Node CountRequiredNumber of Nodes to add
    • Use up to 10 nodes per cluster
    Service Type > Server TypeRequiredThe server type on which the Broker will be installed
    • is set to be the same as the server type configured in the original cluster.
    Service Type > Planned ComputeSelectStatus of resources with Planned Compute configured
    • In Use: Number of resources with Planned Compute that are currently in use
    • Configured: Number of resources with Planned Compute configured
    • Coverage Preview: Amount applied per resource by Planned Compute
    Service Type > Block StorageRequiredBlock Storage settings for the Broker node
    • The storage type and capacity configured in the original cluster are applied identically
    NetworkRequiredThe network on which the servers are installed
    • is applied identically to the network configured in the original cluster
    Table. Additional items for Event Streams Broker Node

Cancel Event Streams

You can cancel unused Event Streams to reduce operating costs. However, if you terminate the service, the running service may be stopped immediately, so you should proceed with the termination only after fully considering the impact that may arise from service interruption.

To cancel Event Streams, follow these steps.

  1. All Services > Data Analytics > Event Streams Click the menu. 1. Navigate to the Service Home page of Event Streams.
  2. On the Service Home page, click the Event Streams menu. 2. Go to the Event Streams list page.
  3. On the Event Streams List page, select the resource to cancel and click the Cancel Service button.
  4. After the termination is complete, check on the Event Streams list page whether the resource has been terminated.

1.3 - API Reference

API Reference

1.4 - CLI Reference

CLI Reference

1.5 - Release Note

Event Streams

2025.07.01
FEATURE Add Terraform and disk type
  • Provides Terraform.
  • Provides additional HDD, HDD_KMS disk types.
2025.02.27
NEW Event Streams service official version release
  • The Event Streams service, which easily creates and manages Apache Kafka clusters in a web environment, has been launched.

2 - Search Engine

2.1 - Overview

Service Overview

Search Engine provides automated creation and configuration of the distributed search and analytics engines Elasticsearch and OpenSearch through a web-based console. Users can select a server type that matches the system configuration to set up a cluster, and it supports the data analysis and visualization tools Kibana and the OpenSearch dashboard.

Notice
  • Search Engine provides the Elasticsearch Enterprise version and the OpenSearch version.
  • Elasticsearch Enterprise’s software license uses a user-owned license (BYOL, Bring Your Own License), and software licensing policies in cloud environments must follow the vendor’s policies.

The Search Engine Cluster consists of multiple master nodes and data nodes. Data nodes can be installed from a minimum of one up to a maximum of ten, and are typically deployed with three or more. If a master node is not installed separately, the data nodes also perform the master node role, and up to ten can be installed. When master nodes are installed separately, up to 50 data nodes are possible.

Provided features

Search Engine provides the following features.

  • Auto Provisioning (Auto Provisioning): You can configure and set up Elasticsearch and OpenSearch clusters via the UI.
  • Operation Control Management: Provides functionality to control the status of running servers. In addition to starting and stopping the cluster, it can be restarted to apply configuration values.
  • Backup and Recovery: You can back up using the built-in backup feature, and you can restore to the point in time of the backup file.
  • Add Data Node: If cluster expansion is required, you can add nodes with the same specifications as the existing data nodes. Up to 10 nodes can be added within the cluster.
  • Visualization Tool Support: Provides data analysis and visualization tools, and supports Elasticsearch Kibana or OpenSearch dashboards.
  • Monitoring: CPU, memory, and cluster performance monitoring information can be accessed through the Cloud Monitoring service.

Component

Search Engine provides pre‑validated engine versions and various server types in accordance with its open‑source support policy. Users can select and use them based on the scale of the service they wish to configure.

Engine version

The engine versions supported by Search Engine are as follows.

Technical support can be used until the supplier’s EoTS (End of Technical Service) date, and the EOS date when new creation is halted is set to six months before the EoTS date.

The EOS and EoTS dates may change according to the supplier’s policy, so please refer to the supplier’s license management policy page for details.

Notice

The next version of Search Engine is scheduled to be offered after March 2026. The actual service schedule may change.

  • OpenSearch version 3.4.0
Provided versionEoS DateEoTS Date
8.15.02027-01 (planned)2027-07-15
8.19.72027-01 (planned)2027-07-15
Table. Search Engine Elasticsearch Engine Version
Provided versionEoS DateEoTS Date
2.19.32027-01 (planned)2027-07-15
3.4.0TBDTBD
Table. Search Engine OpenSearch Engine Version

Server Type

The server types supported by Search Engine are as follows.

For detailed information about the server types provided by Search Engine, see Search Engine Server Types.

Standard se1v2m4
CategoryexampleDetailed description
Server typeStandardProvided server types
  • Standard: Standard configuration (vCPU, Memory) commonly used
  • High Capacity: Large-capacity server specifications of 24 vCores or more
Server specificationsse1Provided server specifications
  • se1: Standard specifications (vCPU, Memory) commonly used
  • seh2: High-capacity server specifications
    • Providing servers with 24 vCores or more
Server specificationsv2Number of vCores
  • v2: 2 virtual cores
Server specificationsm4Memory capacity
  • m4: 4GB Memory
Table. Search Engine Server Type Components

Preliminary Service

This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service and prepare in advance.

Service CategoryserviceDetailed description
NetworkingVPCA service that provides an isolated virtual network in a cloud environment
Table. Search Engine Pre-requisite Services

2.1.1 - Server Type

Search Engine server type

Search Engine provides server types composed of various combinations such as CPU, Memory, and Network Bandwidth. When creating a Search Engine, Elastic Search is installed according to the server type selected for the intended use.

The server types supported by Search Engine are as follows.

Standard ses1v2m4
Category
exampleDetailed description
Server typeStandardProvided server type classifications
  • Standard: Configured with commonly used standard specifications (vCPU, Memory)
  • High Capacity: Large-capacity server specifications exceeding Standard
Server specificationsdb1Provided server type classification and generation
  • ses1: s means standard specification, and 1 indicates the generation
  • seh2: h means high-capacity server specification, and 2 indicates the generation
Server specificationsv2Number of vCores
  • v2: 2 virtual cores
Server specificationsm4Memory capacity
  • m4: 4GB Memory
Table. Search Engine Server Type Format

ses1 server type

The ses1 server type of Search Engine is offered with standard specifications (vCPU, Memory) and is suitable for various database workloads.

  • Intel 3rd‑generation (Ice Lake) Xeon Gold 6342 Processor up to 3.3 GHz
  • Supports up to 16 vCPUs and 256 GB of memory
  • Maximum networking speed of 12.5 Gbps
CategoryServer typevCPUMemoryNetwork Bandwidth
Standardses1v1m21 vCore2 GBUp to 10 Gbps
Standardses1v2m82 vCore8 GBUp to 10 Gbps
Standardses1v2m162 vCore16 GBUp to 10 Gbps
Standardses1v2m242 vCore24 GBUp to 10 Gbps
Standardses1v2m322 vCore32 GBUp to 10 Gbps
Standardses1v4m84 vCore8 GBUp to 10 Gbps
Standardses1v4m164 vCore16 GBUp to 10 Gbps
Standardses1v4m324 vCore32 GBUp to 10 Gbps
Standardses1v4m484 vCore48 GBUp to 10 Gbps
Standardses1v4m644 vCore64 GBUp to 10 Gbps
Standardses1v6m126 vCore12 GBUp to 10 Gbps
Standardses1v6m246 vCore24 GBUp to 10 Gbps
Standardses1v6m486 vCore48 GBUp to 10 Gbps
Standardses1v6m726 vCore72 GBUp to 10 Gbps
Standardses1v6m966 vCore96 GBUp to 10 Gbps
Standardses1v8m168 vCore16 GBUp to 10 Gbps
Standardses1v8m328 vCore32 GBUp to 10 Gbps
Standardses1v8m648 vCore64 GBUp to 10 Gbps
Standardses1v8m968 vCore96 GBUp to 10 Gbps
Standardses1v8m1288 vCore128 GBUp to 10 Gbps
Standardses1v10m2010 vCore20 GBUp to 10 Gbps
Standardses1v10m4010 vCore40 GBUp to 10 Gbps
Standardses1v10m8010 vCore80 GBUp to 10 Gbps
Standardses1v10m12010 vCore120 GBUp to 10 Gbps
Standardses1v10m16010 vCore160 GBUp to 10 Gbps
Standardses1v12m2412 vCore24 GBUp to 12.5 Gbps
Standardses1v12m4812 vCore48 GBMaximum 12.5 Gbps
Standardses1v12m9612 vCore96 GBUp to 12.5 Gbps
Standardses1v12m14412 vCore144 GBUp to 12.5 Gbps
Standardses1v12m19212 vCore192 GBUp to 12.5 Gbps
Standardses1v14m2814 vCore28 GBUp to 12.5 Gbps
Standardses1v14m5614 vCore56 GBUp to 12.5 Gbps
Standardses1v14m11214 vCore112 GBUp to 12.5 Gbps
Standardses1v14m16814 vCore168 GBUp to 12.5 Gbps
Standardses1v14m22414 vCore224 GBUp to 12.5 Gbps
Standardses1v16m3216 vCore32 GBUp to 12.5 Gbps
Standardses1v16m6416 vCore64 GBMaximum 12.5 Gbps
Standardses1v16m12816 vCore128 GBUp to 12.5 Gbps
Standardses1v16m19216 vCore192 GBUp to 12.5 Gbps
Standardses1v16m25616 vCore256 GBUp to 12.5 Gbps
Table. Search Engine Server Type Specifications - ses1 Server Type

ses2 server type

The ses1 server type of Search Engine is offered with standard specifications (vCPU, Memory) and is suitable for various database workloads.

  • Intel 4th‑generation (Sapphire Rapids) Xeon Gold 6448H Processor up to 3.2 GHz
  • Supports up to 16 vCPUs and 256 GB of memory
  • Maximum networking speed of 12.5 Gbps
CategoryServer typeCPU vCoreMemoryNetwork Bandwidth(Gbps)
Standardses2v2m42 vCore4 GBUp to 10 Gbps
Standardses2v2m82 vCore8 GBUp to 10 Gbps
Standardses2v2m162 vCore16 GBUp to 10 Gbps
Standardses2v2m242 vCore24 GBUp to 10 Gbps
Standardses2v2m322 vCore32 GBUp to 10 Gbps
Standardses2v4m84 vCore8 GBUp to 10 Gbps
Standardses2v4m164 vCore16 GBUp to 10 Gbps
Standardses2v4m324 vCore32 GBUp to 10 Gbps
Standardses2v4m484 vCore48 GBUp to 10 Gbps
Standardses2v4m644 vCore64 GBUp to 10 Gbps
Standardses2v6m126 vCore12 GBUp to 10 Gbps
Standardses2v6m246 vCore24 GBUp to 10 Gbps
Standardses2v6m486 vCore48 GBUp to 10 Gbps
Standardses2v6m726 vCore72 GBUp to 10 Gbps
Standardses2v6m966 vCore96 GBUp to 10 Gbps
Standardses2v8m168 vCore16 GBUp to 10 Gbps
Standardses2v8m328 vCore32 GBUp to 10 Gbps
Standardses2v8m648 vCore64 GBUp to 10 Gbps
Standardses2v8m968 vCore96 GBUp to 10 Gbps
Standardses2v8m1288 vCore128 GBUp to 10 Gbps
Standardses2v10m2010 vCore20 GBUp to 10 Gbps
Standardses2v10m4010 vCore40 GBUp to 10 Gbps
Standardses2v10m8010 vCore80 GBUp to 10 Gbps
Standardses2v10m12010 vCore120 GBUp to 10 Gbps
Standardses2v10m16010 vCore160 GBUp to 10 Gbps
Standardses2v12m2412 vCore24 GBUp to 12.5 Gbps
Standardses2v12m4812 vCore48 GBUp to 12.5 Gbps
Standardses2v12m9612 vCore96 GBUp to 12.5 Gbps
Standardses2v12m14412 vCore144 GBUp to 12.5 Gbps
Standardses2v12m19212 vCore192 GBUp to 12.5 Gbps
Standardses2v14m2814 vCore28 GBUp to 12.5 Gbps
Standardses2v14m5614 vCore56 GBUp to 12.5 Gbps
Standardses2v14m11214 vCore112 GBUp to 12.5 Gbps
Standardses2v14m16814 vCore168 GBUp to 12.5 Gbps
Standardses2v14m22414 vCore224 GBUp to 12.5 Gbps
Standardses2v16m3216 vCore32 GBUp to 12.5 Gbps
Standardses2v16m6416 vCore64 GBUp to 12.5 Gbps
Standardses2v16m12816 vCore128 GBUp to 12.5 Gbps
Standardses2v16m19216 vCore192 GBUp to 12.5 Gbps
Standardses2v16m25616 vCore256 GBUp to 12.5 Gbps
Table. Search Engine Server Type Specifications - ses2 Server Type

seh2 server type

The seh2 server type of Search Engine is offered with high-capacity server specifications and is suitable for database workloads for large-scale data processing.

  • Intel 4th‑generation (Sapphire Rapids) Xeon Gold 6448H Processor up to 3.2 GHz
  • Supports up to 72 vCPUs and 288 GB of memory
  • Networking speed up to 25 Gbps
CategoryServer typevCPUMemoryNetwork Bandwidth
High Capacityseh2v24m4824 vCore48 GBMaximum 25 Gbps
High Capacityseh2v24m9624 vCore96 GBMaximum 25 Gbps
High Capacityseh2v24m19224 vCore192 GBMaximum 25 Gbps
High Capacityseh2v24m28824 vCore288 GBMaximum 25 Gbps
High Capacityseh2v32m6432 vCore64 GBMaximum 25 Gbps
High Capacityseh2v32m12832 vCore128 GBMaximum 25 Gbps
High Capacityseh2v32m25632 vCore256 GBMaximum 25 Gbps
High Capacityseh2v48m9648 vCore96 GBMaximum 25 Gbps
High Capacityseh2v48m19248 vCore192 GBMaximum 25 Gbps
High Capacityseh2v64m12864 vCore128 GBMaximum 25 Gbps
High Capacityseh2v64m25664 vCore256 GBMaximum 25 Gbps
High Capacityseh2v72m14472 vCore144 GBMaximum 25 Gbps
High Capacityseh2v72m28872 vCore288 GBMaximum 25 Gbps
Table. Search Engine Server Type Specifications - seh2 Server Type

2.1.2 - Monitoring metrics

Cloud Monitoring Service Termination Notice

According to Samsung Cloud Platform’s policy, the Cloud Monitoring service is scheduled to be terminated.

Accordingly, services whose monitoring metrics are linked in Cloud Monitoring will no longer be able to monitor resources through Cloud Monitoring after the service improvement work in November 2026.
After that, resource monitoring can be continuously performed through the ServiceWatch service released in October 2025.

To ensure smooth service usage, proceed with the migration work according to the service termination schedule below.

  1. Notice on Applying Monitoring Service by Resource

    • New Resources: Resources created after the service improvement work in July 2026 are monitored by default using the ServiceWatch service.
    • Existing resources: After the service improvement work in September 2026 We provide monitoring concurrently through Cloud Monitoring and ServiceWatch services.
    • During the parallel operation period, we must prepare for the Servicewatch transition. *
      Performance and log data backup, user-configured settings linked with existing Cloud Monitoring (e.g. You need to review the event policies, etc., perform tasks such as resetting the ServiceWatch service, and complete them.
  2. Cloud Monitoring Service Phased Termination Schedule Notice

    • Console menu termination (September 2026 service improvement work)
      • You cannot access the Cloud Monitoring Console through the Console menu; you can only connect via the separate URLs for each region listed below.
  • Service termination (service improvement work in November 2026)
    • All services of Cloud Monitoring, including the API, will be permanently discontinued.
      • After the service ends in November, Cloud Monitoring data cannot be accessed. * Be sure to complete the ServiceWatch migration within the parallel operation period**.

Detailed information about ServiceWatch is available in the ServiceWatch Overview.

Search Engine Monitoring Metrics

The table below shows the performance monitoring metrics for Event Streams that can be viewed through Cloud Monitoring. For detailed Cloud Monitoring usage, refer to the Cloud Monitoring guide.

Refer to the Virtual Server Monitoring Metrics guide for the Search Engine server monitoring metrics.

Performance itemsDetailed descriptionunit
Disk Usagedatadir usageMB
Documents [Deleted]Total number of deleted documentscnt
Documents [Existing]Total number of existing documentscnt
Filesystem Bytes [Available]Available file systemsbytes
Filesystem Bytes [Free]Available file systembytes
Filesystem Bytes [Total]Total file systembytes
Instance Status [PID]Elasticsearch process PIDPID
JVM Heap Used [Init]Heap init used by JVM (bytes)bytes
JVM Heap Used [MAX]Heap max used by JVM (bytes)bytes
JVM Non Heap Used [Init]init (bytes) outside the heap used by the JVMbytes
JVM Non Heap Used [MAX]max (bytes) other than the heap used by the JVMbytes
Kibana ConnectionsKibana connectioncnt
Kibana Memory Heap Allocated [Limit]Maximum heap size allocated to a Node.js process (bytes)bytes
Kibana Memory Heap Allocated [Total]Maximum heap size allocated to a Node.js process (bytes)bytes
Kibana Memory Heap UsedMaximum heap size allocated to a Node.js process (bytes)bytes
Kibana Process UptimeKibana processms
Kibana Requests [Disconnected]Request count metriccnt
Kibana Requests [Total]Request count metriccnt
Kibana Response Time [Avg]Response time metricms
Kibana Response Time [MAX]Response time metricms
Kibana Status [PID]Kibana process PIDPID
License Expiry Date [ms]License expiration date [milisecond]ms
License StatusLicense statusstatus
License TypeLicense typetype
Queue TimeQueue timems
SegmentsTotal number of segmentscnt
Segments BytesTotal segment size (bytes)bytes
ShardsCluster shard countcnt
Store BytesTotal storage size (bytes)bytes
Table. Search Engine Monitoring Metrics

2.2 - How-to guides

Users can create the service by entering the required information for the Search Engine and selecting detailed options through the Samsung Cloud Platform Console.

Cloud Monitoring service termination notice

According to Samsung Cloud Platform’s policy, the Cloud Monitoring service is scheduled to be terminated.

Accordingly, services whose monitoring metrics are linked in Cloud Monitoring will no longer be able to monitor resources through Cloud Monitoring after the service improvement work in November 2026.
After that, resource monitoring can be continuously performed through the ServiceWatch service released in October 2025.

To ensure smooth service usage, proceed with the migration work according to the service termination schedule below.

  1. Guide to Applying Monitoring Services per Resource

    • New Resources: Resources created after the service improvement work in July 2026 are monitored by default using the ServiceWatch service.
    • Existing resources: After the service improvement work in September 2026 We provide concurrent monitoring through Cloud Monitoring and ServiceWatch services.
    • During the parallel operation period, you must prepare for the Servicewatch transition. *
      Performance and log data backup, user-configured settings linked with existing Cloud Monitoring (e. You must verify the event policies, etc., perform tasks such as resetting the ServiceWatch service, and complete them.
  2. Cloud Monitoring Service Phased Termination Schedule Notice

    • Console menu termination (September 2026 service improvement work)
      • You cannot access the Cloud Monitoring Console through the Console menu; you can only connect via the separate URLs for each region listed below.
  • Service termination (service improvement work in November 2026)
    • All services of Cloud Monitoring, including the API, will be permanently discontinued.
      • After the service ends in November, Cloud Monitoring data cannot be accessed. * Be sure to complete the ServiceWatch migration within the parallel operation period**.

Detailed information about ServiceWatch can be found in the ServiceWatch Overview.

Create Search Engine

You can create and use the Search Engine service in the Samsung Cloud Platform Console.

Information

Before creating the service, configure the VPC’s subnet type as General.

  • If the subnet type is Local, the creation of the corresponding Database service is not possible.

To create a Search Engine, follow the steps below.

Information
The following explains the case where the Elasticsearch Enterprise image is selected.
  1. All Services > Database > Search Engine Click the menu. 1. Navigate to the Search Engine’s Service Home page.

  2. On the Service Home page, click the Create Search Engine button. 2. Go to the Create Search Engine page.

  3. Search Engine creation page: enter the information required to create the service and select detailed options.

    • Select the required information in the Image and Version Selection area.
      Category
      required status
      Detailed description
      imageRequiredSelect the type of image provided
      • Elasticsearch Enterprise, OpenSearch
      Image versionRequiredSelect version of the selected image
      • Provide a version list of the offered server image
      Table. Search Engine image and version selection options
    • In the Service Information Input area, enter or select the required information.
      Category
      required status
      Detailed description
      Server name PrefixRequiredThe server name where Elasticsearch will be installed
      • must start with a lowercase English letter, and using lowercase letters, numbers, and special characters (-) be entered with 3 to 13 characters
      • based on the server name, a postfix such as 001, 002 is appended to generate the actual server name
      Cluster nameRequiredCluster name of the servers
      • Enter using English letters, 3 ~ 20 characters
      • A cluster is a unit that groups multiple servers
      Separate MasterNode installation > UseRequiredWhether to install the Master node separately
      • If you select Use, install the Master node separately
      • If the Master node is not installed separately, the data node also performs the master role
      Separate MasterNode installation > Number of MasterNodesRequiredNumber of Master nodes
      • Master nodes are fixed at three units for recovery (Fail-over)
      Separate installation of MasterNode > Server typeRequiredMaster node server type
      • Standard: standard specification commonly used
      • High Capacity: large-capacity server with 24 vCores or more
      Separate MasterNode installation > Planned ComputeSelectStatus of resources with Planned Compute configured
      • In Use: Number of resources with Planned Compute that are currently in use
      • Configured: Number of resources with Planned Compute configured
      • Coverage Preview: Amount applied per resource by Planned Compute
      • Apply for Planned Compute Service: Go to the Planned Compute service application page
      Separate MasterNode installation > Block StorageRequiredBlock Storage type to be used for the Master node
      • Basic OS: Area where the engine is installed
      • DATA: Data file storage area
        • After selecting the storage type, enter the capacity. (For details on each Block Storage type, refer to Create Block Storage)
          • SSD: High‑performance general volume
          • HDD: General volume
          • SSD_KMS/HDD_KMS: Additional encrypted volume using KMS (Key Management System) encryption keys
        • Capacity must be entered as a multiple of 8 within the range 16 to 5,120
      • Add Disk: Data storage area
        • After selecting Use, enter the storage capacity
        • Click the + button to add storage, or the x button to delete. Up to 9 can be added.
        • Capacity can be entered as a multiple of 8 within the range 16 to 5,120, and up to 9 can be created
      Number of nodesRequiredNumber of data nodes
      • When installing the Master node separately, you must select at least 2; otherwise, you must select at least 1.
      Service Type > Server TypeRequiredData node server type
      • Standard: Standard specification commonly used
      • High Capacity: Large-capacity server with 24 vCores or more
      Service Type > Planned ComputeSelectStatus of resources with Planned Compute configured
      • In Use: Number of resources with Planned Compute configured that are currently in use
      • Configured: Number of resources with Planned Compute configured
      • Coverage Preview: Amount applied per resource by Planned Compute
      • Apply for Planned Compute Service: Go to the Planned Compute service application page
      Service Type > Block StorageRequiredBlock Storage types to be used for data nodes
      • Basic OS: Area where the engine is installed
      • DATA: Data file storage area
        • After selecting the storage type, enter the capacity. (For details on each Block Storage type, refer to Block Storage 생성하기)
          • SSD: High‑performance general volume
          • HDD: General volume
          • SSD_KMS/HDD_KMS: Additional encrypted volume using KMS (Key Management System) encryption keys
        • Enter the capacity as a multiple of 8 within the range 16 to 5,120
      • Add Disk: Additional storage area for data and backup
        • After selecting Use, enter the storage purpose, capacity
        • Click the + button to add storage, and the x button to delete. Up to 9 can be added.
        • Capacity can be entered as a multiple of 8 within the range 16 to 5,120, and up to 9 can be created.
      Kibana > Server TypeRequiredServer type for Kibana installation
      • Standard: standard specification commonly used
      Kibana > Planned ComputeSelectStatus of resources with Planned Compute configured
      • In Use: Number of resources with Planned Compute configured that are currently in use
      • Configured: Number of resources with Planned Compute configured
      • Coverage Preview: Amount applied per resource by Planned Compute
      • Apply for Planned Compute Service: Go to the Planned Compute service application page
      Kibana > Block StorageRequiredBlock storage type to be used on the server where Kibana is installed
      • Base OS: Area where the engine is installed
      Network > Common SettingsRequiredNetwork settings for servers created by the service
      • Select when you want to apply the same settings to all installed servers
      • Select a pre‑created VPC and Subnet
      • IP: Only automatic generation is possible
      • Public NAT settings are only available in per‑server configuration.
      Network > Server-specific SettingsRequiredNetwork settings where servers generated by the service are installed
      • Select if you want to apply different settings per installed server
      • Select a pre‑created VPC and Subnet
      • IP: Enter the IP for each server
      • Public NAT feature is available only when the VPC is connected to an Internet Gateway; checking Use allows you to select from reserved IPs in the VPC product’s Public IP. For more information, see Public IP 생성하기
      IP access controlSelectService Access Policy Settings
      • Since the access policy is set for the IP entered on the page, you do not need to configure a separate Security Group policy.
      • Enter the IP in IP format (e.g., 192.168.10.1) or CIDR format (e.g., 192.168.10.0/24, 192.168.10.1/32) and click the Add button
      • To delete an entered IP, click the x button next to the IP
      maintenance periodSelectSearch Engine maintenance period
      • If you select Use, set the day of week, start time, and duration
      • We recommend setting a maintenance period for the stable management of the service. Patch operations will be performed at the scheduled time, which may cause service interruptions
      • If set to not use, we are not responsible for any issues arising from patches not being applied.
      Table. Search Engine Service Information Input Items
    • In the Database Configuration Required Information Input area, enter or select the required information.
      Category
      required status
      Detailed description
      Backup > UseSelectWhether to use node backup
      • When selecting node backup usage, choose the retention period and backup start time
      Backup > Retention PeriodSelectBackup retention period
      • Select the backup retention period. Set the file retention period to 7 days ~ 35 days
      • Backup files incur additional charges based on size.
      Backup > Backup Start TimeSelectBackup start time
      • Select backup start time
      • The minutes during which the backup runs (minutes) are set randomly, and the backup end time cannot be set
      Cluster Port numberRequiredElasticsearch connection port number
      • 1200 ~ 65535can be entered as one of them, and the internal Elasticsearch port 9300 and Kibana port 5301 cannot be used
      Elastic usernameRequiredElasticsearch username
      • Enter using lowercase English letters, 2 to 20 characters
      • The following usernames cannot be used.
        • apm_system, beats_system, elastic, kibana, kibana_system, logstash_system, remote_monitoring_user, scp_kibana_system, scp_manager, maxigent_cl
      Elastic passwordRequiredElasticsearch login password
      • Enter 8 to 30 characters, including letters, numbers, and special characters (excluding , , \)
      Check Elastic passwordRequiredCheck Elasticsearch connection password
      • Re-enter the Elasticsearch connection password identically
      License KeyRequiredElasticsearch License Key
      • Enter the entire contents of the issued license file (.json)
      • If the entered license key is invalid, the service may not be created.
      • OpenSearch does not require a License Key.
      time zoneSelectStandard time zone for the service
      Table. Required input fields for Search Engine Database configuration
    • Enter or select the required information in the Additional Information Input area.
      Category
      required status
      Detailed description
      TagSelectAdd tag
      • Add tag Click the button to create and add a tag, or add an existing tag
      • You can add up to 50 tags
      • The newly added tags are applied after the service creation is completed
      Table. Search Engine service additional information input fields
  4. Summary Check the detailed information and estimated charges generated in the panel, and click the Complete button.

    • When creation is complete, check the created resources on the Resource List page.

Check Search Engine Details

The Search Engine service allows you to view and edit the complete resource list and detailed information. Search Engine Details page includes Detail Information, Tags, Activity Log tabs.

To view detailed information about the Search Engine service, follow these steps.

  1. All Services > Data Analytics > Search Engine menu, click it. 1. Navigate to the Search Engine’s Service Home page.
  2. On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
  3. Search Engine list page: click the resource to view detailed information. 3. Search Engine Details Navigate to the page.
    • Search Engine Details At the top of the page, status information and additional feature information are displayed.
      CategoryDetailed description
      Cluster statusCluster status
      • Creating: Cluster is being created
      • Editing: Cluster is being changed to an operational state
      • Error: Cluster encountered a failure while performing a task
        • If this persists, contact the administrator
      • Failed: Cluster failed during creation
      • Restarting: Cluster is restarting
      • Running: Cluster is operating normally
      • Starting: Cluster is starting
      • Stopped: Cluster is stopped
      • Stopping: Cluster is stopping
      • Synchronizing: Cluster is synchronizing
      • Terminating: Cluster is being terminated
      • Unknown: Cluster status is unknown
        • If this persists, contact the administrator
      • Upgrading: Cluster is being upgraded
      Cluster controlButton to change the cluster state
      • Start: Starts a stopped cluster.
      • Stop: Stops a running cluster.
      • Restart: Restarts a running cluster
      View more add-onsCluster management buttons
      • Service status synchronization: Retrieve the current server status and synchronize it to the Console
      • Backup history: When backup is configured, check whether the backup executed successfully and view its history
      • Cluster recovery: Recover the cluster based on a specific point in time.
      • Add Node: Add a data node.
      Service cancellationCancel service button
      Table. Search Engine status information and additional features

Detailed Information

Search Engine list page lets you view detailed information of the selected resource and, if needed, modify the information.

