We provide an analytics service that can process big data easily and quickly.
This is the multi-page printable view of this section. Click here to print.
Data Analytics
- 1: Event Streams
- 1.1: Overview
- 1.1.1: Server Type
- 1.1.2: Monitoring Metrics
- 1.1.3: ServiceWatch Metrics
- 1.2: How-to guides
- 1.3: API Reference
- 1.4: CLI Reference
- 1.5: Release Note
- 2: Search Engine
- 2.1: Overview
- 2.1.1: Server Type
- 2.1.2: Monitoring metrics
- 2.2: How-to guides
- 2.3: API Reference
- 2.4: CLI Reference
- 2.5: Release Note
- 3: Vertica(DBaaS)
- 3.1: Overview
- 3.1.1: Server Type
- 3.1.2: Monitoring metrics
- 3.2: How-to guides
- 3.3: API Reference
- 3.4: CLI Reference
- 3.5: Release Note
- 4: Data Flow
- 4.1: Overview
- 4.1.1: ServiceWatch metric
- 4.2: How-to guides
- 4.2.1: Data Flow Services
- 4.2.2: Install Ingress Controller
- 4.3: API Reference
- 4.4: CLI Reference
- 4.5: Release Note
- 5: Data Ops
- 5.1: Overview
- 5.1.1: ServiceWatch metric
- 5.2: How-to guides
- 5.2.1: Data Ops Services
- 5.2.2: Installing Ingress Controller
- 5.3: API Reference
- 5.4: CLI Reference
- 5.5: Release Note
- 6: Quick Query
- 6.1: Overview
- 6.1.1: ServiceWatch metric
- 6.2: How-to guides
- 6.3: API Reference
- 6.4: CLI Reference
- 6.5: Release Note
- 7: Cloud Hadoop
- 7.1: Overview
- 7.1.1: ServiceWatch metric
- 7.2: How-to guides
- 7.3: API Reference
- 7.4: Release Note
1 - Event Streams
1.1 - Overview
Service Overview
Event Streams provides fully managed creation and configuration of the open-source Apache Kafka for large-scale, high-volume message data processing. Samsung Cloud Platform automates the creation and configuration of Apache Kafka through a web-based console, allowing users to configure the main components of Apache Kafka—Broker, Zookeeper, and AKHQ—in either a single or clustered setup.
The Event Streams cluster consists of multiple Broker nodes; you can install between 1 and 10 Brokers, typically deploying three or more. Zookeeper can be installed separately to manage the distributed Brokers, but if not installed separately, it is installed on the Broker nodes. Additionally, we provide AKHQ (Apache Kafka HQ), a tool for managing Kafka, allowing users to perform cluster operation and management through it.
Provided features
Event Streams provides the following features.
- Auto Provisioning: You can configure and set up an Apache Kafka cluster via the UI.
- Operation Control Management: Provides functionality to control the status of running servers. In addition to starting and stopping the cluster, restarting is possible to apply configuration changes.
- AKHQ provision: We provide AKHQ, a tool for managing Kafka, enabling users to manage and monitor clusters.
- Add Broker node: If expansion is required to improve cluster performance and stability, you can add a node with the same specifications as the existing Broker nodes.
- Parameter management: You can configure and modify parameters related to performance improvement and security.
- Monitoring: CPU, memory, performance monitoring information can be accessed via Cloud Monitoring and Servicewatch.
Component
Event Streams provides pre‑validated engine versions and various server types in accordance with its open‑source support policy. Users can select and use them based on the scale of the service they wish to configure.
Engine version
The engine versions supported by Event Streams are as follows.
Technical support can be used until the supplier’s EoTS (End of Technical Service) date, and the EOS date when new creation is stopped is set to six months before the EoTS date.
The EOS and EoTS dates may change according to the supplier’s policy, so please refer to the supplier’s license management policy page for details.
- Apache Kafka: https://docs.confluent.io/platform/current/installation/versions-interoperability.html
| Provided version | EoS Date | EoTS Date |
|---|---|---|
| 3.8.0 | 2026-07 (planned) | 2026-12-02 |
| 3.9.1 | 2026-09 (planned) | 2027-02-19 |
Server Type
The server types supported by Event Streams are as follows.
For detailed information about the server types provided by Event Streams, refer to Event Streams Server Types.
Standard ess1v2m4
| Category | example | Detailed description |
|---|---|---|
| Server type | Standard | Provided server types
|
| Server specifications | ess1 | Provided server specifications
|
| Server specifications | v2 | Number of vCores
|
| Server specifications | m4 | Memory capacity
|
Preliminary Service
This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service and prepare in advance.
| Service Category | service | Detailed description |
|---|---|---|
| Networking | VPC | A service that provides an isolated virtual network in a cloud environment |
1.1.1 - Server Type
Event Streams server type
Event Streams provides server types composed of various combinations such as CPU, Memory, and Network Bandwidth. When creating Event Streams, Apache kafka is installed according to the server type selected for the intended purpose.
The server types supported by Event Streams are as follows.
Standard ess1v2m4
Category | example | Detailed description |
|---|---|---|
| Server type | Standard | Provided server type classifications
|
| Server specifications | ess1 | Provided server type classification and generation
|
| Server specifications | v2 | Number of vCores
|
| Server specifications | m4 | Memory capacity
|
Check the node’s minimum specifications as shown below and select the server type.
| Category | vCPU | Memory |
|---|---|---|
| Broker | 2 vCore | 4 GB |
| Zookeeper | 1 vCore | 2 GB |
ess1 server type
The ess1 server type of Event Streams is offered with standard specifications (vCPU, Memory) and is suitable for various database workloads.
- Intel 3rd‑generation (Ice Lake) Xeon Gold 6342 Processor up to 3.3 GHz
- Supports up to 16 vCPUs and 64 GB of memory
- Maximum networking speed of 12.5 Gbps
| Category | Server type | vCPU | Memory | Network Bandwidth |
|---|---|---|---|---|
| Standard | ess1v1m2 | 1 vCore | 2 GB | Up to 10 Gbps |
| Standard | ess1v2m4 | 2 vCore | 4 GB | Up to 10 Gbps |
| Standard | ess1v2m8 | 2 vCore | 8 GB | Up to 10 Gbps |
| Standard | ess1v4m8 | 4 vCore | 8 GB | Up to 10 Gbps |
| Standard | ess1v4m16 | 4 vCore | 16 GB | Up to 10 Gbps |
| Standard | ess1v8m16 | 8 vCore | 16 GB | Up to 10 Gbps |
| Standard | ess1v8m32 | 8 vCore | 32 GB | Up to 10 Gbps |
| Standard | ess1v16m32 | 16 vCore | 32 GB | Up to 12.5 Gbps |
| Standard | ess1v16m64 | 16 vCore | 64 GB | Up to 12.5 Gbps |
ess2 server type
The ess2 server type of Event Streams is offered with standard specifications (vCPU, Memory) and is suitable for various database workloads.
- Intel 4th‑generation (Sapphire Rapids) Xeon Gold 6448H Processor up to 3.2 GHz
- Supports up to 16 vCPUs and 64 GB of memory
- Maximum networking speed of 12.5 Gbps
| Category | Server type | CPU vCore | Memory | Network Bandwidth(Gbps) |
|---|---|---|---|---|
| Standard | ess2v1m2 | 1 vCore | 2 GB | Up to 10 Gbps |
| Standard | ess2v2m4 | 2 vCore | 4 GB | Up to 10 Gbps |
| Standard | ess2v2m8 | 2 vCore | 8 GB | Up to 10 Gbps |
| Standard | ess2v4m8 | 4 vCore | 8 GB | Up to 10 Gbps |
| Standard | ess2v4m16 | 4 vCore | 16 GB | Up to 10 Gbps |
| Standard | ess2v8m16 | 8 vCore | 16 GB | Up to 10 Gbps |
| Standard | ess2v8m32 | 8 vCore | 32 GB | Up to 10 Gbps |
| Standard | ess2v16m32 | 16 vCore | 32 GB | Up to 12.5 Gbps |
| Standard | ess2v16m64 | 16 vCore | 64 GB | Up to 12.5 Gbps |
esh2 server type
The esh2 server type of Event Streams is offered with high-capacity server specifications and is suitable for database workloads that require large-scale data processing.
- Intel 4th‑generation (Sapphire Rapids) Xeon Gold 6448H Processor up to 3.2 GHz
- Supports up to 32 vCPUs and 128 GB of memory
- Up to 25 Gbps networking speed
| Category | Server type | vCPU | Memory | Network Bandwidth |
|---|---|---|---|---|
| High Capacity | esh2v32m64 | 32 vCore | 64 GB | Up to 25 Gbps |
| High Capacity | esh2v32m128 | 32 vCore | 128 GB | Maximum 25 Gbps |
1.1.2 - Monitoring Metrics
According to the policy of Samsung Cloud Platform, the Cloud Monitoring service is scheduled to be terminated.
Accordingly, Event Streams will no longer be able to monitor resources via Cloud Monitoring after the service improvement work in July 2026.
After that, resource monitoring can be continuously performed through the ServiceWatch service, which was released in October 2025.
- Resources created after the service improvement work in March 2026 are provided with monitoring based on the ServiceWatch service by default.
Detailed information about ServiceWatch can be found in the ServiceWatch Overview.
Event Streams monitoring metrics
The table below shows the performance monitoring metrics for Event Streams that can be viewed through Cloud Monitoring. For detailed Cloud Monitoring usage, see the Cloud Monitoring guide.
For Event Streams server monitoring metrics, refer to the Virtual Server Monitoring Metrics guide.
| Performance items | Detailed description | unit |
|---|---|---|
| AKHQ State [PID] | AHKQ process PID | PID |
| Connections [Zookeeper Client] | Number of ZooKeeper connections | cnt |
| Disk Used | datadir usage | bytes |
| Failed [Client Fetch Request] | Client fetch request processing failure count | cnt |
| Failed [Produce Request] | Procucer request processing failure count | cnt |
| Incomming Messages | Number of messages received by the broker | cnt |
| Instance State [PID] | kafka process PID | PID |
| Kibana state [PID] | Kibana process PID | PID |
| Leader Elections | Number of Leader Election occurrences | cnt |
| Leader Elections [Unclean] | Number of Unclean Leader Election occurrences | cnt |
| Log Flushes | Number of log flush occurrences | cnt |
| Network In Bytes | Total bytes received by the entire Topic | bytes |
| Network Out Bytes | Total bytes transmitted by the Topic | bytes |
| Rejected Bytes | Total bytes rejected by the Topic | bytes |
| Request Queue Length | Request queue size | cnt |
| Shards | Cluster shard count | cnt |
| Zookeeper Sessions [Closed] | ZooKeeper closed sessions per second | cnt |
| Zookeeper Sessions [Expired] | ZooKeeper expired sessions per second | cnt |
| Zookeeper State [PID] | zookeeper process PID | PID |
1.1.3 - ServiceWatch Metrics
Event Streams sends metrics to ServiceWatch. The metrics provided by default monitoring are data collected at 1‑minute intervals.
Basic Metrics
The following are the basic metrics for the Event Streams namespace.
Indicators whose names are shown in bold below are the indicators selected as key metrics among the default metrics provided by Event Streams. Key metrics are used to build service dashboards that are automatically created for each service in ServiceWatch.
Each metric provides guidance in the user guide about which statistical value is meaningful when querying that metric, and among the meaningful statistics, the statistical values displayed in bold text are the primary statistics. In the service dashboard, primary metrics can be viewed using the primary statistical values.
OS Basic Metrics
Category | Performance items | unit | Detailed description | meaningful statistics |
|---|---|---|---|---|
| CPU | CPU Usage | Percent | CPU usage |
|
| Disk | Disk Usage | Percent | Disk usage |
|
| Disk | Disk Write Bytes | Bytes/Second | Write throughput (bytes/second) on block device |
|
| Disk | Disk Read Bytes | Bytes/Second | Read capacity (bytes/second) from block device |
|
| Disk | Disk Write Requests | Count/Second | Number of write requests on block device (requests per second) |
|
| Disk | Disk Read Requests | Count/Second | Number of read requests on block device (requests per second) |
|
| Disk | Average Disk I/O Queue Size | None | Average queue length of requests issued to the block device |
|
| Disk | Disk I/O Utilization | Percent | The proportion of time the block device actually spent handling I/O operations |
|
| Memory | Memory Usage | Percent | Memory usage |
|
| Network | Network In Bytes | Bytes/Second | Received data rate (bytes/second) on the network interface |
|
| Network | Network Out Bytes | Bytes/Second | Transmitted capacity (bytes/second) on the network interface |
|
| Network | TCP Connections | Count/Second | Current total number of successfully established TCP connections |
|
| Network | Network In Packets | Count | Number of packets received on the network interface |
|
| Network | Network Out Packets | Count | Number of packets transmitted on the network interface |
|
| Network | Network In Dropped | Count | Number of packet drops received on the network interface |
|
| Network | Network Out Dropped | Count | Number of packet drops transmitted from the network interface |
|
| Network | Network In Errors | Count | Number of packet errors received on the network interface |
|
| Network | Network Out Errors | Count | Number of packet errors transmitted on the network interface |
|
Event Streams basic metrics
Category | Performance items | unit | Detailed description | meaningful statistics |
|---|---|---|---|---|
| JVM | JVM Threads Current | Count | Number of currently active threads |
|
| JVM | JVM Memory Usage | Bytes | Current amount of memory used by the JVM |
|
| JVM | Time spent in GC | None | JVM time spent on garbage collection (GC seconds per minute) |
|
| JVM | Count in GC | Count/Minute | Number of times the JVM executed the garbage collection method |
|
| kafka_controller | Offline Partitions | Count | Number of partitions that cannot be written to or read from because there is no active leader |
|
| kafka_controller | Active Controller | Count | Number of active controllers in the cluster |
|
| kafka_controller | Total of Topics | Count | Number of global topics observed in the active controller |
|
| kafka_controller | Leader Elections | Count/Minute | Leader election when a broker fails |
|
| kafka_controller | Unclean Leader Elections | Count/Minute | Elect a broker with OSR (out-of sync replica) as the leader |
|
| kafka_network | Request Queue | Count | Request queue size |
|
| kafka_server | Zookeeper Expired Sessions | Count/Minute | Zookeeper expired session |
|
| kafka_server | Incoming Messages | Count/Second | Message received by the Broker |
|
| kafka_server | Producer requests | Count/Second | Request (Produce) received by the Broker |
|
| kafka_server | Consumer requests | Count/Second | Request (Fetch) received by the Broker |
|
| kafka_server | Failed Fetch Requests | Count/Minute | Number of failed fetches by the Consumer |
|
| kafka_server | Failed Produce Requests | Count/Minute | Number of failed requests by the Producer |
|
| kafka_server | Incoming Byte Rate | Bytes/Seconds | Byte transmission rate received from client (per broker) |
|
| kafka_server | Outgoing Byte Rate | Bytes/Seconds | Byte transmission rate to the client (by broker) |
|
| kafka_server | Rejected Byte Rate | Bytes/Seconds | Bytes rejected per broker because the record batch size exceeds the max.message.bytes setting |
|
| kafka_server | Online Partitions | Count | Total number of partitions |
|
| kafka_server | Leader Partitions | Count | leader partition count |
|
| kafka_server | Under Replicated Partitions | Count | Number of partitions with insufficient replica count |
|
| kafka_server | Under Minisr Partitions | Count | Number of partitions whose in-sync replica count is less than minIsr |
|
| Systemd | Active Systemd Unit | None | Service Status
| - |
1.2 - How-to guides
Users can create the service by entering the required information for Event Streams and selecting detailed options through the Samsung Cloud Platform Console.
According to the policy of Samsung Cloud Platform, the Cloud Monitoring service is scheduled to be terminated.
Accordingly, Event Streams will no longer be able to monitor resources via Cloud Monitoring after the service improvement work in July 2026.
After that, resource monitoring can be continuously performed through the ServiceWatch service released in October 2025.
- Resources created after the service improvement work in March 2026 are provided with monitoring based on the ServiceWatch service by default.
Detailed information about ServiceWatch can be found in the ServiceWatch 개요.
Create Event Streams
You can create and use the Event Streams service in the Samsung Cloud Platform Console.
Before creating the service, configure the VPC’s subnet type as General.
- If the subnet type is Local, the creation of the corresponding Database service is not possible.
To create Event Streams, follow these steps.
All Services > Data Analytics > Event Streams click the menu. 1. Navigate to the Service Home page of Event Streams.
On the Service Home page, click the Create Event Streams button. 2. Go to the Create Event Streams page.
Event Streams creation page, enter the information required to create the service and select detailed options.
- Select the required information in the Image and version selection area.
Category required statusDetailed description Image version Required Provide a list of Event Streams versions Table. Event Streams service information input items - In the Service Information Input area, enter or select the required information.
Category required statusDetailed description Server name Prefix Required The server name where Apache Kafka will be installed - must start with a lowercase English letter and be entered using lowercase letters, numbers, and the special character (
-) with a length of 3 to 13 characters
- A postfix such as 001, 002 is appended to the base server name to generate the actual server name
Cluster name Required Cluster name of the servers - Enter using English letters, 3 ~ 20 characters
- A cluster is a unit that groups multiple servers
Broker > Number of Broker Nodes Required Number of Broker Nodes Broker > server type Required Server type for installing the Broker - Standard: Standard specification commonly used
- High Capacity: Large-capacity server with 24 vCores or more
- For detailed information about the server types provided by Event Streams, see Event Streams server types.