CategoryDetailed description
Server InformationServer information configured in this cluster
  • Category: Server type (Master&Data, Master, Data, Kibana)
  • Server name: Server name
  • IP:Port: Server IP and port
  • NAT IP: NAT IP
  • Status: Server status
serviceService name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
  • refers to the cluster SRN
Resource nameResource name
  • means the cluster name
Resource IDUnique resource ID in the service
ConstructorUser who created the service
Creation date and timeService creation date and time
EditorUser who edited the service information
Modification dateDate and time the service information was modified
Image/VersionInstalled service image and version information
Cluster nameCluster name of the configured servers
Planned ComputeResource status with Planned Compute configured
maintenance periodMaintenance Period Status
  • If you need to set the maintenance period, click the Edit button to configure
BackupBackup configuration status
  • If backup configuration is required, click the Edit button to set it
time zoneStandard time zone for the service
LicenseElasticsearch license information
  • License updates can be performed in Kibana > Stack Management > License management
  • If the license expires, the service cannot be used
Elastic usernameElasticsearch username
Kibana access informationKibana access information
NetworkInstalled network information (VPC, Subnet)
IP access controlSet service access policy
  • If you need to add or remove an IP, click the Edit button to configure
MasterServer type, base OS, and additional Disk information for the Master node
  • If you need to modify the server type, click the Edit button next to the server type to configure it
    • Modifying the server type requires a server reboot
  • If you need to expand storage, click the Edit button next to the storage capacity to expand it
  • If you need to add storage, click the Add Disk button next to Additional Disk to add it
DataServer type, base OS, and additional Disk information
  • If you need to modify the server type, click the Edit button next to the server type to configure
    • Modifying the server type requires a server restart
  • If additional storage is needed, click the Add Disk button next to the additional Disk to add
KibanaServer type and basic OS information for the Kibana node
  • If you need to modify the server type, click the Edit button next to the server type to configure it
    • Modifying the server type requires a server restart
Table. Search Engine detailed information items

Tag

Search Engine List page allows you to view the tag information of the selected resource, and you can add, modify, or delete it.

CategoryDetailed description
Tag listTag list
  • You can view the Key, Value information of the tag
  • Up to 50 tags can be added per resource
  • When entering a tag, you can search and select from the list of previously created Keys and Values
Table. Search Engine tag tab items

Job History

On the Search Engine List page, you can view the operation history of the selected resource.

CategoryDetailed description
Task History ListResource Change History
  • Task details, task timestamp, resource type, resource ID, resource name, event topic, task result, operator information verification
Table. Search Engine Job History Tab Detailed Information Items

Search Engine Resource Management

If you need to change the existing configuration options of a created Search Engine resource, manage parameters, or add node configurations, you can perform the tasks on the Search Engine Detailed Information page.

Control Operation

If changes occur to a running Search Engine resource, you can start, stop, or restart it.

To control the operation of the Search Engine, follow these steps.

  1. Click the All Services > Data Analytics > Search Engine menu. 1. Navigate to the Search Engine’s Service Home page.
  2. On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
  3. Search Engine list page, click the resource to control its operation. 3. Go to the Search Engine Details page.
  4. Check the Search Engine status and complete the change using the control button below.
    • Start: Search Engine service is installed on the server and Search Engine service is running (Running).
    • Stop: The server on which the Search Engine service is installed and the Search Engine service will be stopped (Stopped).
    • Restart: Only the Search Engine service will be restarted.

Synchronize Service Status

You can query the current server status and synchronize it to the Console.

To synchronize the service status of the Search Engine, follow these steps.

  1. All Services > Data Analytics > Search Engine menu, click. 1. Navigate to the Search Engine’s Service Home page.
  2. On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
  3. On the Search Engine List page, click the resource to view the service status. 3. Navigate to the Search Engine Details page.
  4. Click the Service Status Synchronization button. 4. The query takes a short amount of time, and while it is being performed, the cluster changes to the Synchronizing state.
  5. When the query completes, the status in the server information field is updated, and the cluster changes to the Running state.

Change server type

You can change the configured server type.

To change the server type, follow these steps.

Caution
  • If the server type is configured as Standard, it cannot be changed to High Capacity. * If you want to change to High Capacity, create a new service.
  • If you modify the server type, a server restart is required. * Please separately verify any software license modifications or software settings and their implementation due to specification changes.
  1. All Services > Data Analytics > Search Engine Click the menu. 1. Navigate to the Service Home page of Search Engine.
  2. On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
  3. On the Search Engine list page, click the resource to change the server type. 3. Navigate to the Search Engine Details page.
  4. Click the edit button for the server type you want to change at the bottom of the detailed information. 4. Edit Server Type popup window opens.
  5. Edit Server Type After selecting the server type in the popup window, click the Confirm button.

Expanding Storage

Storage added to the data area can be expanded up to a maximum of 5 TB, based on the initially allocated capacity. You can expand storage without stopping the Search Engine, and if configured as a cluster, all nodes are expanded simultaneously.

Information
  • If encryption is configured on the existing Block Storage, encryption will also be applied to the additional Disk.
  • Disk size modification is only possible by increasing it by at least 16 GB over the current disk size.

To increase storage capacity, follow the steps below.

  1. Click the All Services > Data Analytics > Search Engine menu. 1. Navigate to the Service Home page of Search Engine.
  2. On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
  3. On the Search Engine list page, click the resource to change the server type. 3. Search Engine Details Navigate to the page.
  4. Click the Edit button for the added Disk you want to expand at the bottom of the detailed information. 4. Disk Edit The popup window opens.
  5. Disk Edit after entering the additional capacity in the popup window, click the Confirm button.

Add storage

If you need more than 5 TB of data storage space, you can add additional storage.

information
  • If encryption is configured on the existing Block Storage, encryption will also be applied to the additional Disk.

To add storage capacity, follow the steps below.

  1. All Services > Data Analytics > Search Engine menu, click. 1. Navigate to the Service Home page of Search Engine.
  2. On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
  3. On the Search Engine List page, click the resource to add storage. 3. Navigate to the Search Engine Details page.
  4. Click the Add Disk button at the bottom of the detailed information. 4. Add Disk The popup window opens.
  5. Add Disk In the popup window, after entering the purpose and size, click the Confirm button.

Search Engine Backup

Through the backup configuration feature, users can set the data retention period and start interval, and through the backup history feature, they can view and delete backup records.

Configure Backup

When creating a Search Engine and setting up backup, refer to the Creating a Search Engine guide, and to modify the backup configuration of the created resource, follow the steps below.

Caution
  • If a backup is configured, it will run at the designated time after the set time, and additional fees will apply based on the backup size.
  • If you change the backup setting to Unset, backup execution stops immediately, and the stored backup data is deleted and can no longer be used.
  1. Click the All Services > Data Analytics > Search Engine menu. 1. Navigate to the Service Home page of Search Engine.
  2. On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
  3. On the Search Engine list page, click the resource to set up backup. 3. Navigate to the Search Engine Details page.
  4. Click the Edit button of the backup item. 4. Backup Edit The popup window opens.
  5. When setting up a backup, click Use in the Backup Edit popup, select retention period, backup start time, and Archive backup interval, then click the Confirm button.
    • If you stop the backup setting, uncheck Use in the Edit Backup popup window, and authenticate via the logged-in user’s mobile phone.

Check backup history

Information
To set notifications for backup success and failure, you can configure them via the Notification Manager product. For a detailed usage guide on notification policy settings, refer to Create Notification Policy.

To view the backup history, follow these steps.

  1. All Services > Data Analytics > Search Engine Click the menu. 1. Navigate to the Search Engine’s Service Home page.
  2. On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
  3. On the Search Engine List page, click the resource to view the backup history. 3. Go to the Search Engine Details page.
  4. Click the Backup History button. 4. Backup History popup window opens.
  5. Backup History In the popup window, you can view the backup status, version, backup start time, backup completion time, and size.

Delete backup file

To delete the backup history, follow these steps.

Caution
Since deleted backup files cannot be restored, please be sure to verify that the data is unnecessary before deleting it.
  1. All Services > Data Analytics > Search Engine Click the menu. 1. Navigate to the Search Engine’s Service Home page.
  2. On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
  3. Search Engine List page, click the resource to view the backup history. 3. Navigate to the Search Engine Details page.
  4. Click the Backup History button. 4. The Backup History popup window opens.
  5. Backup History In the popup window, check the files you want to delete, then authenticate using the logged-in user’s mobile phone.

Restore Search Engine

If a failure or data loss requires restoration from a backup file, you can recover to a specific point in time using the cluster recovery feature.

Caution
To perform recovery, you need a capacity at least equal to the Disk data type’s size. If there is insufficient disk space, recovery may fail.

Information
Cluster recovery is restored with the same configuration as the original. For example, if it consists of three Master nodes and two Data nodes, it will be restored with the same configuration.

To restore the Search Engine, follow these steps.

  1. Click the All Services > Data Analytics > Search Engine menu. 1. Navigate to the Search Engine’s Service Home page.
  2. On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
  3. Search Engine Resource On the list page, click the resource you wish to recover. 3. Navigate to the Search Engine Details page.
  4. Click the Cluster Recovery button. 4. Go to the Cluster Recovery page.
  5. After entering the relevant information in the Cluster Recovery Configuration area, click the Complete button.
    Category
    required status
    Detailed description
    Recovery pointRequiredSet the point in time the user wants to recover
    • Select from the list of backup file timestamps displayed
    Server name PrefixRequiredRecovery server name
    • Start with a lowercase English letter and use lowercase letters, numbers, and special characters (-) to enter 3 to 16 characters
    • Based on the server name, a postfix such as 001, 002 is appended to generate the actual server name
    Cluster nameRequiredRecovery server cluster name
    • Enter using English letters, 3 ~ 20 characters
    • A cluster is a unit that groups multiple servers
    Number of nodesRequiredNumber of data nodes
    • Set to be the same as the number of nodes configured in the original cluster.
    Service Type > Server TypeRequiredData node server type
    • It is set to the same number of nodes as configured in the original cluster.
    Service Type > Planned ComputeSelectStatus of resources with Planned Compute configured
    • In Use: Number of resources with Planned Compute configured that are currently in use
    • Configured: Number of resources with Planned Compute configured
    • Coverage Preview: Amount applied per resource by Planned Compute
    • Apply for Planned Compute Service: Go to the Planned Compute service application page
    Service Type > Block StorageRequiredBlock Storage to be used for data nodes
    • Basic OS: area where the engine is installed
    • DATA: data file storage area
      • Applied identically as the storage type set in the original cluster
      • Enter capacity as a multiple of 8 within the range 16 to 5,120
    • Add Disk: additional storage area for data and backup
      • After selecting Use, enter the storage purpose and capacity
      • Click the + button to add storage, and the x button to delete
      • Capacity can be entered as a multiple of 8 within the range 16 to 5,120, and up to 9 can be created
    Separate MasterNode installation > UseRequiredWhether to install the Master node separately
    • Apply the same based on the installation status of the original cluster
    Separate MasterNode installation > Number of MasterNodesRequiredNumber of Master nodes
    Separate installation of MasterNode > Server typeRequiredMaster node server type
    • It is set to be the same as the number of nodes configured in the original cluster.
    Separate MasterNode installation > Planned ComputeSelectStatus of resources with Planned Compute configured
    • In Use: Number of resources with Planned Compute configured that are currently in use
    • Configured: Number of resources with Planned Compute configured
    • Coverage Preview: Amount applied per resource by Planned Compute
    Separate MasterNode installation > Block StorageRequiredBlock Storage to be used on the Master node
    • Basic OS: Area where the engine is installed
    • DATA: Data file storage area
      • Applied identically with the storage type set in the original cluster
      • Enter capacity as a multiple of 8 within the range 16 to 5,120
    • Add Disk: Additional data storage area
      • After selecting Use, enter the storage capacity
      • Click the + button to add storage, or the x button to delete
      • Capacity can be entered as a multiple of 8 within the range 16 to 5,120, and up to 9 can be created
    Kibana > Server TypeRequiredKibana node server type
    • It is set to be the same as the number of nodes configured in the original cluster.
    Kibana > Planned ComputeSelectStatus of resources with Planned Compute configured
    • In Use: Number of resources with Planned Compute configured that are currently in use
    • Configured: Number of resources with Planned Compute configured
    • Coverage Preview: Amount applied per resource by Planned Compute
    Kibana > Block StorageRequiredBlock Storage to be used on the Kibana node
    • Base OS: the area where the engine is installed
    Cluster Port numberRequiredElasticsearch connection port number
    • It is set to the same port number configured in the original cluster.
    Licnese KeyRequiredElasticsearch License Key
    • Enter the entire contents of the issued license file (.json)
    • If the entered license key is invalid, the service may not be created.
    • OpenSearch does not require a License Key.
    IP access controlSelectService Access Policy Settings
    • Since the access policy is set for the IP entered on the page, you do not need to configure a separate Security Group policy.
    • Enter the IP in IP format (example: 192.168.10.1) or CIDR format (example: 192.168.10.0/24, 192.168.10.1/32) and click the Add button
    • To delete an entered IP, click the x button next to the IP
    maintenance periodSelectmaintenance window
    • If you select Use, you can set the day of week, start time, and duration
    • We recommend setting a maintenance window for stable service management. Patch operations will be performed at the scheduled time, causing service interruption
    • If set to not use, we are not responsible for issues arising from unapplied patches.
    Table. Search Engine Recovery Configuration Items

Add Node

If you need to expand the Search Engine cluster, you can add nodes with the same specifications as the data nodes in use.

information
  • You can use up to 10 nodes within the cluster. * Please note that created nodes will incur additional charges.
  • Adding nodes may degrade the cluster’s performance.

To add a node, follow the steps below.

  1. All Services > Data Analytics > Search Engine Click the menu. 1. Navigate to the Service Home page of Search Engine.
  2. On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
  3. Search Engines Resources Click the resource you want to restore on the list page. 3. Search Engine Details Navigate to the page.
  4. Click the Add Broker Node button. 4. Go to the Add Broker Node page.
  5. After entering the relevant information in the Required Information Input area, click the Complete button.
    Category
    required status
    Detailed description
    Server name PrefixRequiredData node server name
    • It is set to the server name configured in the original cluster.
    Cluster nameRequiredCluster name
    • It is set to the cluster name configured in the original cluster.
    Additional Node CountRequiredNumber of Nodes to add
    • Use up to 10 nodes per cluster
    Service Type > Server TypeRequiredData node server type
    • It is set the same as the server type configured in the original cluster.
    Service Type > Planned ComputeSelectStatus of resources with Planned Compute configured
    • In Use: Number of resources with Planned Compute configured that are currently in use
    • Configured: Number of resources with Planned Compute configured
    • Coverage Preview: Amount applied per resource by Planned Compute
    Service Type > Block StorageRequiredBlock Storage configuration to be used for data nodes
    • The storage type and capacity set in the source cluster are applied identically
    NetworkRequiredthe network where the servers are installed
    • applied identically to the network configured in the original cluster
    Table. Search Engine Node additional items

Terminate Search Engine

You can cancel unused Search Engines to reduce operating costs. However, if you terminate the service, the running service may be stopped immediately, so you should proceed with the termination only after fully considering the impact that may occur when the service is discontinued.

To cancel the Search Engine, follow these steps.

  1. All Services > Data Analytics > Search Engine Click the menu. 1. Navigate to the Search Engine’s Service Home page.
  2. On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine List page.
  3. On the Search Engine List page, select the resource to cancel, and click the Cancel Service button.
  4. When the termination is complete, verify on the Search Engine list page whether the resource has been terminated.

2.3 - API Reference

API Reference

2.4 - CLI Reference

CLI Reference

2.5 - Release Note

Search Engine

2025.07.01
FEATURE New feature, addition of Terraform and disk type
  • OpenSearch 2.17.1 is now offered as a new release.
  • Provides Terraform.
  • Provides additional HDD, HDD_KMS disk types.
2025.02.27
NEW Search Engine service official version release
  • A Search Engine service that enables easy creation and management of ElasticSearch Enterprise in a web environment has been launched.

3 - Vertica(DBaaS)

3.1 - Overview

Service Overview

Vertica(DBaaS) is a high-availability enterprise database built on a Data Warehouse for large-scale data analysis and processing. Through a single engine, it serves as a data analytics platform that can perform basic analyses such as querying data from various sources without moving them, as well as AI analyses like machine learning. In the Samsung Cloud Platform, DB management functions such as high‑availability configuration, backup/recovery, patching, parameter management, and monitoring are added to ensure stable management of single instances or critical data, enabling automation of tasks throughout the database lifecycle. Additionally, it provides an automatic backup feature at user‑specified times to support data recovery at the desired point in case of DB server or data issues.

Service Architecture Diagram

Diagram
Figure. Vertica diagram

Provided features

Vertica(DBaaS) provides the following features.

  • Auto Provisioning (Auto Provisioning): Automatically installs the standard version of the Samsung Cloud Platform database based on Virtual Servers of various specifications.
  • Cluster Configuration: Provides a self-high-availability architecture in a masterless form.
  • Operation Control Management: Provides functionality to control the status of running servers. You can start or stop a server, and it can be restarted if there is a database issue or to apply configuration changes.
  • Backup and Recovery: Provides data backup functionality based on proprietary backup commands. Users can set the backup retention period and start time, and additional fees apply based on backup size. It also offers a recovery feature for backed‑up data; when a user initiates recovery, a separate database is created and restored to the point selected by the user (backup creation time or a custom point). For database recovery, you can choose to install the Management Console for use.
  • Service Status Query: You can view the final status of the current DB service.
  • Monitoring: CPU, memory, DB performance monitoring information can be accessed through the Cloud Monitoring service.
  • High-Performance Processing of Large-Scale Data: It guarantees stable performance in a Mixed Workload environment of massive parallel processing (MPP, Massively Parallel Processing) and SQL queries. Vertica processes queries through distributed processing and is designed so that queries can be initiated from any node, eliminating a Single Point of Failure where queries would not execute if a specific node fails.

Component

Vertica(DBaaS) provides pre‑validated engine versions and various server types. Users can select and use them according to the scale of the service they wish to configure.

Engine version

The engine versions supported by Vertica (DBaaS) are as follows.

Technical support can be used until the supplier’s EoTS (End of Technical Service) date, and the EOS date when new creation is halted is set to six months before the EoTS date.

The EOS and EoTS dates may change according to the supplier’s policy, so please refer to the supplier’s license management policy page for details.

Provided versionEOS date (Samsung Cloud Platform new creation stop date)EoTS date (supplier technical support end date)
24.2.0-22026-09 (planned)2027-04-30
Table. Vertica (DBaaS) service engine version

Server type

The server types supported by Vertica (DBaaS) are as follows.

For detailed information about the server types provided by Vertica (DBaaS), see Vertica Server Types.

CategoryexampleDetailed description
Server typeStandardProvided server types
  • Standard: Standard configuration (vCPU, Memory) commonly used
  • High Capacity: Large server specifications with 24 vCores or more
Server specificationsDb1Provided server specifications
  • db1: Standard specifications (vCPU, Memory) commonly used
  • dbh2: Large-capacity server specifications
    • Provides servers with 24 vCores or more
Server specificationsV2Number of vCores
  • v2: 2 virtual cores
Server specificationsM4Memory capacity
  • m4: 4GB Memory
Table. Vertica (DBaaS) server type components

Preliminary Service

This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service and prepare in advance.

Service CategoryserviceDetailed description
NetworkingVPCA service that provides an isolated virtual network in a cloud environment
Table. Vertica (DBaaS) Preliminary Service

3.1.1 - Server Type

Vertica(DBaaS) server type

Vertica (DBaaS) offers server types configured with various combinations of CPU, memory, and network bandwidth. When creating Vertica(DBaaS), the Database Engine is installed according to the server type selected for the intended use.

The server types supported by Vertica (DBaaS) are as follows.

Standard db1v2m4
Category
exampleDetailed description
Server typeStandardProvided server type classifications
  • Standard: Configured with commonly used standard specifications (vCPU, Memory)
  • High Capacity: Large-capacity server specifications exceeding Standard
Server specificationsdb1Provided server type classification and generation
  • db: denotes a standard specification, and 1 indicates the generation
  • dbh: h denotes a high-capacity server specification, and 2 indicates the generation
Server specificationsv2Number of vCores
  • v2: 2 virtual cores
Server specificationsm4Memory capacity
  • m4: 4GB Memory
Table. Vertica (DBaaS) server type format

db1 server type

The db1 server type of Vertica(DBaaS) is provided with standard specifications (vCPU, Memory) and is suitable for various database workloads.

  • Intel 3rd‑generation (Ice Lake) Xeon Gold 6342 Processor up to 3.3 GHz
  • Supports up to 16 vCPUs and 256 GB of memory
  • Maximum networking speed of 12.5 Gbps
CategoryServer typevCPUMemoryNetwork Bandwidth
Standarddb1v1m21 vCore2 GBUp to 10 Gbps
Standarddb1v2m42 vCore4 GBUp to 10 Gbps
Standarddb1v2m82 vCore8 GBUp to 10 Gbps
Standarddb1v2m162 vCore16 GBUp to 10 Gbps
Standarddb1v2m242 vCore24 GBUp to 10 Gbps
Standarddb1v2m322 vCore32 GBUp to 10 Gbps
Standarddb1v4m84 vCore8 GBUp to 10 Gbps
Standarddb1v4m164 vCore16 GBUp to 10 Gbps
Standarddb1v4m324 vCore32 GBUp to 10 Gbps
Standarddb1v4m484 vCore48 GBUp to 10 Gbps
Standarddb1v4m644 vCore64 GBUp to 10 Gbps
Standarddb1v6m126 vCore12 GBUp to 10 Gbps
Standarddb1v6m246 vCore24 GBUp to 10 Gbps
Standarddb1v6m486 vCore48 GBUp to 10 Gbps
Standarddb1v6m726 vCore72 GBUp to 10 Gbps
Standarddb1v6m966 vCore96 GBUp to 10 Gbps
Standarddb1v8m168 vCore16 GBUp to 10 Gbps
Standarddb1v8m328 vCore32 GBUp to 10 Gbps
Standarddb1v8m648 vCore64 GBUp to 10 Gbps
Standarddb1v8m968 vCore96 GBUp to 10 Gbps
Standarddb1v8m1288 vCore128 GBUp to 10 Gbps
Standarddb1v10m2010 vCore20 GBUp to 10 Gbps
Standarddb1v10m4010 vCore40 GBUp to 10 Gbps
Standarddb1v10m8010 vCore80 GBUp to 10 Gbps
Standarddb1v10m12010 vCore120 GBUp to 10 Gbps
Standarddb1v10m16010 vCore160 GBUp to 10 Gbps
Standarddb1v12m2412 vCore24 GBUp to 12.5 Gbps
Standarddb1v12m4812 vCore48 GBUp to 12.5 Gbps
Standarddb1v12m9612 vCore96 GBUp to 12.5 Gbps
Standarddb1v12m14412 vCore144 GBUp to 12.5 Gbps
Standarddb1v12m19212 vCore192 GBUp to 12.5 Gbps
Standarddb1v14m2814 vCore28 GBUp to 12.5 Gbps
Standarddb1v14m5614 vCore56 GBUp to 12.5 Gbps
Standarddb1v14m11214 vCore112 GBUp to 12.5 Gbps
Standarddb1v14m16814 vCore168 GBUp to 12.5 Gbps
Standarddb1v14m22414 vCore224 GBUp to 12.5 Gbps
Standarddb1v16m3216 vCore32 GBUp to 12.5 Gbps
Standarddb1v16m6416 vCore64 GBUp to 12.5 Gbps
Standarddb1v16m12816 vCore128 GBUp to 12.5 Gbps
Standarddb1v16m19216 vCore192 GBUp to 12.5 Gbps
Standarddb1v16m25616 vCore256 GBUp to 12.5 Gbps
Table. Vertica (DBaaS) server type specifications - db1 server type

db2 server type

The db2 server type of Vertica(DBaaS) is provided with standard specifications (vCPU, Memory) and is suitable for various database workloads.

  • Intel 4th‑generation (Sapphire Rapids) Xeon Gold 6448H Processor up to 3.2 GHz
  • Supports up to 16 vCPUs and 256 GB of memory
  • Maximum networking speed of 12.5 Gbps
CategoryServer typevCPUMemoryNetwork Bandwidth
Standarddb2v1m21 vCore2 GBUp to 10 Gbps
Standarddb2v2m42 vCore4 GBUp to 10 Gbps
Standarddb2v2m82 vCore8 GBUp to 10 Gbps
Standarddb2v2m162 vCore16 GBUp to 10 Gbps
Standarddb2v2m242 vCore24 GBUp to 10 Gbps
Standarddb2v2m322 vCore32 GBUp to 10 Gbps
Standarddb2v4m84 vCore8 GBUp to 10 Gbps
Standarddb2v4m164 vCore16 GBUp to 10 Gbps
Standarddb2v4m324 vCore32 GBUp to 10 Gbps
Standarddb2v4m484 vCore48 GBUp to 10 Gbps
Standarddb2v4m644 vCore64 GBUp to 10 Gbps
Standarddb2v6m126 vCore12 GBUp to 10 Gbps
Standarddb2v6m246 vCore24 GBUp to 10 Gbps
Standarddb2v6m486 vCore48 GBUp to 10 Gbps
Standarddb2v6m726 vCore72 GBUp to 10 Gbps
Standarddb2v6m966 vCore96 GBUp to 10 Gbps
Standarddb2v8m168 vCore16 GBUp to 10 Gbps
Standarddb2v8m328 vCore32 GBUp to 10 Gbps
Standarddb2v8m648 vCore64 GBUp to 10 Gbps
Standarddb2v8m968 vCore96 GBUp to 10 Gbps
Standarddb2v8m1288 vCore128 GBUp to 10 Gbps
Standarddb2v10m2010 vCore20 GBUp to 10 Gbps
Standarddb2v10m4010 vCore40 GBUp to 10 Gbps
Standarddb2v10m8010 vCore80 GBUp to 10 Gbps
Standarddb2v10m12010 vCore120 GBUp to 10 Gbps
Standarddb2v10m16010 vCore160 GBUp to 10 Gbps
Standarddb2v12m2412 vCore24 GBUp to 12.5 Gbps
Standarddb2v12m4812 vCore48 GBUp to 12.5 Gbps
Standarddb2v12m9612 vCore96 GBUp to 12.5 Gbps
Standarddb2v12m14412 vCore144 GBUp to 12.5 Gbps
Standarddb2v12m19212 vCore192 GBUp to 12.5 Gbps
Standarddb2v14m2814 vCore28 GBUp to 12.5 Gbps
Standarddb2v14m5614 vCore56 GBUp to 12.5 Gbps
Standarddb2v14m11214 vCore112 GBUp to 12.5 Gbps
Standarddb2v14m16814 vCore168 GBUp to 12.5 Gbps
Standarddb2v14m22414 vCore224 GBUp to 12.5 Gbps
Standarddb2v16m3216 vCore32 GBUp to 12.5 Gbps
Standarddb2v16m6416 vCore64 GBUp to 12.5 Gbps
Standarddb2v16m12816 vCore128 GBUp to 12.5 Gbps
Standarddb2v16m19216 vCore192 GBUp to 12.5 Gbps
Standarddb2v16m25616 vCore256 GBUp to 12.5 Gbps
Table. Vertica (DBaaS) server type specifications - db2 server type

dbh2 server type

The dbh2 server type of Vertica (DBaaS) is offered with high-capacity server specifications and is suitable for database workloads that require large-scale data processing.

  • Intel 4th‑generation (Sapphire Rapids) Xeon Gold 6448H Processor up to 3.2 GHz
  • Supports up to 128 vCPUs and 1,536 GB of memory
  • Networking speed up to 25 Gbps
CategoryServer typevCPUMemoryNetwork Bandwidth
High Capacitydbh2v24m4824 vCore48 GBMaximum 25 Gbps
High Capacitydbh2v24m9624 vCore96 GBMaximum 25 Gbps
High Capacitydbh2v24m19224 vCore192 GBMaximum 25 Gbps
High Capacitydbh2v24m28824 vCore288 GBMaximum 25 Gbps
High Capacitydbh2v32m6432 vCore64 GBMaximum 25 Gbps
High Capacitydbh2v32m12832 vCore128 GBMaximum 25 Gbps
High Capacitydbh2v32m25632 vCore256 GBMaximum 25 Gbps
High Capacitydbh2v32m38432 vCore384 GBMaximum 25 Gbps
High Capacitydbh2v48m19248 vCore192 GBMaximum 25 Gbps
High Capacitydbh2v48m57648 vCore576 GBMaximum 25 Gbps
High Capacitydbh2v64m25664 vCore256 GBMaximum 25 Gbps
High Capacitydbh2v64m76864 vCore768 GBMaximum 25 Gbps
High Capacitydbh2v72m28872 vCore288 GBMaximum 25 Gbps
High Capacitydbh2v72m86472 vCore864 GBMaximum 25 Gbps
High Capacitydbh2v96m38496 vCore384 GBMaximum 25 Gbps
High Capacitydbh2v96m115296 vCore1152 GBMaximum 25 Gbps
High Capacitydbh2v128m512128 vCore512 GBMaximum 25 Gbps
High Capacitydbh2v128m1536128 vCore1536 GBMaximum 25 Gbps
Table. Vertica (DBaaS) server type specifications - dbh2 server type

3.1.2 - Monitoring metrics

Cloud Monitoring Service Termination Notice

According to Samsung Cloud Platform’s policy, the Cloud Monitoring service is scheduled to be terminated.