Broker > Planned Compute Select Status of resources with Planned Compute configured - In Use: Number of resources with Planned Compute that are currently in use
- Configured: Number of resources with Planned Compute configured
- Coverage Preview: Amount applied per resource by Planned Compute
- Apply for Planned Compute Service: Go to the Planned Compute service application page
- For more details, see Planned Compute 신청하기
Broker > Block Storage Required Block Storage type to be used for the Broker node - Base OS: The area where the engine is installed
- DATA: Data file storage area
- Select the storage type and then enter the capacity (for details on each Block Storage type, see Block Storage 생성하기)
- SSD: High‑performance general volume
- HDD: General volume
- SSD_KMS/HDD_KMS: Additional encrypted volume using Samsung Cloud Platform KMS (Key Management System) encryption keys
- Enter the capacity as a multiple of 8 within the range 16 to 5,120
- Select the storage type and then enter the capacity (for details on each Block Storage type, see Block Storage 생성하기)
Zookeeper separate installation > use Select Whether to install Zookeeper nodes separately - If you select Use, install Zookeeper nodes separately
- If Zookeeper nodes are not installed separately, the Broker node also performs the Zookeeper role
Zookeeper separate installation > server type Select Server type on which Zookeeper will be installed - Zookeeper nodes provide vCPU 1, Memory 2G or vCPU 2, Memory 4G
Zookeeper separate installation > Planned Compute Select Status of resources with Planned Compute configured - In Use: Number of resources with Planned Compute that are currently in use
- Configured: Number of resources with Planned Compute configured
- Coverage Preview: Amount applied per resource by Planned Compute
- Apply for Planned Compute Service: Go to the Planned Compute service application page
- For more details, see Planned Compute Apply
Separate Zookeeper installation > Block Storage Required Block Storage type to be used for Zookeeper nodes - Default OS: Area where the engine is installed
- DATA: Data file storage area
- After selecting the storage type, enter the capacity (see Block Storage 생성하기 for details on each Block Storage type)
- SSD: High‑performance general volume
- HDD: General volume
- SSD_KMS/HDD_KMS: Additional encrypted volume using Samsung Cloud Platform KMS (Key Management System) encryption keys
- Enter the capacity as a multiple of 8 within the range 16 to 5,120
- After selecting the storage type, enter the capacity (see Block Storage 생성하기 for details on each Block Storage type)
AKHQ > Use Required Whether to install AKHQ - If you select Use, AKHQ will be installed
AKHQ > Server Type Required Server type on which AKHQ will be installed - AKHQ only provides the vCPU 2, Memory 4G type
AKHQ > Planned Compute Select Status of resources with Planned Compute configured - In Use: Number of resources with Planned Compute that are currently in use
- Configured: Number of resources with Planned Compute configured
- Coverage Preview: Amount applied per resource by Planned Compute
- Apply for Planned Compute Service: Go to the Planned Compute service application page
- For more details, see Planned Compute 신청하기
AKHQ > Block Storage Required Block Storage type to be used on the server where AKHQ is installed - Base OS: area where the engine is installed
AKHQ > AKHQ account Required AKHQ account - Enter using lowercase English letters, 2 ~ 20 characters
AKHQ > AKHQ password Required AKHQ account password - English letters, numbers, and special characters (
“‘excluded) including 8 ~ 30 characters
AKHQ > Verify AKHQ password Required Confirm AKHQ account password - Re-enter the AKHQ account password identically
AKHQ > AKHQ Port number Required AKHQ connection port number - The port number is automatically set to 8080 and cannot be modified
Network > Common Settings Required Network settings for servers created by the service - Select when you want to apply the same settings to all installed servers
- Select a pre‑created VPC and Subnet
- IP: only automatic generation is possible
- For Public NAT settings, it is only possible in per‑server configuration
Network > Server-specific Settings Required Network settings where servers generated by the service are installed - Select if you want to apply different settings per installed server
- Select a pre‑created VPC and Subnet
- IP: Enter the IP for each server
- Public NAT feature is available only when the VPC is connected to an Internet Gateway; checking Use allows selection from the reserved IPs in the VPC product’s Public IP pool. For details, see Public IP 생성하기
IP access control Select Service Access Policy Configuration - Since the access policy is set for the IP entered on the page, you do not need to configure a separate Security Group policy
- Enter the IP in IP format (e.g.,
192.168.10.1) or CIDR format (e.g.,192.168.10.0/24,192.168.10.1/32) and click the Add button
- To delete an entered IP, click the x button next to the IP
maintenance period Select Event Streams maintenance window - If you select Use, set the day of week, start time, and duration
- It is recommended to set a maintenance window for stable service management. Patch operations will be performed at the scheduled time, and service interruption may occur
- We are not responsible for issues arising from patches not being applied (set as not used)
Table. Event Streams service configuration items - must start with a lowercase English letter and be entered using lowercase letters, numbers, and the special character (
- Enter required database configuration information In this area, enter or select the required information.
Category required statusDetailed description Zookeeper SASL account Required Zookeeper account - Enter using lowercase English letters, 2 to 20 characters
Zookeeper SASL password Required Zookeeper account password - including English letters, numbers, and special characters (
“‘excluded) and enter 8 to 30 characters
Check Zookeeper SASL password Required Verify Zookeeper account password - Re-enter the Zookeeper SASL account password identically
Zookeeper Port number Required Zookeeper port number 1200 ~ 65535must be entered as one of them, and the Broker port or2888,3888cannot be used
Broker SASL account Required Kafka login account - Enter using lowercase English letters, 2 ~ 20 characters
Broker SASL password Required Kafka login account password - Enter 8 to 30 characters, including English letters, numbers, and special characters (excluding
“‘)
Verify Broker SASL password Required Verify Kafka connection account password - Re-enter the Broker SASL account password identically
Broker Port number Required Kafka port number 1200 ~ 65535can be entered as one of, and the Broker port or2888,3888 cannot be used
Parameter Required Event Streams configuration parameters - View button can be clicked to view detailed information of the parameters
- Parameters can be modified after the service creation is complete, and a restart is required when modified
time zone Select Standard time zone for the service ServiceWatch log collection Select ServiceWatch log collection status - Use to configure the ServiceWatch log collection feature
- For details about the collected logs, refer to ServiceWatch 지표
- It is provided free of charge up to 5 GB for all services within the account, and charges apply based on storage usage for amounts exceeding 5 GB
- When collecting, log groups and log streams are created automatically, and they cannot be deleted until the resources are removed
- To prevent exceeding 5 GB, it is recommended to delete log data directly or shorten the retention period
Table. Required input items for configuring Event Streams Database - In the Additional Information Input area, enter or select the required information.
Category required statusDetailed description tag Select Add Tag - Add Tag Click the button to create and add a tag, or add an existing tag
- You can add up to 50 tags
- The newly added tags are applied after the service creation is completed
Table. Event Streams service additional information input fields
- Select the required information in the Image and version selection area.
Summary Check the detailed information and estimated charges generated in the panel, and click the Create button.
- Once creation is complete, check the created resource on the Resource List page.
View Event Streams details
The Event Streams service lets you view and modify the complete list of resources and their detailed information. The Event Streams Details page consists of the Details, Tags, Activity Log tabs.
To view detailed information about the Event Streams service, follow these steps.
- All Services > Data Analytics > Event Streams Click the menu. 1. Navigate to the Service Home page of Event Streams.
- On the Service Home page, click the Event Streams menu. 2. Go to the Event Streams list page.
- On the Event Streams List page, click the resource to view detailed information. 3. Go to the Event Streams Details page.
- Event Streams Details At the top of the page, status information and additional feature details are displayed.
Category Detailed description Cluster status Cluster status - Creating: The cluster is being created
- Editing: The cluster is being changed to an operational state
- Error: The cluster encountered a failure while performing a task
- If this persists, contact the administrator
- Failed: The cluster failed during creation
- Restarting: The cluster is restarting
- Running: The cluster is operating normally
- Starting: The cluster is starting
- Stopped: The cluster is stopped
- Stopping: The cluster is stopping
- Synchronizing: The cluster is synchronizing
- Terminating: The cluster is being terminated
- Unknown: The cluster status is unknown
- If this persists, contact the administrator
- Upgrading: The cluster is being upgraded
Cluster control Button to change the cluster state - Start: Start a stopped cluster
- Stop: Stop a running cluster
- Restart: Restart a running cluster
See more features Cluster management buttons - Service status synchronization: Retrieve the current server status and synchronize it to the Console
- Parameter management: View and modify service configuration parameters
- Add Broker Node: Add a Broker Node
- When configured as a cluster, the Add Broker Node button is displayed
Service cancellation Cancel service button Table. Event Streams status information and additional features
- Event Streams Details At the top of the page, status information and additional feature details are displayed.
Detailed information
Event Streams List page allows you to view detailed information of the selected resource and, if necessary, edit the information.
| Category | Detailed description |
|---|---|
| Server Information | Server information configured in this cluster
|
| Service | Service name |
| Resource Type | Resource Type |
| SRN | Unique resource ID in Samsung Cloud Platform
|
| Resource name | resource name
|
| Resource ID | Unique resource ID in the service |
| Constructor | User who created the service |
| Creation date and time | Service creation date and time |
| Modifier | User who edited the service information |
| Modification date | Date and time the service information was modified |
| Image version | Installed service image and version information
|
| Cluster name | Cluster name of the configured servers |
| Planned Compute | Resource status with Planned Compute configured
|
| maintenance period | Patch work period configuration status
|
| time zone | Standard time zone for the service |
| Zookeeper Port number | Zookeeper port number |
| Broker Port number | Kafka port number |
| AKHQ connection information | AKHQ connection information |
| ServiceWatch log collection | ServiceWatch Log Collection Configuration Status
|
| Network | Installed network information (VPC, Subnet) |
| IP access control | Service access policy settings
|
| Zookeeper | Server type, base OS, and additional Disk information
|
| Broker | Server type, base OS, and additional Disk information for the Broker node
|
| AKHQ | Server type and basic OS information for the AKHQ node
|
tag
Event Streams List page lets you view the tag information of the selected resource, and you can add, modify, or delete it.
| Category | Detailed description |
|---|---|
| Tag list | Tag list
|
Work History
On the Event Streams List page, you can view the operation history of the selected resource.
| Category | Detailed description |
|---|---|
| Task History List | Resource Change History
|
Managing Event Streams Resources
If you need to change the existing configuration options of a created Event Streams resource, manage parameters, or add a Broker Node configuration, you can perform the tasks on the Event Streams Details page.
Control operation
If changes occur to a running Event Streams resource, you can start, stop, or restart it.
To control the operation of Event Streams, follow these steps.
- All Services > Data Analytics > Event Streams Click the menu. 1. Navigate to the Service Home page of Event Streams.
- On the Service Home page, click the Event Streams menu. 2. Go to the Event Streams list page.
- On the Event Streams list page, click the resource you want to control. 3. Go to the Event Streams Details page.
- Check the Event Streams status and complete the change using the control button below.
- Start: Event Streams service is installed on the server and the Event Streams service is running (Running).
- Stop: The server where the Event Streams service is installed and the Event Streams service will be stopped (Stopped).
- Restart: Only the Event Streams service will be restarted.
Synchronize service status
You can query the current server status and synchronize it to the Console.
To synchronize the service status of Event Streams, follow these steps.
- All Services > Data Analytics > Event Streams Click the menu. 1. Navigate to the Service Home page of Event Streams.
- On the Service Home page, click the Event Streams menu. 2. Go to the Event Streams list page.
- On the Event Streams List page, click the resource to view the service status. 3. Go to the Event Streams Details page.
- Service Status Sync Click the button. 4. The query takes a short amount of time, and while it is being performed, the cluster changes to the Synchronizing state.
- When the query completes, the status in the server information field is updated, and the cluster changes to the Running state.
Manage Parameters
Provides parameter lookup and edit functionality.
To view and modify configuration parameters, follow the steps below.
- Click the All Services > Data Analytics > Event Streams menu. 1. Navigate to the Service Home page of Event Streams.
- On the Service Home page, click the Event Streams menu. 2. Navigate to the Event Streams list page.
- On the Event Streams List page, click the resource whose parameters you want to view and edit. 3. Go to the Event Streams Details page.
- Click the Parameter Management button. 4. Go to the Parameter Management page.
- On the Parameter Management page, click the Search button. 5. Database query The popup window opens.
- To view the Parameter information, click the Confirm button. 6. Retrieving may take a short amount of time.
- You can modify the Parameter information after performing a query.
- To edit the Parameter information, click the Edit button and then enter the changes in the Custom Value field of the Parameter you want to modify.
- When the Application Type is Dynamic, it takes effect immediately, and when it is Static, a service restart is required, causing service interruption.
- When the input is complete, click the Save button.
Change server type
You can change the configured server type.
To change the server type, follow these steps.
- If the server type is configured as Standard, it cannot be changed to High Capacity. * If you want to change to High Capacity, create a new service.
- If you modify the server type, a server restart is required. * Please separately verify any SW license modifications or SW settings and their implementation due to specification changes.
- All Services > Data Analytics > Event Streams Click the menu. 1. Navigate to the Service Home page of Event Streams.
- On the Service Home page, click the Event Streams menu. 2. Event Streams List navigate to the page.
- On the Event Streams list page, click the resource whose server type you want to change. 3. Go to the Event Streams Details page.
- Click the Edit button for the server type you want to change at the bottom of the detailed information. 4. Edit Server Type popup window opens.
- Server Type Edit After selecting the server type in the popup window, click the Confirm button.
Expand storage
Storage added to the data area can be expanded up to a maximum of 5 TB based on the initially allocated capacity. You can expand storage without stopping Event Streams, and when configured as a cluster, all nodes are expanded simultaneously.
- If encryption is configured on the existing Block Storage, encryption will also be applied to the additional Disk.
- Disk size modification is only possible by increasing it by at least 16 GB over the current disk size.
To increase storage capacity, follow the steps below.
- All Services > Data Analytics > Event Streams click the menu. 1. Navigate to the Service Home page of Event Streams.
- On the Service Home page, click the Event Streams menu. 2. Go to the Event Streams list page.
- On the Event Streams list page, click the resource for which you want to change the server type. 3. Go to the Event Streams Details page.
- Click the Edit button for the added Disk you want to expand at the bottom of the detailed information. 4. Disk Edit The popup window opens.
- Disk Edit After entering the expanded capacity in the popup window, click the Confirm button.
Add Broker Node
If you need to expand the Event Streams cluster, you can add nodes with the same specifications as the Broker Node you are using. The added nodes are incorporated into the existing cluster without server downtime, and the existing data is automatically redistributed.
- You can use up to 10 nodes within the cluster. * Please note that additional charges apply to the created nodes.
- During node addition, the cluster’s performance may degrade.
To add a Broker node, follow these steps.
- All Services > Data Analytics > Event Streams menu, please click. 1. Navigate to the Service Home page of Event Streams.
- On the Service Home page, click the Event Streams menu. 2. Go to the Event Streams list page.
- On the Event Streams resource list page, click the resource you want to recover. 3. Navigate to the Event Streams Details page.
- Click the Add Broker Node button. 4. Go to the Add Broker Node page.
- After entering the relevant information in the Enter required information area, click the Complete button.
Category required statusDetailed description Server name Required The server name where the Broker is installed - It is set to the server name configured in the original cluster.
Cluster name Required Cluster name - It is set to the cluster name configured in the original cluster.
Additional Node Count Required Number of Nodes to add - Use up to 10 nodes per cluster
Service Type > Server Type Required The server type on which the Broker will be installed - is set to be the same as the server type configured in the original cluster.
Service Type > Planned Compute Select Status of resources with Planned Compute configured - In Use: Number of resources with Planned Compute that are currently in use
- Configured: Number of resources with Planned Compute configured
- Coverage Preview: Amount applied per resource by Planned Compute
- Apply for Planned Compute Service: Go to the Planned Compute service application page
- For more details, see Planned Compute 신청하기
Service Type > Block Storage Required Block Storage settings for the Broker node - The storage type and capacity configured in the original cluster are applied identically
Network Required The network on which the servers are installed - is applied identically to the network configured in the original cluster
Table. Additional items for Event Streams Broker Node
Cancel Event Streams
You can cancel unused Event Streams to reduce operating costs. However, if you terminate the service, the running service may be stopped immediately, so you should proceed with the termination only after fully considering the impact that may arise from service interruption.
To cancel Event Streams, follow these steps.
- All Services > Data Analytics > Event Streams Click the menu. 1. Navigate to the Service Home page of Event Streams.
- On the Service Home page, click the Event Streams menu. 2. Go to the Event Streams list page.
- On the Event Streams List page, select the resource to cancel and click the Cancel Service button.
- After the termination is complete, check on the Event Streams list page whether the resource has been terminated.
1.3 - API Reference
1.4 - CLI Reference
1.5 - Release Note
Event Streams
- Provides Terraform.
- Provides additional HDD, HDD_KMS disk types.
- The Event Streams service, which easily creates and manages Apache Kafka clusters in a web environment, has been launched.
2 - Search Engine
2.1 - Overview
Service Overview
Search Engine provides automated creation and configuration of the distributed search and analytics engines Elasticsearch and OpenSearch through a web-based console. Users can select a server type that matches the system configuration to set up a cluster, and it supports the data analysis and visualization tools Kibana and the OpenSearch dashboard.