Accordingly, services whose monitoring metrics are linked in Cloud Monitoring will no longer be able to monitor resources through Cloud Monitoring after the service improvement work in November 2026.
After that, resource monitoring can be continuously performed through the ServiceWatch service released in October 2025.

To ensure smooth service usage, proceed with the migration work according to the service termination schedule below.

  1. Guide to Applying Monitoring Services by Resource

    • New Resources: Resources created after the service improvement work in July 2026 are monitored by default using the ServiceWatch service.
    • Existing resources: After the service improvement work in September 2026 We provide concurrent monitoring through Cloud Monitoring and ServiceWatch services.
    • During the parallel operation period, we must prepare for the Servicewatch transition. *
      Performance and log data backup, user-configured settings integrated with existing Cloud Monitoring (e. You must verify items such as event policies and perform tasks such as resetting the ServiceWatch service, then complete them.
  2. Notice of the phased termination schedule for the Cloud Monitoring service

    • Console menu termination (September 2026 service improvement work)
      • You cannot access the Cloud Monitoring Console through the Console menu; you can only connect via the separate URLs for each region listed below.
  • Service termination (service improvement work in November 2026)
    • All services of Cloud Monitoring, including the API, will be permanently discontinued.
      • After the service ends in November, Cloud Monitoring data cannot be accessed. * Be sure to complete the ServiceWatch migration work within the parallel operation period**.

Detailed information about ServiceWatch can be found in the ServiceWatch 개요.

Vertica(DBaaS) Monitoring Metrics

The table below shows the performance monitoring metrics for Vertica (DBaaS) that can be viewed through Cloud Monitoring. For detailed Cloud Monitoring usage, see the Cloud Monitoring guide.

The server monitoring metrics for Vertica (DBaaS) are described in the Virtual Server Monitoring Metrics guide.

Performance itemsDetailed descriptionunit
Active LocksNumber of Active Lockscnt
Active SessionsTotal number of Sessions in Active statecnt
Instance StatusNode alive statusstatus
Tablespace UsedTablespace usagebytes
Table. Vertica (DBaaS) Monitoring Metrics

3.2 - How-to guides

Users can create the service by entering the required information for Vertica (DBaaS) and selecting detailed options through the Samsung Cloud Platform Console.

Cloud Monitoring Service Termination Notice

According to Samsung Cloud Platform’s policy, the Cloud Monitoring service is scheduled to be discontinued.

Accordingly, services whose monitoring metrics are linked in Cloud Monitoring will no longer be able to monitor resources through Cloud Monitoring after the service improvement work in November 2026.
After that, resource monitoring can be continuously performed through the ServiceWatch service released in October 2025.

To ensure smooth service usage, proceed with the migration work according to the service termination schedule below.

  1. Guide to Applying Monitoring Services by Resource

    • New Resources: Resources created after the July 2026 service improvement work are provided with default monitoring using the ServiceWatch service.
    • Existing resources: After the service improvement work in September 2026 We provide concurrent monitoring through Cloud Monitoring and ServiceWatch services.
    • During the parallel operation period, we must prepare for the Servicewatch transition. *
      Performance and log data backup, user-configured settings integrated with existing Cloud Monitoring (e.g. You must review the event policies, etc., perform tasks such as resetting the ServiceWatch service, and complete them.
  2. Cloud Monitoring Service Phased Termination Schedule Notice

    • Console menu termination (September 2026 service improvement work)
      • You cannot access the Cloud Monitoring Console through the Console menu; you can only connect via the separate URLs for each region listed below.
  • Service termination (service improvement work in November 2026)
    • All services of Cloud Monitoring, including the API, will be permanently discontinued.
      • After the service ends in November, Cloud Monitoring data cannot be accessed. * Be sure to complete the ServiceWatch migration within the parallel operation period**.

Detailed information about ServiceWatch: please refer to the ServiceWatch Overview.

Create Vertica (DBaaS)

You can create and use the Vertica (DBaaS) service in the Samsung Cloud Platform Console.

To create Vertica(DBaaS), follow these steps.

  1. All Services > Data Analytics > Vertica(DBaaS) Click the menu. 1. Go to the Service Home page of Vertica (DBaaS).

  2. On the Service Home page, click the Vertica(DBaaS) Create button. 2. Create navigate to the page.

  3. Vertica(DBaaS) Creation page: enter the information required to create the service and select detailed options.

    • Select the required information in the Image and Version Selection area.
      Category
      required status
      Detailed description
      Image versionRequiredProvide a list of Vertica (DBaaS) versions
      Table. Vertica (DBaaS) image and version input items
    • Enter or select the required information in the Service Information Input area.
      Category
      required status
      Detailed description
      Server name PrefixRequiredThe server name where Vertica will be installed
      • must start with a lowercase English letter, and using lowercase letters, numbers, and special characters(-) input 3 to 13 characters
      • Based on the server name, a postfix such as 001, 002 is appended to create the actual server name
      Cluster namerequiredCluster name composed of servers
      • Enter using English letters, 3 ~ 20 characters
      • A cluster is a unit that groups multiple servers
      Number of nodesrequiredNumber of data nodes
      • Enter the number of nodes in the range of 1-10
      • If you configure the cluster by entering the number of nodes as 2 or more, you achieve high availability (High Availability)
      Service Type > Server TypeRequiredData node server type
      • Standard: Standard specification commonly used
      • High Capacity: Large-capacity server with 24 vCores or more
      Service Type > Planned ComputeSelectStatus of resources with Planned Compute configured
      • In Use: Number of resources with Planned Compute configured that are currently in use
      • Configured: Number of resources with Planned Compute configured
      • Coverage Preview: Amount applied per resource by Planned Compute
      • Apply for Planned Compute Service: Go to the Planned Compute service application page
      Service Type > Block StorageEssentialBlock Storage type to be used for data nodes
      • Base OS: Area where the engine is installed
      • DATA: Data file storage area
        • After selecting the storage type, enter the capacity (see Block Storage 생성하기 for details on each Block Storage type)
          • SSD: Standard Block Storage
          • SSD_KMS: Additional encrypted volume using KMS (Key Management System) encryption keys
        • The configured storage type is also applied to additional storage
        • Capacity must be entered as a multiple of 8 within the range 16 to 5,120
      • Add: DATA, Backup data storage area
        • After selecting Use, enter the storage’s purpose, capacity
        • To add storage, click the Add button; to delete, click the x button, up to 9 can be added
        • Capacity can be entered as a multiple of 8 within the range 16 to 5,120, and up to 9 can be created
      Management ConsoleSelectionIf you select Use, you can configure the Node’s server type and Block Storage settings for cluster management and monitoring.
      Management Console > Server TypeRequiredSelecting a data node server type for cluster management and monitoring
      Management Console > Block StorageRequiredSelect the Block Storage type to be used for data nodes for cluster management and monitoring
      Network > Common SettingsRequiredNetwork settings for servers created by the service
      • Select when you want to apply the same settings to all installed servers
      • Select a pre‑created VPC and Subnet
      • IP: Enter each server’s IP
      • Public NAT setting is only available in per‑server settings
      Network > Server-specific SettingsRequiredNetwork settings for the servers created by the service
      • Select when you want to apply different settings per installed server
      • Choose a pre‑created VPC and Subnet
      • IP: Enter the IP for each server
      • Public NAT requires the VPC to be connected to an Internet Gateway; when use is checked, you can select a reserved IP from the VPC product’s Public IP pool. For details, see Public IP 생성하기.
      IP access controlSelectionService Access Policy Configuration
      • Since the access policy is set for the IP entered on the page, a separate Security Group policy configuration is not required.
      • Enter in IP format (example: 192.168.10.1) or CIDR format (example: 192.168.10.0/24, 192.168.10.1/32) and click the Add button
      • To delete an entered IP, click the x button next to the entered IP
      maintenance periodSelectionDatabase maintenance window
      • If you select Use, set the day, start time, and duration
      • It is recommended to set a maintenance window for stable DB management. Patch operations will be performed at the scheduled time, causing service interruption
      • If set to unused, Samsung SDS is not responsible for issues arising from unapplied patches.
      Table. Vertica (DBaaS) service configuration items
    • Enter required database configuration information Enter or select the required information in this area.
      Category
      required status
      Detailed description
      Database nameEssentialServer name applied during DB installation
      • must start with an English letter and be entered using English letters and numbers, 3 to 20 characters
      Database usernameRequiredDB user name
      • An account with the same name is also created on the OS
      • Enter using lowercase English letters, 2 to 20 characters
      • Restricted database user names can be checked in the Console
      Database passwordEssentialPassword to use when accessing the DB
      • English letters, numbers, and special characters ( excluded) and enter 8~30 characters
      Database password verificationRequiredRe-enter the same password to use for DB access
      Database Port numberRequiredPort number required for DB connection
      • Enter the DB port within the range 1200 ~ 65535
      Backup > UseSelectNode backup usage
      • Select Use to choose the node backup retention period and backup start time
      Backup > Retention PeriodSelectBackup retention period
      • Select the backup retention period. Set the file retention period to 7 days ~ 35 days
      • Backup files incur additional charges based on size
      Backup > Backup Start TimeSelectBackup start time
      • Select backup start time
      • The minute(s) at which the backup runs is set randomly, and the backup end time cannot be set
      License KeyRequiredEnter the Vertica License Key held by the customer
      • If the entered license key is invalid, the service cannot be created
      DB LocaleRequiredSettings related to string handling, numeric/currency/date/time display formats, etc., to be used with Vertica (DBaaS)
      • The database is created with default settings based on the selected locale
      time zoneRequiredStandard time zone to use with Vertica (DBaaS)
      Table. Vertica (DBaaS) required configuration items
    • In the Additional Information Input area, enter or select the required information.
      Category
      required status
      Detailed description
      tagSelectAdd Tag
      • Up to 50 per resource can be added
      • After clicking the Add Tag button, enter or select Key, Value values
      Table. Vertica (DBaaS) additional information input fields
  4. Summary Review the detailed information and estimated charges generated in the panel, then click the Create button.

    • Once creation is complete, verify the created resource on the Resource List page.

View Vertica (DBaaS) detailed information

The Vertica(DBaaS) service allows you to view and edit the full list of resources and detailed information. The Vertica(DBaaS) Details page is composed of Details, Tags, Job History tabs.

To view detailed information about the Vertica (DBaaS) service, follow these steps.

  1. All Services > Data Analytics > Vertica(DBaaS) Click the menu. 1. Go to the Service Home page of Vertica (DBaaS).
  2. On the Service Home page, click the Vertica(DBaaS) menu. 2. Navigate to the Vertica(DBaaS) List page.
  3. On the Vertica(DBaaS) List page, click the resource to view detailed information. 3. Vertica(DBaaS) Details Navigate to the page.
    • Vertica(DBaaS) Details At the top of the page, status information and additional feature information are displayed.
      CategoryDetailed description
      Cluster statusCluster status
      • Creating: Creating cluster
      • Editing: Cluster is changing to an Operation execution state
      • Error: Cluster encountered a failure while performing tasks
        • If it occurs continuously, contact the administrator
      • Failed: Cluster failed during creation
      • Restarting: Cluster is restarting
      • Running: Cluster is running normally
      • Starting: Cluster is starting
      • Stopped: Cluster is stopped
      • Stopping: Cluster is stopping
      • Synchronizing: Cluster is synchronizing
      • Terminating: Cluster is terminating
      • Unknown: Cluster status is unknown
        • If it occurs continuously, contact the administrator
      • Upgrading: Cluster is upgrading
      Cluster controlButton to change the cluster state
      • Start: Start a stopped cluster
      • Stop: Stop a running cluster
      • Restart: Restart a running cluster
      View more featuresCluster-related management buttons
      • Service status synchronization: Real-time DB service status lookup
      • Backup history: When backup is configured, check whether the backup runs correctly and view its history
      • Database recovery: Recover the DB based on a specific point in time
      Service terminationButton to cancel the service
      Table. Vertica (DBaaS) status information and additional features

Detailed information

Vertica(DBaaS) List page lets you view detailed information of the selected resource and, if needed, modify the information.

CategoryDetailed description
Server informationServer information configured in this cluster
  • Category: Server type (Vertica cluster nodes are shown as Data, and the Management Console is shown as Console)
  • Server name: Server name
  • IP:Port: Server IP and port
  • Status: Server status
serviceService name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
  • refers to the cluster SRN
Resource NameResource name
  • means cluster name
Resource IDUnique resource ID in the service
ConstructorUser who created the service
Creation date and timeService creation date and time
ModifierUser who edited the service information
Modification dateDate and time the service information was modified
Image/VersionInstalled DB image and version information
Cluster nameCluster name of the configured servers
Database nameServer name applied during DB installation
Database usernameDB user name
Planned ComputeResources with Planned Compute configured
maintenance periodDB Maintenance Period Status
  • If you need to set the maintenance period, click the Edit icon to configure
BackupBackup Configuration Status
  • If backup configuration is required, click the Edit icon to set it
Managed ConsoleManaged Console resource status configured during DB installation
NetworkInstalled network information (VPC, Subnet)
IP access controlService access policy configuration
  • If you need to add or remove IPs, click the Edit icon to configure
time zoneStandard time zone for the Vertica (DBaaS) DB
LicenseVertica (DBaaS) license information
Server InformationData/Console server type, base OS, additional Disk information
  • If you need to modify the server type, click the Edit icon next to the server type to set it. See the server type modification procedure Change Server Type
    • Modifying the server type requires a server reboot
  • If you need to expand storage, click the Edit icon next to the storage capacity to expand it. See the storage expansion procedure Expand Storage
  • If you need to add storage, click the Disk Add button next to the additional Disk to add it. See the storage addition procedure Add Storage
Table. Vertica (DBaaS) Detailed Information Items

tag

Vertica(DBaaS) List page lets you view the tag information of the selected resource, and add, modify, or delete it.

CategoryDetailed description
Tag listTag list
  • Tag Key and Value information can be viewed
  • Up to 50 tags can be added per resource
  • When entering a tag, search and select from the list of previously created Keys and Values
Table. Vertica (DBaaS) Tag tab items

Work History

You can view the operation history of the selected resource on the Vertica(DBaaS) List page.

CategoryDetailed description
Task History ListResource Change History
  • Operation timestamp, Resource ID, Resource name, Operation details, Event topic, Operation result, Operator information verification
Table. Vertica (DBaaS) Job History Tab Detailed Information Items

Managing Vertica (DBaaS) Resources

If you need to change the existing configuration options of a created Vertica(DBaaS) resource or add storage, you can perform the operation on the Vertica(DBaaS) Details page.

Control operation

If changes occur to a running Vertica (DBaaS) resource, you can start, stop, or restart it.

To control the operation of Vertica (DBaaS), follow these steps.

  1. All Services > Data Analytics > Vertica(DBaaS) Click the menu. 1. Go to the Service Home page of Vertica (DBaaS).
  2. Click the Vertica(DBaaS) menu on the Service Home page. 2. Navigate to the Vertica(DBaaS) List page.
  3. Vertica(DBaaS) List page, click the resource to control its operation. 3. Vertica(DBaaS) Details Navigate to the page.
  4. Check the Vertica (DBaaS) status and complete the change using the control button below.
    • Start: The server where the Vertica(DBaaS) service is installed and the Vertica(DBaaS) service is running.
    • Stop: The server on which the Vertica (DBaaS) service is installed and the Vertica (DBaaS) service will be stopped (Stopped).
    • Restart: Only the Vertica(DBaaS) service will be restarted.

Synchronize service status

You can synchronize the real-time service status of Vertica (DBaaS).

To view the service status of Vertica (DBaaS), follow these steps.

  1. All Services > Data Analytics > Vertica(DBaaS) Click the menu. 1. Go to the Service Home page of Vertica (DBaaS).
  2. On the Service Home page, click the Vertica(DBaaS) menu. 2. Go to the Vertica(DBaaS) List page.
  3. On the Vertica(DBaaS) List page, click the resource to view the service status. 3. Vertica(DBaaS) Details Go to the page.
  4. Click the Service Status Sync button. 4. While it is being queried, the cluster changes to Synchronizing state.
  5. When the query completes, the status in the server information field is updated, and the cluster changes to the Running state.

Change server type

You can change the configured server type.

Caution
  • If the server type is configured as Standard, it cannot be changed to High Capacity. * If you want to change to High Capacity, create a new service.
  • If you modify the server type, a server restart is required. * Please separately verify any software license modifications or software settings and their implementation due to server specification changes.

To change the server type, follow these steps.

  1. All Services > Data Analytics > Vertica(DBaaS) Click the menu. 1. Go to the Service Home page of Vertica (DBaaS).
  2. On the Service Home page, click the Vertica(DBaaS) menu. 2. Go to the Vertica(DBaaS) List page.
  3. Vertica(DBaaS) List On the page, click the resource to change the server type. 3. Vertica(DBaaS) Details Navigate to the page.
  4. Click the Edit icon of the server type you want to change at the bottom of the detailed information. 4. Edit Server Type popup window opens.
  5. Edit Server Type After selecting the server type in the popup window, click the Confirm button.

Add storage

If you need more than 5 TB of data storage, you can add additional storage. In a high‑availability configuration (HA cluster), expanding or adding storage capacity is applied simultaneously to all databases.

To add storage, follow these steps.

  1. All Services > Data Analytics > Vertica(DBaaS) Click the menu. 1. Go to the Service Home page of Vertica (DBaaS).
  2. On the Service Home page, click the Vertica(DBaaS) menu. 2. Navigate to the Vertica(DBaaS) List page.
  3. On the Vertica(DBaaS) List page, click the resource to add storage. 3. Vertica(DBaaS) Details Navigate to the page.
  4. Click the Add Disk button at the bottom of the detailed view. 4. Additional Storage Request The popup window opens.
  5. Additional Storage Request In the popup window, after entering the purpose and size, click the Confirm button.

Expand storage

Storage added to the data area can be expanded up to a maximum of 5 TB, based on the initially allocated capacity. You can expand storage without stopping Vertica (DBaaS), and if it is configured as a cluster, all nodes are expanded simultaneously.

To expand storage capacity, follow the steps below.

  1. Click the All Services > Data Analytics > Vertica(DBaaS) menu. 1. Go to the Service Home page of Vertica (DBaaS).
  2. On the Service Home page, click the Vertica(DBaaS) menu. 2. Vertica(DBaaS) List Go to the page.
  3. On the Vertica(DBaaS) List page, click the resource to change the server type. 3. Go to the Vertica(DBaaS) Details page.
  4. Click the Edit button for the additional Disk you want to add at the bottom of the detailed information. 4. Edit Additional Storage A popup window opens.
  5. Edit Additional Storage In the popup window, after entering the expansion capacity, click the Confirm button.

Changing the Recovery DB instance type

After the DB recovery is complete, you can change the instance type on the Recovery details screen.

To change the Recovery DB instance type, follow these steps.

  1. Click the All Services > Data Analytics > Vertica(DBaaS) menu. 1. Go to the Service Home page of Vertica (DBaaS).
  2. On the Service Home page, click the Vertica(DBaaS) menu. 2. Navigate to the Vertica(DBaaS) List page.
  3. On the Vertica(DBaaS) List page, click the resource to change the Recovery DB instance type. 3. Vertica(DBaaS) Details Go to the page.
  4. Click the Change Instance Type button. 4. Change Instance Type A confirmation dialog will appear.
  • The DB instance type is changed from Recovery to Active to provide the same functionality as a single DB.

Cancel Vertica (DBaaS)

You can cancel the unused Vertica (DBaaS) to reduce operating costs. However, if you terminate the service, the running service may be stopped immediately, so you should proceed with the termination only after fully considering the impact that may occur when the service is discontinued.

To cancel Vertica(DBaaS), follow the steps below.

  1. All Services > Data Analytics > Vertica(DBaaS) Click the menu. 1. Go to the Service Home page of Vertica (DBaaS).
  2. On the Service Home page, click the Vertica(DBaaS) menu. 2. Navigate to the Vertica(DBaaS) List page.
  3. On the Vertica(DBaaS) List page, select the resource to cancel and click the Cancel Service button.
  4. After termination is complete, check on the Vertica(DBaaS) list page whether the resource has been terminated.

3.2.1 - Backing up and restoring Vertica

Users can set up backups for Vertica (DBaaS) via the Samsung Cloud Platform Console and restore from the backed‑up files.

Backing up Vertica (DBaaS)

You can configure the backup feature to ensure that user data is stored securely. Additionally, you can verify whether a backup completed successfully using the backup history feature, and you can also delete backed‑up files.

Configure Backup

For backup configuration of Vertica(DBaaS), please refer to Create Vertica(DBaaS).

To modify the backup settings of Vertica (DBaaS), follow the steps below.

Caution
  • If a backup is configured, it will run at the designated time after the set time, and additional fees will be incurred based on the backup volume.
  • If you change the backup setting to unused, backup execution will stop immediately, and the stored backup data will be deleted and can no longer be used.
  1. Click the All Services > Data Analytics > Vertica(DBaaS) menu. 1. Go to the Service Home page of Vertica (DBaaS).
  2. On the Service Home page, click the Vertica(DBaaS) menu. 2. Go to the Vertica(DBaaS) List page.
  3. Vertica(DBaaS) List page, click the resource to configure a backup. 3. Vertica(DBaaS) Details Navigate to the page.
  4. Click the Edit button of the backup item. 4. Backup Settings The popup window opens.
  5. When setting up a backup, click Backup Settings in the popup window, click Enable, select the retention period and backup start time, and click the Confirm button.
    • If you want to stop the backup configuration, deselect Use in the Backup Settings popup and authenticate via the logged‑in user’s mobile phone.
      Once user authentication is completed, the backup configuration will be disabled and backup execution will stop.

Check backup history

information
To set notifications for backup success and failure, you can configure them through the Notification Manager product. For a detailed usage guide on configuring notification policies, refer to 알림 정책 생성하기.

To view the backup history, follow these steps.

  1. All Services > Data Analytics > Vertica(DBaaS) Click the menu. 1. Go to the Service Home page of Vertica (DBaaS).
  2. On the Service Home page, click the Vertica(DBaaS) menu. 2. Navigate to the Vertica(DBaaS) List page.
  3. On the Vertica(DBaaS) List page, click the resource to view the backup history. 3. Vertica (DBaaS) Details Navigate to the page.
  4. Click the Backup History button. 4. The Backup History popup window opens.
  5. Backup History In the popup window, you can view the backup status, version, backup start time, backup completion time, and size.

Delete backup files

To delete the backup history, follow these steps.

Caution
Backup files cannot be restored after deletion. Please be sure to verify whether the data is unnecessary before deleting it.
  1. All Services > Data Analytics > Vertica(DBaaS) Click the menu. 1. Go to the Service Home page of Vertica (DBaaS).
  2. On the Service Home page, click the Vertica(DBaaS) menu. 2. Go to the Vertica(DBaaS) List page.
  3. Vertica(DBaaS) List page, click the resource to view the backup history. 3. Vertica(DBaaS) Details Navigate to the page.
  4. Click the Backup History button. 4. Backup History The popup window opens.
  5. Backup History In the popup window, check the files you want to delete, then authenticate using the logged-in user’s mobile phone.
    • When user authentication is completed, the backup file is deleted.

Recover Vertica(DBaaS)

If a failure or data loss requires restoration from backup files, you can use the cluster recovery feature to recover based on a specific point in time.

Caution
To perform recovery, you need a capacity at least equal to the Disk data type’s capacity. If there is insufficient disk space, the recovery may fail.

To restore Vertica(DBaaS), follow these steps.

  1. Click the All Services > Data Analytics > Vertica(DBaaS) menu. 1. Go to the Service Home page of Vertica (DBaaS).
  2. On the Service Home page, click the Vertica(DBaaS) menu. 2. Go to the Vertica(DBaaS) List page.
  3. On the Vertica(DBaaS) resource list page, click the resource you want to recover. 3. Vertica(DBaaS) Details Go to the page.
  4. Database Recovery button, click it. 4. Database(DBaaS) Recovery Navigate to the page.
  5. After entering the relevant information in the Database Recovery area, click the Complete button.
    Category
    required status
    Detailed description
    Recovery TypeRequiredSet the point in time the user wants to recover
    • Backup point (recommended): Recover based on the backup file. Select from the list of backup file timestamps displayed
    • Recovery point: Choose the date and time to recover. Can be selected from the start time of the backup history
    Server name PrefixEssentialRecovery DB server name
    • Start with a lowercase English letter and use lowercase letters, numbers, and special characters (-) to enter 3 to 16 characters
    • Based on the server name, a postfix such as 001, 002 is appended to generate the actual server name
    Cluster nameRequiredRecovery DB cluster name
    • Enter using English letters, 3 to 20 characters
    • A cluster is a unit that groups multiple servers
    Number of nodesSelectionData node count
    • Set to be the same as the number of nodes configured in the original cluster
    Service Type > Server TypeRequiredRecovery DB server type
    • Standard: standard specification commonly used
    • High Capacity: large-capacity server with 24 vCores or more
    Service Type > Planned ComputeSelectionStatus of resources with Planned Compute configured
    • In Use: Number of resources with Planned Compute that are currently in use
    • Configured: Number of resources with Planned Compute configured
    • Coverage preview: Amount applied per resource by Planned Compute
    • Planned Compute Service Application: Go to the Planned Compute service application page
    Service Type > Block StorageRequiredBlock Storage settings used by the recovery DB
    • Basic OS: Area where the DB engine is installed
    • DATA: Storage area for table data, archive files, etc.
      • Applied identically with the storage type set in the original cluster
      • After selecting Use, enter the storage purpose and capacity
      • To add storage, click the Add button; to delete, click the x button
      • Capacity can be entered in multiples of 8 within the range 16 to 5,120, and up to 9 can be created
    Management Console > Server TypeEssentialManagement Console server type
    • After selecting Use, select the storage purpose and capacity
    • Standard: standard specification commonly used
    • High Capacity: large-capacity server with 24vCore or more
    Management Console > Block StorageRequiredBlock Storage settings used by the Management Console
    • Select Use, then select Default OS
    Database usernameRequiredDatabase username
    • Apply the same username set in the original cluster
    Database passwordEssentialDatabase password
    • Apply the same password set in the original cluster
    Database Port numberRequiredDatabase Port number
    • Apply the same Port number as set in the original cluster
    IP access controlSelectService Access Policy Configuration
    • Since the access policy is set for the IP entered on the page, you do not need to configure a separate Security Group policy.
    • Enter in IP format (e.g., 192.168.10.1) or CIDR format (e.g., 192.168.10.0/24, 192.168.10.1/32) and click the Add button
    • To delete an entered IP, click the x button next to the entered IP
    maintenance periodSelectDatabase maintenance window
    • If you select Use, set the day of week, start time, and duration
    • It is recommended to set a maintenance window for stable management of the database. Patch operations will be performed at the scheduled time, causing service interruption
    • If set to not use, Samsung SDS is not responsible for issues arising from patches not being applied.
    License KeyRequiredEnter the Vertica License Key to recover
    • If the entered license key is invalid, the service cannot be created
    tagSelectionAdd Tag
    • After clicking the Add Tag button, enter or select Key, Value values
    Table. Vertica (DBaaS) recovery configuration items

3.3 - API Reference

API Reference

3.4 - CLI Reference

CLI Reference

3.5 - Release Note

Vertica(DBaaS)

2025.07.01
NEW Vertica(DBaaS) service official version release
  • We have launched the Vertica(DBaaS) service, which can efficiently store data and improve query execution speed with compression and encoding capabilities based on columnar storage.

4 - Data Flow

4.1 - Overview

Service Overview

Data Flow is a data processing workflow tool that visually creates processing flows for extracting large volumes of data from various data sources and for transforming and transmitting stream/batch data, and it provides the open-source Apache NiFi. Data Flow can be used independently in the Kubernetes Engine cluster environment of Samsung Cloud Platform, or together with other application software.

Diagram
Figure. Data Flow Diagram

Provided features

Data Flow provides the following functions.

  • Convenient Installation and Management: Data Flow can be easily installed in a standard Kubernetes cluster environment via the web-based Samsung Cloud Platform Console. It automatically configures the architecture required for scalable clustering based on the open-source Apache NiFi, automatically installing ZooKeeper, Registry, and management modules. With Data Flow, you can configure and deploy configuration files, NiFi templates, and other assets needed for service integration.
  • Easy Data Flow Management: You can easily create processing flows for stream/batch data in a GUI that matches the user environment, and by authoring data processing flows in a GUI, you can efficiently extract, transmit, and process data between systems.
  • NiFi Template Gallery: You can share/distribute reference NiFi templates. Data Flow provides work files for data processing flows commonly used in the field as a gallery, and users can share the data processing flow work they have created.

Component

Data Flow consists of Manager and Service modules, and is provided packaged with Apache NiFi.

Data Flow Manager

Data Flow Manager provides various management functions to enable more efficient use of NiFi.

  • You can upload the Nar file created by the customer through the Data Flow Manager for use in the Processor, and upload configuration files to share them.
  • Frequently used NiFi templates are packaged as assets and offered in the Gallery, ready for use with a single click.
  • Provides real-time monitoring of multiple services configured for the native NiFi service, as well as resource status monitoring.
  • You can easily provision configuration information for NiFi components within the cluster.

Data Flow Service

  • We provide a data flow management service based on Apache NiFi.
  • Automatically configures the architecture required for scalable clustering based on Apache NiFi, and automatically installs the Nifi, ZooKeeper, and Nifi Registry modules.
  • When providing Nifi, you can set the Description, required resource size, connection ID/PW, and Host Alias.
  • After creating the service, you can modify the Description, required resource size, connection password, Host Alias, and other settings, and apply the changes to the service.

Server spec type

When creating a Data Flow service, check the following.

  • Recommended Service Installation Specifications: CPU 21 core, Memory 57 GB, Storage at least 100 GB
Reference
  • Before creating the Data Flow service, you need to install the Ingress Controller.
  • Only one Ingress Controller can be installed in a Kubernetes cluster.
  • For more details, refer to Ingress Controller Installation.

Provision status by region

Data Flow is available in the environments below.

regionProvision status
Korea West (kr-west1)Provided
Korea East (kr-east1)Provide
South Korea 1 (kr-south1)Not provided
South Korea South 2 (kr-south2)Not provided
South Korea 3 (kr-south3)Not provided
Table. Data Flow regional availability status

Preliminary Service

This is a list of services that must be pre‑configured before creating the service. Please refer to the guide provided for each service and prepare in advance.

Service CategoryserviceDetailed description
StorageFile StorageStorage that enables multiple client servers to share files over a network connection.
ContainerKubernetes EngineKubernetes container orchestration service
Table. Data Flow Pre-service

4.1.1 - ServiceWatch metric

In ServiceWatch, you can view Kubernetes Engine metrics for the Kubernetes Engine created by Data Flow. As with Kubernetes Engine, the metrics provided by default monitoring are data collected at one‑minute intervals.

Reference
Refer to the ServiceWatch guide for how to view metrics in ServiceWatch.

Basic Metrics

The following are the default metrics for the Kubernetes Engine namespace.

The metrics whose names are displayed in bold below are the key metrics selected from the default metrics provided by Kubernetes Engine. Key metrics are used to build service dashboards that are automatically created for each service in ServiceWatch.

Each metric provides guidance in the user guide on which statistical values are meaningful when querying that metric, and among the meaningful statistics, the values shown in bold are the primary statistics. In the service dashboard, you can view key metrics using primary statistical values.

Indicator nameDetailed descriptionunitmeaningful statistics
cluster_upCluster upCount
  • Total
  • Average
  • Maximum
  • Minimum
cluster_node_countNumber of cluster nodesCount
  • Total
  • Average
  • Max
  • Min
cluster_failed_node_countNumber of failed nodes in the clusterCount
  • Total
  • Average
  • Maximum
  • Minimum
cluster_namespace_phase_countNumber of cluster namespace phasesCount
  • Total
  • Average
  • Maximum
  • Minimum
cluster_pod_phase_countCluster pod phase countCount
  • Total
  • Average
  • Maximum
  • Minimum
node_cpu_allocatableNode CPU allocatable-
  • Total
  • Average
  • Maximum
  • Minimum
node_cpu_capacityNode CPU capacity-
  • Total
  • Average
  • Maximum
  • Minimum
node_cpu_usageNode CPU usage-
  • Total
  • Average
  • Maximum
  • Minimum
node_cpu_utilizationNode CPU usage-
  • Total
  • Average
  • Maximum
  • Minimum
node_memory_allocatableNode memory allocatable amountBytes
  • Total
  • Average
  • Maximum
  • Minimum
node_memory_capacityNode memory capacityBytes
  • Total
  • Average
  • Maximum
  • Minimum
node_memory_usageNode memory usageBytes
  • Total
  • Average
  • Maximum
  • Minimum
node_memory_utilizationNode memory usage rate-
  • Total
  • Average
  • Maximum
  • Minimum
node_network_rx_bytesNode network received bytesBytes/Second
  • Total
  • Average
  • Maximum
  • Minimum
node_network_tx_bytesNode network transmitted bytesBytes/Second
  • Total
  • Average
  • Maximum
  • Minimum
node_network_total_bytesTotal bytes of the node networkBytes/Second
  • Total
  • Average
  • Maximum
  • Minimum
node_number_of_running_podsNumber of pods running on a nodeCount
  • Total
  • Average
  • Maximum
  • Minimum
namespace_number_of_running_podsNumber of running pods in the namespaceCount
  • Total
  • Average
  • Maximum
  • Minimum
namespace_deployment_pod_countNamespace deployment pod countCount
  • Total
  • Average
  • Maximum
  • Minimum
namespace_statefulset_pod_countNamespace StatefulSet pod countCount
  • Total
  • Average
  • Maximum
  • Minimum
namespace_daemonset_pod_countNamespace daemonset pod countCount
  • Total
  • Average
  • Maximum
  • Minimum
namespace_job_active_countActive namespace job countCount
  • Total
  • Average
  • Maximum
  • Minimum
namespace_cronjob_active_countNumber of active namespace cronjobsCount
  • Total
  • Average
  • Maximum
  • Minimum
pod_cpu_usagePod CPU usage-
  • Total
  • Average
  • Maximum
  • Minimum
pod_memory_usagePod memory usageBytes
  • Total
  • Average
  • Maximum
  • Minimum
pod_network_rx_bytesPod network received bytesBytes/Second
  • Total
  • Average
  • Maximum
  • Minimum
pod_network_tx_bytesPod network transmitted bytesBytes/Second
  • Total
  • Average
  • Maximum
  • Minimum
pod_network_total_bytesPod network total bytesCount
  • Total
  • Average
  • Maximum
  • Minimum
container_cpu_usageContainer CPU usage-
  • Total
  • Average
  • Maximum
  • Minimum
container_cpu_limitContainer CPU limit-
  • Total
  • Average
  • Maximum
  • Minimum
container_cpu_utilizationContainer CPU usage-
  • Total
  • Average
  • Maximum
  • Minimum
container_memory_usageContainer memory usageBytes
  • Total
  • Average
  • Maximum
  • Minimum
container_memory_limitContainer memory limitBytes
  • Total
  • Average
  • Maximum
  • Minimum
container_memory_utilizationContainer memory usage-
  • Total
  • Average
  • Maximum
  • Minimum
node_gpu_countNode GPU countCount
  • Total
  • Average
  • Maximum
  • Minimum
gpu_tempGPU temperature-
  • Total
  • Average
  • Maximum
  • Minimum
gpu_power_usageGPU power usage-
  • Total
  • Average
  • Maximum
  • Minimum
gpu_utilGPU utilizationPercent
  • Total
  • Average
  • Maximum
  • Minimum
gpu_sm_clockGPU SM clock-
  • Total
  • Average
  • Maximum
  • Minimum
gpu_fb_usedGPU FB usageMegabytes
  • Total
  • Average
  • Maximum
  • Minimum
gpu_tensor_activeGPU tensor utilization-
  • Total
  • Average
  • Maximum
  • Minimum
pod_gpu_utilPod GPU utilizationPercent
  • Total
  • Average
  • Maximum
  • Minimum
pod_gpu_tensor_activePod GPU Tensor Utilization Rate-
  • Total
  • Average
  • Maximum
  • Minimum
Table. Kubernetes Engine Basic Metrics

4.2 - How-to guides

Users can create the service by entering the required Data Flow information and selecting detailed options through the Samsung Cloud Platform Console.

Create Data Flow

You can create and use the Data Flow service in the Samsung Cloud Platform Console.

To create a Data Flow, follow these steps.

  1. Click the All Services > Data Analytics > Data Flow menu. Navigate to the Service Home page of Data Flow.

  2. On the Service Home page, click the Create Data Flow button. You will be taken to the Create Data Flow page.

  3. On the Data Flow creation page, enter the information required to create the service and select detailed options.

    • Version selection area, select the required information.
      Category
      Required or optional
      Detailed description
      Data Flow versionRequiredSelect version of the selected image
      • Provide a list of versions for the provided server image
      Table. Data Flow version selection item
    • Enter or select the required information in the Cluster Selection area. To install Data Flow, you must first create nodes for the Kubernetes cluster and the working environment.
      Category
      Required status
      Detailed description
      Cluster nameRequiredSelect the cluster to use
      Ingress ControllerRequiredSelect the Ingress Controller installed in the cluster
      • In the Details tab of the installed Ingress Controller, add the following information to the ConfigMap entry.
        • Key: allow-snippet-annotations
        • Value: true
      Table. Data Flow cluster selection options
    • Enter or select the required information in the Service Information Input area.
      Category
      Required
      Detailed description
      Data Flow nameRequiredEnter Data Flow name
      • starting with a lowercase English letter and not ending with a special character (-), using lowercase English letters, numbers, and special characters (-) to input 3 ~ 30 characters
      Storage ClassRequiredSelect the storage class used by the selected cluster
      descriptionSelectEnter additional information or description about Data Flow within 150 characters.
      Domain SettingsRequiredEnter Data Flow domain
      • Start with a lowercase English letter and ensure it does not end with special characters (-), using lowercase letters, numbers, and special characters (-) to enter 3 ~ 50 characters
      • {Data Flow name}.{configured domain} becomes the Data Flow access URL.
      Node SelectorRequiredTo install on a specific node, enter a distinguishable label among the node’s labels
      • If you enter an incorrect node label, installation errors may occur, so verify the node label in advance
      • Node labels can be found in the node’s yaml file
      accountRequiredEnter Data Flow Manager account
      • ID: Enter a value between 6 and 30 characters, starting with a lowercase English letter and using lowercase letters and numbers
      • Password: Enter 8 to 50 characters, including uppercase letters, lowercase letters, numbers, and special characters (! @ # $ % ^ & *)
      • Confirm Password: Re-enter the password exactly the same
      Host AliasSelectionAdd host information to be linked with Data Flow (up to 20 total, including defaults)
      • Select Use, then click the + button
      • Hostname: Enter a hostname or domain format using lowercase letters, numbers, and special characters (-) with a length of 3 to 63 characters
      • IP: Enter in IP format
      • Click the X button to delete
      • The added host information can be used only if the firewall between the cluster and the server is open
      Table. Data Flow service information entry items
    • In the Additional Information Input area, enter or select the required information.
      Category
      Required status
      Detailed description
      tagSelectionAdd Tag
      • Add Tag Click the button to create and add a tag, or add an existing tag.
      • You can add up to 50 tags.
      • The newly added tags will be applied after the service creation is completed.
      Table. Data Flow additional information input fields
  4. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.

    • When creation is complete, check the created resource on the Data Flow List page.

Check detailed information of Data Flow

You can view and edit the full list of resources and detailed information of a Data Flow. The Data Flow Details page consists of Details, Tags, Activity Log tabs.

To view detailed information of the Data Flow, follow these steps.

  1. Click the All Services > Data Analytics > Data Flow menu. Navigate to the Service Home page of Data Flow.
  2. On the Service Home page, click the Data Flow menu. You will be taken to the Data Flow List page.
  3. On the Data Flow List page, click the resource to view detailed information. You will be taken to the Data Flow Detail page.
    • Data Flow Details At the top of the page, status information and additional feature information are displayed.
      CategoryDetailed description
      Status indicatorData Flow status
      • Creating: Creating
      • Running: Running, Data Flow Services can be created
      • Updating: Updating settings
      • Terminating: Terminating
      • Error: error occurred during creation or service abnormal state
      Hosts file configuration informationButton to view and copy the host file information for accessing Data Flow
      Service terminationCancel Service button
      Table. Data Flow status information and additional functions

Detailed Information

On the Data Flow list page, you can view detailed information of the selected resource and edit the information if needed.

CategoryDetailed description
serviceService name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
  • means the cluster SRN
Resource nameresource name
  • means the cluster name
Resource IDUnique resource ID in the service
constructorUser who created the service
Creation date and timeService creation date and time
editorUser who edited the service information
Modification dateDate and time the service information was modified
Cluster nameCluster name of the configured servers
Storage ClassStorage class used by the selected cluster
ExplanationAdditional information or explanation about Data Flow
Domain SettingsData Flow domain name
Node SelectorNode Label
Web UrlData Flow URL
accountData Flow Manager account
Host AliasHost information to be connected with Data Flow
Table. Data Flow Detailed Information Tab Items

tag

Data Flow List page lets you view the tag information of the selected resource, and you can add, modify, or delete it.

CategoryDetailed description
Tag listTag list
  • You can view the Key, Value information of the tag
  • Up to 50 tags can be added per resource
  • When entering a tag, you can search and select from the list of previously created Keys and Values
Table. Data Flow Tag Tab Items

Job History

You can view the operation history of the selected resource on the Data Flow List page.

CategoryDetailed description
Task History ListResource Change History
  • Operation Time, Resource ID, Resource Name, Operation Details, Event Topic, Operation Result, Check operator information
Table. Data Flow Job History Tab Detailed Information Items

Terminate Data Flow

You can cancel unused Data Flow to reduce operating costs. However, if you cancel a service, the running service may be terminated immediately, so you should thoroughly consider the impact of service interruption before proceeding with the cancellation.

To cancel the Data Flow, follow the steps below.

  1. Click the All Services > Data Analytics > Data Flow menu. Navigate to the Service Home page of Data Flow.
  2. On the Service Home page, click the Data Flow menu. You will be taken to the Data Flow List page.
  3. On the Data Flow List page, select the resource to cancel, and click the Cancel Service button.
  4. When termination is complete, check on the Data Flow List page whether the resource has been terminated.
Information
  • Data Flow can be cancelled only after first deleting the associated Data Flow Services.
  • If you cancel Data Flow, the created namespace will also be deleted.

4.2.1 - Data Flow Services

Users can create the service by entering the required information for Data Flow Services within the Data Flow service through the Samsung Cloud Platform Console and selecting detailed options.

Creating Data Flow Services

Users can add a service by selecting detailed options for Data Flow or by entering configuration values.

Information
When applying for Data Flow Services, the resource size must be secured to be at least the available capacity of the K8s cluster.

To create Data Flow Services, follow these steps.

  1. Click the All Services > Data Analytics > Data Flow menu. You will be taken to the Data Flow Service Home page.

  2. From the Service Home page, click Data Flow Servies. Navigate to the Data Flow Services list page.

  3. On the Data Flow Services List page, click the Data Flow Services Create button. You will be taken to the Data Flow Services Create page.

  4. Data Flow Services Creation page: enter the information required to create the service and select detailed options.

    • Enter or select the required information in the Service Information Input area.
      Category
      Required
      Detailed description
      Data Flow nameRequiredSelect Data Flow
      Flow Service nameRequiredEnter Data Flow Services name
      • Start with a lowercase English letter and ensure it does not end with a special character (-), using lowercase letters, numbers, and special characters (-) to enter 3 to 30 characters
      Storage ClassRequiredSelect the storage class used by the selected cluster
      descriptionSelectionEnter additional information or description about Data Flow Services within 150 characters.
      Domain SettingsRequiredData Flow Services domain input
      • Start with a lowercase English letter and ensure it does not end with a special character (-), using lowercase letters, numbers, and special characters (-) to enter 3 to 50 characters
      • {Data Flow Services name}.{configured domain} becomes the Data Flow Services access URL.
      Node SelectorRequiredTo install on a specific node, enter a distinguishable label among the node’s Labels
      • If you enter an incorrect node label, installation errors may occur, so verify the node label in advance
      • The node label can be found in the node’s yaml file
      Service WorkloadRequired
      • Nifi: Module that provides Apache Nifi’s services and UI
      • Nifi Registry: Module that configures and deploys Nifi templates
      • Zookeeper: Module that supports proper distributed processing of Nifi across multiple nodes
      accountRequiredEnter Nifi account
      • ID: Enter a value between 6 and 30 characters, starting with a lowercase English letter and using lowercase letters and numbers
      • Password: Enter 8 to 50 characters, including uppercase letters, lowercase letters, numbers, and special characters(!@#$%^&*)
      • Confirm Password: Re-enter the password exactly the same
      Table. Data Flow Services service information input items
    • In the Additional Information Input area, enter or select the required information.
      Category
      Required
      Detailed description
      Host AliasSelectionAdd host information to be linked with Data Flow (up to 20 total, including defaults)
      • Select Use, then click the + button
      • Hostname: Enter a hostname or domain format using lowercase letters, numbers, and special characters (-) with a length of 3 to 63 characters
      • IP: Enter in IP format
      • To delete, click the X button
      • The added host information can be used only if the firewall between the cluster and the server is open
      tagSelectionAdd Tag
      • Add Tag Click the button to create and add a tag, or add an existing tag.
      • You can add up to 50 tags.
      • The newly added tags will be applied after the service creation is completed.
      Table. Data Flow additional information input fields
  5. Summary Verify the detailed information and estimated billing amount generated in the panel, then click the Complete button.

    • Once creation is complete, check the created resources on the Data Flow Services List page.

Data Flow Services Check detailed information

You can view and edit the complete list of resources and detailed information for Data Flow Services. Data Flow Services Details page consists of Details, Tags, Operation History tabs.

To view detailed information about Data Flow Services, follow these steps.

  1. Click the All Services > Data Analytics > Data Flow menu. Navigate to the Service Home page of Data Flow.
  2. On the Service Home page, click the Data Flow Services menu. You will be taken to the Data Flow Services list page.
  3. On the Data Flow Services List page, click the resource to view detailed information. You will be taken to the Data Flow Services Details page.
    • Data Flow Services Details At the top of the page, status information and additional feature information are displayed.
      CategoryDetailed description
      Status displayData Flow Services status
      • Creating: Creating
      • Running: Running
      • Updating: Updating configuration
      • Terminating: Terminating service
      • Error: Creation failed or service unavailable
      Hosts file configuration informationButton to view and copy the host file information needed to access Data Flow Services
      Delete Data Flow ServicesCancel Service button
      Table. Data Flow Services status information and additional functions

Detailed Information

Data Flow Services List page lets you view detailed information of the selected resource and edit the information if needed.

CategoryDetailed description
serviceService name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
  • refers to the cluster SRN
Resource nameResource name
  • means the cluster name
Resource IDUnique resource ID in the service
constructorUser who created the service
Creation date and timeService creation date and time
editorUser who edited the service information
Modification dateDate and time the service information was modified
Data Flow nameData Flow name
Storage ClassStorage class used by the selected cluster
descriptionAdditional information or explanation about Data Flow Services
Domain SettingsData Flow Services domain name
Node SelectorNode Label
Web UrlData Flow Services URL
accountAirflow account
Host AliasHost information to be connected to Data Flow Services
Table. Data Flow Services detailed information tab items

tag

Data Flow Services List page allows you to view the tag information of the selected resource, and you can add, modify, or delete it.

CategoryDetailed description
Tag listTag list
  • You can view the Key, Value information of the tag
  • Up to 50 tags can be added per resource
  • When entering a tag, you can search and select from the list of previously created Keys and Values
Table. Data Flow Services Tag Tab Items

Job History

Data Flow Services List page lets you view the operation history of the selected resource.

CategoryDetailed description
Task History ListResource Change History
  • Operation Time, Resource ID, Resource Name, Operation Details, Event Topic, Operation Result, Check Operator Information
Table. Data Flow Services Job History Tab Detailed Information Items

Terminate Data Flow Services

You can cancel unused Data Flow Services to reduce operating costs. However, if you cancel the service, the running service may be stopped immediately, so you should thoroughly consider the impact of service interruption before proceeding with the cancellation.

To cancel Data Flow or Data Flow Services, follow the steps below.

  1. Click the All Services > Data Analytics > Data Flow menu. You will be taken to the Service Home page of Data Flow.
  2. On the Service Home page, click the Data Flow Services menu. You will be taken to the Data Flow Services list page.
  3. On the Data Flow Services List page, select the resource to cancel, and click the Data Flow Services Delete button.
  4. When termination is complete, check on the Data Flow Services list page whether the resource has been terminated.
information
  • If you cancel Data Flow Services, the created namespace will also be deleted.

4.2.2 - Install Ingress Controller

The user must install an Ingress Controller before creating a Data Flow service. Only one Ingress Controller should be installed in the Kubernetes cluster.

Installing Ingress Controller using Container Registry

Follow these steps to install the Ingress Controller using the Container Registry.

For detailed instructions on creating a Container Registry, see the Container > Container Registry > How-to guides guide.
  1. After checking the service domain, download the corresponding Ingress Controller image file.
  2. Click the All Services > Container > Kubernetes Engine > Workloads > Pods menu. You will be taken to the Pod List page.
  3. Click the Create Object button. The Create Object popup window opens.
  4. After selecting the cluster where you will install Data Flow, copy and paste the contents of the Yaml file.
  5. Click the Confirm button to complete the installation. The installed Ingress Controller can be viewed in the list.
Reference
For detailed object creation methods, refer to Container > Kubernetes Engine > Creating a Deployment.

IngressController For Enterprise (KR-WEST1)

Color mode
apiVersion: v1
kind: Namespace
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
rules:
- apiGroups:
  - 
  resources:
  - namespaces
  verbs:
  - get
- apiGroups:
  - 
  resources:
  - configmaps
  - pods
  - secrets
  - endpoints
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - 
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resourceNames:
  - dss-ingress-nginx-leader
  resources:
  - leases
  verbs:
  - get
  - update
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - create
- apiGroups:
  - 
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  - endpoints
  - nodes
  - pods
  - secrets
  - namespaces
  verbs:
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - nodes
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: v1
data:
  allow-snippet-annotations: "true"
  annotations-risk-level: Critical
kind: ConfigMap
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  externalTrafficPolicy: Cluster
  ipFamilies:
  - IPv4
  ipFamilyPolicy: SingleStack
  ports:
  - appProtocol: http
    name: http
    nodePort: 30708
    port: 80
    protocol: TCP
    targetPort: http
  - appProtocol: https
    name: https
    nodePort: 31416
    port: 443
    protocol: TCP
    targetPort: https
  selector:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  minReadySeconds: 0
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app.kubernetes.io/component: controller
      app.kubernetes.io/instance: dss-ingress
      app.kubernetes.io/name: dss-ingress
  strategy:
    rollingUpdate:
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      labels:
        app.kubernetes.io/component: controller
        app.kubernetes.io/instance: dss-ingress
        app.kubernetes.io/name: dss-ingress
        app.kubernetes.io/part-of: dss-ingress
        app.kubernetes.io/version: 1.12.3
    spec:
      containers:
      - args:
        - /nginx-ingress-controller
        - --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
        - --election-id=dss-ingress-nginx-leader
        - --controller-class=k8s.io/dss-ingress-controller
        - --ingress-class=dss-nginx
        - --configmap=$(POD_NAMESPACE)/dss-ingress-controller
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: LD_PRELOAD
          value: /usr/local/lib/libmimalloc.so
        image: brightixscr.scr.private.kr-west1.e.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
        imagePullPolicy: IfNotPresent
        lifecycle:
          preStop:
            exec:
              command:
              - /wait-shutdown
        livenessProbe:
          failureThreshold: 5
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        name: controller
        ports:
        - containerPort: 80
          name: http
          protocol: TCP
        - containerPort: 443
          name: https
          protocol: TCP
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        resources:
          requests:
            cpu: 100m
            memory: 90Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            add:
            - NET_BIND_SERVICE
            drop:
            - ALL
          readOnlyRootFilesystem: false
          runAsGroup: 82
          runAsNonRoot: true
          runAsUser: 101
          seccompProfile:
            type: RuntimeDefault
      dnsPolicy: ClusterFirst
      nodeSelector:
        kubernetes.io/os: linux
      serviceAccountName: dss-ingress
      terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
  annotations:
    ingressclass.kubernetes.io/is-default-class: "true"
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-nginx
spec:
  controller: k8s.io/dss-ingress-controller
apiVersion: v1
kind: Namespace
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
rules:
- apiGroups:
  - 
  resources:
  - namespaces
  verbs:
  - get
- apiGroups:
  - 
  resources:
  - configmaps
  - pods
  - secrets
  - endpoints
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - 
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resourceNames:
  - dss-ingress-nginx-leader
  resources:
  - leases
  verbs:
  - get
  - update
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - create
- apiGroups:
  - 
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  - endpoints
  - nodes
  - pods
  - secrets
  - namespaces
  verbs:
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - nodes
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: v1
data:
  allow-snippet-annotations: "true"
  annotations-risk-level: Critical
kind: ConfigMap
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  externalTrafficPolicy: Cluster
  ipFamilies:
  - IPv4
  ipFamilyPolicy: SingleStack
  ports:
  - appProtocol: http
    name: http
    nodePort: 30708
    port: 80
    protocol: TCP
    targetPort: http
  - appProtocol: https
    name: https
    nodePort: 31416
    port: 443
    protocol: TCP
    targetPort: https
  selector:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  minReadySeconds: 0
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app.kubernetes.io/component: controller
      app.kubernetes.io/instance: dss-ingress
      app.kubernetes.io/name: dss-ingress
  strategy:
    rollingUpdate:
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      labels:
        app.kubernetes.io/component: controller
        app.kubernetes.io/instance: dss-ingress
        app.kubernetes.io/name: dss-ingress
        app.kubernetes.io/part-of: dss-ingress
        app.kubernetes.io/version: 1.12.3
    spec:
      containers:
      - args:
        - /nginx-ingress-controller
        - --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
        - --election-id=dss-ingress-nginx-leader
        - --controller-class=k8s.io/dss-ingress-controller
        - --ingress-class=dss-nginx
        - --configmap=$(POD_NAMESPACE)/dss-ingress-controller
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: LD_PRELOAD
          value: /usr/local/lib/libmimalloc.so
        image: brightixscr.scr.private.kr-west1.e.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
        imagePullPolicy: IfNotPresent
        lifecycle:
          preStop:
            exec:
              command:
              - /wait-shutdown
        livenessProbe:
          failureThreshold: 5
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        name: controller
        ports:
        - containerPort: 80
          name: http
          protocol: TCP
        - containerPort: 443
          name: https
          protocol: TCP
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        resources:
          requests:
            cpu: 100m
            memory: 90Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            add:
            - NET_BIND_SERVICE
            drop:
            - ALL
          readOnlyRootFilesystem: false
          runAsGroup: 82
          runAsNonRoot: true
          runAsUser: 101
          seccompProfile:
            type: RuntimeDefault
      dnsPolicy: ClusterFirst
      nodeSelector:
        kubernetes.io/os: linux
      serviceAccountName: dss-ingress
      terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
  annotations:
    ingressclass.kubernetes.io/is-default-class: "true"
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-nginx
spec:
  controller: k8s.io/dss-ingress-controller
code block. IngressController_west1_e.yaml

IngressController For Enterprise (KR-EAST1)