- Search Engine provides the Elasticsearch Enterprise version and the OpenSearch version.
- Elasticsearch Enterprise’s software license uses a user-owned license (BYOL, Bring Your Own License), and software licensing policies in cloud environments must follow the vendor’s policies.
The Search Engine Cluster consists of multiple master nodes and data nodes. Data nodes can be installed from a minimum of one up to a maximum of ten, and are typically deployed with three or more. If a master node is not installed separately, the data nodes also perform the master node role, and up to ten can be installed. When master nodes are installed separately, up to 50 data nodes are possible.
Provided features
Search Engine provides the following features.
- Auto Provisioning (Auto Provisioning): You can configure and set up Elasticsearch and OpenSearch clusters via the UI.
- Operation Control Management: Provides functionality to control the status of running servers. In addition to starting and stopping the cluster, it can be restarted to apply configuration values.
- Backup and Recovery: You can back up using the built-in backup feature, and you can restore to the point in time of the backup file.
- Add Data Node: If cluster expansion is required, you can add nodes with the same specifications as the existing data nodes. Up to 10 nodes can be added within the cluster.
- Visualization Tool Support: Provides data analysis and visualization tools, and supports Elasticsearch Kibana or OpenSearch dashboards.
- Monitoring: CPU, memory, and cluster performance monitoring information can be accessed through the Cloud Monitoring service.
Component
Search Engine provides pre‑validated engine versions and various server types in accordance with its open‑source support policy. Users can select and use them based on the scale of the service they wish to configure.
Engine version
The engine versions supported by Search Engine are as follows.
Technical support can be used until the supplier’s EoTS (End of Technical Service) date, and the EOS date when new creation is halted is set to six months before the EoTS date.
The EOS and EoTS dates may change according to the supplier’s policy, so please refer to the supplier’s license management policy page for details.
- Elasticsearch: https://www.elastic.co/kr/support/eol
The next version of Search Engine is scheduled to be offered after March 2026. The actual service schedule may change.
- OpenSearch version 3.4.0
| Provided version | EoS Date | EoTS Date |
|---|---|---|
| 8.15.0 | 2027-01 (planned) | 2027-07-15 |
| 8.19.7 | 2027-01 (planned) | 2027-07-15 |
- OpenSearch: https://opensearch.org/releases/
| Provided version | EoS Date | EoTS Date |
|---|---|---|
| 2.19.3 | 2027-01 (planned) | 2027-07-15 |
| 3.4.0 | TBD | TBD |
Server Type
The server types supported by Search Engine are as follows.
For detailed information about the server types provided by Search Engine, see Search Engine Server Types.
Standard se1v2m4
| Category | example | Detailed description |
|---|---|---|
| Server type | Standard | Provided server types
|
| Server specifications | se1 | Provided server specifications
|
| Server specifications | v2 | Number of vCores
|
| Server specifications | m4 | Memory capacity
|
Preliminary Service
This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service and prepare in advance.
| Service Category | service | Detailed description |
|---|---|---|
| Networking | VPC | A service that provides an isolated virtual network in a cloud environment |
2.1.1 - Server Type
Search Engine server type
Search Engine provides server types composed of various combinations such as CPU, Memory, and Network Bandwidth. When creating a Search Engine, Elastic Search is installed according to the server type selected for the intended use.
The server types supported by Search Engine are as follows.
Standard ses1v2m4
Category | example | Detailed description |
|---|---|---|
| Server type | Standard | Provided server type classifications
|
| Server specifications | db1 | Provided server type classification and generation
|
| Server specifications | v2 | Number of vCores
|
| Server specifications | m4 | Memory capacity
|
ses1 server type
The ses1 server type of Search Engine is offered with standard specifications (vCPU, Memory) and is suitable for various database workloads.
- Intel 3rd‑generation (Ice Lake) Xeon Gold 6342 Processor up to 3.3 GHz
- Supports up to 16 vCPUs and 256 GB of memory
- Maximum networking speed of 12.5 Gbps
| Category | Server type | vCPU | Memory | Network Bandwidth |
|---|---|---|---|---|
| Standard | ses1v1m2 | 1 vCore | 2 GB | Up to 10 Gbps |
| Standard | ses1v2m8 | 2 vCore | 8 GB | Up to 10 Gbps |
| Standard | ses1v2m16 | 2 vCore | 16 GB | Up to 10 Gbps |
| Standard | ses1v2m24 | 2 vCore | 24 GB | Up to 10 Gbps |
| Standard | ses1v2m32 | 2 vCore | 32 GB | Up to 10 Gbps |
| Standard | ses1v4m8 | 4 vCore | 8 GB | Up to 10 Gbps |
| Standard | ses1v4m16 | 4 vCore | 16 GB | Up to 10 Gbps |
| Standard | ses1v4m32 | 4 vCore | 32 GB | Up to 10 Gbps |
| Standard | ses1v4m48 | 4 vCore | 48 GB | Up to 10 Gbps |
| Standard | ses1v4m64 | 4 vCore | 64 GB | Up to 10 Gbps |
| Standard | ses1v6m12 | 6 vCore | 12 GB | Up to 10 Gbps |
| Standard | ses1v6m24 | 6 vCore | 24 GB | Up to 10 Gbps |
| Standard | ses1v6m48 | 6 vCore | 48 GB | Up to 10 Gbps |
| Standard | ses1v6m72 | 6 vCore | 72 GB | Up to 10 Gbps |
| Standard | ses1v6m96 | 6 vCore | 96 GB | Up to 10 Gbps |
| Standard | ses1v8m16 | 8 vCore | 16 GB | Up to 10 Gbps |
| Standard | ses1v8m32 | 8 vCore | 32 GB | Up to 10 Gbps |
| Standard | ses1v8m64 | 8 vCore | 64 GB | Up to 10 Gbps |
| Standard | ses1v8m96 | 8 vCore | 96 GB | Up to 10 Gbps |
| Standard | ses1v8m128 | 8 vCore | 128 GB | Up to 10 Gbps |
| Standard | ses1v10m20 | 10 vCore | 20 GB | Up to 10 Gbps |
| Standard | ses1v10m40 | 10 vCore | 40 GB | Up to 10 Gbps |
| Standard | ses1v10m80 | 10 vCore | 80 GB | Up to 10 Gbps |
| Standard | ses1v10m120 | 10 vCore | 120 GB | Up to 10 Gbps |
| Standard | ses1v10m160 | 10 vCore | 160 GB | Up to 10 Gbps |
| Standard | ses1v12m24 | 12 vCore | 24 GB | Up to 12.5 Gbps |
| Standard | ses1v12m48 | 12 vCore | 48 GB | Maximum 12.5 Gbps |
| Standard | ses1v12m96 | 12 vCore | 96 GB | Up to 12.5 Gbps |
| Standard | ses1v12m144 | 12 vCore | 144 GB | Up to 12.5 Gbps |
| Standard | ses1v12m192 | 12 vCore | 192 GB | Up to 12.5 Gbps |
| Standard | ses1v14m28 | 14 vCore | 28 GB | Up to 12.5 Gbps |
| Standard | ses1v14m56 | 14 vCore | 56 GB | Up to 12.5 Gbps |
| Standard | ses1v14m112 | 14 vCore | 112 GB | Up to 12.5 Gbps |
| Standard | ses1v14m168 | 14 vCore | 168 GB | Up to 12.5 Gbps |
| Standard | ses1v14m224 | 14 vCore | 224 GB | Up to 12.5 Gbps |
| Standard | ses1v16m32 | 16 vCore | 32 GB | Up to 12.5 Gbps |
| Standard | ses1v16m64 | 16 vCore | 64 GB | Maximum 12.5 Gbps |
| Standard | ses1v16m128 | 16 vCore | 128 GB | Up to 12.5 Gbps |
| Standard | ses1v16m192 | 16 vCore | 192 GB | Up to 12.5 Gbps |
| Standard | ses1v16m256 | 16 vCore | 256 GB | Up to 12.5 Gbps |
ses2 server type
The ses1 server type of Search Engine is offered with standard specifications (vCPU, Memory) and is suitable for various database workloads.
- Intel 4th‑generation (Sapphire Rapids) Xeon Gold 6448H Processor up to 3.2 GHz
- Supports up to 16 vCPUs and 256 GB of memory
- Maximum networking speed of 12.5 Gbps
| Category | Server type | CPU vCore | Memory | Network Bandwidth(Gbps) |
|---|---|---|---|---|
| Standard | ses2v2m4 | 2 vCore | 4 GB | Up to 10 Gbps |
| Standard | ses2v2m8 | 2 vCore | 8 GB | Up to 10 Gbps |
| Standard | ses2v2m16 | 2 vCore | 16 GB | Up to 10 Gbps |
| Standard | ses2v2m24 | 2 vCore | 24 GB | Up to 10 Gbps |
| Standard | ses2v2m32 | 2 vCore | 32 GB | Up to 10 Gbps |
| Standard | ses2v4m8 | 4 vCore | 8 GB | Up to 10 Gbps |
| Standard | ses2v4m16 | 4 vCore | 16 GB | Up to 10 Gbps |
| Standard | ses2v4m32 | 4 vCore | 32 GB | Up to 10 Gbps |
| Standard | ses2v4m48 | 4 vCore | 48 GB | Up to 10 Gbps |
| Standard | ses2v4m64 | 4 vCore | 64 GB | Up to 10 Gbps |
| Standard | ses2v6m12 | 6 vCore | 12 GB | Up to 10 Gbps |
| Standard | ses2v6m24 | 6 vCore | 24 GB | Up to 10 Gbps |
| Standard | ses2v6m48 | 6 vCore | 48 GB | Up to 10 Gbps |
| Standard | ses2v6m72 | 6 vCore | 72 GB | Up to 10 Gbps |
| Standard | ses2v6m96 | 6 vCore | 96 GB | Up to 10 Gbps |
| Standard | ses2v8m16 | 8 vCore | 16 GB | Up to 10 Gbps |
| Standard | ses2v8m32 | 8 vCore | 32 GB | Up to 10 Gbps |
| Standard | ses2v8m64 | 8 vCore | 64 GB | Up to 10 Gbps |
| Standard | ses2v8m96 | 8 vCore | 96 GB | Up to 10 Gbps |
| Standard | ses2v8m128 | 8 vCore | 128 GB | Up to 10 Gbps |
| Standard | ses2v10m20 | 10 vCore | 20 GB | Up to 10 Gbps |
| Standard | ses2v10m40 | 10 vCore | 40 GB | Up to 10 Gbps |
| Standard | ses2v10m80 | 10 vCore | 80 GB | Up to 10 Gbps |
| Standard | ses2v10m120 | 10 vCore | 120 GB | Up to 10 Gbps |
| Standard | ses2v10m160 | 10 vCore | 160 GB | Up to 10 Gbps |
| Standard | ses2v12m24 | 12 vCore | 24 GB | Up to 12.5 Gbps |
| Standard | ses2v12m48 | 12 vCore | 48 GB | Up to 12.5 Gbps |
| Standard | ses2v12m96 | 12 vCore | 96 GB | Up to 12.5 Gbps |
| Standard | ses2v12m144 | 12 vCore | 144 GB | Up to 12.5 Gbps |
| Standard | ses2v12m192 | 12 vCore | 192 GB | Up to 12.5 Gbps |
| Standard | ses2v14m28 | 14 vCore | 28 GB | Up to 12.5 Gbps |
| Standard | ses2v14m56 | 14 vCore | 56 GB | Up to 12.5 Gbps |
| Standard | ses2v14m112 | 14 vCore | 112 GB | Up to 12.5 Gbps |
| Standard | ses2v14m168 | 14 vCore | 168 GB | Up to 12.5 Gbps |
| Standard | ses2v14m224 | 14 vCore | 224 GB | Up to 12.5 Gbps |
| Standard | ses2v16m32 | 16 vCore | 32 GB | Up to 12.5 Gbps |
| Standard | ses2v16m64 | 16 vCore | 64 GB | Up to 12.5 Gbps |
| Standard | ses2v16m128 | 16 vCore | 128 GB | Up to 12.5 Gbps |
| Standard | ses2v16m192 | 16 vCore | 192 GB | Up to 12.5 Gbps |
| Standard | ses2v16m256 | 16 vCore | 256 GB | Up to 12.5 Gbps |
seh2 server type
The seh2 server type of Search Engine is offered with high-capacity server specifications and is suitable for database workloads for large-scale data processing.
- Intel 4th‑generation (Sapphire Rapids) Xeon Gold 6448H Processor up to 3.2 GHz
- Supports up to 72 vCPUs and 288 GB of memory
- Networking speed up to 25 Gbps
| Category | Server type | vCPU | Memory | Network Bandwidth |
|---|---|---|---|---|
| High Capacity | seh2v24m48 | 24 vCore | 48 GB | Maximum 25 Gbps |
| High Capacity | seh2v24m96 | 24 vCore | 96 GB | Maximum 25 Gbps |
| High Capacity | seh2v24m192 | 24 vCore | 192 GB | Maximum 25 Gbps |
| High Capacity | seh2v24m288 | 24 vCore | 288 GB | Maximum 25 Gbps |
| High Capacity | seh2v32m64 | 32 vCore | 64 GB | Maximum 25 Gbps |
| High Capacity | seh2v32m128 | 32 vCore | 128 GB | Maximum 25 Gbps |
| High Capacity | seh2v32m256 | 32 vCore | 256 GB | Maximum 25 Gbps |
| High Capacity | seh2v48m96 | 48 vCore | 96 GB | Maximum 25 Gbps |
| High Capacity | seh2v48m192 | 48 vCore | 192 GB | Maximum 25 Gbps |
| High Capacity | seh2v64m128 | 64 vCore | 128 GB | Maximum 25 Gbps |
| High Capacity | seh2v64m256 | 64 vCore | 256 GB | Maximum 25 Gbps |
| High Capacity | seh2v72m144 | 72 vCore | 144 GB | Maximum 25 Gbps |
| High Capacity | seh2v72m288 | 72 vCore | 288 GB | Maximum 25 Gbps |
2.1.2 - Monitoring metrics
According to Samsung Cloud Platform’s policy, the Cloud Monitoring service is scheduled to be terminated.
Accordingly, services whose monitoring metrics are linked in Cloud Monitoring will no longer be able to monitor resources through Cloud Monitoring after the service improvement work in November 2026.
After that, resource monitoring can be continuously performed through the ServiceWatch service released in October 2025.
To ensure smooth service usage, proceed with the migration work according to the service termination schedule below.
Notice on Applying Monitoring Service by Resource
- New Resources: Resources created after the service improvement work in July 2026 are monitored by default using the ServiceWatch service.
- Existing resources: After the service improvement work in September 2026 We provide monitoring concurrently through Cloud Monitoring and ServiceWatch services.
- During the parallel operation period, we must prepare for the Servicewatch transition. *
Performance and log data backup, user-configured settings linked with existing Cloud Monitoring (e.g. You need to review the event policies, etc., perform tasks such as resetting the ServiceWatch service, and complete them.
Cloud Monitoring Service Phased Termination Schedule Notice
- Console menu termination (September 2026 service improvement work)
- You cannot access the Cloud Monitoring Console through the Console menu; you can only connect via the separate URLs for each region listed below.
- Console menu termination (September 2026 service improvement work)
| Offering | Region | Cloud Monitoring console URL |
|---|---|---|
| Enterprise | kr-west1 | https://console.kr-west1.e.samsungsdscloud.com/console/monitoring |
| Enterprise | kr-east1 | https://console.kr-east1.e.samsungsdscloud.com/console/monitoring |
| Samsung | kr-west1 | https://console.kr-west1.s.samsungsdscloud.com/console/monitoring |
| Samsung | kr-east1 | https://console.kr-east1.s.samsungsdscloud.com/console/monitoring |
| Sovereign | kr-south1 | https://console.kr-south1.g.samsungsdscloud.com/console/monitoring |
| Sovereign | kr-south2 | https://console.kr-south2.g.samsungsdscloud.com/console/monitoring |
| Sovereign | kr-south3 | https://console.kr-south3.g.samsungscloud.com/console/monitoring |
- Service termination (service improvement work in November 2026)
- All services of Cloud Monitoring, including the API, will be permanently discontinued.
- After the service ends in November, Cloud Monitoring data cannot be accessed. * Be sure to complete the ServiceWatch migration within the parallel operation period**.
- All services of Cloud Monitoring, including the API, will be permanently discontinued.
Detailed information about ServiceWatch is available in the ServiceWatch Overview.
Search Engine Monitoring Metrics
The table below shows the performance monitoring metrics for Event Streams that can be viewed through Cloud Monitoring. For detailed Cloud Monitoring usage, refer to the Cloud Monitoring guide.
Refer to the Virtual Server Monitoring Metrics guide for the Search Engine server monitoring metrics.
| Performance items | Detailed description | unit |
|---|---|---|
| Disk Usage | datadir usage | MB |
| Documents [Deleted] | Total number of deleted documents | cnt |
| Documents [Existing] | Total number of existing documents | cnt |
| Filesystem Bytes [Available] | Available file systems | bytes |
| Filesystem Bytes [Free] | Available file system | bytes |
| Filesystem Bytes [Total] | Total file system | bytes |
| Instance Status [PID] | Elasticsearch process PID | PID |
| JVM Heap Used [Init] | Heap init used by JVM (bytes) | bytes |
| JVM Heap Used [MAX] | Heap max used by JVM (bytes) | bytes |
| JVM Non Heap Used [Init] | init (bytes) outside the heap used by the JVM | bytes |
| JVM Non Heap Used [MAX] | max (bytes) other than the heap used by the JVM | bytes |
| Kibana Connections | Kibana connection | cnt |
| Kibana Memory Heap Allocated [Limit] | Maximum heap size allocated to a Node.js process (bytes) | bytes |
| Kibana Memory Heap Allocated [Total] | Maximum heap size allocated to a Node.js process (bytes) | bytes |
| Kibana Memory Heap Used | Maximum heap size allocated to a Node.js process (bytes) | bytes |
| Kibana Process Uptime | Kibana process | ms |
| Kibana Requests [Disconnected] | Request count metric | cnt |
| Kibana Requests [Total] | Request count metric | cnt |
| Kibana Response Time [Avg] | Response time metric | ms |
| Kibana Response Time [MAX] | Response time metric | ms |
| Kibana Status [PID] | Kibana process PID | PID |
| License Expiry Date [ms] | License expiration date [milisecond] | ms |
| License Status | License status | status |
| License Type | License type | type |
| Queue Time | Queue time | ms |
| Segments | Total number of segments | cnt |
| Segments Bytes | Total segment size (bytes) | bytes |
| Shards | Cluster shard count | cnt |
| Store Bytes | Total storage size (bytes) | bytes |
2.2 - How-to guides
Users can create the service by entering the required information for the Search Engine and selecting detailed options through the Samsung Cloud Platform Console.
According to Samsung Cloud Platform’s policy, the Cloud Monitoring service is scheduled to be terminated.
Accordingly, services whose monitoring metrics are linked in Cloud Monitoring will no longer be able to monitor resources through Cloud Monitoring after the service improvement work in November 2026.
After that, resource monitoring can be continuously performed through the ServiceWatch service released in October 2025.
To ensure smooth service usage, proceed with the migration work according to the service termination schedule below.
Guide to Applying Monitoring Services per Resource
- New Resources: Resources created after the service improvement work in July 2026 are monitored by default using the ServiceWatch service.
- Existing resources: After the service improvement work in September 2026 We provide concurrent monitoring through Cloud Monitoring and ServiceWatch services.
- During the parallel operation period, you must prepare for the Servicewatch transition. *
Performance and log data backup, user-configured settings linked with existing Cloud Monitoring (e. You must verify the event policies, etc., perform tasks such as resetting the ServiceWatch service, and complete them.
Cloud Monitoring Service Phased Termination Schedule Notice
- Console menu termination (September 2026 service improvement work)
- You cannot access the Cloud Monitoring Console through the Console menu; you can only connect via the separate URLs for each region listed below.
- Console menu termination (September 2026 service improvement work)
| Offering | Region | Cloud Monitoring console URL |
|---|---|---|
| Enterprise | kr-west1 | https://console.kr-west1.e.samsungsdscloud.com/console/monitoring |
| Enterprise | kr-east1 | https://console.kr-east1.e.samsungsdscloud.com/console/monitoring |
| Samsung | kr-west1 | https://console.kr-west1.s.samsungsdscloud.com/console/monitoring |
| Samsung | kr-east1 | https://console.kr-east1.s.samsungsdscloud.com/console/monitoring |
| Sovereign | kr-south1 | https://console.kr-south1.g.samsungsdscloud.com/console/monitoring |
| Sovereign | kr-south2 | https://console.kr-south2.g.samsungsdscloud.com/console/monitoring |
| Sovereign | kr-south3 | https://console.kr-south3.g.samsungsdscloud.com/console/monitoring |
- Service termination (service improvement work in November 2026)
- All services of Cloud Monitoring, including the API, will be permanently discontinued.
- After the service ends in November, Cloud Monitoring data cannot be accessed. * Be sure to complete the ServiceWatch migration within the parallel operation period**.
- All services of Cloud Monitoring, including the API, will be permanently discontinued.
Detailed information about ServiceWatch can be found in the ServiceWatch Overview.
Create Search Engine
You can create and use the Search Engine service in the Samsung Cloud Platform Console.
Before creating the service, configure the VPC’s subnet type as General.
- If the subnet type is Local, the creation of the corresponding Database service is not possible.
To create a Search Engine, follow the steps below.
All Services > Database > Search Engine Click the menu. 1. Navigate to the Search Engine’s Service Home page.
On the Service Home page, click the Create Search Engine button. 2. Go to the Create Search Engine page.
Search Engine creation page: enter the information required to create the service and select detailed options.
- Select the required information in the Image and Version Selection area.
Category required statusDetailed description image Required Select the type of image provided - Elasticsearch Enterprise, OpenSearch
Image version Required Select version of the selected image - Provide a version list of the offered server image
Table. Search Engine image and version selection options - In the Service Information Input area, enter or select the required information.
Category required statusDetailed description Server name Prefix Required The server name where Elasticsearch will be installed - must start with a lowercase English letter, and using lowercase letters, numbers, and special characters (
-) be entered with 3 to 13 characters
- based on the server name, a postfix such as 001, 002 is appended to generate the actual server name
Cluster name Required Cluster name of the servers - Enter using English letters, 3 ~ 20 characters
- A cluster is a unit that groups multiple servers
Separate MasterNode installation > Use Required Whether to install the Master node separately - If you select Use, install the Master node separately
- If the Master node is not installed separately, the data node also performs the master role
Separate MasterNode installation > Number of MasterNodes Required Number of Master nodes - Master nodes are fixed at three units for recovery (Fail-over)
Separate installation of MasterNode > Server type Required Master node server type - Standard: standard specification commonly used
- High Capacity: large-capacity server with 24 vCores or more
- For detailed information about the server types provided by Search Engine, refer to Search Engine Server Types
Separate MasterNode installation > Planned Compute Select Status of resources with Planned Compute configured - In Use: Number of resources with Planned Compute that are currently in use
- Configured: Number of resources with Planned Compute configured
- Coverage Preview: Amount applied per resource by Planned Compute
- Apply for Planned Compute Service: Go to the Planned Compute service application page
- For more details, see Planned Compute Apply
Separate MasterNode installation > Block Storage Required Block Storage type to be used for the Master node - Basic OS: Area where the engine is installed
- DATA: Data file storage area
- After selecting the storage type, enter the capacity. (For details on each Block Storage type, refer to Create Block Storage)
- SSD: High‑performance general volume
- HDD: General volume
- SSD_KMS/HDD_KMS: Additional encrypted volume using KMS (Key Management System) encryption keys
- Capacity must be entered as a multiple of 8 within the range 16 to 5,120
- After selecting the storage type, enter the capacity. (For details on each Block Storage type, refer to Create Block Storage)
- Add Disk: Data storage area
- After selecting Use, enter the storage capacity
- Click the + button to add storage, or the x button to delete. Up to 9 can be added.
- Capacity can be entered as a multiple of 8 within the range 16 to 5,120, and up to 9 can be created
Number of nodes Required Number of data nodes - When installing the Master node separately, you must select at least 2; otherwise, you must select at least 1.
Service Type > Server Type Required Data node server type - Standard: Standard specification commonly used
- High Capacity: Large-capacity server with 24 vCores or more
Service Type > Planned Compute Select Status of resources with Planned Compute configured - In Use: Number of resources with Planned Compute configured that are currently in use
- Configured: Number of resources with Planned Compute configured
- Coverage Preview: Amount applied per resource by Planned Compute
- Apply for Planned Compute Service: Go to the Planned Compute service application page
- For more details, see Planned Compute Apply
Service Type > Block Storage Required Block Storage types to be used for data nodes - Basic OS: Area where the engine is installed
- DATA: Data file storage area
- After selecting the storage type, enter the capacity. (For details on each Block Storage type, refer to Block Storage 생성하기)
- SSD: High‑performance general volume
- HDD: General volume
- SSD_KMS/HDD_KMS: Additional encrypted volume using KMS (Key Management System) encryption keys
- Enter the capacity as a multiple of 8 within the range 16 to 5,120
- After selecting the storage type, enter the capacity. (For details on each Block Storage type, refer to Block Storage 생성하기)
- Add Disk: Additional storage area for data and backup
- After selecting Use, enter the storage purpose, capacity
- Click the + button to add storage, and the x button to delete. Up to 9 can be added.
- Capacity can be entered as a multiple of 8 within the range 16 to 5,120, and up to 9 can be created.
Kibana > Server Type Required Server type for Kibana installation - Standard: standard specification commonly used
Kibana > Planned Compute Select Status of resources with Planned Compute configured - In Use: Number of resources with Planned Compute configured that are currently in use
- Configured: Number of resources with Planned Compute configured
- Coverage Preview: Amount applied per resource by Planned Compute
- Apply for Planned Compute Service: Go to the Planned Compute service application page
- For more details, see Planned Compute Apply
Kibana > Block Storage Required Block storage type to be used on the server where Kibana is installed - Base OS: Area where the engine is installed
Network > Common Settings Required Network settings for servers created by the service - Select when you want to apply the same settings to all installed servers
- Select a pre‑created VPC and Subnet
- IP: Only automatic generation is possible
- Public NAT settings are only available in per‑server configuration.
Network > Server-specific Settings Required Network settings where servers generated by the service are installed - Select if you want to apply different settings per installed server
- Select a pre‑created VPC and Subnet
- IP: Enter the IP for each server
- Public NAT feature is available only when the VPC is connected to an Internet Gateway; checking Use allows you to select from reserved IPs in the VPC product’s Public IP. For more information, see Public IP 생성하기
IP access control Select Service Access Policy Settings - Since the access policy is set for the IP entered on the page, you do not need to configure a separate Security Group policy.
- Enter the IP in IP format (e.g.,
192.168.10.1) or CIDR format (e.g.,192.168.10.0/24,192.168.10.1/32) and click the Add button
- To delete an entered IP, click the x button next to the IP
maintenance period Select Search Engine maintenance period - If you select Use, set the day of week, start time, and duration
- We recommend setting a maintenance period for the stable management of the service. Patch operations will be performed at the scheduled time, which may cause service interruptions
- If set to not use, we are not responsible for any issues arising from patches not being applied.
Table. Search Engine Service Information Input Items - must start with a lowercase English letter, and using lowercase letters, numbers, and special characters (
- In the Database Configuration Required Information Input area, enter or select the required information.
Category required statusDetailed description Backup > Use Select Whether to use node backup - When selecting node backup usage, choose the retention period and backup start time
Backup > Retention Period Select Backup retention period - Select the backup retention period. Set the file retention period to 7 days ~ 35 days
- Backup files incur additional charges based on size.
Backup > Backup Start Time Select Backup start time - Select backup start time
- The minutes during which the backup runs (minutes) are set randomly, and the backup end time cannot be set
Cluster Port number Required Elasticsearch connection port number 1200 ~ 65535can be entered as one of them, and the internal Elasticsearch port 9300 and Kibana port 5301 cannot be used
Elastic username Required Elasticsearch username - Enter using lowercase English letters, 2 to 20 characters
- The following usernames cannot be used.
- apm_system, beats_system, elastic, kibana, kibana_system, logstash_system, remote_monitoring_user, scp_kibana_system, scp_manager, maxigent_cl
Elastic password Required Elasticsearch login password - Enter 8 to 30 characters, including letters, numbers, and special characters (excluding
“,‘,\)
Check Elastic password Required Check Elasticsearch connection password - Re-enter the Elasticsearch connection password identically
License Key Required Elasticsearch License Key - Enter the entire contents of the issued license file (.json)
- If the entered license key is invalid, the service may not be created.
- OpenSearch does not require a License Key.
time zone Select Standard time zone for the service Table. Required input fields for Search Engine Database configuration - Enter or select the required information in the Additional Information Input area.
Category required statusDetailed description Tag Select Add tag - Add tag Click the button to create and add a tag, or add an existing tag
- You can add up to 50 tags
- The newly added tags are applied after the service creation is completed
Table. Search Engine service additional information input fields
- Select the required information in the Image and Version Selection area.
Summary Check the detailed information and estimated charges generated in the panel, and click the Complete button.
- When creation is complete, check the created resources on the Resource List page.
Check Search Engine Details
The Search Engine service allows you to view and edit the complete resource list and detailed information. Search Engine Details page includes Detail Information, Tags, Activity Log tabs.
To view detailed information about the Search Engine service, follow these steps.
- All Services > Data Analytics > Search Engine menu, click it. 1. Navigate to the Search Engine’s Service Home page.
- On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
- Search Engine list page: click the resource to view detailed information. 3. Search Engine Details Navigate to the page.
- Search Engine Details At the top of the page, status information and additional feature information are displayed.
Category Detailed description Cluster status Cluster status - Creating: Cluster is being created
- Editing: Cluster is being changed to an operational state
- Error: Cluster encountered a failure while performing a task
- If this persists, contact the administrator
- Failed: Cluster failed during creation
- Restarting: Cluster is restarting
- Running: Cluster is operating normally
- Starting: Cluster is starting
- Stopped: Cluster is stopped
- Stopping: Cluster is stopping
- Synchronizing: Cluster is synchronizing
- Terminating: Cluster is being terminated
- Unknown: Cluster status is unknown
- If this persists, contact the administrator
- Upgrading: Cluster is being upgraded
Cluster control Button to change the cluster state - Start: Starts a stopped cluster.
- Stop: Stops a running cluster.
- Restart: Restarts a running cluster
View more add-ons Cluster management buttons - Service status synchronization: Retrieve the current server status and synchronize it to the Console
- Backup history: When backup is configured, check whether the backup executed successfully and view its history
- Cluster recovery: Recover the cluster based on a specific point in time.
- Add Node: Add a data node.
Service cancellation Cancel service button Table. Search Engine status information and additional features
- Search Engine Details At the top of the page, status information and additional feature information are displayed.
Detailed Information
Search Engine list page lets you view detailed information of the selected resource and, if needed, modify the information.
| Category | Detailed description |
|---|---|
| Server Information | Server information configured in this cluster
|
| service | Service name |
| Resource Type | Resource Type |
| SRN | Unique resource ID in Samsung Cloud Platform
|
| Resource name | Resource name
|
| Resource ID | Unique resource ID in the service |
| Constructor | User who created the service |
| Creation date and time | Service creation date and time |
| Editor | User who edited the service information |
| Modification date | Date and time the service information was modified |
| Image/Version | Installed service image and version information |
| Cluster name | Cluster name of the configured servers |
| Planned Compute | Resource status with Planned Compute configured
|
| maintenance period | Maintenance Period Status
|
| Backup | Backup configuration status
|
| time zone | Standard time zone for the service |
| License | Elasticsearch license information
|
| Elastic username | Elasticsearch username |
| Kibana access information | Kibana access information |
| Network | Installed network information (VPC, Subnet) |
| IP access control | Set service access policy
|
| Master | Server type, base OS, and additional Disk information for the Master node
|
| Data | Server type, base OS, and additional Disk information
|
| Kibana | Server type and basic OS information for the Kibana node
|
Tag
Search Engine List page allows you to view the tag information of the selected resource, and you can add, modify, or delete it.
| Category | Detailed description |
|---|---|
| Tag list | Tag list
|
Job History
On the Search Engine List page, you can view the operation history of the selected resource.
| Category | Detailed description |
|---|---|
| Task History List | Resource Change History
|
Search Engine Resource Management
If you need to change the existing configuration options of a created Search Engine resource, manage parameters, or add node configurations, you can perform the tasks on the Search Engine Detailed Information page.
Control Operation
If changes occur to a running Search Engine resource, you can start, stop, or restart it.
To control the operation of the Search Engine, follow these steps.
- Click the All Services > Data Analytics > Search Engine menu. 1. Navigate to the Search Engine’s Service Home page.
- On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
- Search Engine list page, click the resource to control its operation. 3. Go to the Search Engine Details page.
- Check the Search Engine status and complete the change using the control button below.
- Start: Search Engine service is installed on the server and Search Engine service is running (Running).
- Stop: The server on which the Search Engine service is installed and the Search Engine service will be stopped (Stopped).
- Restart: Only the Search Engine service will be restarted.
Synchronize Service Status
You can query the current server status and synchronize it to the Console.
To synchronize the service status of the Search Engine, follow these steps.
- All Services > Data Analytics > Search Engine menu, click. 1. Navigate to the Search Engine’s Service Home page.
- On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
- On the Search Engine List page, click the resource to view the service status. 3. Navigate to the Search Engine Details page.
- Click the Service Status Synchronization button. 4. The query takes a short amount of time, and while it is being performed, the cluster changes to the Synchronizing state.
- When the query completes, the status in the server information field is updated, and the cluster changes to the Running state.
Change server type
You can change the configured server type.
To change the server type, follow these steps.
- If the server type is configured as Standard, it cannot be changed to High Capacity. * If you want to change to High Capacity, create a new service.
- If you modify the server type, a server restart is required. * Please separately verify any software license modifications or software settings and their implementation due to specification changes.
- All Services > Data Analytics > Search Engine Click the menu. 1. Navigate to the Service Home page of Search Engine.
- On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
- On the Search Engine list page, click the resource to change the server type. 3. Navigate to the Search Engine Details page.