Color mode
apiVersion: v1
kind: Namespace
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
rules:
- apiGroups:
  - ""
  resources:
  - namespaces
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - configmaps
  - pods
  - secrets
  - endpoints
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resourceNames:
  - dss-ingress-nginx-leader
  resources:
  - leases
  verbs:
  - get
  - update
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - create
- apiGroups:
  - ""
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
rules:
- apiGroups:
  - 
  resources:
  - configmaps
  - endpoints
  - nodes
  - pods
  - secrets
  - namespaces
  verbs:
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - list
  - watch
- apiGroups:
  - 
  resources:
  - nodes
  verbs:
  - get
- apiGroups:
  - 
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - 
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: v1
data:
  allow-snippet-annotations: "true"
  annotations-risk-level: Critical
kind: ConfigMap
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  externalTrafficPolicy: Cluster
  ipFamilies:
  - IPv4
  ipFamilyPolicy: SingleStack
  ports:
  - appProtocol: http
    name: http
    nodePort: 30708
    port: 80
    protocol: TCP
    targetPort: http
  - appProtocol: https
    name: https
    nodePort: 31416
    port: 443
    protocol: TCP
    targetPort: https
  selector:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  minReadySeconds: 0
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app.kubernetes.io/component: controller
      app.kubernetes.io/instance: dss-ingress
      app.kubernetes.io/name: dss-ingress
  strategy:
    rollingUpdate:
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      labels:
        app.kubernetes.io/component: controller
        app.kubernetes.io/instance: dss-ingress
        app.kubernetes.io/name: dss-ingress
        app.kubernetes.io/part-of: dss-ingress
        app.kubernetes.io/version: 1.12.3
    spec:
      containers:
      - args:
        - /nginx-ingress-controller
        - --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
        - --election-id=dss-ingress-nginx-leader
        - --controller-class=k8s.io/dss-ingress-controller
        - --ingress-class=dss-nginx
        - --configmap=$(POD_NAMESPACE)/dss-ingress-controller
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: LD_PRELOAD
          value: /usr/local/lib/libmimalloc.so
        image: brightixscr.scr.private.kr-east1.e.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
        imagePullPolicy: IfNotPresent
        lifecycle:
          preStop:
            exec:
              command:
              - /wait-shutdown
        livenessProbe:
          failureThreshold: 5
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        name: controller
        ports:
        - containerPort: 80
          name: http
          protocol: TCP
        - containerPort: 443
          name: https
          protocol: TCP
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        resources:
          requests:
            cpu: 100m
            memory: 90Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            add:
            - NET_BIND_SERVICE
            drop:
            - ALL
          readOnlyRootFilesystem: false
          runAsGroup: 82
          runAsNonRoot: true
          runAsUser: 101
          seccompProfile:
            type: RuntimeDefault
      dnsPolicy: ClusterFirst
      nodeSelector:
        kubernetes.io/os: linux
      serviceAccountName: dss-ingress
      terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
  annotations:
    ingressclass.kubernetes.io/is-default-class: "true"
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-nginx
spec:
  controller: k8s.io/dss-ingress-controller
apiVersion: v1
kind: Namespace
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
rules:
- apiGroups:
  - ""
  resources:
  - namespaces
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - configmaps
  - pods
  - secrets
  - endpoints
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resourceNames:
  - dss-ingress-nginx-leader
  resources:
  - leases
  verbs:
  - get
  - update
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - create
- apiGroups:
  - ""
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
rules:
- apiGroups:
  - 
  resources:
  - configmaps
  - endpoints
  - nodes
  - pods
  - secrets
  - namespaces
  verbs:
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - list
  - watch
- apiGroups:
  - 
  resources:
  - nodes
  verbs:
  - get
- apiGroups:
  - 
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - 
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: v1
data:
  allow-snippet-annotations: "true"
  annotations-risk-level: Critical
kind: ConfigMap
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  externalTrafficPolicy: Cluster
  ipFamilies:
  - IPv4
  ipFamilyPolicy: SingleStack
  ports:
  - appProtocol: http
    name: http
    nodePort: 30708
    port: 80
    protocol: TCP
    targetPort: http
  - appProtocol: https
    name: https
    nodePort: 31416
    port: 443
    protocol: TCP
    targetPort: https
  selector:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  minReadySeconds: 0
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app.kubernetes.io/component: controller
      app.kubernetes.io/instance: dss-ingress
      app.kubernetes.io/name: dss-ingress
  strategy:
    rollingUpdate:
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      labels:
        app.kubernetes.io/component: controller
        app.kubernetes.io/instance: dss-ingress
        app.kubernetes.io/name: dss-ingress
        app.kubernetes.io/part-of: dss-ingress
        app.kubernetes.io/version: 1.12.3
    spec:
      containers:
      - args:
        - /nginx-ingress-controller
        - --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
        - --election-id=dss-ingress-nginx-leader
        - --controller-class=k8s.io/dss-ingress-controller
        - --ingress-class=dss-nginx
        - --configmap=$(POD_NAMESPACE)/dss-ingress-controller
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: LD_PRELOAD
          value: /usr/local/lib/libmimalloc.so
        image: brightixscr.scr.private.kr-east1.e.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
        imagePullPolicy: IfNotPresent
        lifecycle:
          preStop:
            exec:
              command:
              - /wait-shutdown
        livenessProbe:
          failureThreshold: 5
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        name: controller
        ports:
        - containerPort: 80
          name: http
          protocol: TCP
        - containerPort: 443
          name: https
          protocol: TCP
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        resources:
          requests:
            cpu: 100m
            memory: 90Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            add:
            - NET_BIND_SERVICE
            drop:
            - ALL
          readOnlyRootFilesystem: false
          runAsGroup: 82
          runAsNonRoot: true
          runAsUser: 101
          seccompProfile:
            type: RuntimeDefault
      dnsPolicy: ClusterFirst
      nodeSelector:
        kubernetes.io/os: linux
      serviceAccountName: dss-ingress
      terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
  annotations:
    ingressclass.kubernetes.io/is-default-class: "true"
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-nginx
spec:
  controller: k8s.io/dss-ingress-controller
code block. IngressController_east1_e.yaml

IngressController For Samsung (KR-WESTT1)

Color mode
apiVersion: v1
kind: Namespace
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
rules:
- apiGroups:
  - 
  resources:
  - namespaces
  verbs:
  - get
- apiGroups:
  - 
  resources:
  - configmaps
  - pods
  - secrets
  - endpoints
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - 
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resourceNames:
  - dss-ingress-nginx-leader
  resources:
  - leases
  verbs:
  - get
  - update
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - create
- apiGroups:
  - 
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  - endpoints
  - nodes
  - pods
  - secrets
  - namespaces
  verbs:
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - nodes
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: v1
data:
  allow-snippet-annotations: "true"
  annotations-risk-level: Critical
kind: ConfigMap
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  externalTrafficPolicy: Cluster
  ipFamilies:
  - IPv4
  ipFamilyPolicy: SingleStack
  ports:
  - appProtocol: http
    name: http
    nodePort: 30708
    port: 80
    protocol: TCP
    targetPort: http
  - appProtocol: https
    name: https
    nodePort: 31416
    port: 443
    protocol: TCP
    targetPort: https
  selector:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  minReadySeconds: 0
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app.kubernetes.io/component: controller
      app.kubernetes.io/instance: dss-ingress
      app.kubernetes.io/name: dss-ingress
  strategy:
    rollingUpdate:
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      labels:
        app.kubernetes.io/component: controller
        app.kubernetes.io/instance: dss-ingress
        app.kubernetes.io/name: dss-ingress
        app.kubernetes.io/part-of: dss-ingress
        app.kubernetes.io/version: 1.12.3
    spec:
      containers:
      - args:
        - /nginx-ingress-controller
        - --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
        - --election-id=dss-ingress-nginx-leader
        - --controller-class=k8s.io/dss-ingress-controller
        - --ingress-class=dss-nginx
        - --configmap=$(POD_NAMESPACE)/dss-ingress-controller
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: LD_PRELOAD
          value: /usr/local/lib/libmimalloc.so
        image: brightixscr.scr.private.kr-west1.s.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
        imagePullPolicy: IfNotPresent
        lifecycle:
          preStop:
            exec:
              command:
              - /wait-shutdown
        livenessProbe:
          failureThreshold: 5
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        name: controller
        ports:
        - containerPort: 80
          name: http
          protocol: TCP
        - containerPort: 443
          name: https
          protocol: TCP
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        resources:
          requests:
            cpu: 100m
            memory: 90Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            add:
            - NET_BIND_SERVICE
            drop:
            - ALL
          readOnlyRootFilesystem: false
          runAsGroup: 82
          runAsNonRoot: true
          runAsUser: 101
          seccompProfile:
            type: RuntimeDefault
      dnsPolicy: ClusterFirst
      nodeSelector:
        kubernetes.io/os: linux
      serviceAccountName: dss-ingress
      terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
  annotations:
    ingressclass.kubernetes.io/is-default-class: "true"
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-nginx
spec:
  controller: k8s.io/dss-ingress-controller
apiVersion: v1
kind: Namespace
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
rules:
- apiGroups:
  - 
  resources:
  - namespaces
  verbs:
  - get
- apiGroups:
  - 
  resources:
  - configmaps
  - pods
  - secrets
  - endpoints
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - 
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resourceNames:
  - dss-ingress-nginx-leader
  resources:
  - leases
  verbs:
  - get
  - update
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - create
- apiGroups:
  - 
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  - endpoints
  - nodes
  - pods
  - secrets
  - namespaces
  verbs:
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - nodes
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: v1
data:
  allow-snippet-annotations: "true"
  annotations-risk-level: Critical
kind: ConfigMap
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  externalTrafficPolicy: Cluster
  ipFamilies:
  - IPv4
  ipFamilyPolicy: SingleStack
  ports:
  - appProtocol: http
    name: http
    nodePort: 30708
    port: 80
    protocol: TCP
    targetPort: http
  - appProtocol: https
    name: https
    nodePort: 31416
    port: 443
    protocol: TCP
    targetPort: https
  selector:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  minReadySeconds: 0
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app.kubernetes.io/component: controller
      app.kubernetes.io/instance: dss-ingress
      app.kubernetes.io/name: dss-ingress
  strategy:
    rollingUpdate:
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      labels:
        app.kubernetes.io/component: controller
        app.kubernetes.io/instance: dss-ingress
        app.kubernetes.io/name: dss-ingress
        app.kubernetes.io/part-of: dss-ingress
        app.kubernetes.io/version: 1.12.3
    spec:
      containers:
      - args:
        - /nginx-ingress-controller
        - --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
        - --election-id=dss-ingress-nginx-leader
        - --controller-class=k8s.io/dss-ingress-controller
        - --ingress-class=dss-nginx
        - --configmap=$(POD_NAMESPACE)/dss-ingress-controller
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: LD_PRELOAD
          value: /usr/local/lib/libmimalloc.so
        image: brightixscr.scr.private.kr-west1.s.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
        imagePullPolicy: IfNotPresent
        lifecycle:
          preStop:
            exec:
              command:
              - /wait-shutdown
        livenessProbe:
          failureThreshold: 5
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        name: controller
        ports:
        - containerPort: 80
          name: http
          protocol: TCP
        - containerPort: 443
          name: https
          protocol: TCP
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        resources:
          requests:
            cpu: 100m
            memory: 90Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            add:
            - NET_BIND_SERVICE
            drop:
            - ALL
          readOnlyRootFilesystem: false
          runAsGroup: 82
          runAsNonRoot: true
          runAsUser: 101
          seccompProfile:
            type: RuntimeDefault
      dnsPolicy: ClusterFirst
      nodeSelector:
        kubernetes.io/os: linux
      serviceAccountName: dss-ingress
      terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
  annotations:
    ingressclass.kubernetes.io/is-default-class: "true"
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-nginx
spec:
  controller: k8s.io/dss-ingress-controller
Code block. IngressController_west1_s.yaml

IngressController For Samsung (KR-EAST1)

Color mode
apiVersion: v1
kind: Namespace
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
rules:
- apiGroups:
  - ""
  resources:
  - namespaces
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - configmaps
  - pods
  - secrets
  - endpoints
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resourceNames:
  - dss-ingress-nginx-leader
  resources:
  - leases
  verbs:
  - get
  - update
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - create
- apiGroups:
  - ""
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
rules:
- apiGroups:
  - 
  resources:
  - configmaps
  - endpoints
  - nodes
  - pods
  - secrets
  - namespaces
  verbs:
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - list
  - watch
- apiGroups:
  - 
  resources:
  - nodes
  verbs:
  - get
- apiGroups:
  - 
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - 
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: v1
data:
  allow-snippet-annotations: "true"
  annotations-risk-level: Critical
kind: ConfigMap
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  externalTrafficPolicy: Cluster
  ipFamilies:
  - IPv4
  ipFamilyPolicy: SingleStack
  ports:
  - appProtocol: http
    name: http
    nodePort: 30708
    port: 80
    protocol: TCP
    targetPort: http
  - appProtocol: https
    name: https
    nodePort: 31416
    port: 443
    protocol: TCP
    targetPort: https
  selector:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  minReadySeconds: 0
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app.kubernetes.io/component: controller
      app.kubernetes.io/instance: dss-ingress
      app.kubernetes.io/name: dss-ingress
  strategy:
    rollingUpdate:
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      labels:
        app.kubernetes.io/component: controller
        app.kubernetes.io/instance: dss-ingress
        app.kubernetes.io/name: dss-ingress
        app.kubernetes.io/part-of: dss-ingress
        app.kubernetes.io/version: 1.12.3
    spec:
      containers:
      - args:
        - /nginx-ingress-controller
        - --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
        - --election-id=dss-ingress-nginx-leader
        - --controller-class=k8s.io/dss-ingress-controller
        - --ingress-class=dss-nginx
        - --configmap=$(POD_NAMESPACE)/dss-ingress-controller
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: LD_PRELOAD
          value: /usr/local/lib/libmimalloc.so
        image: brightixscr.scr.private.kr-east1.s.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
        imagePullPolicy: IfNotPresent
        lifecycle:
          preStop:
            exec:
              command:
              - /wait-shutdown
        livenessProbe:
          failureThreshold: 5
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        name: controller
        ports:
        - containerPort: 80
          name: http
          protocol: TCP
        - containerPort: 443
          name: https
          protocol: TCP
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        resources:
          requests:
            cpu: 100m
            memory: 90Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            add:
            - NET_BIND_SERVICE
            drop:
            - ALL
          readOnlyRootFilesystem: false
          runAsGroup: 82
          runAsNonRoot: true
          runAsUser: 101
          seccompProfile:
            type: RuntimeDefault
      dnsPolicy: ClusterFirst
      nodeSelector:
        kubernetes.io/os: linux
      serviceAccountName: dss-ingress
      terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
  annotations:
    ingressclass.kubernetes.io/is-default-class: "true"
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-nginx
spec:
  controller: k8s.io/dss-ingress-controller
apiVersion: v1
kind: Namespace
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
rules:
- apiGroups:
  - ""
  resources:
  - namespaces
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - configmaps
  - pods
  - secrets
  - endpoints
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resourceNames:
  - dss-ingress-nginx-leader
  resources:
  - leases
  verbs:
  - get
  - update
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - create
- apiGroups:
  - ""
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
rules:
- apiGroups:
  - 
  resources:
  - configmaps
  - endpoints
  - nodes
  - pods
  - secrets
  - namespaces
  verbs:
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - list
  - watch
- apiGroups:
  - 
  resources:
  - nodes
  verbs:
  - get
- apiGroups:
  - 
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - 
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: v1
data:
  allow-snippet-annotations: "true"
  annotations-risk-level: Critical
kind: ConfigMap
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  externalTrafficPolicy: Cluster
  ipFamilies:
  - IPv4
  ipFamilyPolicy: SingleStack
  ports:
  - appProtocol: http
    name: http
    nodePort: 30708
    port: 80
    protocol: TCP
    targetPort: http
  - appProtocol: https
    name: https
    nodePort: 31416
    port: 443
    protocol: TCP
    targetPort: https
  selector:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  minReadySeconds: 0
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app.kubernetes.io/component: controller
      app.kubernetes.io/instance: dss-ingress
      app.kubernetes.io/name: dss-ingress
  strategy:
    rollingUpdate:
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      labels:
        app.kubernetes.io/component: controller
        app.kubernetes.io/instance: dss-ingress
        app.kubernetes.io/name: dss-ingress
        app.kubernetes.io/part-of: dss-ingress
        app.kubernetes.io/version: 1.12.3
    spec:
      containers:
      - args:
        - /nginx-ingress-controller
        - --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
        - --election-id=dss-ingress-nginx-leader
        - --controller-class=k8s.io/dss-ingress-controller
        - --ingress-class=dss-nginx
        - --configmap=$(POD_NAMESPACE)/dss-ingress-controller
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: LD_PRELOAD
          value: /usr/local/lib/libmimalloc.so
        image: brightixscr.scr.private.kr-east1.s.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
        imagePullPolicy: IfNotPresent
        lifecycle:
          preStop:
            exec:
              command:
              - /wait-shutdown
        livenessProbe:
          failureThreshold: 5
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        name: controller
        ports:
        - containerPort: 80
          name: http
          protocol: TCP
        - containerPort: 443
          name: https
          protocol: TCP
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        resources:
          requests:
            cpu: 100m
            memory: 90Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            add:
            - NET_BIND_SERVICE
            drop:
            - ALL
          readOnlyRootFilesystem: false
          runAsGroup: 82
          runAsNonRoot: true
          runAsUser: 101
          seccompProfile:
            type: RuntimeDefault
      dnsPolicy: ClusterFirst
      nodeSelector:
        kubernetes.io/os: linux
      serviceAccountName: dss-ingress
      terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
  annotations:
    ingressclass.kubernetes.io/is-default-class: "true"
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-nginx
spec:
  controller: k8s.io/dss-ingress-controller
Code block. IngressController_east1_s.yaml

4.3 - API Reference

API Reference

4.4 - CLI Reference

CLI Reference

4.5 - Release Note

Data Flow

2025.04.28
NEW Data Flow service official version release
  • The Data Flow service, which extracts, transforms, and transfers data from various sources and automates data processing workflows, has been launched.
  • Provides the open-source Apache NiFi.

5 - Data Ops

5.1 - Overview

Service Overview

Data Ops is a managed workflow orchestration service based on Apache Airflow that creates workflows for data processing tasks that occur periodically or repeatedly and automates task scheduling. Users can automate the process of delivering useful data to the right place at the required time and monitor the configuration and progress of data pipelines.

Diagram
Figure. Data Ops diagram

Provided features

Data Ops provides the following features.

  • Convenient Installation and Management: Data Ops can be easily installed via a web-based Console in a standard Kubernetes cluster environment. Apache Airflow and management modules are installed automatically, and the integrated dashboard provides unified monitoring of the web server and scheduler execution status.
  • Dynamic Pipeline Configuration: You can configure pipelines for data tasks based on Python code. Because it integrates with data task scheduling and creates tasks dynamically, you can freely design the desired workflow shape and scheduling.
  • Convenient workflow management: DAG (Direct Acyclic Graph: directed acyclic graph) configuration is visualized and managed through a web-based UI, allowing you to easily understand the sequence and parallel relationships of data flow. Additionally, you can easily manage each task’s timeout, retry count, and priority definitions.

Component

Data Ops consists of Manager and Service modules and provides a packaged Apache Airflow.

Data Ops Manager

Data Ops Manager provides various managing features to enable more efficient use of Airflow.

  • Through Ops Manager, you can upload Plugin File, Shared File, and Python Library File for use in Ops Service.
  • You can easily provision configuration information for Airflow components within the cluster.
  • You can manage configuration information for other services within the Airflow cluster and provision it easily.

Data Ops Service

  • We provide a managed workflow orchestration service based on Apache Airflow.
  • When providing Airflow, you can set the Description, required resource size, DAGs GitSync, and Host Alias.
  • After creating the service, you can modify the Description, resource size, DAGs GitSync, and Host Alias to apply changes to the service.

Server spec type

When creating a Data Ops service, check the following.

  • Recommended Service Installation Specifications: CPU KubernetesExecutor 43 core, CPU CeleryExecutor 25 core, Memory 50 GB, Storage 100 GB or more
Reference
  • Before creating the Data Ops service, you need to install the Ingress Controller.
  • Only one Ingress Controller can be installed in a Kubernetes cluster.
  • For more details, refer to Ingress Controller Installation.

Provision status by region

Data Ops is available in the environments below.

regionProvision status
Korea West (kr-west1)Provide
Korea East (kr-east1)Provide
South Korea South 1 (kr-south1)Not provided
South Korea South 2 (kr-south2)Not provided
Korea South 3 (kr-south3)Not provided
Table. Data Ops regional availability status

Pre-service

This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service for details and prepare them in advance.

Service CategoryserviceDetailed description
StorageFile StorageStorage that enables multiple client servers to share files over a network connection.
ContainerKubernetes EngineKubernetes container orchestration service
Table. Data Ops pre-service

5.1.1 - ServiceWatch metric

In ServiceWatch, you can view Kubernetes Engine metrics for the Kubernetes Engine created by Data Ops. As with Kubernetes Engine, the metrics provided by default monitoring are data collected at one‑minute intervals.

Reference
Refer to the ServiceWatch guide for checking metrics in ServiceWatch.

Basic Metrics

The following are the default metrics for the Kubernetes Engine namespace.

The metrics whose names are displayed in bold below are the key metrics selected from the default metrics provided by Kubernetes Engine. Key metrics are used to build service dashboards that are automatically created for each service in ServiceWatch.

Each metric provides guidance in the user guide on which statistical values are meaningful when querying that metric, and among the meaningful statistics, the values shown in bold are the primary statistics. In the service dashboard, you can view key metrics using primary statistical values.

Indicator nameDetailed descriptionunitmeaningful statistics
cluster_upCluster upCount
  • Total
  • Average
  • Maximum
  • Minimum
cluster_node_countNumber of cluster nodesCount
  • Total
  • Average
  • Maximum
  • Minimum
cluster_failed_node_countNumber of failed nodes in the clusterCount
  • Total
  • Average
  • Maximum
  • Minimum
cluster_namespace_phase_countNumber of cluster namespace phasesCount
  • Total
  • Average
  • Maximum
  • Minimum
cluster_pod_phase_countCluster pod phase countCount
  • Total
  • Average
  • Maximum
  • Minimum
node_cpu_allocatableNode CPU allocatable amount-
  • Total
  • Average
  • Maximum
  • Minimum
node_cpu_capacityNode CPU capacity-
  • Total
  • Average
  • Maximum
  • Minimum
node_cpu_usageNode CPU usage-
  • Total
  • Average
  • Maximum
  • Minimum
node_cpu_utilizationNode CPU usage-
  • Total
  • Average
  • Maximum
  • Minimum
node_memory_allocatableNode memory allocatable amountBytes
  • Total
  • Average
  • Maximum
  • Minimum
node_memory_capacityNode memory capacityBytes
  • Total
  • Average
  • Maximum
  • Minimum
node_memory_usageNode memory usageBytes
  • Total
  • Average
  • Maximum
  • Minimum
node_memory_utilizationNode memory utilization-
  • Total
  • Average
  • Maximum
  • Minimum
node_network_rx_bytesNode network received bytesBytes/Second
  • Total
  • Average
  • Maximum
  • Minimum
node_network_tx_bytesNode network transmitted bytesBytes/Second
  • Total
  • Average
  • Maximum
  • Minimum
node_network_total_bytesTotal bytes of the node networkBytes/Second
  • Total
  • Average
  • Maximum
  • Minimum
node_number_of_running_podsNumber of pods running on the nodeCount
  • Total
  • Average
  • Maximum
  • Minimum
namespace_number_of_running_podsNumber of running pods in the namespaceCount
  • Total
  • Average
  • Maximum
  • Minimum
namespace_deployment_pod_countNamespace deployment pod countCount
  • Total
  • Average
  • Maximum
  • Minimum
namespace_statefulset_pod_countNamespace StatefulSet pod countCount
  • Total
  • Average
  • Maximum
  • Minimum
namespace_daemonset_pod_countNamespace daemonset pod countCount
  • Total
  • Average
  • Maximum
  • Minimum
namespace_job_active_countActive namespace job countCount
  • Total
  • Average
  • Maximum
  • Minimum
namespace_cronjob_active_countNumber of active namespace cronjobsCount
  • Total
  • Average
  • Maximum
  • Minimum
pod_cpu_usagePod CPU usage-
  • Total
  • Average
  • Maximum
  • Minimum
pod_memory_usagePod memory usageBytes
  • Total
  • Average
  • Maximum
  • Minimum
pod_network_rx_bytesPod network received bytesBytes/Second
  • Total
  • Average
  • Maximum
  • Minimum
pod_network_tx_bytesPod network transmitted bytesBytes/Second
  • Total
  • Average
  • Maximum
  • Minimum
pod_network_total_bytesPod network total bytesCount
  • Total
  • Average
  • Maximum
  • Minimum
container_cpu_usageContainer CPU usage-
  • Total
  • Average
  • Maximum
  • Minimum
container_cpu_limitContainer CPU limit-
  • Total
  • Average
  • Maximum
  • Minimum
container_cpu_utilizationContainer CPU usage-
  • Total
  • Average
  • Maximum
  • Minimum
container_memory_usageContainer memory usageBytes
  • Total
  • Average
  • Maximum
  • Minimum
container_memory_limitContainer memory limitBytes
  • Total
  • Average
  • Maximum
  • Minimum
container_memory_utilizationContainer memory usage-
  • Total
  • Average
  • Maximum
  • Minimum
node_gpu_countNode GPU countCount
  • Total
  • Average
  • Maximum
  • Minimum
gpu_tempGPU temperature-
  • Total
  • Average
  • Maximum
  • Minimum
gpu_power_usageGPU power usage-
  • Total
  • Average
  • Maximum
  • Minimum
gpu_utilGPU utilizationPercent
  • Total
  • Average
  • Maximum
  • Minimum
gpu_sm_clockGPU SM clock-
  • Total
  • Average
  • Maximum
  • Minimum
gpu_fb_usedGPU FB usageMegabytes
  • Total
  • Average
  • Maximum
  • Minimum
gpu_tensor_activeGPU Tensor Utilization-
  • Total
  • Average
  • Maximum
  • Minimum
pod_gpu_utilPod GPU utilizationPercent
  • Total
  • Average
  • Maximum
  • Minimum
pod_gpu_tensor_activePod GPU Tensor Utilization Rate-
  • Total
  • Average
  • Maximum
  • Minimum
Table. Kubernetes Engine Basic Metrics

5.2 - How-to guides

Users can create the service by entering the required Data Ops information and selecting detailed options through the Samsung Cloud Platform Console.

Create Data Ops

You can create and use the Data Ops service in the Samsung Cloud Platform Console.

To create a Data Ops, follow the steps below.

  1. Click the All Services > Data Analytics > Data Ops menu. Navigate to the Service Home page of Data Ops.

  2. On the Service Home page, click the Create Data Ops button. You will be taken to the Create Data Ops page.

  3. On the Data Ops Creation page, enter the information required to create the service and select detailed options.

    • Select the required information in the Version selection area.
      Category
      Required
      Detailed description
      Data Ops versionRequiredSelect version of the selected image
      • Provide a list of versions for the provided server image
      Table. Data Ops version selection item
    • Enter or select the required information in the Cluster Selection area. To install Data Ops, you must first create nodes for the Kubernetes cluster and the work environment.
      Category
      Required
      Detailed description
      Cluster nameRequiredSelect the cluster to use
      Ingress ControllerRequiredSelect the Ingress Controller installed in the cluster
      Table. Data Ops cluster selection options
    • Enter or select the required information in the Service Information Input area.
      Category
      Required status
      Detailed description
      Data Ops nameRequiredEnter Data Ops name
      • Start with a lowercase English letter and ensure it does not end with a special character (-), using lowercase letters, numbers, and special characters (-) to enter 3 to 30 characters
      Storage ClassRequiredSelect the storage class used by the selected cluster
      descriptionSelectEnter additional information or description about Data Ops within 150 characters.
      Domain SettingsRequiredEnter Data Ops domain
      • Enter 3 to 50 characters, starting with a lowercase English letter and not ending with a special character (-), using lowercase letters, numbers, and special characters (-)
      • {Data Ops name}.{configured domain} becomes the Data Ops access URL.
      Node SelectorRequiredTo install on a specific node, enter a distinguishable label among the node’s labels
      • If you enter an incorrect node label, installation errors may occur, so verify the node label in advance
      • Node labels can be found in the node’s yaml file
      accountRequiredEnter Data Ops Manager account
      • ID: Start with a lowercase English letter and use lowercase letters and numbers, entering a value between 6 and 30 characters
      • Password: Include uppercase (English), lowercase (English), numbers, and special characters (!@#$%^&*) and enter 8 to 50 characters
      • Password Confirmation: Enter the same password again
      Host AliasSelectionAdd host information to be linked with Data Ops (up to 20 total, including defaults)
      • Select Use, then click the + button
      • Hostname: Enter the host name or domain format using lowercase letters, numbers, and special characters (-) with a length of 3 to 63 characters
      • IP: Enter in IP format
      • Click the X button to delete
      • The firewall between the cluster and the server must be open for the added host information to be usable
      Table. Data Ops Service Information Input Items
    • In the Additional Information Input area, enter or select the required information.
      Category
      Required
      Detailed description
      tagSelectionAdd Tag
      • Add Tag Click the button to create and add a tag, or add an existing tag.
      • You can add up to 50 tags.
      • The newly added tags will be applied after the service creation is completed.
      Table. Data Ops additional information input fields
  4. In the Summary panel, verify the detailed information and estimated billing amount, then click the Complete button.

    • Once creation is complete, check the created resources on the Data Ops List page.

Check detailed information for Data Ops

You can view and edit the full list of Data Ops resources and detailed information. The Data Ops Details page consists of Details, Tags, Activity History tabs.

To view detailed information about Data Ops, follow these steps.

  1. Click the All Services > Data Analytics > Data Ops menu. Navigate to the Service Home page of Data Ops.
  2. On the Service Home page, click the Data Ops menu. You will be taken to the Data Ops List page.
  3. On the Data Ops List page, click the resource to view detailed information. You will be taken to the Data Ops Detail page.
    • Data Ops Details At the top of the page, status information and details about additional features are displayed.
      CategoryDetailed description
      Status indicatorData Ops status
      • Creating: Creating
      • Running: Running, Data Ops Services are in a creatable state
      • Updating: Updating settings
      • Terminating: Terminating service
      • Error: Error: error occurred during creation or service abnormal state
      Hosts file configuration informationButton to view and copy the host file information for accessing Data Ops
      Service terminationButton to cancel the service
      Table. Data Ops status information and additional features

Detailed Information

On the Data Ops List page, you can view detailed information of the selected resource and edit the information if needed.