- Click the edit button for the server type you want to change at the bottom of the detailed information. 4. Edit Server Type popup window opens.
- Edit Server Type After selecting the server type in the popup window, click the Confirm button.
Expanding Storage
Storage added to the data area can be expanded up to a maximum of 5 TB, based on the initially allocated capacity. You can expand storage without stopping the Search Engine, and if configured as a cluster, all nodes are expanded simultaneously.
- If encryption is configured on the existing Block Storage, encryption will also be applied to the additional Disk.
- Disk size modification is only possible by increasing it by at least 16 GB over the current disk size.
To increase storage capacity, follow the steps below.
- Click the All Services > Data Analytics > Search Engine menu. 1. Navigate to the Service Home page of Search Engine.
- On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
- On the Search Engine list page, click the resource to change the server type. 3. Search Engine Details Navigate to the page.
- Click the Edit button for the added Disk you want to expand at the bottom of the detailed information. 4. Disk Edit The popup window opens.
- Disk Edit after entering the additional capacity in the popup window, click the Confirm button.
Add storage
If you need more than 5 TB of data storage space, you can add additional storage.
- If encryption is configured on the existing Block Storage, encryption will also be applied to the additional Disk.
To add storage capacity, follow the steps below.
- All Services > Data Analytics > Search Engine menu, click. 1. Navigate to the Service Home page of Search Engine.
- On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
- On the Search Engine List page, click the resource to add storage. 3. Navigate to the Search Engine Details page.
- Click the Add Disk button at the bottom of the detailed information. 4. Add Disk The popup window opens.
- Add Disk In the popup window, after entering the purpose and size, click the Confirm button.
Search Engine Backup
Through the backup configuration feature, users can set the data retention period and start interval, and through the backup history feature, they can view and delete backup records.
Configure Backup
When creating a Search Engine and setting up backup, refer to the Creating a Search Engine guide, and to modify the backup configuration of the created resource, follow the steps below.
- If a backup is configured, it will run at the designated time after the set time, and additional fees will apply based on the backup size.
- If you change the backup setting to Unset, backup execution stops immediately, and the stored backup data is deleted and can no longer be used.
- Click the All Services > Data Analytics > Search Engine menu. 1. Navigate to the Service Home page of Search Engine.
- On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
- On the Search Engine list page, click the resource to set up backup. 3. Navigate to the Search Engine Details page.
- Click the Edit button of the backup item. 4. Backup Edit The popup window opens.
- When setting up a backup, click Use in the Backup Edit popup, select retention period, backup start time, and Archive backup interval, then click the Confirm button.
- If you stop the backup setting, uncheck Use in the Edit Backup popup window, and authenticate via the logged-in user’s mobile phone.
Check backup history
To view the backup history, follow these steps.
- All Services > Data Analytics > Search Engine Click the menu. 1. Navigate to the Search Engine’s Service Home page.
- On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
- On the Search Engine List page, click the resource to view the backup history. 3. Go to the Search Engine Details page.
- Click the Backup History button. 4. Backup History popup window opens.
- Backup History In the popup window, you can view the backup status, version, backup start time, backup completion time, and size.
Delete backup file
To delete the backup history, follow these steps.
- All Services > Data Analytics > Search Engine Click the menu. 1. Navigate to the Search Engine’s Service Home page.
- On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
- Search Engine List page, click the resource to view the backup history. 3. Navigate to the Search Engine Details page.
- Click the Backup History button. 4. The Backup History popup window opens.
- Backup History In the popup window, check the files you want to delete, then authenticate using the logged-in user’s mobile phone.
Restore Search Engine
If a failure or data loss requires restoration from a backup file, you can recover to a specific point in time using the cluster recovery feature.
To restore the Search Engine, follow these steps.
- Click the All Services > Data Analytics > Search Engine menu. 1. Navigate to the Search Engine’s Service Home page.
- On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
- Search Engine Resource On the list page, click the resource you wish to recover. 3. Navigate to the Search Engine Details page.
- Click the Cluster Recovery button. 4. Go to the Cluster Recovery page.
- After entering the relevant information in the Cluster Recovery Configuration area, click the Complete button.
Category required statusDetailed description Recovery point Required Set the point in time the user wants to recover - Select from the list of backup file timestamps displayed
Server name Prefix Required Recovery server name - Start with a lowercase English letter and use lowercase letters, numbers, and special characters (
-) to enter 3 to 16 characters
- Based on the server name, a postfix such as 001, 002 is appended to generate the actual server name
Cluster name Required Recovery server cluster name - Enter using English letters, 3 ~ 20 characters
- A cluster is a unit that groups multiple servers
Number of nodes Required Number of data nodes - Set to be the same as the number of nodes configured in the original cluster.
Service Type > Server Type Required Data node server type - It is set to the same number of nodes as configured in the original cluster.
Service Type > Planned Compute Select Status of resources with Planned Compute configured - In Use: Number of resources with Planned Compute configured that are currently in use
- Configured: Number of resources with Planned Compute configured
- Coverage Preview: Amount applied per resource by Planned Compute
- Apply for Planned Compute Service: Go to the Planned Compute service application page
- For more details, see Planned Compute Apply
Service Type > Block Storage Required Block Storage to be used for data nodes - Basic OS: area where the engine is installed
- DATA: data file storage area
- Applied identically as the storage type set in the original cluster
- Enter capacity as a multiple of 8 within the range 16 to 5,120
- Add Disk: additional storage area for data and backup
- After selecting Use, enter the storage purpose and capacity
- Click the + button to add storage, and the x button to delete
- Capacity can be entered as a multiple of 8 within the range 16 to 5,120, and up to 9 can be created
Separate MasterNode installation > Use Required Whether to install the Master node separately - Apply the same based on the installation status of the original cluster
Separate MasterNode installation > Number of MasterNodes Required Number of Master nodes Separate installation of MasterNode > Server type Required Master node server type - It is set to be the same as the number of nodes configured in the original cluster.
Separate MasterNode installation > Planned Compute Select Status of resources with Planned Compute configured - In Use: Number of resources with Planned Compute configured that are currently in use
- Configured: Number of resources with Planned Compute configured
- Coverage Preview: Amount applied per resource by Planned Compute
- Apply for Planned Compute Service: Go to the Planned Compute service application page
- For more details, see Planned Compute 신청하기
Separate MasterNode installation > Block Storage Required Block Storage to be used on the Master node - Basic OS: Area where the engine is installed
- DATA: Data file storage area
- Applied identically with the storage type set in the original cluster
- Enter capacity as a multiple of 8 within the range 16 to 5,120
- Add Disk: Additional data storage area
- After selecting Use, enter the storage capacity
- Click the + button to add storage, or the x button to delete
- Capacity can be entered as a multiple of 8 within the range 16 to 5,120, and up to 9 can be created
Kibana > Server Type Required Kibana node server type - It is set to be the same as the number of nodes configured in the original cluster.
Kibana > Planned Compute Select Status of resources with Planned Compute configured - In Use: Number of resources with Planned Compute configured that are currently in use
- Configured: Number of resources with Planned Compute configured
- Coverage Preview: Amount applied per resource by Planned Compute
- Apply for Planned Compute Service: Go to the Planned Compute service application page
- For more details, see Planned Compute 신청하기
Kibana > Block Storage Required Block Storage to be used on the Kibana node - Base OS: the area where the engine is installed
Cluster Port number Required Elasticsearch connection port number - It is set to the same port number configured in the original cluster.
Licnese Key Required Elasticsearch License Key - Enter the entire contents of the issued license file (.json)
- If the entered license key is invalid, the service may not be created.
- OpenSearch does not require a License Key.
IP access control Select Service Access Policy Settings - Since the access policy is set for the IP entered on the page, you do not need to configure a separate Security Group policy.
- Enter the IP in IP format (example:
192.168.10.1) or CIDR format (example:192.168.10.0/24,192.168.10.1/32) and click the Add button
- To delete an entered IP, click the x button next to the IP
maintenance period Select maintenance window - If you select Use, you can set the day of week, start time, and duration
- We recommend setting a maintenance window for stable service management. Patch operations will be performed at the scheduled time, causing service interruption
- If set to not use, we are not responsible for issues arising from unapplied patches.
Table. Search Engine Recovery Configuration Items
Add Node
If you need to expand the Search Engine cluster, you can add nodes with the same specifications as the data nodes in use.
- You can use up to 10 nodes within the cluster. * Please note that created nodes will incur additional charges.
- Adding nodes may degrade the cluster’s performance.
To add a node, follow the steps below.
- All Services > Data Analytics > Search Engine Click the menu. 1. Navigate to the Service Home page of Search Engine.
- On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine list page.
- Search Engines Resources Click the resource you want to restore on the list page. 3. Search Engine Details Navigate to the page.
- Click the Add Broker Node button. 4. Go to the Add Broker Node page.
- After entering the relevant information in the Required Information Input area, click the Complete button.
Category required statusDetailed description Server name Prefix Required Data node server name - It is set to the server name configured in the original cluster.
Cluster name Required Cluster name - It is set to the cluster name configured in the original cluster.
Additional Node Count Required Number of Nodes to add - Use up to 10 nodes per cluster
Service Type > Server Type Required Data node server type - It is set the same as the server type configured in the original cluster.
Service Type > Planned Compute Select Status of resources with Planned Compute configured - In Use: Number of resources with Planned Compute configured that are currently in use
- Configured: Number of resources with Planned Compute configured
- Coverage Preview: Amount applied per resource by Planned Compute
- Apply for Planned Compute Service: Go to the Planned Compute service application page
- For more details, see Planned Compute 신청하기
Service Type > Block Storage Required Block Storage configuration to be used for data nodes - The storage type and capacity set in the source cluster are applied identically
Network Required the network where the servers are installed - applied identically to the network configured in the original cluster
Table. Search Engine Node additional items
Terminate Search Engine
You can cancel unused Search Engines to reduce operating costs. However, if you terminate the service, the running service may be stopped immediately, so you should proceed with the termination only after fully considering the impact that may occur when the service is discontinued.
To cancel the Search Engine, follow these steps.
- All Services > Data Analytics > Search Engine Click the menu. 1. Navigate to the Search Engine’s Service Home page.
- On the Service Home page, click the Search Engine menu. 2. Go to the Search Engine List page.
- On the Search Engine List page, select the resource to cancel, and click the Cancel Service button.
- When the termination is complete, verify on the Search Engine list page whether the resource has been terminated.
2.3 - API Reference
2.4 - CLI Reference
2.5 - Release Note
Search Engine
- OpenSearch 2.17.1 is now offered as a new release.
- Provides Terraform.
- Provides additional HDD, HDD_KMS disk types.
- A Search Engine service that enables easy creation and management of ElasticSearch Enterprise in a web environment has been launched.
3 - Vertica(DBaaS)
3.1 - Overview
Service Overview
Vertica(DBaaS) is a high-availability enterprise database built on a Data Warehouse for large-scale data analysis and processing. Through a single engine, it serves as a data analytics platform that can perform basic analyses such as querying data from various sources without moving them, as well as AI analyses like machine learning. In the Samsung Cloud Platform, DB management functions such as high‑availability configuration, backup/recovery, patching, parameter management, and monitoring are added to ensure stable management of single instances or critical data, enabling automation of tasks throughout the database lifecycle. Additionally, it provides an automatic backup feature at user‑specified times to support data recovery at the desired point in case of DB server or data issues.
Service Architecture Diagram
Provided features
Vertica(DBaaS) provides the following features.
- Auto Provisioning (Auto Provisioning): Automatically installs the standard version of the Samsung Cloud Platform database based on Virtual Servers of various specifications.
- Cluster Configuration: Provides a self-high-availability architecture in a masterless form.
- Operation Control Management: Provides functionality to control the status of running servers. You can start or stop a server, and it can be restarted if there is a database issue or to apply configuration changes.
- Backup and Recovery: Provides data backup functionality based on proprietary backup commands. Users can set the backup retention period and start time, and additional fees apply based on backup size. It also offers a recovery feature for backed‑up data; when a user initiates recovery, a separate database is created and restored to the point selected by the user (backup creation time or a custom point). For database recovery, you can choose to install the Management Console for use.
- Service Status Query: You can view the final status of the current DB service.
- Monitoring: CPU, memory, DB performance monitoring information can be accessed through the Cloud Monitoring service.
- High-Performance Processing of Large-Scale Data: It guarantees stable performance in a Mixed Workload environment of massive parallel processing (MPP, Massively Parallel Processing) and SQL queries. Vertica processes queries through distributed processing and is designed so that queries can be initiated from any node, eliminating a Single Point of Failure where queries would not execute if a specific node fails.
Component
Vertica(DBaaS) provides pre‑validated engine versions and various server types. Users can select and use them according to the scale of the service they wish to configure.
Engine version
The engine versions supported by Vertica (DBaaS) are as follows.
Technical support can be used until the supplier’s EoTS (End of Technical Service) date, and the EOS date when new creation is halted is set to six months before the EoTS date.
The EOS and EoTS dates may change according to the supplier’s policy, so please refer to the supplier’s license management policy page for details.
| Provided version | EOS date (Samsung Cloud Platform new creation stop date) | EoTS date (supplier technical support end date) |
|---|---|---|
| 24.2.0-2 | 2026-09 (planned) | 2027-04-30 |
Server type
The server types supported by Vertica (DBaaS) are as follows.
For detailed information about the server types provided by Vertica (DBaaS), see Vertica Server Types.
| Category | example | Detailed description |
|---|---|---|
| Server type | Standard | Provided server types
|
| Server specifications | Db1 | Provided server specifications
|
| Server specifications | V2 | Number of vCores
|
| Server specifications | M4 | Memory capacity
|
Preliminary Service
This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service and prepare in advance.
| Service Category | service | Detailed description |
|---|---|---|
| Networking | VPC | A service that provides an isolated virtual network in a cloud environment |
3.1.1 - Server Type
Vertica(DBaaS) server type
Vertica (DBaaS) offers server types configured with various combinations of CPU, memory, and network bandwidth. When creating Vertica(DBaaS), the Database Engine is installed according to the server type selected for the intended use.
The server types supported by Vertica (DBaaS) are as follows.
Standard db1v2m4
Category | example | Detailed description |
|---|---|---|
| Server type | Standard | Provided server type classifications
|
| Server specifications | db1 | Provided server type classification and generation
|
| Server specifications | v2 | Number of vCores
|
| Server specifications | m4 | Memory capacity
|
db1 server type
The db1 server type of Vertica(DBaaS) is provided with standard specifications (vCPU, Memory) and is suitable for various database workloads.
- Intel 3rd‑generation (Ice Lake) Xeon Gold 6342 Processor up to 3.3 GHz
- Supports up to 16 vCPUs and 256 GB of memory
- Maximum networking speed of 12.5 Gbps
| Category | Server type | vCPU | Memory | Network Bandwidth |
|---|---|---|---|---|
| Standard | db1v1m2 | 1 vCore | 2 GB | Up to 10 Gbps |
| Standard | db1v2m4 | 2 vCore | 4 GB | Up to 10 Gbps |
| Standard | db1v2m8 | 2 vCore | 8 GB | Up to 10 Gbps |
| Standard | db1v2m16 | 2 vCore | 16 GB | Up to 10 Gbps |
| Standard | db1v2m24 | 2 vCore | 24 GB | Up to 10 Gbps |
| Standard | db1v2m32 | 2 vCore | 32 GB | Up to 10 Gbps |
| Standard | db1v4m8 | 4 vCore | 8 GB | Up to 10 Gbps |
| Standard | db1v4m16 | 4 vCore | 16 GB | Up to 10 Gbps |
| Standard | db1v4m32 | 4 vCore | 32 GB | Up to 10 Gbps |
| Standard | db1v4m48 | 4 vCore | 48 GB | Up to 10 Gbps |
| Standard | db1v4m64 | 4 vCore | 64 GB | Up to 10 Gbps |
| Standard | db1v6m12 | 6 vCore | 12 GB | Up to 10 Gbps |
| Standard | db1v6m24 | 6 vCore | 24 GB | Up to 10 Gbps |
| Standard | db1v6m48 | 6 vCore | 48 GB | Up to 10 Gbps |
| Standard | db1v6m72 | 6 vCore | 72 GB | Up to 10 Gbps |
| Standard | db1v6m96 | 6 vCore | 96 GB | Up to 10 Gbps |
| Standard | db1v8m16 | 8 vCore | 16 GB | Up to 10 Gbps |
| Standard | db1v8m32 | 8 vCore | 32 GB | Up to 10 Gbps |
| Standard | db1v8m64 | 8 vCore | 64 GB | Up to 10 Gbps |
| Standard | db1v8m96 | 8 vCore | 96 GB | Up to 10 Gbps |
| Standard | db1v8m128 | 8 vCore | 128 GB | Up to 10 Gbps |
| Standard | db1v10m20 | 10 vCore | 20 GB | Up to 10 Gbps |
| Standard | db1v10m40 | 10 vCore | 40 GB | Up to 10 Gbps |
| Standard | db1v10m80 | 10 vCore | 80 GB | Up to 10 Gbps |
| Standard | db1v10m120 | 10 vCore | 120 GB | Up to 10 Gbps |
| Standard | db1v10m160 | 10 vCore | 160 GB | Up to 10 Gbps |
| Standard | db1v12m24 | 12 vCore | 24 GB | Up to 12.5 Gbps |
| Standard | db1v12m48 | 12 vCore | 48 GB | Up to 12.5 Gbps |
| Standard | db1v12m96 | 12 vCore | 96 GB | Up to 12.5 Gbps |
| Standard | db1v12m144 | 12 vCore | 144 GB | Up to 12.5 Gbps |
| Standard | db1v12m192 | 12 vCore | 192 GB | Up to 12.5 Gbps |
| Standard | db1v14m28 | 14 vCore | 28 GB | Up to 12.5 Gbps |
| Standard | db1v14m56 | 14 vCore | 56 GB | Up to 12.5 Gbps |
| Standard | db1v14m112 | 14 vCore | 112 GB | Up to 12.5 Gbps |
| Standard | db1v14m168 | 14 vCore | 168 GB | Up to 12.5 Gbps |
| Standard | db1v14m224 | 14 vCore | 224 GB | Up to 12.5 Gbps |
| Standard | db1v16m32 | 16 vCore | 32 GB | Up to 12.5 Gbps |
| Standard | db1v16m64 | 16 vCore | 64 GB | Up to 12.5 Gbps |
| Standard | db1v16m128 | 16 vCore | 128 GB | Up to 12.5 Gbps |
| Standard | db1v16m192 | 16 vCore | 192 GB | Up to 12.5 Gbps |
| Standard | db1v16m256 | 16 vCore | 256 GB | Up to 12.5 Gbps |
db2 server type
The db2 server type of Vertica(DBaaS) is provided with standard specifications (vCPU, Memory) and is suitable for various database workloads.
- Intel 4th‑generation (Sapphire Rapids) Xeon Gold 6448H Processor up to 3.2 GHz
- Supports up to 16 vCPUs and 256 GB of memory
- Maximum networking speed of 12.5 Gbps
| Category | Server type | vCPU | Memory | Network Bandwidth |
|---|---|---|---|---|
| Standard | db2v1m2 | 1 vCore | 2 GB | Up to 10 Gbps |
| Standard | db2v2m4 | 2 vCore | 4 GB | Up to 10 Gbps |
| Standard | db2v2m8 | 2 vCore | 8 GB | Up to 10 Gbps |
| Standard | db2v2m16 | 2 vCore | 16 GB | Up to 10 Gbps |
| Standard | db2v2m24 | 2 vCore | 24 GB | Up to 10 Gbps |
| Standard | db2v2m32 | 2 vCore | 32 GB | Up to 10 Gbps |
| Standard | db2v4m8 | 4 vCore | 8 GB | Up to 10 Gbps |
| Standard | db2v4m16 | 4 vCore | 16 GB | Up to 10 Gbps |
| Standard | db2v4m32 | 4 vCore | 32 GB | Up to 10 Gbps |
| Standard | db2v4m48 | 4 vCore | 48 GB | Up to 10 Gbps |
| Standard | db2v4m64 | 4 vCore | 64 GB | Up to 10 Gbps |
| Standard | db2v6m12 | 6 vCore | 12 GB | Up to 10 Gbps |
| Standard | db2v6m24 | 6 vCore | 24 GB | Up to 10 Gbps |
| Standard | db2v6m48 | 6 vCore | 48 GB | Up to 10 Gbps |
| Standard | db2v6m72 | 6 vCore | 72 GB | Up to 10 Gbps |
| Standard | db2v6m96 | 6 vCore | 96 GB | Up to 10 Gbps |
| Standard | db2v8m16 | 8 vCore | 16 GB | Up to 10 Gbps |
| Standard | db2v8m32 | 8 vCore | 32 GB | Up to 10 Gbps |
| Standard | db2v8m64 | 8 vCore | 64 GB | Up to 10 Gbps |
| Standard | db2v8m96 | 8 vCore | 96 GB | Up to 10 Gbps |
| Standard | db2v8m128 | 8 vCore | 128 GB | Up to 10 Gbps |
| Standard | db2v10m20 | 10 vCore | 20 GB | Up to 10 Gbps |
| Standard | db2v10m40 | 10 vCore | 40 GB | Up to 10 Gbps |
| Standard | db2v10m80 | 10 vCore | 80 GB | Up to 10 Gbps |
| Standard | db2v10m120 | 10 vCore | 120 GB | Up to 10 Gbps |
| Standard | db2v10m160 | 10 vCore | 160 GB | Up to 10 Gbps |
| Standard | db2v12m24 | 12 vCore | 24 GB | Up to 12.5 Gbps |
| Standard | db2v12m48 | 12 vCore | 48 GB | Up to 12.5 Gbps |
| Standard | db2v12m96 | 12 vCore | 96 GB | Up to 12.5 Gbps |
| Standard | db2v12m144 | 12 vCore | 144 GB | Up to 12.5 Gbps |
| Standard | db2v12m192 | 12 vCore | 192 GB | Up to 12.5 Gbps |
| Standard | db2v14m28 | 14 vCore | 28 GB | Up to 12.5 Gbps |
| Standard | db2v14m56 | 14 vCore | 56 GB | Up to 12.5 Gbps |
| Standard | db2v14m112 | 14 vCore | 112 GB | Up to 12.5 Gbps |
| Standard | db2v14m168 | 14 vCore | 168 GB | Up to 12.5 Gbps |
| Standard | db2v14m224 | 14 vCore | 224 GB | Up to 12.5 Gbps |
| Standard | db2v16m32 | 16 vCore | 32 GB | Up to 12.5 Gbps |
| Standard | db2v16m64 | 16 vCore | 64 GB | Up to 12.5 Gbps |
| Standard | db2v16m128 | 16 vCore | 128 GB | Up to 12.5 Gbps |
| Standard | db2v16m192 | 16 vCore | 192 GB | Up to 12.5 Gbps |
| Standard | db2v16m256 | 16 vCore | 256 GB | Up to 12.5 Gbps |
dbh2 server type
The dbh2 server type of Vertica (DBaaS) is offered with high-capacity server specifications and is suitable for database workloads that require large-scale data processing.
- Intel 4th‑generation (Sapphire Rapids) Xeon Gold 6448H Processor up to 3.2 GHz
- Supports up to 128 vCPUs and 1,536 GB of memory
- Networking speed up to 25 Gbps
| Category | Server type | vCPU | Memory | Network Bandwidth |
|---|---|---|---|---|
| High Capacity | dbh2v24m48 | 24 vCore | 48 GB | Maximum 25 Gbps |
| High Capacity | dbh2v24m96 | 24 vCore | 96 GB | Maximum 25 Gbps |
| High Capacity | dbh2v24m192 | 24 vCore | 192 GB | Maximum 25 Gbps |
| High Capacity | dbh2v24m288 | 24 vCore | 288 GB | Maximum 25 Gbps |
| High Capacity | dbh2v32m64 | 32 vCore | 64 GB | Maximum 25 Gbps |
| High Capacity | dbh2v32m128 | 32 vCore | 128 GB | Maximum 25 Gbps |
| High Capacity | dbh2v32m256 | 32 vCore | 256 GB | Maximum 25 Gbps |
| High Capacity | dbh2v32m384 | 32 vCore | 384 GB | Maximum 25 Gbps |
| High Capacity | dbh2v48m192 | 48 vCore | 192 GB | Maximum 25 Gbps |
| High Capacity | dbh2v48m576 | 48 vCore | 576 GB | Maximum 25 Gbps |
| High Capacity | dbh2v64m256 | 64 vCore | 256 GB | Maximum 25 Gbps |
| High Capacity | dbh2v64m768 | 64 vCore | 768 GB | Maximum 25 Gbps |
| High Capacity | dbh2v72m288 | 72 vCore | 288 GB | Maximum 25 Gbps |
| High Capacity | dbh2v72m864 | 72 vCore | 864 GB | Maximum 25 Gbps |
| High Capacity | dbh2v96m384 | 96 vCore | 384 GB | Maximum 25 Gbps |
| High Capacity | dbh2v96m1152 | 96 vCore | 1152 GB | Maximum 25 Gbps |
| High Capacity | dbh2v128m512 | 128 vCore | 512 GB | Maximum 25 Gbps |
| High Capacity | dbh2v128m1536 | 128 vCore | 1536 GB | Maximum 25 Gbps |
3.1.2 - Monitoring metrics
According to Samsung Cloud Platform’s policy, the Cloud Monitoring service is scheduled to be terminated.
Accordingly, services whose monitoring metrics are linked in Cloud Monitoring will no longer be able to monitor resources through Cloud Monitoring after the service improvement work in November 2026.
After that, resource monitoring can be continuously performed through the ServiceWatch service released in October 2025.
To ensure smooth service usage, proceed with the migration work according to the service termination schedule below.
Guide to Applying Monitoring Services by Resource
- New Resources: Resources created after the service improvement work in July 2026 are monitored by default using the ServiceWatch service.
- Existing resources: After the service improvement work in September 2026 We provide concurrent monitoring through Cloud Monitoring and ServiceWatch services.
- During the parallel operation period, we must prepare for the Servicewatch transition. *
Performance and log data backup, user-configured settings integrated with existing Cloud Monitoring (e. You must verify items such as event policies and perform tasks such as resetting the ServiceWatch service, then complete them.
Notice of the phased termination schedule for the Cloud Monitoring service
- Console menu termination (September 2026 service improvement work)
- You cannot access the Cloud Monitoring Console through the Console menu; you can only connect via the separate URLs for each region listed below.
- Console menu termination (September 2026 service improvement work)
| Offering | Region | Cloud Monitoring console URL |
|---|---|---|
| Enterprise | kr-west1 | https://console.kr-west1.e.samsungsdscloud.com/console/monitoring |
| Enterprise | kr-east1 | https://console.kr-east1.e.samsungsdscloud.com/console/monitoring |
| Samsung | kr-west1 | https://console.kr-west1.s.samsungsdscloud.com/console/monitoring |
| Samsung | kr-east1 | https://console.kr-east1.s.samsungsdscloud.com/console/monitoring |
| Sovereign | kr-south1 | https://console.kr-south1.g.samsungsdscloud.com/console/monitoring |
| Sovereign | kr-south2 | https://console.kr-south2.g.samsungscloud.com/console/monitoring |
| Sovereign | kr-south3 | https://console.kr-south3.g.samsungsdscloud.com/console/monitoring |
- Service termination (service improvement work in November 2026)
- All services of Cloud Monitoring, including the API, will be permanently discontinued.
- After the service ends in November, Cloud Monitoring data cannot be accessed. * Be sure to complete the ServiceWatch migration work within the parallel operation period**.
- All services of Cloud Monitoring, including the API, will be permanently discontinued.
Detailed information about ServiceWatch can be found in the ServiceWatch 개요.
Vertica(DBaaS) Monitoring Metrics
The table below shows the performance monitoring metrics for Vertica (DBaaS) that can be viewed through Cloud Monitoring. For detailed Cloud Monitoring usage, see the Cloud Monitoring guide.
The server monitoring metrics for Vertica (DBaaS) are described in the Virtual Server Monitoring Metrics guide.
| Performance items | Detailed description | unit |
|---|---|---|
| Active Locks | Number of Active Locks | cnt |
| Active Sessions | Total number of Sessions in Active state | cnt |
| Instance Status | Node alive status | status |
| Tablespace Used | Tablespace usage | bytes |
3.2 - How-to guides
Users can create the service by entering the required information for Vertica (DBaaS) and selecting detailed options through the Samsung Cloud Platform Console.
According to Samsung Cloud Platform’s policy, the Cloud Monitoring service is scheduled to be discontinued.
Accordingly, services whose monitoring metrics are linked in Cloud Monitoring will no longer be able to monitor resources through Cloud Monitoring after the service improvement work in November 2026.
After that, resource monitoring can be continuously performed through the ServiceWatch service released in October 2025.
To ensure smooth service usage, proceed with the migration work according to the service termination schedule below.
Guide to Applying Monitoring Services by Resource
- New Resources: Resources created after the July 2026 service improvement work are provided with default monitoring using the ServiceWatch service.
- Existing resources: After the service improvement work in September 2026 We provide concurrent monitoring through Cloud Monitoring and ServiceWatch services.
- During the parallel operation period, we must prepare for the Servicewatch transition. *
Performance and log data backup, user-configured settings integrated with existing Cloud Monitoring (e.g. You must review the event policies, etc., perform tasks such as resetting the ServiceWatch service, and complete them.
Cloud Monitoring Service Phased Termination Schedule Notice
- Console menu termination (September 2026 service improvement work)
- You cannot access the Cloud Monitoring Console through the Console menu; you can only connect via the separate URLs for each region listed below.
- Console menu termination (September 2026 service improvement work)
| Offering | Region | Cloud Monitoring console URL |
|---|---|---|
| Enterprise | kr-west1 | https://console.kr-west1.e.samsungsdscloud.com/console/monitoring |
| Enterprise | kr-east1 | https://console.kr-east1.e.samsungsdscloud.com/console/monitoring |
| Samsung | kr-west1 | https://console.kr-west1.s.samsungsdscloud.com/console/monitoring |
| Samsung | kr-east1 | https://console.kr-east1.s.samsungsdscloud.com/console/monitoring |
| Sovereign | kr-south1 | https://console.kr-south1.g.samsungsdscloud.com/console/monitoring |
| Sovereign | kr-south2 | https://console.kr-south2.g.samsungsdscloud.com/console/monitoring |
| Sovereign | kr-south3 | https://console.kr-south3.g.samsungsdscloud.com/console/monitoring |
- Service termination (service improvement work in November 2026)
- All services of Cloud Monitoring, including the API, will be permanently discontinued.
- After the service ends in November, Cloud Monitoring data cannot be accessed. * Be sure to complete the ServiceWatch migration within the parallel operation period**.
- All services of Cloud Monitoring, including the API, will be permanently discontinued.
Detailed information about ServiceWatch: please refer to the ServiceWatch Overview.
Create Vertica (DBaaS)
You can create and use the Vertica (DBaaS) service in the Samsung Cloud Platform Console.
To create Vertica(DBaaS), follow these steps.
All Services > Data Analytics > Vertica(DBaaS) Click the menu. 1. Go to the Service Home page of Vertica (DBaaS).
On the Service Home page, click the Vertica(DBaaS) Create button. 2. Create navigate to the page.
Vertica(DBaaS) Creation page: enter the information required to create the service and select detailed options.
- Select the required information in the Image and Version Selection area.
Category required statusDetailed description Image version Required Provide a list of Vertica (DBaaS) versions Table. Vertica (DBaaS) image and version input items - Enter or select the required information in the Service Information Input area.
Category required statusDetailed description Server name Prefix Required The server name where Vertica will be installed - must start with a lowercase English letter, and using lowercase letters, numbers, and special characters(
-) input 3 to 13 characters
- Based on the server name, a postfix such as 001, 002 is appended to create the actual server name
Cluster name required Cluster name composed of servers - Enter using English letters, 3 ~ 20 characters
- A cluster is a unit that groups multiple servers
Number of nodes required Number of data nodes - Enter the number of nodes in the range of 1-10
- If you configure the cluster by entering the number of nodes as 2 or more, you achieve high availability (High Availability)
Service Type > Server Type Required Data node server type - Standard: Standard specification commonly used
- High Capacity: Large-capacity server with 24 vCores or more
- For detailed information about the server types provided by Vertica (DBaaS), refer to Vertica(DBaaS) Server Type
Service Type > Planned Compute Select Status of resources with Planned Compute configured - In Use: Number of resources with Planned Compute configured that are currently in use
- Configured: Number of resources with Planned Compute configured
- Coverage Preview: Amount applied per resource by Planned Compute
- Apply for Planned Compute Service: Go to the Planned Compute service application page
- For more details, see Planned Compute Apply
Service Type > Block Storage Essential Block Storage type to be used for data nodes - Base OS: Area where the engine is installed
- DATA: Data file storage area
- After selecting the storage type, enter the capacity (see Block Storage 생성하기 for details on each Block Storage type)
- SSD: Standard Block Storage
- SSD_KMS: Additional encrypted volume using KMS (Key Management System) encryption keys
- The configured storage type is also applied to additional storage
- Capacity must be entered as a multiple of 8 within the range 16 to 5,120
- After selecting the storage type, enter the capacity (see Block Storage 생성하기 for details on each Block Storage type)
- Add: DATA, Backup data storage area
- After selecting Use, enter the storage’s purpose, capacity
- To add storage, click the Add button; to delete, click the x button, up to 9 can be added
- Capacity can be entered as a multiple of 8 within the range 16 to 5,120, and up to 9 can be created
Management Console Selection If you select Use, you can configure the Node’s server type and Block Storage settings for cluster management and monitoring. Management Console > Server Type Required Selecting a data node server type for cluster management and monitoring Management Console > Block Storage Required Select the Block Storage type to be used for data nodes for cluster management and monitoring Network > Common Settings Required Network settings for servers created by the service - Select when you want to apply the same settings to all installed servers
- Select a pre‑created VPC and Subnet
- IP: Enter each server’s IP
- Public NAT setting is only available in per‑server settings
Network > Server-specific Settings Required Network settings for the servers created by the service - Select when you want to apply different settings per installed server
- Choose a pre‑created VPC and Subnet
- IP: Enter the IP for each server
- Public NAT requires the VPC to be connected to an Internet Gateway; when use is checked, you can select a reserved IP from the VPC product’s Public IP pool. For details, see Public IP 생성하기.
IP access control Selection Service Access Policy Configuration - Since the access policy is set for the IP entered on the page, a separate Security Group policy configuration is not required.