CategoryDetailed description
serviceService name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
  • means cluster SRN
Resource nameResource name
  • means the cluster name
Resource IDUnique resource ID in the service
constructorUser who created the service
Creation date and timeService creation date and time
editorUser who edited the service information
Modification dateDate and time the service information was modified
Cluster nameCluster name of the configured servers
Storage ClassStorage class used by the selected cluster
descriptionAdditional information or explanation about Data Ops
Domain SettingsData Ops domain name
Node SelectorNode Label
Web UrlData Ops URL
accountData Ops Manager account
Host AliasHost information to be connected to Data Ops
Table. Data Ops detailed information tab items

tag

Data Ops list page lets you view the tag information of the selected resource, and you can add, modify, or delete it.

CategoryDetailed description
Tag listTag list
  • You can view the Key, Value information of tags
  • Up to 50 tags can be added per resource
  • When entering tags, search and select from the existing list of created Keys and Values
Table. Data Ops Tag Tab Items

Job History

On the Data Ops List page, you can view the operation history of the selected resource.

CategoryDetailed description
Task History ListResource Change History
  • Operation Time, Resource ID, Resource Name, Operation Details, Event Topic, Operation Result, Check Operator Information
Table. Data Ops Task History Tab Detailed Information Items

Terminate Data Ops

You can cancel unused Data Ops to reduce operating costs. However, if you cancel the service, the running service may be terminated immediately, so you should thoroughly consider the impact of service interruption before proceeding with the cancellation.

To terminate Data Ops, follow the steps below.

  1. Click the All Services > Data Analytics > Data Ops menu. Go to the Service Home page of Data Ops.
  2. On the Service Home page, click the Data Ops menu. You will be taken to the Data Ops List page.
  3. On the Data Ops List page, select the resource to cancel, and click the Cancel Service button.
  4. When termination is complete, verify on the Data Ops List page whether the resource has been terminated.
information
Data Ops can be cancelled only after first deleting the connected Data Ops Services.

5.2.1 - Data Ops Services

Users can create the service by entering the required information for Data Ops Services within the Data Ops service through the Samsung Cloud Platform Console and selecting detailed options.

Create Data Ops Services

Users can add a service by selecting detailed options of Data Ops or by entering configuration values.

Information
When applying for Data Ops Services, the resource size must be secured to at least the available capacity of the K8s cluster.

To create Data Ops Services, follow these steps.

  1. Click the All Services > Data Analytics > Data Ops menu. Navigate to the Service Home page of Data Ops.

  2. On the Service Home page, click Data Ops Servies. You will be taken to the Data Ops Services list page.

  3. On the Data Ops Services List page, click the Create Data Ops Services button. You will be taken to the Create Data Ops Services page.

  4. On the Data Ops Services Creation page, enter the information required to create the service and select detailed options.

    • Enter or select the required information in the Service Information Input area.
      Category
      Required status
      Detailed description
      Data Ops nameRequiredSelect Data Ops
      Ops Service nameRequiredEnter the Data Ops Services name
      • starting with a lowercase English letter and not ending with a special character (-), using lowercase letters, numbers, and special characters (-) for 3 to 30 characters
      Storage ClassRequiredSelect the storage class used by the selected cluster
      ExplanationSelectionEnter additional information or description about Data Ops Services within 150 characters.
      Domain SettingsRequiredData Ops Services domain entry
      • Enter 3 to 50 characters, starting with a lowercase English letter, not ending with special characters (-), using lowercase letters, numbers, and special characters (-)
      • {Data Ops Services name}.{configured domain} becomes the Data Ops Services access address.
      Node SelectorRequiredTo install on a specific node, enter a distinguishable label among the node’s Labels
      • If you enter an incorrect node label, installation errors may occur, so verify the node label in advance
      • The node label can be checked in the node’s yaml file
      Service WorkloadRequired
      • Web Server: Provides visualization of DAG components and status, and serves as the Airflow configuration management module
      • Scheculer: Manages DAG scheduling and execution to orchestrate various DAGs and their tasks
      • Worker: Executes actual orchestration and data processing tasks
        • Worker(Kubernetes): When the Worker operates, pods are dynamically created, allowing efficient resource usage. When Kubernetes is selected, the Replica text box is disabled.
        • Worker(Celery): When the Worker operates, a static pod is created and maintained, enabling faster handling of a large number of requests. When Celery is selected, the Replica text box is enabled and user input is allowed.
        • The selected executor type cannot be changed once chosen
      accountRequiredAirflow account input
      • ID: Start with a lowercase English letter and use lowercase letters and numbers, entering a value between 6 and 30 characters
      • Password: Include uppercase (English), lowercase (English), numbers, and special characters (!@#$%^&*) and enter 8 to 50 characters
      • Confirm Password: Re-enter the password identically
      Table. Data Ops Services service information input items
    • Additional Information Input area, enter or select the required information.
      Category
      required or not
      Detailed description
      Host AliasSelectAdd host information to be linked with Data Ops (up to 20 total, including defaults)
      • Select Use, then click the + button
      • Hostname: Enter the host name or domain format using lowercase letters, numbers, and special characters (-) with a length of 3 to 63 characters
      • IP: Enter in IP format
      • Click the X button to delete
      • The firewall between the cluster and the server must be open to use the added host information
      tagSelectionAdd Tag
      • Add Tag Click the button to create and add a tag, or add an existing tag.
      • You can add up to 50 tags.
      • The newly added tags will be applied after the service creation is completed.
      Table. Data Ops additional information input fields
  5. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.

    • Once creation is complete, check the created resources on the Data Ops Services List page.

Data Ops Services View detailed information

You can view and edit the full list of resources and detailed information for Data Ops Services. The Data Ops Services Details page consists of Details, Tags, Activity History tabs.

Follow these steps to view detailed information about Data Ops Services.

  1. Click the All Services > Data Analytics > Data Ops menu. You will be taken to the Service Home page of Data Ops.
  2. On the Service Home page, click the Data Ops Services menu. You will be taken to the Data Ops Services list page.
  3. On the Data Ops Services List page, click the resource to view detailed information. You will be taken to the Data Ops Services Details page.
    • Data Ops Services Details At the top of the page, status information and additional feature information are displayed.
      CategoryDetailed description
      Status displayData Ops Services status
      • Creating: Creating
      • Running: Running
      • Updating: Updating configuration
      • Terminating: Terminating service
      • Error: Creation failed or service unavailable
      Hosts file configuration informationButton to view and copy host file information for accessing Data Ops Services
      Delete Data Ops ServicesCancel service button
      Table. Data Ops Services status information and additional features

Detailed Information

Data Ops Services List page lets you view detailed information of the selected resource and modify the information if necessary.

CategoryDetailed description
serviceService name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
  • means cluster SRN
Resource nameResource name
  • means the cluster name
Resource IDUnique resource ID in the service
constructorUser who created the service
Creation date and timeService creation date and time
editorUser who edited the service information
Modification dateDate and time the service information was modified
Data Ops nameData Ops name
Storage ClassStorage class used by the selected cluster
descriptionAdditional information or explanation about Data Ops Services
Domain SettingsData Ops Services domain name
Node SelectorNode Lable
Web UrlData Ops Services URL
accountAirflow account
Host AliasHost information to be connected to Data Ops Services
Table. Data Ops Services detailed information tab items

tag

Data Ops Services List page allows you to view the tag information of the selected resource, and to add, modify, or delete it.

CategoryDetailed description
Tag listTag list
  • You can view the Key, Value information of the tag
  • Up to 50 tags can be added per resource
  • When entering a tag, you can search and select from the list of previously created Keys and Values
Table. Data Ops Services Tag Tab Items

Job History

You can view the operation history of the selected resource on the Data Ops Services List page.

CategoryDetailed description
Task History ListResource Change History
  • Operation Time, Resource ID, Resource Name, Operation Details, Event Topic, Operation Result, Verify Operator Information
Table. Data Ops Services Job History Tab Detailed Information Items

Data Ops Services Terminate

You can cancel unused Data Ops Services to reduce operating costs. However, canceling a service may cause the running service to stop immediately, so you should fully consider the impact of any service interruption before proceeding with the cancellation.

To cancel Data Ops Services, follow the steps below.

  1. Click the All Services > Data Analytics > Data Ops menu. Go to the Service Home page of Data Ops.
  2. From the Service Home page, click the Data Ops Services menu. You will be taken to the Data Ops Services list page.
  3. On the Data Ops Services List page, select the resource to cancel and click the Data Ops Services Delete button.
  4. When termination is complete, verify on the Data Ops Services List page whether the resource has been terminated.

5.2.2 - Installing Ingress Controller

The user must install an Ingress Controller before creating a Data Ops service. Only one Ingress Controller should be installed in the Kubernetes cluster.

Installing Ingress Controller using Container Registry

Follow these steps to install the Ingress Controller using the Container Registry.

For detailed instructions on creating a Container Registry, refer to the Container > Container Registry > How-to guides guide.
  1. After checking the service domain, you can locate the corresponding Ingress Controller image file and copy or download it.
  2. Click the All Services > Container > Kubernetes Engine > Workloads > Pods menu. You will be taken to the Pod List page.
  3. Click the Create Object button. The Create Object popup opens.
  4. After selecting the cluster where you will install Data Ops, copy and paste the contents of the Yaml file.
  5. Click the Confirm button to complete the installation. The installed Ingress Controller can be viewed in the list.
Reference
For detailed object creation methods, refer to Container > Kubernetes Engine > Creating a Deployment.

IngressController For Enterprise (KR-WEST1)

Color mode
apiVersion: v1
kind: Namespace
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
rules:
- apiGroups:
  - 
  resources:
  - namespaces
  verbs:
  - get
- apiGroups:
  - 
  resources:
  - configmaps
  - pods
  - secrets
  - endpoints
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - 
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resourceNames:
  - dss-ingress-nginx-leader
  resources:
  - leases
  verbs:
  - get
  - update
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - create
- apiGroups:
  - 
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  - endpoints
  - nodes
  - pods
  - secrets
  - namespaces
  verbs:
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - nodes
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: v1
data:
  allow-snippet-annotations: "true"
  annotations-risk-level: Critical
kind: ConfigMap
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  externalTrafficPolicy: Cluster
  ipFamilies:
  - IPv4
  ipFamilyPolicy: SingleStack
  ports:
  - appProtocol: http
    name: http
    nodePort: 30708
    port: 80
    protocol: TCP
    targetPort: http
  - appProtocol: https
    name: https
    nodePort: 31416
    port: 443
    protocol: TCP
    targetPort: https
  selector:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  minReadySeconds: 0
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app.kubernetes.io/component: controller
      app.kubernetes.io/instance: dss-ingress
      app.kubernetes.io/name: dss-ingress
  strategy:
    rollingUpdate:
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      labels:
        app.kubernetes.io/component: controller
        app.kubernetes.io/instance: dss-ingress
        app.kubernetes.io/name: dss-ingress
        app.kubernetes.io/part-of: dss-ingress
        app.kubernetes.io/version: 1.12.3
    spec:
      containers:
      - args:
        - /nginx-ingress-controller
        - --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
        - --election-id=dss-ingress-nginx-leader
        - --controller-class=k8s.io/dss-ingress-controller
        - --ingress-class=dss-nginx
        - --configmap=$(POD_NAMESPACE)/dss-ingress-controller
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: LD_PRELOAD
          value: /usr/local/lib/libmimalloc.so
        image: brightixscr.scr.private.kr-west1.e.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
        imagePullPolicy: IfNotPresent
        lifecycle:
          preStop:
            exec:
              command:
              - /wait-shutdown
        livenessProbe:
          failureThreshold: 5
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        name: controller
        ports:
        - containerPort: 80
          name: http
          protocol: TCP
        - containerPort: 443
          name: https
          protocol: TCP
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        resources:
          requests:
            cpu: 100m
            memory: 90Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            add:
            - NET_BIND_SERVICE
            drop:
            - ALL
          readOnlyRootFilesystem: false
          runAsGroup: 82
          runAsNonRoot: true
          runAsUser: 101
          seccompProfile:
            type: RuntimeDefault
      dnsPolicy: ClusterFirst
      nodeSelector:
        kubernetes.io/os: linux
      serviceAccountName: dss-ingress
      terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
  annotations:
    ingressclass.kubernetes.io/is-default-class: "true"
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-nginx
spec:
  controller: k8s.io/dss-ingress-controller
apiVersion: v1
kind: Namespace
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
rules:
- apiGroups:
  - 
  resources:
  - namespaces
  verbs:
  - get
- apiGroups:
  - 
  resources:
  - configmaps
  - pods
  - secrets
  - endpoints
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - 
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resourceNames:
  - dss-ingress-nginx-leader
  resources:
  - leases
  verbs:
  - get
  - update
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - create
- apiGroups:
  - 
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  - endpoints
  - nodes
  - pods
  - secrets
  - namespaces
  verbs:
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - nodes
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: v1
data:
  allow-snippet-annotations: "true"
  annotations-risk-level: Critical
kind: ConfigMap
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  externalTrafficPolicy: Cluster
  ipFamilies:
  - IPv4
  ipFamilyPolicy: SingleStack
  ports:
  - appProtocol: http
    name: http
    nodePort: 30708
    port: 80
    protocol: TCP
    targetPort: http
  - appProtocol: https
    name: https
    nodePort: 31416
    port: 443
    protocol: TCP
    targetPort: https
  selector:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  minReadySeconds: 0
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app.kubernetes.io/component: controller
      app.kubernetes.io/instance: dss-ingress
      app.kubernetes.io/name: dss-ingress
  strategy:
    rollingUpdate:
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      labels:
        app.kubernetes.io/component: controller
        app.kubernetes.io/instance: dss-ingress
        app.kubernetes.io/name: dss-ingress
        app.kubernetes.io/part-of: dss-ingress
        app.kubernetes.io/version: 1.12.3
    spec:
      containers:
      - args:
        - /nginx-ingress-controller
        - --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
        - --election-id=dss-ingress-nginx-leader
        - --controller-class=k8s.io/dss-ingress-controller
        - --ingress-class=dss-nginx
        - --configmap=$(POD_NAMESPACE)/dss-ingress-controller
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: LD_PRELOAD
          value: /usr/local/lib/libmimalloc.so
        image: brightixscr.scr.private.kr-west1.e.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
        imagePullPolicy: IfNotPresent
        lifecycle:
          preStop:
            exec:
              command:
              - /wait-shutdown
        livenessProbe:
          failureThreshold: 5
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        name: controller
        ports:
        - containerPort: 80
          name: http
          protocol: TCP
        - containerPort: 443
          name: https
          protocol: TCP
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        resources:
          requests:
            cpu: 100m
            memory: 90Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            add:
            - NET_BIND_SERVICE
            drop:
            - ALL
          readOnlyRootFilesystem: false
          runAsGroup: 82
          runAsNonRoot: true
          runAsUser: 101
          seccompProfile:
            type: RuntimeDefault
      dnsPolicy: ClusterFirst
      nodeSelector:
        kubernetes.io/os: linux
      serviceAccountName: dss-ingress
      terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
  annotations:
    ingressclass.kubernetes.io/is-default-class: "true"
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-nginx
spec:
  controller: k8s.io/dss-ingress-controller
Code block. IngressController_west1_e.yaml

IngressController For Enterprise (KR-EAST1)

Color mode
apiVersion: v1
kind: Namespace
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
rules:
- apiGroups:
  - ""
  resources:
  - namespaces
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - configmaps
  - pods
  - secrets
  - endpoints
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resourceNames:
  - dss-ingress-nginx-leader
  resources:
  - leases
  verbs:
  - get
  - update
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - create
- apiGroups:
  - ""
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
rules:
- apiGroups:
  - 
  resources:
  - configmaps
  - endpoints
  - nodes
  - pods
  - secrets
  - namespaces
  verbs:
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - list
  - watch
- apiGroups:
  - 
  resources:
  - nodes
  verbs:
  - get
- apiGroups:
  - 
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - 
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: v1
data:
  allow-snippet-annotations: "true"
  annotations-risk-level: Critical
kind: ConfigMap
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  externalTrafficPolicy: Cluster
  ipFamilies:
  - IPv4
  ipFamilyPolicy: SingleStack
  ports:
  - appProtocol: http
    name: http
    nodePort: 30708
    port: 80
    protocol: TCP
    targetPort: http
  - appProtocol: https
    name: https
    nodePort: 31416
    port: 443
    protocol: TCP
    targetPort: https
  selector:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  minReadySeconds: 0
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app.kubernetes.io/component: controller
      app.kubernetes.io/instance: dss-ingress
      app.kubernetes.io/name: dss-ingress
  strategy:
    rollingUpdate:
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      labels:
        app.kubernetes.io/component: controller
        app.kubernetes.io/instance: dss-ingress
        app.kubernetes.io/name: dss-ingress
        app.kubernetes.io/part-of: dss-ingress
        app.kubernetes.io/version: 1.12.3
    spec:
      containers:
      - args:
        - /nginx-ingress-controller
        - --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
        - --election-id=dss-ingress-nginx-leader
        - --controller-class=k8s.io/dss-ingress-controller
        - --ingress-class=dss-nginx
        - --configmap=$(POD_NAMESPACE)/dss-ingress-controller
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: LD_PRELOAD
          value: /usr/local/lib/libmimalloc.so
        image: brightixscr.scr.private.kr-east1.e.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
        imagePullPolicy: IfNotPresent
        lifecycle:
          preStop:
            exec:
              command:
              - /wait-shutdown
        livenessProbe:
          failureThreshold: 5
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        name: controller
        ports:
        - containerPort: 80
          name: http
          protocol: TCP
        - containerPort: 443
          name: https
          protocol: TCP
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        resources:
          requests:
            cpu: 100m
            memory: 90Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            add:
            - NET_BIND_SERVICE
            drop:
            - ALL
          readOnlyRootFilesystem: false
          runAsGroup: 82
          runAsNonRoot: true
          runAsUser: 101
          seccompProfile:
            type: RuntimeDefault
      dnsPolicy: ClusterFirst
      nodeSelector:
        kubernetes.io/os: linux
      serviceAccountName: dss-ingress
      terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
  annotations:
    ingressclass.kubernetes.io/is-default-class: "true"
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-nginx
spec:
  controller: k8s.io/dss-ingress-controller
apiVersion: v1
kind: Namespace
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
rules:
- apiGroups:
  - ""
  resources:
  - namespaces
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - configmaps
  - pods
  - secrets
  - endpoints
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resourceNames:
  - dss-ingress-nginx-leader
  resources:
  - leases
  verbs:
  - get
  - update
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - create
- apiGroups:
  - ""
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
rules:
- apiGroups:
  - 
  resources:
  - configmaps
  - endpoints
  - nodes
  - pods
  - secrets
  - namespaces
  verbs:
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - list
  - watch
- apiGroups:
  - 
  resources:
  - nodes
  verbs:
  - get
- apiGroups:
  - 
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - 
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: v1
data:
  allow-snippet-annotations: "true"
  annotations-risk-level: Critical
kind: ConfigMap
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  externalTrafficPolicy: Cluster
  ipFamilies:
  - IPv4
  ipFamilyPolicy: SingleStack
  ports:
  - appProtocol: http
    name: http
    nodePort: 30708
    port: 80
    protocol: TCP
    targetPort: http
  - appProtocol: https
    name: https
    nodePort: 31416
    port: 443
    protocol: TCP
    targetPort: https
  selector:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  minReadySeconds: 0
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app.kubernetes.io/component: controller
      app.kubernetes.io/instance: dss-ingress
      app.kubernetes.io/name: dss-ingress
  strategy:
    rollingUpdate:
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      labels:
        app.kubernetes.io/component: controller
        app.kubernetes.io/instance: dss-ingress
        app.kubernetes.io/name: dss-ingress
        app.kubernetes.io/part-of: dss-ingress
        app.kubernetes.io/version: 1.12.3
    spec:
      containers:
      - args:
        - /nginx-ingress-controller
        - --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
        - --election-id=dss-ingress-nginx-leader
        - --controller-class=k8s.io/dss-ingress-controller
        - --ingress-class=dss-nginx
        - --configmap=$(POD_NAMESPACE)/dss-ingress-controller
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: LD_PRELOAD
          value: /usr/local/lib/libmimalloc.so
        image: brightixscr.scr.private.kr-east1.e.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
        imagePullPolicy: IfNotPresent
        lifecycle:
          preStop:
            exec:
              command:
              - /wait-shutdown
        livenessProbe:
          failureThreshold: 5
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        name: controller
        ports:
        - containerPort: 80
          name: http
          protocol: TCP
        - containerPort: 443
          name: https
          protocol: TCP
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        resources:
          requests:
            cpu: 100m
            memory: 90Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            add:
            - NET_BIND_SERVICE
            drop:
            - ALL
          readOnlyRootFilesystem: false
          runAsGroup: 82
          runAsNonRoot: true
          runAsUser: 101
          seccompProfile:
            type: RuntimeDefault
      dnsPolicy: ClusterFirst
      nodeSelector:
        kubernetes.io/os: linux
      serviceAccountName: dss-ingress
      terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
  annotations:
    ingressclass.kubernetes.io/is-default-class: "true"
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-nginx
spec:
  controller: k8s.io/dss-ingress-controller
code block. IngressController_east1_e.yaml

IngressController For Samsung (KR-WEST1)

Color mode
apiVersion: v1
kind: Namespace
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
rules:
- apiGroups:
  - 
  resources:
  - namespaces
  verbs:
  - get
- apiGroups:
  - 
  resources:
  - configmaps
  - pods
  - secrets
  - endpoints
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - 
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resourceNames:
  - dss-ingress-nginx-leader
  resources:
  - leases
  verbs:
  - get
  - update
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - create
- apiGroups:
  - 
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  - endpoints
  - nodes
  - pods
  - secrets
  - namespaces
  verbs:
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - nodes
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: v1
data:
  allow-snippet-annotations: "true"
  annotations-risk-level: Critical
kind: ConfigMap
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  externalTrafficPolicy: Cluster
  ipFamilies:
  - IPv4
  ipFamilyPolicy: SingleStack
  ports:
  - appProtocol: http
    name: http
    nodePort: 30708
    port: 80
    protocol: TCP
    targetPort: http
  - appProtocol: https
    name: https
    nodePort: 31416
    port: 443
    protocol: TCP
    targetPort: https
  selector:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  minReadySeconds: 0
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app.kubernetes.io/component: controller
      app.kubernetes.io/instance: dss-ingress
      app.kubernetes.io/name: dss-ingress
  strategy:
    rollingUpdate:
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      labels:
        app.kubernetes.io/component: controller
        app.kubernetes.io/instance: dss-ingress
        app.kubernetes.io/name: dss-ingress
        app.kubernetes.io/part-of: dss-ingress
        app.kubernetes.io/version: 1.12.3
    spec:
      containers:
      - args:
        - /nginx-ingress-controller
        - --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
        - --election-id=dss-ingress-nginx-leader
        - --controller-class=k8s.io/dss-ingress-controller
        - --ingress-class=dss-nginx
        - --configmap=$(POD_NAMESPACE)/dss-ingress-controller
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: LD_PRELOAD
          value: /usr/local/lib/libmimalloc.so
        image: brightixscr.scr.private.kr-west1.s.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
        imagePullPolicy: IfNotPresent
        lifecycle:
          preStop:
            exec:
              command:
              - /wait-shutdown
        livenessProbe:
          failureThreshold: 5
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        name: controller
        ports:
        - containerPort: 80
          name: http
          protocol: TCP
        - containerPort: 443
          name: https
          protocol: TCP
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        resources:
          requests:
            cpu: 100m
            memory: 90Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            add:
            - NET_BIND_SERVICE
            drop:
            - ALL
          readOnlyRootFilesystem: false
          runAsGroup: 82
          runAsNonRoot: true
          runAsUser: 101
          seccompProfile:
            type: RuntimeDefault
      dnsPolicy: ClusterFirst
      nodeSelector:
        kubernetes.io/os: linux
      serviceAccountName: dss-ingress
      terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
  annotations:
    ingressclass.kubernetes.io/is-default-class: "true"
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-nginx
spec:
  controller: k8s.io/dss-ingress-controller
apiVersion: v1
kind: Namespace
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
rules:
- apiGroups:
  - 
  resources:
  - namespaces
  verbs:
  - get
- apiGroups:
  - 
  resources:
  - configmaps
  - pods
  - secrets
  - endpoints
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - 
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resourceNames:
  - dss-ingress-nginx-leader
  resources:
  - leases
  verbs:
  - get
  - update
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - create
- apiGroups:
  - 
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  - endpoints
  - nodes
  - pods
  - secrets
  - namespaces
  verbs:
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - nodes
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: v1
data:
  allow-snippet-annotations: "true"
  annotations-risk-level: Critical
kind: ConfigMap
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  externalTrafficPolicy: Cluster
  ipFamilies:
  - IPv4
  ipFamilyPolicy: SingleStack
  ports:
  - appProtocol: http
    name: http
    nodePort: 30708
    port: 80
    protocol: TCP
    targetPort: http
  - appProtocol: https
    name: https
    nodePort: 31416
    port: 443
    protocol: TCP
    targetPort: https
  selector:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  minReadySeconds: 0
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app.kubernetes.io/component: controller
      app.kubernetes.io/instance: dss-ingress
      app.kubernetes.io/name: dss-ingress
  strategy:
    rollingUpdate:
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      labels:
        app.kubernetes.io/component: controller
        app.kubernetes.io/instance: dss-ingress
        app.kubernetes.io/name: dss-ingress
        app.kubernetes.io/part-of: dss-ingress
        app.kubernetes.io/version: 1.12.3
    spec:
      containers:
      - args:
        - /nginx-ingress-controller
        - --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
        - --election-id=dss-ingress-nginx-leader
        - --controller-class=k8s.io/dss-ingress-controller
        - --ingress-class=dss-nginx
        - --configmap=$(POD_NAMESPACE)/dss-ingress-controller
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: LD_PRELOAD
          value: /usr/local/lib/libmimalloc.so
        image: brightixscr.scr.private.kr-west1.s.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
        imagePullPolicy: IfNotPresent
        lifecycle:
          preStop:
            exec:
              command:
              - /wait-shutdown
        livenessProbe:
          failureThreshold: 5
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        name: controller
        ports:
        - containerPort: 80
          name: http
          protocol: TCP
        - containerPort: 443
          name: https
          protocol: TCP
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        resources:
          requests:
            cpu: 100m
            memory: 90Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            add:
            - NET_BIND_SERVICE
            drop:
            - ALL
          readOnlyRootFilesystem: false
          runAsGroup: 82
          runAsNonRoot: true
          runAsUser: 101
          seccompProfile:
            type: RuntimeDefault
      dnsPolicy: ClusterFirst
      nodeSelector:
        kubernetes.io/os: linux
      serviceAccountName: dss-ingress
      terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
  annotations:
    ingressclass.kubernetes.io/is-default-class: "true"
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-nginx
spec:
  controller: k8s.io/dss-ingress-controller
code block. IngressController_west1_s.yaml

IngressController For Samsung (KR-EAST1)