- Enter in IP format (example:
192.168.10.1) or CIDR format (example:192.168.10.0/24,192.168.10.1/32) and click the Add button
- To delete an entered IP, click the x button next to the entered IP
maintenance period Selection Database maintenance window - If you select Use, set the day, start time, and duration
- It is recommended to set a maintenance window for stable DB management. Patch operations will be performed at the scheduled time, causing service interruption
- If set to unused, Samsung SDS is not responsible for issues arising from unapplied patches.
Table. Vertica (DBaaS) service configuration items - must start with a lowercase English letter, and using lowercase letters, numbers, and special characters(
- Enter required database configuration information Enter or select the required information in this area.
Category required statusDetailed description Database name Essential Server name applied during DB installation - must start with an English letter and be entered using English letters and numbers, 3 to 20 characters
Database username Required DB user name - An account with the same name is also created on the OS
- Enter using lowercase English letters, 2 to 20 characters
- Restricted database user names can be checked in the Console
Database password Essential Password to use when accessing the DB - English letters, numbers, and special characters (
“‘excluded) and enter 8~30 characters
Database password verification Required Re-enter the same password to use for DB access Database Port number Required Port number required for DB connection - Enter the DB port within the range 1200 ~ 65535
Backup > Use Select Node backup usage - Select Use to choose the node backup retention period and backup start time
Backup > Retention Period Select Backup retention period - Select the backup retention period. Set the file retention period to 7 days ~ 35 days
- Backup files incur additional charges based on size
Backup > Backup Start Time Select Backup start time - Select backup start time
- The minute(s) at which the backup runs is set randomly, and the backup end time cannot be set
License Key Required Enter the Vertica License Key held by the customer - If the entered license key is invalid, the service cannot be created
DB Locale Required Settings related to string handling, numeric/currency/date/time display formats, etc., to be used with Vertica (DBaaS) - The database is created with default settings based on the selected locale
time zone Required Standard time zone to use with Vertica (DBaaS) Table. Vertica (DBaaS) required configuration items - In the Additional Information Input area, enter or select the required information.
Category required statusDetailed description tag Select Add Tag - Up to 50 per resource can be added
- After clicking the Add Tag button, enter or select Key, Value values
Table. Vertica (DBaaS) additional information input fields
- Select the required information in the Image and Version Selection area.
Summary Review the detailed information and estimated charges generated in the panel, then click the Create button.
- Once creation is complete, verify the created resource on the Resource List page.
View Vertica (DBaaS) detailed information
The Vertica(DBaaS) service allows you to view and edit the full list of resources and detailed information. The Vertica(DBaaS) Details page is composed of Details, Tags, Job History tabs.
To view detailed information about the Vertica (DBaaS) service, follow these steps.
- All Services > Data Analytics > Vertica(DBaaS) Click the menu. 1. Go to the Service Home page of Vertica (DBaaS).
- On the Service Home page, click the Vertica(DBaaS) menu. 2. Navigate to the Vertica(DBaaS) List page.
- On the Vertica(DBaaS) List page, click the resource to view detailed information. 3. Vertica(DBaaS) Details Navigate to the page.
- Vertica(DBaaS) Details At the top of the page, status information and additional feature information are displayed.
Category Detailed description Cluster status Cluster status - Creating: Creating cluster
- Editing: Cluster is changing to an Operation execution state
- Error: Cluster encountered a failure while performing tasks
- If it occurs continuously, contact the administrator
- Failed: Cluster failed during creation
- Restarting: Cluster is restarting
- Running: Cluster is running normally
- Starting: Cluster is starting
- Stopped: Cluster is stopped
- Stopping: Cluster is stopping
- Synchronizing: Cluster is synchronizing
- Terminating: Cluster is terminating
- Unknown: Cluster status is unknown
- If it occurs continuously, contact the administrator
- Upgrading: Cluster is upgrading
Cluster control Button to change the cluster state - Start: Start a stopped cluster
- Stop: Stop a running cluster
- Restart: Restart a running cluster
View more features Cluster-related management buttons - Service status synchronization: Real-time DB service status lookup
- Backup history: When backup is configured, check whether the backup runs correctly and view its history
- Database recovery: Recover the DB based on a specific point in time
Service termination Button to cancel the service Table. Vertica (DBaaS) status information and additional features
- Vertica(DBaaS) Details At the top of the page, status information and additional feature information are displayed.
Detailed information
Vertica(DBaaS) List page lets you view detailed information of the selected resource and, if needed, modify the information.
| Category | Detailed description |
|---|---|
| Server information | Server information configured in this cluster
|
| service | Service name |
| Resource Type | Resource Type |
| SRN | Unique resource ID in Samsung Cloud Platform
|
| Resource Name | Resource name
|
| Resource ID | Unique resource ID in the service |
| Constructor | User who created the service |
| Creation date and time | Service creation date and time |
| Modifier | User who edited the service information |
| Modification date | Date and time the service information was modified |
| Image/Version | Installed DB image and version information |
| Cluster name | Cluster name of the configured servers |
| Database name | Server name applied during DB installation |
| Database username | DB user name |
| Planned Compute | Resources with Planned Compute configured
|
| maintenance period | DB Maintenance Period Status
|
| Backup | Backup Configuration Status
|
| Managed Console | Managed Console resource status configured during DB installation |
| Network | Installed network information (VPC, Subnet) |
| IP access control | Service access policy configuration
|
| time zone | Standard time zone for the Vertica (DBaaS) DB |
| License | Vertica (DBaaS) license information |
| Server Information | Data/Console server type, base OS, additional Disk information
|
tag
Vertica(DBaaS) List page lets you view the tag information of the selected resource, and add, modify, or delete it.
| Category | Detailed description |
|---|---|
| Tag list | Tag list
|
Work History
You can view the operation history of the selected resource on the Vertica(DBaaS) List page.
| Category | Detailed description |
|---|---|
| Task History List | Resource Change History
|
Managing Vertica (DBaaS) Resources
If you need to change the existing configuration options of a created Vertica(DBaaS) resource or add storage, you can perform the operation on the Vertica(DBaaS) Details page.
Control operation
If changes occur to a running Vertica (DBaaS) resource, you can start, stop, or restart it.
To control the operation of Vertica (DBaaS), follow these steps.
- All Services > Data Analytics > Vertica(DBaaS) Click the menu. 1. Go to the Service Home page of Vertica (DBaaS).
- Click the Vertica(DBaaS) menu on the Service Home page. 2. Navigate to the Vertica(DBaaS) List page.
- Vertica(DBaaS) List page, click the resource to control its operation. 3. Vertica(DBaaS) Details Navigate to the page.
- Check the Vertica (DBaaS) status and complete the change using the control button below.
- Start: The server where the Vertica(DBaaS) service is installed and the Vertica(DBaaS) service is running.
- Stop: The server on which the Vertica (DBaaS) service is installed and the Vertica (DBaaS) service will be stopped (Stopped).
- Restart: Only the Vertica(DBaaS) service will be restarted.
Synchronize service status
You can synchronize the real-time service status of Vertica (DBaaS).
To view the service status of Vertica (DBaaS), follow these steps.
- All Services > Data Analytics > Vertica(DBaaS) Click the menu. 1. Go to the Service Home page of Vertica (DBaaS).
- On the Service Home page, click the Vertica(DBaaS) menu. 2. Go to the Vertica(DBaaS) List page.
- On the Vertica(DBaaS) List page, click the resource to view the service status. 3. Vertica(DBaaS) Details Go to the page.
- Click the Service Status Sync button. 4. While it is being queried, the cluster changes to Synchronizing state.
- When the query completes, the status in the server information field is updated, and the cluster changes to the Running state.
Change server type
You can change the configured server type.
- If the server type is configured as Standard, it cannot be changed to High Capacity. * If you want to change to High Capacity, create a new service.
- If you modify the server type, a server restart is required. * Please separately verify any software license modifications or software settings and their implementation due to server specification changes.
To change the server type, follow these steps.
- All Services > Data Analytics > Vertica(DBaaS) Click the menu. 1. Go to the Service Home page of Vertica (DBaaS).
- On the Service Home page, click the Vertica(DBaaS) menu. 2. Go to the Vertica(DBaaS) List page.
- Vertica(DBaaS) List On the page, click the resource to change the server type. 3. Vertica(DBaaS) Details Navigate to the page.
- Click the Edit icon of the server type you want to change at the bottom of the detailed information. 4. Edit Server Type popup window opens.
- Edit Server Type After selecting the server type in the popup window, click the Confirm button.
Add storage
If you need more than 5 TB of data storage, you can add additional storage. In a high‑availability configuration (HA cluster), expanding or adding storage capacity is applied simultaneously to all databases.
To add storage, follow these steps.
- All Services > Data Analytics > Vertica(DBaaS) Click the menu. 1. Go to the Service Home page of Vertica (DBaaS).
- On the Service Home page, click the Vertica(DBaaS) menu. 2. Navigate to the Vertica(DBaaS) List page.
- On the Vertica(DBaaS) List page, click the resource to add storage. 3. Vertica(DBaaS) Details Navigate to the page.
- Click the Add Disk button at the bottom of the detailed view. 4. Additional Storage Request The popup window opens.
- Additional Storage Request In the popup window, after entering the purpose and size, click the Confirm button.
Expand storage
Storage added to the data area can be expanded up to a maximum of 5 TB, based on the initially allocated capacity. You can expand storage without stopping Vertica (DBaaS), and if it is configured as a cluster, all nodes are expanded simultaneously.
To expand storage capacity, follow the steps below.
- Click the All Services > Data Analytics > Vertica(DBaaS) menu. 1. Go to the Service Home page of Vertica (DBaaS).
- On the Service Home page, click the Vertica(DBaaS) menu. 2. Vertica(DBaaS) List Go to the page.
- On the Vertica(DBaaS) List page, click the resource to change the server type. 3. Go to the Vertica(DBaaS) Details page.
- Click the Edit button for the additional Disk you want to add at the bottom of the detailed information. 4. Edit Additional Storage A popup window opens.
- Edit Additional Storage In the popup window, after entering the expansion capacity, click the Confirm button.
Changing the Recovery DB instance type
After the DB recovery is complete, you can change the instance type on the Recovery details screen.
To change the Recovery DB instance type, follow these steps.
- Click the All Services > Data Analytics > Vertica(DBaaS) menu. 1. Go to the Service Home page of Vertica (DBaaS).
- On the Service Home page, click the Vertica(DBaaS) menu. 2. Navigate to the Vertica(DBaaS) List page.
- On the Vertica(DBaaS) List page, click the resource to change the Recovery DB instance type. 3. Vertica(DBaaS) Details Go to the page.
- Click the Change Instance Type button. 4. Change Instance Type A confirmation dialog will appear.
- The DB instance type is changed from Recovery to Active to provide the same functionality as a single DB.
Cancel Vertica (DBaaS)
You can cancel the unused Vertica (DBaaS) to reduce operating costs. However, if you terminate the service, the running service may be stopped immediately, so you should proceed with the termination only after fully considering the impact that may occur when the service is discontinued.
To cancel Vertica(DBaaS), follow the steps below.
- All Services > Data Analytics > Vertica(DBaaS) Click the menu. 1. Go to the Service Home page of Vertica (DBaaS).
- On the Service Home page, click the Vertica(DBaaS) menu. 2. Navigate to the Vertica(DBaaS) List page.
- On the Vertica(DBaaS) List page, select the resource to cancel and click the Cancel Service button.
- After termination is complete, check on the Vertica(DBaaS) list page whether the resource has been terminated.
3.2.1 - Backing up and restoring Vertica
Users can set up backups for Vertica (DBaaS) via the Samsung Cloud Platform Console and restore from the backed‑up files.
Backing up Vertica (DBaaS)
You can configure the backup feature to ensure that user data is stored securely. Additionally, you can verify whether a backup completed successfully using the backup history feature, and you can also delete backed‑up files.
Configure Backup
For backup configuration of Vertica(DBaaS), please refer to Create Vertica(DBaaS).
To modify the backup settings of Vertica (DBaaS), follow the steps below.
- If a backup is configured, it will run at the designated time after the set time, and additional fees will be incurred based on the backup volume.
- If you change the backup setting to unused, backup execution will stop immediately, and the stored backup data will be deleted and can no longer be used.
- Click the All Services > Data Analytics > Vertica(DBaaS) menu. 1. Go to the Service Home page of Vertica (DBaaS).
- On the Service Home page, click the Vertica(DBaaS) menu. 2. Go to the Vertica(DBaaS) List page.
- Vertica(DBaaS) List page, click the resource to configure a backup. 3. Vertica(DBaaS) Details Navigate to the page.
- Click the Edit button of the backup item. 4. Backup Settings The popup window opens.
- When setting up a backup, click Backup Settings in the popup window, click Enable, select the retention period and backup start time, and click the Confirm button.
- If you want to stop the backup configuration, deselect Use in the Backup Settings popup and authenticate via the logged‑in user’s mobile phone.
Once user authentication is completed, the backup configuration will be disabled and backup execution will stop.
- If you want to stop the backup configuration, deselect Use in the Backup Settings popup and authenticate via the logged‑in user’s mobile phone.
Check backup history
To view the backup history, follow these steps.
- All Services > Data Analytics > Vertica(DBaaS) Click the menu. 1. Go to the Service Home page of Vertica (DBaaS).
- On the Service Home page, click the Vertica(DBaaS) menu. 2. Navigate to the Vertica(DBaaS) List page.
- On the Vertica(DBaaS) List page, click the resource to view the backup history. 3. Vertica (DBaaS) Details Navigate to the page.
- Click the Backup History button. 4. The Backup History popup window opens.
- Backup History In the popup window, you can view the backup status, version, backup start time, backup completion time, and size.
Delete backup files
To delete the backup history, follow these steps.
- All Services > Data Analytics > Vertica(DBaaS) Click the menu. 1. Go to the Service Home page of Vertica (DBaaS).
- On the Service Home page, click the Vertica(DBaaS) menu. 2. Go to the Vertica(DBaaS) List page.
- Vertica(DBaaS) List page, click the resource to view the backup history. 3. Vertica(DBaaS) Details Navigate to the page.
- Click the Backup History button. 4. Backup History The popup window opens.
- Backup History In the popup window, check the files you want to delete, then authenticate using the logged-in user’s mobile phone.
- When user authentication is completed, the backup file is deleted.
Recover Vertica(DBaaS)
If a failure or data loss requires restoration from backup files, you can use the cluster recovery feature to recover based on a specific point in time.
To restore Vertica(DBaaS), follow these steps.
- Click the All Services > Data Analytics > Vertica(DBaaS) menu. 1. Go to the Service Home page of Vertica (DBaaS).
- On the Service Home page, click the Vertica(DBaaS) menu. 2. Go to the Vertica(DBaaS) List page.
- On the Vertica(DBaaS) resource list page, click the resource you want to recover. 3. Vertica(DBaaS) Details Go to the page.
- Database Recovery button, click it. 4. Database(DBaaS) Recovery Navigate to the page.
- After entering the relevant information in the Database Recovery area, click the Complete button.
Category required statusDetailed description Recovery Type Required Set the point in time the user wants to recover - Backup point (recommended): Recover based on the backup file. Select from the list of backup file timestamps displayed
- Recovery point: Choose the date and time to recover. Can be selected from the start time of the backup history
Server name Prefix Essential Recovery DB server name - Start with a lowercase English letter and use lowercase letters, numbers, and special characters (
-) to enter 3 to 16 characters
- Based on the server name, a postfix such as 001, 002 is appended to generate the actual server name
Cluster name Required Recovery DB cluster name - Enter using English letters, 3 to 20 characters
- A cluster is a unit that groups multiple servers
Number of nodes Selection Data node count - Set to be the same as the number of nodes configured in the original cluster
Service Type > Server Type Required Recovery DB server type - Standard: standard specification commonly used
- High Capacity: large-capacity server with 24 vCores or more
Service Type > Planned Compute Selection Status of resources with Planned Compute configured - In Use: Number of resources with Planned Compute that are currently in use
- Configured: Number of resources with Planned Compute configured
- Coverage preview: Amount applied per resource by Planned Compute
- Planned Compute Service Application: Go to the Planned Compute service application page
- For more details, refer to Planned Compute Apply
Service Type > Block Storage Required Block Storage settings used by the recovery DB - Basic OS: Area where the DB engine is installed
- DATA: Storage area for table data, archive files, etc.
- Applied identically with the storage type set in the original cluster
- After selecting Use, enter the storage purpose and capacity
- To add storage, click the Add button; to delete, click the x button
- Capacity can be entered in multiples of 8 within the range 16 to 5,120, and up to 9 can be created
Management Console > Server Type Essential Management Console server type - After selecting Use, select the storage purpose and capacity
- Standard: standard specification commonly used
- High Capacity: large-capacity server with 24vCore or more
Management Console > Block Storage Required Block Storage settings used by the Management Console - Select Use, then select Default OS
Database username Required Database username - Apply the same username set in the original cluster
Database password Essential Database password - Apply the same password set in the original cluster
Database Port number Required Database Port number - Apply the same Port number as set in the original cluster
IP access control Select Service Access Policy Configuration - Since the access policy is set for the IP entered on the page, you do not need to configure a separate Security Group policy.