Color mode
apiVersion: v1
kind: Namespace
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
rules:
- apiGroups:
  - ""
  resources:
  - namespaces
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - configmaps
  - pods
  - secrets
  - endpoints
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resourceNames:
  - dss-ingress-nginx-leader
  resources:
  - leases
  verbs:
  - get
  - update
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - create
- apiGroups:
  - ""
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
rules:
- apiGroups:
  - 
  resources:
  - configmaps
  - endpoints
  - nodes
  - pods
  - secrets
  - namespaces
  verbs:
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - list
  - watch
- apiGroups:
  - 
  resources:
  - nodes
  verbs:
  - get
- apiGroups:
  - 
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - 
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: v1
data:
  allow-snippet-annotations: "true"
  annotations-risk-level: Critical
kind: ConfigMap
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  externalTrafficPolicy: Cluster
  ipFamilies:
  - IPv4
  ipFamilyPolicy: SingleStack
  ports:
  - appProtocol: http
    name: http
    nodePort: 30708
    port: 80
    protocol: TCP
    targetPort: http
  - appProtocol: https
    name: https
    nodePort: 31416
    port: 443
    protocol: TCP
    targetPort: https
  selector:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  minReadySeconds: 0
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app.kubernetes.io/component: controller
      app.kubernetes.io/instance: dss-ingress
      app.kubernetes.io/name: dss-ingress
  strategy:
    rollingUpdate:
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      labels:
        app.kubernetes.io/component: controller
        app.kubernetes.io/instance: dss-ingress
        app.kubernetes.io/name: dss-ingress
        app.kubernetes.io/part-of: dss-ingress
        app.kubernetes.io/version: 1.12.3
    spec:
      containers:
      - args:
        - /nginx-ingress-controller
        - --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
        - --election-id=dss-ingress-nginx-leader
        - --controller-class=k8s.io/dss-ingress-controller
        - --ingress-class=dss-nginx
        - --configmap=$(POD_NAMESPACE)/dss-ingress-controller
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: LD_PRELOAD
          value: /usr/local/lib/libmimalloc.so
        image: brightixscr.scr.private.kr-east1.s.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
        imagePullPolicy: IfNotPresent
        lifecycle:
          preStop:
            exec:
              command:
              - /wait-shutdown
        livenessProbe:
          failureThreshold: 5
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        name: controller
        ports:
        - containerPort: 80
          name: http
          protocol: TCP
        - containerPort: 443
          name: https
          protocol: TCP
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        resources:
          requests:
            cpu: 100m
            memory: 90Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            add:
            - NET_BIND_SERVICE
            drop:
            - ALL
          readOnlyRootFilesystem: false
          runAsGroup: 82
          runAsNonRoot: true
          runAsUser: 101
          seccompProfile:
            type: RuntimeDefault
      dnsPolicy: ClusterFirst
      nodeSelector:
        kubernetes.io/os: linux
      serviceAccountName: dss-ingress
      terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
  annotations:
    ingressclass.kubernetes.io/is-default-class: "true"
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-nginx
spec:
  controller: k8s.io/dss-ingress-controller
apiVersion: v1
kind: Namespace
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
rules:
- apiGroups:
  - ""
  resources:
  - namespaces
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - configmaps
  - pods
  - secrets
  - endpoints
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resourceNames:
  - dss-ingress-nginx-leader
  resources:
  - leases
  verbs:
  - get
  - update
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - create
- apiGroups:
  - ""
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
rules:
- apiGroups:
  - 
  resources:
  - configmaps
  - endpoints
  - nodes
  - pods
  - secrets
  - namespaces
  verbs:
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - list
  - watch
- apiGroups:
  - 
  resources:
  - nodes
  verbs:
  - get
- apiGroups:
  - 
  resources:
  - services
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - 
  resources:
  - events
  verbs:
  - create
  - patch
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses/status
  verbs:
  - update
- apiGroups:
  - networking.k8s.io
  resources:
  - ingressclasses
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
  namespace: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  labels:
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dss-ingress
subjects:
- kind: ServiceAccount
  name: dss-ingress
  namespace: dss-ingress
---
apiVersion: v1
data:
  allow-snippet-annotations: "true"
  annotations-risk-level: Critical
kind: ConfigMap
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  externalTrafficPolicy: Cluster
  ipFamilies:
  - IPv4
  ipFamilyPolicy: SingleStack
  ports:
  - appProtocol: http
    name: http
    nodePort: 30708
    port: 80
    protocol: TCP
    targetPort: http
  - appProtocol: https
    name: https
    nodePort: 31416
    port: 443
    protocol: TCP
    targetPort: https
  selector:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
  type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-ingress-controller
  namespace: dss-ingress
spec:
  minReadySeconds: 0
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app.kubernetes.io/component: controller
      app.kubernetes.io/instance: dss-ingress
      app.kubernetes.io/name: dss-ingress
  strategy:
    rollingUpdate:
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      labels:
        app.kubernetes.io/component: controller
        app.kubernetes.io/instance: dss-ingress
        app.kubernetes.io/name: dss-ingress
        app.kubernetes.io/part-of: dss-ingress
        app.kubernetes.io/version: 1.12.3
    spec:
      containers:
      - args:
        - /nginx-ingress-controller
        - --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
        - --election-id=dss-ingress-nginx-leader
        - --controller-class=k8s.io/dss-ingress-controller
        - --ingress-class=dss-nginx
        - --configmap=$(POD_NAMESPACE)/dss-ingress-controller
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: LD_PRELOAD
          value: /usr/local/lib/libmimalloc.so
        image: brightixscr.scr.private.kr-east1.s.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
        imagePullPolicy: IfNotPresent
        lifecycle:
          preStop:
            exec:
              command:
              - /wait-shutdown
        livenessProbe:
          failureThreshold: 5
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        name: controller
        ports:
        - containerPort: 80
          name: http
          protocol: TCP
        - containerPort: 443
          name: https
          protocol: TCP
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        resources:
          requests:
            cpu: 100m
            memory: 90Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            add:
            - NET_BIND_SERVICE
            drop:
            - ALL
          readOnlyRootFilesystem: false
          runAsGroup: 82
          runAsNonRoot: true
          runAsUser: 101
          seccompProfile:
            type: RuntimeDefault
      dnsPolicy: ClusterFirst
      nodeSelector:
        kubernetes.io/os: linux
      serviceAccountName: dss-ingress
      terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
  annotations:
    ingressclass.kubernetes.io/is-default-class: "true"
  labels:
    app: ingress-controller
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: dss-ingress
    app.kubernetes.io/name: dss-ingress
    app.kubernetes.io/part-of: dss-ingress
    app.kubernetes.io/version: 1.12.3
  name: dss-nginx
spec:
  controller: k8s.io/dss-ingress-controller
Code block. IngressController_east1_s.yaml

5.3 - API Reference

API Reference

5.4 - CLI Reference

CLI Reference

5.5 - Release Note

Data Ops

2025.04.28
NEW Data Ops service official version launch
  • A Data Ops service that creates workflows for data processing tasks that occur periodically or repeatedly and automates job scheduling has been launched.
  • It is a managed workflow orchestration service based on Apache Airflow.

6 - Quick Query

6.1 - Overview

Service Overview

Quick Query is an interactive query service that allows you to easily and quickly analyze large-scale data using standard SQL. It is automatically installed on a standard Kubernetes cluster, and you can easily and quickly access various data sources such as Cloud Hadoop, Object Storage, and RDB for data retrieval and processing.

Features

  • Easy and Fast Data Retrieval: After defining a schema for data stored in Object Storage and executing queries using standard SQL, you can retrieve data easily and quickly. Any user who can work with SQL can easily analyze large data sets, even without being a professional analyst.
  • Fast Parallel Distributed Processing: Using the Trino engine capable of parallel distributed processing, queries are automatically split and processed in parallel across multiple nodes simultaneously, allowing rapid query results even for large-scale data.
  • Various Service Architectures: We provide a public fixed-resource mode, a public resource-scaling mode, and a personal resource-scaling mode. The public fixed-resource mode supports stable response times for large-scale data queries, while the public resource-scaling mode can be used at a lower cost when usage frequency is irregular. Additionally, the personal resource-scaling mode enables each user to perform analysis tasks in an independent environment, allowing the use of Quick Query with a structure that meets user requirements.

Service Architecture Diagram

Diagram
Figure. Quick Query diagram

Provided features

Quick Query provides the following features.

  • Support single access to various data sources (support for 11 types of data sources)
  • Automatic saving of result data in Object Storage
  • Result reuse feature for identical queries
  • Access control feature through Ranger integration
  • Data Usage Control Feature
CategorytypeRemarks
Cloud Hadoophive_on_cloud_hadoop
iceberg_on_cloud_hadoop
Using Hive Metastore in Cloud Hadoop
Object Storagehive_on_object_storage
iceberg_on_object_storag
Deploy and use Hive Metastore in Quick Query
RDBpostgresql
mariadb
sqlserver
oracle
mysql
JDBC Driver Upload needed (license)
TPCDStpcdsBuilt-in Data Source provided by Quick Query
TPCHtpchBuilt-in Data Source provided by Quick Query
Table. Supported Data Source
typeselectinsertuptatedeletecreatedropalteranalyzecall
hive_on_cloud_hadoopOOOOOOOOO
iceberg_on_cloud_hadoopOOOOOOOOO
hive_on_object_storageOOOOOOOOO
iceberg_on_object_storageOOOOOOOOO
postgresqlOOOOOO
mariadbOOOOOO
sqlserverOOOOOO
greenplumOOOOOO
oracleOOOOOO
mysqlOOOOOO
tpcdsO
tpchO
Table. Supported SQL

Component

Query Engine Type: Shared

The query engine is structured so that a single instance, once started, can be shared by multiple users.

  • Fixed Resource Mode (Auto Scaling Disabled): When Auto Scaling is not used, the query engine for the fixed resources is launched according to the resources selected by the user. Because the query engine always runs on the same resources, it can guarantee consistent query performance.

    Diagram
    Figure. Fixed resource mode (Auto Scaling not used)
  • Resource Expansion Mode (Auto Scaling enabled): When Auto Scaling is used, the query engine’s Worker nodes automatically scale in/out based on throughput. If the throughput is low, the number of Worker nodes can be reduced to as few as one, and when the throughput increases, the Worker nodes expand. Additionally, resources can be adjusted according to the cluster size.

    Diagram
    Figure. Resource expansion mode (using Auto Scaling)

Query Engine Type: Private

  • Resource Expansion Mode (Auto Scaling Enabled): The personal query engine type runs a separate query engine for each user. Each query engine supports Auto Scale in/out, and if unused for an extended period, the engine automatically stops. When reconnecting for reuse, the query engine automatically restarts. When the throughput is low, the number of Worker nodes can decrease to as few as one, and when the throughput increases, the number of Worker nodes grows. Additionally, resources can be adjusted according to the cluster size.

    Diagram
    Figure. Resource Expansion Mode (using Auto Scaling)

Server type

The server types supported by Quick Query are as follows.

CategoryexampleDetailed description
Server typeStandardProvided server types
  • Standard: Standard configuration (vCPU, Memory) commonly used
  • High Capacity: Large-capacity server specifications with 24 cores or more
Server sizes1v2m4Provided server specifications
  • vCPU 2, Memory 4G
Table. Quick Query Supported Server Types

The minimum specifications required to use Quick Query are as follows.

CategoryDetailsCluster size (user input value)Fixed node poolAuto-scaling node pool
CommonFixed resource mode (Auto Scaling not used)Replica: 1
CPU: 4 Core
Memory: 8GB
8 Core, 16GB * 4N/A
CommonResource expansion mode (Auto Scaling enabled)Small(1 Core, 4GB)8 Core, 16GB * 38 Core, 16GB * 1
PersonalResource expansion mode (Auto Scaling enabled)Small(1 Core, 4GB)8 Core, 16GB * 38 Core, 32GB * 2
Table. Quick Query Minimum Specifications

Provision status by region

Quick Query is available in the following environments.

regionProvision status
Korea West (kr-west1)Provide
Korea East (kr-east1)Provide
South Korea 1 (kr-south1)Not provided
South Korea South 2 (kr-south2)Not provided
South Korea 3 (kr-south3)Not provided
Table. Quick Query Provision Status by Region

Preliminary Service

This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service and prepare in advance.

Service CategoryserviceDetailed description
NetworkingVPCA service that provides an isolated virtual network in a cloud environment
NetworkingSecurity GroupVirtual firewall that controls server traffic
StorageFile StorageA storage system that enables multiple client servers to share files over a network connection.
Table. Quick Query Preliminary Services

6.1.1 - ServiceWatch metric

You can view Kubernetes Engine metrics in ServiceWatch for the Kubernetes Engine created from Quick Query. As with Kubernetes Engine, the metrics provided by default monitoring are data collected at one‑minute intervals.

Reference
Refer to the ServiceWatch guide for how to view metrics in ServiceWatch.

Basic Metrics

The following are basic metrics for the Kubernetes Engine namespace.

The metrics whose names are shown in bold below are the key metrics selected from the default metrics provided by Kubernetes Engine. Key metrics are used to build service dashboards that are automatically created for each service in ServiceWatch.

Each metric provides guidance in the user guide on which statistical values are meaningful when querying that metric, and among the meaningful statistics, the values shown in bold are the primary statistics. In the service dashboard, you can view key metrics using primary statistical values.

Indicator NameDetailed descriptionunitmeaningful statistics
cluster_upCluster upCount
  • Total
  • Average
  • Maximum
  • Minimum
cluster_node_countNumber of cluster nodesCount
  • Total
  • Average
  • Maximum
  • Minimum
cluster_failed_node_countNumber of failed nodes in the clusterCount
  • Total
  • Average
  • Maximum
  • Minimum
cluster_namespace_phase_countNumber of cluster namespace phasesCount
  • Total
  • Average
  • Maximum
  • Minimum
cluster_pod_phase_countNumber of cluster pod phasesCount
  • Total
  • Average
  • Maximum
  • Minimum
node_cpu_allocatableNode CPU allocatable amount-
  • Total
  • Average
  • Maximum
  • Minimum
node_cpu_capacityNode CPU capacity-
  • Total
  • Average
  • Maximum
  • Minimum
node_cpu_usageNode CPU usage-
  • Total
  • Average
  • Maximum
  • Minimum
node_cpu_utilizationNode CPU usage-
  • Total
  • Average
  • Maximum
  • Minimum
node_memory_allocatableNode memory allocatable amountBytes
  • Total
  • Average
  • Maximum
  • Minimum
node_memory_capacityNode memory capacityBytes
  • Total
  • Average
  • Maximum
  • Minimum
node_memory_usageNode memory usageBytes
  • Total
  • Average
  • Maximum
  • Minimum
node_memory_utilizationNode memory usage rate-
  • Total
  • Average
  • Maximum
  • Minimum
node_network_rx_bytesNode network received bytesBytes/Second
  • Total
  • Average
  • Maximum
  • Minimum
node_network_tx_bytesNode network transmitted bytesBytes/Second
  • Total
  • Average
  • Maximum
  • Minimum
node_network_total_bytesTotal bytes of the node networkBytes/Second
  • Total
  • Average
  • Maximum
  • Minimum
node_number_of_running_podsNumber of pods running on the nodeCount
  • Total
  • Average
  • Maximum
  • Minimum
namespace_number_of_running_podsNumber of running pods in the namespaceCount
  • Total
  • Average
  • Maximum
  • Minimum
namespace_deployment_pod_countNamespace deployment pod countCount
  • Total
  • Average
  • Maximum
  • Minimum
namespace_statefulset_pod_countNamespace StatefulSet pod countCount
  • Total
  • Average
  • Maximum
  • Minimum
namespace_daemonset_pod_countNumber of DaemonSet Pods per NamespaceCount
  • Total
  • Average
  • Maximum
  • Minimum
namespace_job_active_countActive namespace job countCount
  • Total
  • Average
  • Maximum
  • Minimum
namespace_cronjob_active_countNumber of active namespace cronjobsCount
  • Total
  • Average
  • Maximum
  • Minimum
pod_cpu_usagePod CPU usage-
  • Total
  • Average
  • Maximum
  • Minimum
pod_memory_usagePod memory usageBytes
  • Total
  • Average
  • Maximum
  • Minimum
pod_network_rx_bytesPod network received bytesBytes/Second
  • Total
  • Average
  • Maximum
  • Minimum
pod_network_tx_bytesPod network transmitted bytesBytes/Second
  • Total
  • Average
  • Maximum
  • Minimum
pod_network_total_bytesTotal pod network bytesCount
  • Total
  • Average
  • Maximum
  • Minimum
container_cpu_usageContainer CPU usage-
  • Total
  • Average
  • Maximum
  • Minimum
container_cpu_limitContainer CPU limit-
  • Total
  • Average
  • Maximum
  • Minimum
container_cpu_utilizationContainer CPU usage-
  • Total
  • Average
  • Maximum
  • Minimum
container_memory_usageContainer memory usageBytes
  • Total
  • Average
  • Maximum
  • Minimum
container_memory_limitContainer memory limitBytes
  • Total
  • Average
  • Maximum
  • Minimum
container_memory_utilizationContainer memory usage rate-
  • Total
  • Average
  • Maximum
  • Minimum
node_gpu_countNode GPU countCount
  • Total
  • Average
  • Maximum
  • Minimum
gpu_tempGPU temperature-
  • Total
  • Average
  • Maximum
  • Minimum
gpu_power_usageGPU power consumption-
  • Total
  • Average
  • Maximum
  • Minimum
gpu_utilGPU utilizationPercent
  • Total
  • Average
  • Maximum
  • Minimum
gpu_sm_clockGPU SM clock-
  • Total
  • Average
  • Maximum
  • Minimum
gpu_fb_usedGPU FB usageMegabytes
  • Total
  • Average
  • Maximum
  • Minimum
gpu_tensor_activeGPU tensor utilization-
  • Total
  • Average
  • Maximum
  • Minimum
pod_gpu_utilPod GPU utilizationPercent
  • Total
  • Average
  • Maximum
  • Minimum
pod_gpu_tensor_activePod GPU Tensor Utilization Rate-
  • Total
  • Average
  • Maximum
  • Minimum
Table. Kubernetes Engine Basic Metrics

6.2 - How-to guides

Users can create the service by entering the required Quick Query information and selecting detailed options through the Samsung Cloud Platform Console.

Create Quick Query

You can create and use the Quick Query service in the Samsung Cloud Platform Console.

To create a Quick Query, follow these steps.

  1. Click the All Services > Data Analytics > Quick Query menu. Go to the Service Home page of Quick Query.

  2. On the Service Home page, click the Quick Query Create button. You will be taken to the Quick Query Create page.

  3. On the Quick Query creation page, enter the information required to create the service and select detailed options.

    • In the Version selection area, select the required information.
      Category
      Required status
      Detailed description
      Quick QueryRequiredSelect Quick Query Service Version
      • Provide a list of available versions
      Table. Quick Query Service Version Selection
    • In the Service Information Input area, enter or select the required information.
      Category
      Required status
      Detailed description
      Quick Query nameRequiredEnter Quick Query name
      • Start with a lowercase English letter and ensure it does not end with a special character (-), using lowercase letters, numbers, and special characters (-) to enter 3 ~ 30 characters
      descriptionSelectionEnter additional information or description about Quick Query within 150 characters.
      Domain SettingsRequiredEnter Quick Query domain
      • must start with a lowercase English letter and must not end with a special character (-, .), using lowercase letters, numbers, and special characters (-, .) to enter 3 to 50 characters
      • {Quick Query name}.{configured domain} becomes the Quick Query access URL.
      Query engine typeRequiredSelect query engine type
      • Shared: A single query engine is shared among multiple users
      • Personal: Each user uses a separate engine
      Cluster sizeRequiredSelect resource capacity for cluster configuration
      • When the engine type is selected as Public
        • If Auto Scaling is set to Enabled, you can choose the cluster capacity from Small, Medium, Large, or Extra Large.
        • If Auto Scaling is not set to Enabled, you can configure the cluster capacity by specifying Replica, CPU, and Memory.
      • When the engine type is selected as Private
        • You can select the cluster capacity from Small, Medium, Large, or Extra Large.
      • Engine capacity (when Auto Scaling is enabled)
        • Small: 1Core, 4GB
        • Medium: 4Core, 16GB
        • Large: 8Core, 64GB
        • Extra Large: 16Core, 128GB
      • Engine capacity (when Auto Scaling is disabled)
        • Replica: can be set from 1 to 9, default: 1
        • CPU: can be set from 4 to 24 (allowed values: 4, 6, 8, 10, 12, 14, 16, 18, 20, 22, 24), default: 4
        • Memory: can be set from 8 to 256 (allowed values: 8, 16, 32, 64, 128, 192, 256), default: 8
      Maximum number of concurrent queriesRequiredSelect the maximum number of queries to run simultaneously in Quick Query
      • Selectable values: 32, 64, 96, 128
      Data Service Console connectionRequiredEnter Data Service Console domain
      • that starts with a lowercase English letter and does not end with a special character (-, .)using lowercase letters, numbers, and special characters (-, .)to enter 3 to 50 characters
      Host AliasSelectionAdd host information to be linked with Quick Query (up to 20 total, including defaults)
      • After selecting Use, click the + button
      • Hostname: Enter 3–63 characters using lowercase letters, numbers, and special characters (-, .) in host name or domain format
      • IP: Enter in IP format
      • To delete, click the X button
      • The added host information can be used only if the firewall between the cluster and the server is open
      Table. Quick Query Service Information Input
    • In the Cluster Information Input area, enter or select the required information.
      Category
      Required
      Detailed description
      Cluster nameRequiredEnter cluster name
      • must start with a lowercase English letter and must not end with a special character (-), using lowercase letters, numbers, and special characters (-) enter 3 to 30 characters
      Control area settingRequired/Optional
      • Kubernetes version: Display Kubernetes version
        • You can upgrade the Kubernetes version after provisioning.
      • Public endpoint access: To enable access to the Kubernetes API server endpoint from outside, select Use and then enter the Access control IP range (cannot be changed after service request).
      • Control plane logging: Select whether to enable control plane logging
        • If you select Use, you can view the cluster control plane’s Audit/Event logs in Management > Cloud Monitoring > Log Analytics.
        • Log storage up to 1GB for all services in the project is provided for free, and logs exceeding 1GB are deleted sequentially.
      Network SettingsRequiredNetwork Connection Settings
      • VPC: Use the same VPC as the Data Service Console
      • Subnet: Select the subnet to use from the chosen VPC’s subnets
      • Security Group: After clicking Search, select a security group in the Select Security Group popup
      File Storage configurationRequiredSelect file storage volume to use in the cluster
      • Default Volume (NFS): After clicking Search, select file storage in the File Storage Selection popup
      Table. Quick Query Service Cluster Information Input
    • Node Pool Information Input Enter or select the required information in this area.
      Category
      Required status
      Detailed description
      Node pool configurationRequired/OptionalEnter detailed information for the node pool to add
      • * Items marked with an asterisk are required fields
        • If the Query Engine Type is Public and Auto Scaling is set to Disabled, only the Node Pool Configuration (Fixed) option can be configured.
        • Keypair: Select the authentication method used when connecting to the Virtual Server
      Table. Quick Query Service Node Pool Information Input
    • In the Additional Information Input area, enter or select the required information.
      Category
      Whether required
      Detailed description
      tagSelectionAdd Tag
      • Add Tag Click the button to create and add a tag, or add an existing tag.
      • You can add up to 50 tags.
      • The newly added tags will be applied after the service creation is completed.
      Table. Quick Query Service Additional Information Input
  4. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.

    • When creation is complete, check the created resource on the Quick Query List page.

Quick Query Check detailed information

You can view and edit the complete list of resources and detailed information of the Quick Query service. The Quick Query Details page consists of Detailed Information, Tags, Activity Log tabs.

Follow these steps to view the detailed information of the Quick Query service.

  1. Click the All Services > Data Analytics > Quick Query menu. Navigate to the Service Home page of Quick Query.
  2. On the Service Home page, click the Quick Query menu. Navigate to the Quick Query list page.
  3. Quick Query List page: click the resource to view detailed information. You will be taken to the Quick Query Detail page.
    • Quick Query Details At the top of the page, status information and additional feature information are displayed.
      CategoryDetailed description
      Status displayStatus of user-created Quick Query
      • Creating: In progress
      • Running: Creation complete, service available
      • Updating: Updating settings
      • Terminating: Service termination in progress
      • Error: Error occurred during creation or service abnormal state
      Hosts file configuration informationButton to view and copy host file information for accessing Quick Query and Data Service Console
      Service terminationCancel service button
      Table. Quick Query Status Information and Additional Features

Detailed Information

Quick Query List page allows you to view detailed information of the selected resource and edit the information if needed.

CategoryDetailed description
serviceService name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
  • means cluster SRN
Resource nameResource name
  • means the cluster name
Resource IDUnique resource ID in the service
constructorUser who created the service
Creation date and timeService creation date and time
editorUser who edited the service information
Modification dateDate and time the service information was modified
Quick Query nameQuick Query name
descriptionAdditional information or explanation about Quick Query
VersionQuick Query version
Service typeQuick Query Service Type
Query engine typeQuick Query engine type
Engine Spec
  • Whether to use Auto Scaling
  • Resource capacity for cluster configuration
Maximum number of concurrent queriesMaximum number of queries to run simultaneously in Quick Query
Domain SettingsQuick Query domain
Data Service ConsoleData Service Console domain
Host AliasHost information for Quick Query connection
Web URLWeb URLs of Data Service Console and Quick Query
Cluster nameCluster name of the configured servers
Installation node informationDetailed information of the installed node pool
Table. Quick Query Detailed Information Tab Items

tag

Quick Query List page lets you view the tag information of the selected resource, and add, modify, or delete it.

CategoryDetailed description
Tag listTag list
  • You can view the Key, Value information of the tag
  • Up to 50 tags can be added per resource
  • When entering a tag, you can search and select from the list of previously created Keys and Values
Table. Quick Query Tag Tab Items

Job History

You can view the operation history of the selected resource on the Quick Query List page.

CategoryDetailed description
Task History ListResource Change History
  • You can view the operation date and time, resource type, resource name, operation details, operation result, and operator information
  • Click the relevant resource in the Work History List. The Work History Details popup will open.
  • Provides detailed search functionality via the Detailed Search button.
Table. Quick Query Job History Tab Detailed Information Items

Quick Query Connect

Follow these steps to access Quick Query.

  1. Check the IP of the Windows system(PC) that will connect to Quick Query.
    • Since external access is required, you need to check the system’s public IP.
  2. Check that the IGW connection in the VPC where Quick Query is installed is enabled.
    • An Internet Gateway that can be connected must be configured for external access.
  3. Add the following to the Windows system’s hosts file. You can view it by clicking Hosts file setting information on the Quick Query detail screen.
    • Domain address of Data Service Console
    • Domain address of Data Service Console IAM
    • Domain address of Quick Query
  4. Add the following rule to the VPC IGW firewall you selected when applying for the Quick Query service.
    CategoryProtocolSourceTarget IPPort
    InboundTCPUser IPLoad Balancer service IP80,443
    Table. VPC IGW Firewall Rules
  5. Add the following rule to the Load Balancer Firewall you selected when applying for the Quick Query service.
    CategoryProtocolSourceTarget IPPort
    OutboundTCPUser IPLoad Balancer service IP80,443
    InboundTCPLoad Balancer’s Source NAT IPSubnet range of the Kubernetes Node Pool30000-32767
    TCPLoad Balancer’s Health Check IPSubnet range of the Kubernetes Node Pool30000-32767
    Table. Load Balancer Firewall Rules
  6. Add the following rule to the Security Group you selected when applying for the Quick Query service.
    CategoryProtocolTarget IPPort
    InboundTCPLoad Balancer’s Source NAT IP30000-32767
    TCPLoad Balancer’s Health Check IP30000-32767
    Table. Security Group Rules
  7. On the Windows system (PC) you want to connect to, launch the Chrome browser and then access the Quick Query URL.

Terminate Quick Query

You can cancel the unused service to reduce operating costs. However, canceling the service may immediately stop the running service, so you should thoroughly consider the impact of service interruption before proceeding with the cancellation.

To cancel Quick Query, follow the steps below.

  1. Click the All Services > Data Analytics > Quick Query menu. Go to the Service Home page of Quick Query.
  2. On the Service Home page, click the Quick Query menu. You will be taken to the Quick Query List page.
  3. On the Quick Query List page, select the resource to cancel, and click the Cancel Service button.
  4. After the termination is complete, check on the Quick Query list page whether the resource has been terminated.

6.3 - API Reference

API Reference

6.4 - CLI Reference

CLI Reference

6.5 - Release Note

Quick Query

2025.07.01
NEW Launch of the official version of Quick Query service
  • The Quick Query service, which allows you to easily analyze large-scale data using standard SQL, has been launched.

7 - Cloud Hadoop

7.1 - Overview

Service Overview

Cloud Hadoop is a service for easily and quickly analyzing large-scale data, providing a Hadoop cluster (computing resources, management tools, and applications) used for big data processing and analysis in the SCP environment.

Features

Cloud Hadoop provides an automated cluster creation service through the Hadoop Manager and the Hadoop Ecosystem(ecosystem) composed of Spark, HDFS(Hadoop distributed file system), Hive, etc., enabling anyone to easily build, optimize, or flexibly scale infrastructure for big data analysis.

Service Diagram

Architecture diagram
Figure. Cloud Hadoop Architecture Diagram

Provided features

Cloud Hadoop provides the following features.

  • Provide Hadoop Cluster as a cloud service

    • Providing a Hadoop Cluster through automated cluster installation in the SDS Cloud environment
    • Perform essential operational activities for cluster management (cluster operation/monitoring)
    • Provides a Hadoop ecosystem with verified interoperability and allows users to access the server (VM)
  • Offer the Hadoop service stack as separate products (increase nodes per product)

    • Minimum node allocation per product for stable service operation
    • Providing diverse product selection opportunities to meet user needs and reduce costs
  • Providing user-friendly features for Hadoop services

    • Provides installation and management functions for each Hadoop ecosystem, optimal configuration values, and version management features.
    • Provide an integrated monitoring dashboard for system resources
    • Provides Service Failure Alert feature

Component

We package the major components of the Hadoop ecosystem to deliver an enterprise data cloud.

Service Configuration

Cloud Hadoop provides the following services.

  • Basic Installation Service
    • HDFS 3.3.6
    • YARN 3.3.6
    • Hbase 2.4.17
    • Hive 3.1.2
    • Tez 0.9.1
    • Hue 4.11.0
    • Solr 8.11.4
    • Spark 3.4.1
    • Zookeeper 3.8.5
  • Additional Option Service
    • Data Governance: Atlas 2.1.0, Ranger 2.1.0
    • Analytical Data Warehouse: Iceberg 1.8.0, Kyuubi 1.10.2
    • Data Ingestion: Sqoop 1.4.7, Kafka 3.9.1, Flume 1.11.0

Server type

The server types supported by Cloud Hadoop are as follows.

Category
exampleDetailed description
Server typeStandardProvided server types
  • Standard: Configured with the commonly used standard specifications (vCPU, Memory)
  • High Capacity: Large-capacity server specifications of 24 cores or more
Server sizes1v4m32Provided server specifications
  • vCPU 4
Table. Cloud Hadoop server type

The minimum specifications for using Cloud Hadoop are as follows.

Category
AlgebraInstance size (user-selected value)
Master2(fixed)CPU: 4 Core
Memory: 32 GB
Worker3(minimum)CPU: 4 Core
Memory: 32 GB
Data GovernanceNone
Analytical Data WarehouseNone
Ingestion3 (minimum)CPU: 4 Core
Memory: 32 GB
Table. Cloud Hadoop Minimum Specifications

Provision status by region

Cloud Hadoop is available in the following environments.

regionProvision status
Korea West (kr-west1)Provide
Korea East (kr-east1)Provide
South Korea South1(kr-south1)Not provided
South Korea South 2 (kr-south2)Not provided
South Korea 3 (kr-south3)Not provided
Table. Cloud Hadoop regional availability status

Preliminary Service

This is a list of services that need to be pre-configured before creating the service. Please refer to the guide provided for each service and prepare in advance.

Service CategoryserviceDetailed description
NetworkingVPCA service that provides an isolated virtual network in a cloud environment
NetworkingSecurity GroupVirtual firewall that controls server traffic
StorageObject StorageObject storage that simplifies data storage and retrieval
Table. Cloud Hadoop preliminary service

7.1.1 - ServiceWatch metric

You can view Virtual Server metrics in ServiceWatch for servers created in Cloud Hadoop. Like Virtual Server, the metrics provided by default monitoring are data collected at 5‑minute intervals. In the Virtual Server detailed view, enabling detailed monitoring allows you to view data collected at 1‑minute intervals. For more details, Virtual Server > Enable ServiceWatch Detailed Monitoring

information
  • The basic monitoring and detailed monitoring of Cloud Hadoop are provided with the same metrics as Virtual Server, and the namespace is also provided as Virtual Server.
Reference
Refer to the ServiceWatch guide for how to view metrics in ServiceWatch.
Reference
Refer to the ServiceWatch Agent guide for how to collect metrics using the ServiceWatch Agent.

Basic Metrics

The following are the basic metrics for the Virtual Server namespace.

The indicators whose names are displayed in bold below are the key indicators selected from the basic metrics provided by Virtual Server. Key metrics are used to build service dashboards that are automatically created for each service in ServiceWatch.

Each metric provides guidance in the user guide on which statistical value is meaningful when viewing that metric, and among the meaningful statistics, the values shown in bold are the primary statistics. In the service dashboard, you can view key metrics using primary statistical values.

Performance itemsDetailed descriptionunitmeaningful statistics
Instance StateInstance status display
  • 1 - Active
  • 0 - Off
None
  • Total
CPU UsageCPU usagePercent
  • Average
  • Maximum
  • Minimum
Disk Read BytesBytes read from block device (bytes)Bytes
  • Total
  • Average
  • Maximum
  • Minimum
Disk Read RequestsNumber of read requests on a block deviceCount
  • Total
  • Average
  • Maximum
  • Minimum
Disk Write BytesWrite capacity (bytes) on block deviceBytes
  • Total
  • Average
  • Maximum
  • Minimum
Disk Write RequestsNumber of write requests on block deviceCount
  • Total
  • Average
  • Maximum
  • Minimum
Network In BytesReceived bytes on the network interfaceBytes
  • Total
  • Average
  • Maximum
  • Minimum
Network In DroppedNumber of packet drops received on the network interfaceCount
  • Total
  • Average
  • Maximum
  • Minimum
Network In PacketsNumber of packets received on the network interfaceCount
  • Total
  • Average
  • Maximum
  • Minimum
Network Out BytesData transmitted from the network interface (bytes)Bytes
  • Total
  • Average
  • Maximum
  • Minimum
Network Out DroppedNumber of packet drops transmitted from the network interfaceCount
  • Total
  • Average
  • Maximum
  • Minimum
Network Out PacketsNumber of packets transmitted on the network interfaceCount
  • Total
  • Average
  • Maximum
  • Minimum
Table. Virtual Server Basic Metrics

7.2 - How-to guides

Users can create the service by entering the required information for Cloud Hadoop and selecting detailed options through the Samsung Cloud Platform Console.

Create Cloud Hadoop

You can create and use the Cloud Hadoop service in the Samsung Cloud Platform Console.

To create Cloud Hadoop, follow these steps.

  1. All Services > Data Analytics > Cloud Hadoop Click the menu. You will be taken to the Service Home page of Cloud Hadoop.

  2. On the Service Home page, click the Create Cloud Hadoop button. You will be taken to the Create Cloud Hadoop page.

  3. On the Cloud Hadoop Creation page, enter the information required to create the service and select detailed options.

    • Select the required information in the Image and version selection area.
      Category
      Required
      Detailed description
      imageRequiredSelect the type of image provided
      • Cloud Hadoop With Ubuntu 22.04
      Image versionRequiredSelect version of the selected image
      • Provide a list of versions of the provided image
      Table. Cloud Hadoop image and version selection options
    • Enter or select the required information in the Service Information Input area.
      Category
      Required
      Detailed description
      Server name PrefixRequiredServer name for installing Cloud Hadoop
      • must start with a lowercase English letter and be entered using lowercase letters, numbers, and special characters (-) with a length of 3 to 13 characters
      • A postfix such as 001, 002 is appended to the server name to create the actual server name
      Cluster nameRequiredCluster name of the servers
      • Enter using English letters, 3 to 20 characters
      • A cluster is a unit that groups multiple servers
      Planned ComputeSelectionFor servers where Cloud Hadoop is installed, you can use a discounted price by selecting a Planned Compute commitment
      • All Services > Financial Management > Planned Compute menu can be applied
      Master Node > Number of Master NodesRequiredNumber of Master nodes
      • The number of Master nodes is fixed at two per Hadoop cluster
      • A Master node is the node where Hadoop Master is installed and provides the default HA (high availability) configuration
      • The Master node includes Hadoop Manager and various Hadoop ecosystem components installed together
      Master Node > Server TypeRequiredCPU and Memory types for distributed data processing
      • Standard-1: Standard specifications commonly used
      • High Capacity-2: Large-capacity server with 24 vCores or more
      • Recommended specifications: vCPU 8, Memory 64G
      Master Node > Block StorageRequiredBlock Storage type to be used for the Master node
      • Basic OS: Area where the engine is installed
      • DATA: Data file storage area
        • Select a storage type and then enter the capacity (see Create Block Storage for details on each Block Storage type)
          • SSD: High‑performance general volume
          • HDD: General volume
        • Capacity can be entered in multiples of 8 within the range 25 to 1,536
      • Delete on termination: When the server is terminated, the volume is terminated as well; however, volumes with snapshots are not deleted even when Delete on termination is enabled.
      • Add Disk: Data storage area
        • After selecting Use, enter the capacity of the storage
        • Click the + button to add storage, or the x button to delete. Up to 9 can be added
        • Capacity can be entered in multiples of 8 within the range 25 to 1,536
      Worker Node > Number of Worker NodesRequiredNumber of Worker nodes
      • Worker nodes can be selected from 3 to 90
      • Worker nodes are the nodes where Hadoop data nodes and the Resource Manager are installed, and they process and store distributed data
      Worker Node > Server TypeRequiredCPU and Memory types for distributed data processing
      • Standard-1: Standard specification commonly used
      • High Capacity-2: Large-capacity server with 24 vCore or more
      • Recommended specification: vCPU 8, Memory 64G
      Worker Node > Block StorageRequiredBlock Storage type to be used on the Worker node
      • Basic OS: Area where the engine is installed
      • DATA: Data file storage area
        • Select the storage type and then enter the capacity (see Block Storage 생성하기 for details on each Block Storage type)
          • SSD: High‑performance general volume
          • HDD: General volume
        • Capacity can be entered in multiples of 8 within the range 25 to 1,536
      • Delete on termination: When the server is terminated, the volume is terminated as well; however, volumes with snapshots are not deleted even when Delete on termination is enabled.
      • Add Disk: Data storage area
        • After selecting Use, enter the capacity of the storage
        • Click the + button to add storage, or the x button to delete. Up to 9 can be added
        • Capacity can be entered in multiples of 8 within the range 25 to 1,536
      Data GovernanceSelectionAdditional installation of the Hadoop ecosystem for data governance
      • If you select Use, Atlas and Ranger are installed automatically
      • Cannot be modified or removed after creation
      Analytical Data WarehouseSelectionAdditional installation of the Hadoop ecosystem for fast data analysis
      • If you select Use, Iceberg and Kyuubi are installed automatically
      • Cannot be modified or removed after creation
      Data IngestionSelectionAdditional installation of the Hadoop ecosystem for data collection and loading
      • If you select Use, Kafka, Flume, and Sqoop are installed automatically
      Data Ingestion > Ingestion Node countSelectionIngestion node count
      • Ingestion nodes can be selected from 3 to 10
      • Worker nodes are the nodes where Hadoop data nodes and the Resource Manager are installed, and they process and store distributed data
      Data Ingestion > Server TypeSelectionCPU and Memory types for distributed data processing
      • Standard-1: Standard specification commonly used
      • High Capacity-2: Large-capacity server with 24 vCore or more
      • Recommended specification: vCPU 8, Memory 64G
      Data Ingestion > Block StorageSelectionBlock Storage type to be used for the Ingestion node
      • Base OS: Area where the engine is installed
      • DATA: Data file storage area
        • Select a storage type and then enter the capacity (see Create Block Storage for details on each Block Storage type)
          • SSD: High-performance general volume
          • HDD: General volume
        • Capacity can be entered in multiples of 8 within the range 25 to 1,536
      • Add Disk: Data storage area
        • After selecting Use, enter the storage capacity
        • Click the + button to add storage, or the x button to delete. Up to 9 can be added
        • Capacity can be entered in multiples of 8 within the range 25 to 1,536, and up to 9 can be created
      Object Storage bucketSelectionObject Storage to be used in the cluster
      • Bucket Selection after selecting, select Object Storage bucket
      • You can add up to 10, to delete click the x button
      • After adding a bucket, to set access permission for that bucket, select server resources from the All Services > Object Storage list > the relevant Object Storage Details > Access Control > Allow Server Resources menu
      Table. Cloud Hadoop Service Information Input Items
    • In the Required Information Input area, enter or select the required information.
      Category
      Required
      Detailed description
      Enter PrivateLink informationRequiredEnter authentication key for PrivateLink connection
      • Create authentication key: IAM > My info > Authentication Key Management tab > Click Create Authentication Key button
      • Copy authentication key: IAM > My info > Authentication Key Management tab > Click the generated authentication key > Authentication Key Details > Basic Information tab > Authentication Key > Click View button > Copy the authentication key from the popup screen
      • Access Key: Enter Access Key, can be entered only when first applying for the service
      • Secret Key: Enter Secret Key, can be entered only when first applying for the service
      Cloud Hadoop Manager accountRequiredEnter the account and password to log in to Cloud Hadoop Manager
      • Account name: Enter the account to use for login
      • Password: Enter the password to use for login
      • Confirm password: Re-enter the password
      Network > Common SettingsRequiredNetwork settings for servers created by the service
      • Select this when you want to apply the same settings to all servers being installed
      • Select the pre‑created VPC and Subnet
      • IP is generated automatically
      • Public NAT: Available when the VPC is connected to an Internet Gateway and the Subnet is of Public type. Checking Use enables NAT IP configuration
      Network > Server-specific SettingsRequiredNetwork settings for servers created by the service
      • Select when you want to apply different settings for each server being installed
      • Select a pre‑created VPC and Subnet
      • Automatically displayed according to the selected node
      • Enter the IP for each server
      • Public NAT: Available when the VPC is connected to an Internet Gateway and the Subnet is of type Public. When Use is checked, NAT IP can be configured. See Create Public IP for details
      Security GroupRequiredAdd Security Group
      • Click the Select button to choose from the list
      • Before the service creation is complete, you can delete the added Security Group by clicking the x button on its right
      KeypairRequiredSelect the user authentication method used when connecting to the Virtual Server
      • Default login accounts by OS
        • Alma Linux: almalinux
        • Oracle Linux: cloud-user
        • RHEL:cloud-user
        • Rocky Linux: rocky
        • Ubuntu: ubuntu
        • Windows: sysadmin
      Table. Cloud Hadoop required information input items
      Caution
      • For a PrivateLink connection, you must enter an authentication key that was generated as a permanent key, and you must not delete that key.
        If the authentication key expires or is deleted, rendering it invalid, it may cause issues with resource changes or service termination in the Cloud Hadoop service.
      • When using a public subnet and assigning a public IP, you may be exposed to security attacks such as external hacking and malware infection.
      information
      • When creating a Cloud Hadoop service, only one Security Group can be selected, but after the service is created, you can select up to four Security Groups, including the initially selected one. However, the Security Group chosen at the initial service creation cannot be modified or deleted.
      • If Cloud Hadoop is installed correctly, API communication between the installed Cloud Hadoop service and the Samsung Cloud Platform Console may occur continuously for the following reasons.
        • Changing resources of Cloud Hadoop service (adding nodes and resources)
        • State changes of Cloud Hadoop services (start, stop, restart, and termination)
        • Check the status of Cloud Hadoop service (Health Check)
    • In the Additional Information Input area, enter or select the required information.
      Category
      Required status
      Detailed description
      time zoneRequiredSelect the time zone for the database to use
      tagSelectionAdd Tag
      • Add Tag Click the button to create and add a tag, or add an existing tag
      • You can add up to 50
      • The newly added tags are applied after the service creation is completed
      Table. Cloud Hadoop additional information input fields
  4. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.

    • Once creation is complete, check the created resource on the Resource List page.

View detailed information of Cloud Hadoop

Cloud Hadoop service allows you to view and edit the full resource list and detailed information. The Cloud Hadoop Details page consists of Details, Tags, Job History tabs.

To view detailed information about the Cloud Hadoop service, follow these steps.

  1. Click the All Services > Data Analytics > Cloud Hadoop menu. Navigate to the Service Home page of Cloud Hadoop.
  2. On the Service Home page, click the Cloud Hadoop menu. You will be taken to the Cloud Hadoop List page.
  3. On the Cloud Hadoop List page, click the resource you want to view detailed information for. You will be taken to the Cloud Hadoop Details page.
    • Cloud Hadoop Details At the top of the page, status information and details about additional features are displayed.
      CategoryDetailed description
      statusCloud Hadoop Service Status
      • Creating: Creating
      • Running: Created, service is available
      • Updating: Updating settings
      • Stopping: Stopping
      • Starting: Starting
      • Stopped: Stopped
      • Restarting: Restarting
      • Terminating: Terminating service
      • Error: Error occurred during creation or service abnormal state
      • Undeployed: Deployment error occurred
      StartStart of discontinued service operation
      StopForce service termination
      RestartRestart the service
      Add Worker NodeAdd a server with the same specifications as the previously created Worker node to the cluster.
      Service terminationTerminate all Cloud Hadoop services and servers
      Table. Cloud Hadoop status information and additional features
Reference
  • The status indicator reflects the state of the Cloud Hadoop service, and the server status can be checked in the server information.
  • Start, Stop, Restart buttons control only the Cloud Hadoop service, while server control can be managed from the Compute > Virtual Server list.

Detailed Information

On the Cloud Hadoop List page, you can view detailed information of the selected resource and edit the information if necessary.

CategoryDetailed description
Server informationServer information configured in this cluster
serviceService name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
  • means cluster SRN
Resource nameResource name
  • means the cluster name
Resource IDUnique resource ID in the service
constructorUser who created the service
Creation date and timeService creation date and time
editorUser who edited the service information
Modification dateDate and time the service information was modified
Image versionOS and service image version
Cluster nameCluster name of the configured servers
Planned ComputeResource status with Planned Compute configured
Manager access URLCloud Hadoop Manager access URL
time zoneStandard time zone for the service
PrivateLink informationAccess Key, Secret Key information
NetworkVPC, Subnet information
Security GroupSecurity Group List
Keypair nameCreated/selected Keypair name
Basic ServiceCloud Hadoop Basic Service Stack List
Optional ServiceCloud Hadoop option service stack list
  • Data Governance, Analytical Data Warehouse, Data Ingestion
MasterServer type, base OS, and Disk information for the Master node
  • If you need to modify the server type, click the Edit button next to the server type to configure it
    • Modifying the server type requires a server reboot
  • If you need to increase storage, click the Edit button next to the storage capacity to expand it
  • If you need to add storage, click the Add Disk button to add it
WorkerServer type, default OS, and disk information for the Worker node
IngestionServer type, default OS, and disk information for the Ingestion node
Object Storage bucketObject Storage List
Table. Cloud Hadoop detailed information items

tag

On the Cloud Hadoop List page, you can view the tag information of the selected resource and add, modify, or delete it.

CategoryDetailed description
Tag listTag list
  • You can view the Key, Value information of the tag
  • Up to 50 tags can be added per resource
  • When entering a tag, you can search and select from the list of previously created Keys and Values
Table. Cloud Hadoop Tag Tab Items

Job History

On the Cloud Hadoop List page, you can view the operation history of the selected resource.

CategoryDetailed description
Task History ListResource Change History
  • Check operation details, operation date/time, resource type, resource name, operation result, and operator information
  • Click a resource in the list to display the Operation History Details popup
  • Provides detailed search functionality via the Detailed Search button
Table. Cloud Hadoop Job History Tab Detailed Information Items

Managing Cloud Hadoop Resources

If you need to modify the existing configuration options of a created Cloud Hadoop resource or require additional configuration, you can perform the operation on the Cloud Hadoop Details page.

Add Worker Node

If you need to scale a Cloud Hadoop cluster due to increased workload or other reasons, you can add Worker nodes with the same specifications as the existing Worker nodes.

Notice
  • You can use up to 10 worker nodes per Cloud Hadoop cluster.
  • When adding nodes, all settings except the number of nodes to add and the IP/NAT IP are fixed to the configuration entered during service application.
  • If adding a node fails, contact the Samsung Cloud Platform service desk for troubleshooting.

Add Worker Node (Network configuration: common settings)

You can add a Worker node to a Cloud Hadoop cluster that was created with network settings as common settings.

To add a Worker node, follow the steps below.

  1. Click the All Services > Data Analytics > Cloud Hadoop menu. You will be taken to the Service Home page of Cloud Hadoop.
  2. On the Service Home page, click the Cloud Hadoop menu. You will be taken to the Cloud Hadoop List page.
  3. Cloud Hadoop List page, click the resource you want to add a node to. You will be taken to the Cloud Hadoop Details page.
  4. Click the Add Worker Node button. You will be taken to the Add Worker Node page.
  5. After selecting the Worker Node count, click the Complete button.
Reference
  • All settings, including the server name of each Worker node, are fixed to the configuration entered when applying for the service.

Add Worker Node (Network configuration: per-server settings)

Network settings allow adding Worker nodes to a Cloud Hadoop cluster created with server-specific settings.

To add a Worker node, follow the steps below.

  1. Click the All Services > Data Analytics > Cloud Hadoop menu. You will be taken to the Service Home page of Cloud Hadoop.
  2. On the Service Home page, click the Cloud Hadoop menu. You will be taken to the Cloud Hadoop List page.
  3. On the Cloud Hadoop List page, click the resource you want to add a node to. You will be taken to the Cloud Hadoop Details page.
  4. Click the Add Worker Node button. You will be taken to the Add Worker Node page.
  5. Please select the Number of Worker Nodes. The server configuration area will be added automatically based on the selected number of nodes.
  6. In the added server configuration area, enter the IP and NAT IP, then click the Complete button.
Reference
  • All settings, including the server name of each Worker node, are fixed to the configuration entered when applying for the service.

Change Security Group

To change the Security Group of Cloud Hadoop, follow the steps below.

  1. All Services > Data Analytics > Cloud Hadoop Click the menu. Navigate to the Service Home page of Cloud Hadoop.
  2. On the Service Home page, click the Cloud Hadoop menu. You will be taken to the Cloud Hadoop List page.
  3. Click the resource whose Security Group you want to change on the Cloud Hadoop List page. You will be taken to the Cloud Hadoop Details page.
  4. On the detail information page, click the Edit button of Security Group. The Security Group Selection popup window opens.
  5. Search for the Security Group you want to add, then select the checkbox. The selected Security Group will appear in the list below.
  6. Click Confirm. The selected Security Group will be applied.
Notice
  • When creating a Cloud Hadoop service, you can select up to four Security Groups, including the Security Group selected at creation. However, the Security Group chosen during the initial service creation cannot be modified or deleted.

Add optional service

You can additionally install the Cloud Hadoop ecosystem (Data Governance, Analytical Data Warehouse, Data Ingestion).

Data Governance/Analytical Data Warehouse addition

Follow these steps to install Data Governance and the Analytical Data Warehouse additionally.

  1. Click the All Services > Data Analytics > Cloud Hadoop menu. You will be taken to the Service Home page of Cloud Hadoop.
  2. On the Service Home page, click the Cloud Hadoop menu. You will be taken to the Cloud Hadoop List page.
  3. On the Cloud Hadoop List page, click the resource for which you want to add an optional service. You will be taken to the Cloud Hadoop Details page.
  4. On the detail information page, click the Add button of the option service you want to add. A notification popup will open.
  5. After reviewing the contents of the popup window, click the Confirm button. The corresponding option service will be added automatically.
    • It may take some time depending on the scale.

Add Data Ingestion

To install Data Ingestion additionally, follow the steps below.

  1. Click the All Services > Data Analytics > Cloud Hadoop menu. Navigate to the Service Home page of Cloud Hadoop.
  2. On the Service Home page, click the Cloud Hadoop menu. You will be taken to the Cloud Hadoop List page.
  3. Cloud Hadoop List page, click the resource you want to add an optional service to. Navigate to the Cloud Hadoop Details page.
  4. On the detail information page, click the Add button of Data Ingestion. You will be taken to the Data Ingestion Add page.
  5. After selecting the Ingestion Node count, server type, and storage type and capacity, click the Complete button. The selected option service will be added automatically.
    • It may take some time depending on the scale.

Change Server Type

You can change the server type of the Master node, Worker node, or Ingestion node in Cloud Hadoop.

To change the server type, follow these steps.

Caution
  • If the server type is configured as Standard, it cannot be changed to High Capacity. If you want to change to High Capacity, create a new service.
  • If you modify the server type, a server restart is required. Please verify any software license changes or software settings and their implementation due to specification changes separately.
  1. Click the All Services > Data Analytics > Cloud Hadoop menu. Navigate to the Service Home page of Cloud Hadoop.
  2. On the Service Home page, click the Cloud Hadoop menu. You will be taken to the Cloud Hadoop List page.
  3. On the Cloud Hadoop List page, click the resource whose server type you want to change. You will be taken to the Cloud Hadoop Details page.
  4. On the detail information page, click the Edit button of the Server Type of the node you want to change. The Edit Server Type popup window opens.
  5. After selecting the server type, click the Confirm button. A notification popup will appear.
    • Scale-Down for server type is not allowed.
  6. After reviewing the contents of the popup window, click the Confirm button.
    • The entire server of the node will be changed to the requested specifications, and the Cloud Hadoop cluster will restart.

Expanding Storage

You can expand the storage added to the data zone up to a maximum of 12 TB based on the initially allocated capacity. You can expand the storage without stopping Cloud Hadoop, and if it is configured as a cluster, all nodes are expanded simultaneously.

Information
  • Storage capacity cannot be reduced; only expansion is allowed.
  • It can be expanded up to a maximum of 12 TB, and if more than 12 TB is required, it can be expanded through a service request.
  • It may take some time for the expansion to be completed after a request for expansion.

To increase storage capacity, follow the steps below.

  1. Click the All Services > Data Analytics > Cloud Hadoop menu. Navigate to the Service Home page of Cloud Hadoop.
  2. On the Service Home page, click the Cloud Hadoop menu. You will be taken to the Cloud Hadoop List page.
  3. On the Cloud Hadoop List page, click the resource you want to expand capacity for. Navigate to the Cloud Hadoop Details page.
  4. On the detail information page, click the Edit button of the node’s Disk you want to expand. The Disk Edit popup window opens.
  5. After entering the number of units, click the Confirm button. A notification popup will appear.
    • You can set the capacity by entering the number of units provided in 8 GB increments.
  6. After reviewing the contents of the popup window, click the Confirm button.
    • It may take some time depending on the scale.

Add storage

If the storage allocated to the data area exceeds 12 TB, you can add additional storage. When configured as a cluster, it is added simultaneously for each node type.

information
  • The storage capacity can be set up to 12 TB.
  • It may take some time for a storage addition request to be fully completed.

Follow the steps below to add storage.

  1. Click the All Services > Data Analytics > Cloud Hadoop menu. You will be taken to the Service Home page of Cloud Hadoop.
  2. On the Service Home page, click the Cloud Hadoop menu. You will be taken to the Cloud Hadoop List page.
  3. On the Cloud Hadoop List page, click the resource you want to add storage to. You will be taken to the Cloud Hadoop Details page.
  4. On the detail page, click the Add Disk button of the node where you want to add storage. The Add Disk popup will open.
  5. Select the disk type and enter the capacity, then click the Confirm button. A notification popup will appear.
    • If encryption is configured on the existing Block Storage, encryption will also be applied to the additional Disk.
    • If you configure it by selecting HDD, performance degradation may occur.
  6. After reviewing the contents of the popup window, click the Confirm button.
    • It may take some time depending on the scale.

Connecting to Cloud Hadoop

To access Cloud Hadoop, follow the steps below.

  1. Check the IP of the Windows system(PC) that will connect to Cloud Hadoop.
    • Since external access is required, you need to check the system’s NAT IP.
  2. Add the following content to the hosts file on a Windows system.
    • VM host IP of the Cloud Hadoop cluster
    • VM host name of the Cloud Hadoop cluster
  3. Add the following rule to the Security Group you selected when applying for the Cloud Hadoop service.
    • Category: Inbound
    • Protocol: TCP
    • Target address: Windows system IP
    • Port: 7080
  4. On the Windows system you want to connect to, launch the Chrome browser and then access the Cloud Hadoop Manager URL.

Apache Hadoop Ecosystem Target IP/Port information

Item | Protocol | Source | Target IP | Port | Remarks

ItemProtocalSourceTarget IPPortRemarks
ManagerTCPUser IPManager7080Cloud Hadoop Manager
HDFSCPUser IPMaster8042nodemanager web http
HDFSTCPUser IPMaster8044nodemanager web https
HDFSCPUser IPMaster8088resource manager web http
HDFSTCPUser IPMaster8090resource manager web https
HDFSTCPUser IPMaster8188timelneservice web http
HDFSTCPUser IPMaster8190timelneservice web https
HDFSTCPUser IPMaster9093alert manager
HDFSTCPUser IPMaster17000hbase master
HDFSTCPUser IPMaster17010hbase master web
HDFSTCPUser IPMaster17030hbase regionserver info
HDFSTCPUser IPMaster19090hbase thriftserver
HDFSTCPUser IPMaster19095hbase thriftserver info
HDFSTCPUser IPMaster19888Job History Server Web
HDFSTCPUser IPMaster50070name node web http
HDFSTCPUser IPMaster50075data node web http
AtlasTCPUser IPMaster21000atlas web http
AtlasTCPUser IPMaster21443atlas web https
HiveTCPUser IPMaster10000Hive sever2 thrift binary
HiveTCPUser IPMaster10001Hive sever2 thrift http
HiveTCPUser IPMaster10004Hive sever2 web binary
HiveTCPUser IPMaster10002Hive sever2 web http
HiveTCPUser IPMaster10005Hive sever2 HA web http
KerberosTCPUser IPMaster88key distribution server
KerberosTCPUser IPMaster749kadmin server
RangerTCPUser IPMaster9292ranger kms http
RangerTCPUser IPMaster6080ranger web http
SolrTCPUser IPMaster8983solr
SolrTCPUser IPMaster8988solr HA web http
SparkTCPUser IPMaster18080spark history server web http
SparkTCPUser IPMaster18082spark history server web https
TezTCPUser IPMaster8780tez ui
MonitoringTCPUser IPMaster7100prometheus web http
CmakTCPUser IPMaster19000cmak web http
HA ProxyTCPUser IPMaster38404HA Proxy web http
HueTCPUser IPMaster8000HUE web http
HueTCPUser IPMaster8005Hue HA web http
LLAPTCPUser IPMaster15002llap web http
Table. Hadoop ecosystem Target IP/Port information items

Terminate Cloud Hadoop

You can reduce operating costs by terminating unused Cloud Hadoop.

Caution
  • Data cannot be recovered after the service is terminated.
  • When the service is terminated, the Cloud Hadoop service and all servers are terminated.
  • If you cancel the service, the currently operating service will be terminated immediately. Proceed with the cancellation only after fully considering the impact that may arise from the service interruption.

To cancel the service, follow the steps below.

  1. Click the All Services > Data Analytics > Cloud Hadoop menu. Navigate to the Service Home page of Cloud Hadoop.
  2. On the Service Home page, click the Cloud Hadoop menu. You will be taken to the Cloud Hadoop list page.
  3. On the Cloud Hadoop List page, select the resource to cancel, then click the Cancel Service button. An alert popup will appear.
  4. Review the contents of the popup window, enter the name of the resource to be terminated, and then click the Confirm button.
  5. After the termination request is completed, verify on the Cloud Hadoop list page that the resource has been terminated.
    • It may take some time depending on the scale.

7.3 - API Reference

API Reference

7.4 - Release Note

Cloud Hadoop

2025.12.16
NEW Official release of Cloud Hadoop service
  • The Cloud Hadoop service for easy and fast analysis of large-scale data has been launched.
  • We provide an automated cluster creation service through the Hadoop Ecosystem and Hadoop Manager.