- Enter in IP format (e.g.,
192.168.10.1) or CIDR format (e.g.,192.168.10.0/24,192.168.10.1/32) and click the Add button
- To delete an entered IP, click the x button next to the entered IP
maintenance period Select Database maintenance window - If you select Use, set the day of week, start time, and duration
- It is recommended to set a maintenance window for stable management of the database. Patch operations will be performed at the scheduled time, causing service interruption
- If set to not use, Samsung SDS is not responsible for issues arising from patches not being applied.
License Key Required Enter the Vertica License Key to recover - If the entered license key is invalid, the service cannot be created
tag Selection Add Tag - After clicking the Add Tag button, enter or select Key, Value values
Table. Vertica (DBaaS) recovery configuration items
3.3 - API Reference
3.4 - CLI Reference
3.5 - Release Note
Vertica(DBaaS)
- We have launched the Vertica(DBaaS) service, which can efficiently store data and improve query execution speed with compression and encoding capabilities based on columnar storage.
4 - Data Flow
4.1 - Overview
Service Overview
Data Flow is a data processing workflow tool that visually creates processing flows for extracting large volumes of data from various data sources and for transforming and transmitting stream/batch data, and it provides the open-source Apache NiFi. Data Flow can be used independently in the Kubernetes Engine cluster environment of Samsung Cloud Platform, or together with other application software.
Provided features
Data Flow provides the following functions.
- Convenient Installation and Management: Data Flow can be easily installed in a standard Kubernetes cluster environment via the web-based Samsung Cloud Platform Console. It automatically configures the architecture required for scalable clustering based on the open-source Apache NiFi, automatically installing ZooKeeper, Registry, and management modules. With Data Flow, you can configure and deploy configuration files, NiFi templates, and other assets needed for service integration.
- Easy Data Flow Management: You can easily create processing flows for stream/batch data in a GUI that matches the user environment, and by authoring data processing flows in a GUI, you can efficiently extract, transmit, and process data between systems.
- NiFi Template Gallery: You can share/distribute reference NiFi templates. Data Flow provides work files for data processing flows commonly used in the field as a gallery, and users can share the data processing flow work they have created.
Component
Data Flow consists of Manager and Service modules, and is provided packaged with Apache NiFi.
Data Flow Manager
Data Flow Manager provides various management functions to enable more efficient use of NiFi.
- You can upload the Nar file created by the customer through the Data Flow Manager for use in the Processor, and upload configuration files to share them.
- Frequently used NiFi templates are packaged as assets and offered in the Gallery, ready for use with a single click.
- Provides real-time monitoring of multiple services configured for the native NiFi service, as well as resource status monitoring.
- You can easily provision configuration information for NiFi components within the cluster.
Data Flow Service
- We provide a data flow management service based on Apache NiFi.
- Automatically configures the architecture required for scalable clustering based on Apache NiFi, and automatically installs the Nifi, ZooKeeper, and Nifi Registry modules.
- When providing Nifi, you can set the Description, required resource size, connection ID/PW, and Host Alias.
- After creating the service, you can modify the Description, required resource size, connection password, Host Alias, and other settings, and apply the changes to the service.
Server spec type
When creating a Data Flow service, check the following.
- Recommended Service Installation Specifications: CPU 21 core, Memory 57 GB, Storage at least 100 GB
- Before creating the Data Flow service, you need to install the Ingress Controller.
- Only one Ingress Controller can be installed in a Kubernetes cluster.
- For more details, refer to Ingress Controller Installation.
Provision status by region
Data Flow is available in the environments below.
| region | Provision status |
|---|---|
| Korea West (kr-west1) | Provided |
| Korea East (kr-east1) | Provide |
| South Korea 1 (kr-south1) | Not provided |
| South Korea South 2 (kr-south2) | Not provided |
| South Korea 3 (kr-south3) | Not provided |
Preliminary Service
This is a list of services that must be pre‑configured before creating the service. Please refer to the guide provided for each service and prepare in advance.
| Service Category | service | Detailed description |
|---|---|---|
| Storage | File Storage | Storage that enables multiple client servers to share files over a network connection. |
| Container | Kubernetes Engine | Kubernetes container orchestration service |
4.1.1 - ServiceWatch metric
In ServiceWatch, you can view Kubernetes Engine metrics for the Kubernetes Engine created by Data Flow. As with Kubernetes Engine, the metrics provided by default monitoring are data collected at one‑minute intervals.
Basic Metrics
The following are the default metrics for the Kubernetes Engine namespace.
The metrics whose names are displayed in bold below are the key metrics selected from the default metrics provided by Kubernetes Engine. Key metrics are used to build service dashboards that are automatically created for each service in ServiceWatch.
Each metric provides guidance in the user guide on which statistical values are meaningful when querying that metric, and among the meaningful statistics, the values shown in bold are the primary statistics. In the service dashboard, you can view key metrics using primary statistical values.
| Indicator name | Detailed description | unit | meaningful statistics |
|---|---|---|---|
| cluster_up | Cluster up | Count |
|
| cluster_node_count | Number of cluster nodes | Count |
|
| cluster_failed_node_count | Number of failed nodes in the cluster | Count |
|
| cluster_namespace_phase_count | Number of cluster namespace phases | Count |
|
| cluster_pod_phase_count | Cluster pod phase count | Count |
|
| node_cpu_allocatable | Node CPU allocatable | - |
|
| node_cpu_capacity | Node CPU capacity | - |
|
| node_cpu_usage | Node CPU usage | - |
|
| node_cpu_utilization | Node CPU usage | - |
|
| node_memory_allocatable | Node memory allocatable amount | Bytes |
|
| node_memory_capacity | Node memory capacity | Bytes |
|
| node_memory_usage | Node memory usage | Bytes |
|
| node_memory_utilization | Node memory usage rate | - |
|
| node_network_rx_bytes | Node network received bytes | Bytes/Second |
|
| node_network_tx_bytes | Node network transmitted bytes | Bytes/Second |
|
| node_network_total_bytes | Total bytes of the node network | Bytes/Second |
|
| node_number_of_running_pods | Number of pods running on a node | Count |
|
| namespace_number_of_running_pods | Number of running pods in the namespace | Count |
|
| namespace_deployment_pod_count | Namespace deployment pod count | Count |
|
| namespace_statefulset_pod_count | Namespace StatefulSet pod count | Count |
|
| namespace_daemonset_pod_count | Namespace daemonset pod count | Count |
|
| namespace_job_active_count | Active namespace job count | Count |
|
| namespace_cronjob_active_count | Number of active namespace cronjobs | Count |
|
| pod_cpu_usage | Pod CPU usage | - |
|
| pod_memory_usage | Pod memory usage | Bytes |
|
| pod_network_rx_bytes | Pod network received bytes | Bytes/Second |
|
| pod_network_tx_bytes | Pod network transmitted bytes | Bytes/Second |
|
| pod_network_total_bytes | Pod network total bytes | Count |
|
| container_cpu_usage | Container CPU usage | - |
|
| container_cpu_limit | Container CPU limit | - |
|
| container_cpu_utilization | Container CPU usage | - |
|
| container_memory_usage | Container memory usage | Bytes |
|
| container_memory_limit | Container memory limit | Bytes |
|
| container_memory_utilization | Container memory usage | - |
|
| node_gpu_count | Node GPU count | Count |
|
| gpu_temp | GPU temperature | - |
|
| gpu_power_usage | GPU power usage | - |
|
| gpu_util | GPU utilization | Percent |
|
| gpu_sm_clock | GPU SM clock | - |
|
| gpu_fb_used | GPU FB usage | Megabytes |
|
| gpu_tensor_active | GPU tensor utilization | - |
|
| pod_gpu_util | Pod GPU utilization | Percent |
|
| pod_gpu_tensor_active | Pod GPU Tensor Utilization Rate | - |
|
4.2 - How-to guides
Users can create the service by entering the required Data Flow information and selecting detailed options through the Samsung Cloud Platform Console.
Create Data Flow
You can create and use the Data Flow service in the Samsung Cloud Platform Console.
To create a Data Flow, follow these steps.
Click the All Services > Data Analytics > Data Flow menu. Navigate to the Service Home page of Data Flow.
On the Service Home page, click the Create Data Flow button. You will be taken to the Create Data Flow page.
On the Data Flow creation page, enter the information required to create the service and select detailed options.
- Version selection area, select the required information.
Category Required or optionalDetailed description Data Flow version Required Select version of the selected image - Provide a list of versions for the provided server image
Table. Data Flow version selection item - Enter or select the required information in the Cluster Selection area. To install Data Flow, you must first create nodes for the Kubernetes cluster and the working environment.
Category Required statusDetailed description Cluster name Required Select the cluster to use Ingress Controller Required Select the Ingress Controller installed in the cluster - In the Details tab of the installed Ingress Controller, add the following information to the ConfigMap entry.
- Key: allow-snippet-annotations
- Value: true
Table. Data Flow cluster selection options - In the Details tab of the installed Ingress Controller, add the following information to the ConfigMap entry.
- Enter or select the required information in the Service Information Input area.
Category RequiredDetailed description Data Flow name Required Enter Data Flow name - starting with a lowercase English letter and not ending with a special character (
-), using lowercase English letters, numbers, and special characters (-) to input 3 ~ 30 characters
Storage Class Required Select the storage class used by the selected cluster description Select Enter additional information or description about Data Flow within 150 characters. Domain Settings Required Enter Data Flow domain - Start with a lowercase English letter and ensure it does not end with special characters (
-), using lowercase letters, numbers, and special characters (-) to enter 3 ~ 50 characters
- {Data Flow name}.{configured domain} becomes the Data Flow access URL.
Node Selector Required To install on a specific node, enter a distinguishable label among the node’s labels - If you enter an incorrect node label, installation errors may occur, so verify the node label in advance
- Node labels can be found in the node’s yaml file
account Required Enter Data Flow Manager account - ID: Enter a value between 6 and 30 characters, starting with a lowercase English letter and using lowercase letters and numbers
- Password: Enter 8 to 50 characters, including uppercase letters, lowercase letters, numbers, and special characters (! @ # $ % ^ & *)
- Confirm Password: Re-enter the password exactly the same
Host Alias Selection Add host information to be linked with Data Flow (up to 20 total, including defaults) - Select Use, then click the + button
- Hostname: Enter a hostname or domain format using lowercase letters, numbers, and special characters (
-) with a length of 3 to 63 characters
- IP: Enter in IP format
- Click the X button to delete
- The added host information can be used only if the firewall between the cluster and the server is open
Table. Data Flow service information entry items - starting with a lowercase English letter and not ending with a special character (
- In the Additional Information Input area, enter or select the required information.
Category Required statusDetailed description tag Selection Add Tag - Add Tag Click the button to create and add a tag, or add an existing tag.
- You can add up to 50 tags.
- The newly added tags will be applied after the service creation is completed.
Table. Data Flow additional information input fields
- Version selection area, select the required information.
Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.
- When creation is complete, check the created resource on the Data Flow List page.
Check detailed information of Data Flow
You can view and edit the full list of resources and detailed information of a Data Flow. The Data Flow Details page consists of Details, Tags, Activity Log tabs.
To view detailed information of the Data Flow, follow these steps.
- Click the All Services > Data Analytics > Data Flow menu. Navigate to the Service Home page of Data Flow.
- On the Service Home page, click the Data Flow menu. You will be taken to the Data Flow List page.
- On the Data Flow List page, click the resource to view detailed information. You will be taken to the Data Flow Detail page.
- Data Flow Details At the top of the page, status information and additional feature information are displayed.
Category Detailed description Status indicator Data Flow status - Creating: Creating
- Running: Running, Data Flow Services can be created
- Updating: Updating settings
- Terminating: Terminating
- Error: error occurred during creation or service abnormal state
Hosts file configuration information Button to view and copy the host file information for accessing Data Flow Service termination Cancel Service button Table. Data Flow status information and additional functions
- Data Flow Details At the top of the page, status information and additional feature information are displayed.
Detailed Information
On the Data Flow list page, you can view detailed information of the selected resource and edit the information if needed.
| Category | Detailed description |
|---|---|
| service | Service name |
| Resource Type | Resource Type |
| SRN | Unique resource ID in Samsung Cloud Platform
|
| Resource name | resource name
|
| Resource ID | Unique resource ID in the service |
| constructor | User who created the service |
| Creation date and time | Service creation date and time |
| editor | User who edited the service information |
| Modification date | Date and time the service information was modified |
| Cluster name | Cluster name of the configured servers |
| Storage Class | Storage class used by the selected cluster |
| Explanation | Additional information or explanation about Data Flow |
| Domain Settings | Data Flow domain name |
| Node Selector | Node Label |
| Web Url | Data Flow URL |
| account | Data Flow Manager account |
| Host Alias | Host information to be connected with Data Flow |
tag
Data Flow List page lets you view the tag information of the selected resource, and you can add, modify, or delete it.
| Category | Detailed description |
|---|---|
| Tag list | Tag list
|
Job History
You can view the operation history of the selected resource on the Data Flow List page.
| Category | Detailed description |
|---|---|
| Task History List | Resource Change History
|
Terminate Data Flow
You can cancel unused Data Flow to reduce operating costs. However, if you cancel a service, the running service may be terminated immediately, so you should thoroughly consider the impact of service interruption before proceeding with the cancellation.
To cancel the Data Flow, follow the steps below.
- Click the All Services > Data Analytics > Data Flow menu. Navigate to the Service Home page of Data Flow.
- On the Service Home page, click the Data Flow menu. You will be taken to the Data Flow List page.
- On the Data Flow List page, select the resource to cancel, and click the Cancel Service button.
- When termination is complete, check on the Data Flow List page whether the resource has been terminated.
- Data Flow can be cancelled only after first deleting the associated Data Flow Services.
- If you cancel Data Flow, the created namespace will also be deleted.
4.2.1 - Data Flow Services
Users can create the service by entering the required information for Data Flow Services within the Data Flow service through the Samsung Cloud Platform Console and selecting detailed options.
Creating Data Flow Services
Users can add a service by selecting detailed options for Data Flow or by entering configuration values.
To create Data Flow Services, follow these steps.
Click the All Services > Data Analytics > Data Flow menu. You will be taken to the Data Flow Service Home page.
From the Service Home page, click Data Flow Servies. Navigate to the Data Flow Services list page.
On the Data Flow Services List page, click the Data Flow Services Create button. You will be taken to the Data Flow Services Create page.
Data Flow Services Creation page: enter the information required to create the service and select detailed options.
- Enter or select the required information in the Service Information Input area.
Category RequiredDetailed description Data Flow name Required Select Data Flow Flow Service name Required Enter Data Flow Services name - Start with a lowercase English letter and ensure it does not end with a special character (
-), using lowercase letters, numbers, and special characters (-) to enter 3 to 30 characters
Storage Class Required Select the storage class used by the selected cluster description Selection Enter additional information or description about Data Flow Services within 150 characters. Domain Settings Required Data Flow Services domain input - Start with a lowercase English letter and ensure it does not end with a special character (
-), using lowercase letters, numbers, and special characters (-) to enter 3 to 50 characters
- {Data Flow Services name}.{configured domain} becomes the Data Flow Services access URL.
Node Selector Required To install on a specific node, enter a distinguishable label among the node’s Labels - If you enter an incorrect node label, installation errors may occur, so verify the node label in advance
- The node label can be found in the node’s yaml file
Service Workload Required - Nifi: Module that provides Apache Nifi’s services and UI
- Nifi Registry: Module that configures and deploys Nifi templates
- Zookeeper: Module that supports proper distributed processing of Nifi across multiple nodes
account Required Enter Nifi account - ID: Enter a value between 6 and 30 characters, starting with a lowercase English letter and using lowercase letters and numbers
- Password: Enter 8 to 50 characters, including uppercase letters, lowercase letters, numbers, and special characters(
!@#$%^&*)
- Confirm Password: Re-enter the password exactly the same
Table. Data Flow Services service information input items - Start with a lowercase English letter and ensure it does not end with a special character (
- In the Additional Information Input area, enter or select the required information.
Category RequiredDetailed description Host Alias Selection Add host information to be linked with Data Flow (up to 20 total, including defaults) - Select Use, then click the + button
- Hostname: Enter a hostname or domain format using lowercase letters, numbers, and special characters (
-) with a length of 3 to 63 characters
- IP: Enter in IP format
- To delete, click the X button
- The added host information can be used only if the firewall between the cluster and the server is open
tag Selection Add Tag - Add Tag Click the button to create and add a tag, or add an existing tag.
- You can add up to 50 tags.
- The newly added tags will be applied after the service creation is completed.
Table. Data Flow additional information input fields
- Enter or select the required information in the Service Information Input area.
Summary Verify the detailed information and estimated billing amount generated in the panel, then click the Complete button.
- Once creation is complete, check the created resources on the Data Flow Services List page.
Data Flow Services Check detailed information
You can view and edit the complete list of resources and detailed information for Data Flow Services. Data Flow Services Details page consists of Details, Tags, Operation History tabs.
To view detailed information about Data Flow Services, follow these steps.
- Click the All Services > Data Analytics > Data Flow menu. Navigate to the Service Home page of Data Flow.
- On the Service Home page, click the Data Flow Services menu. You will be taken to the Data Flow Services list page.
- On the Data Flow Services List page, click the resource to view detailed information. You will be taken to the Data Flow Services Details page.
- Data Flow Services Details At the top of the page, status information and additional feature information are displayed.
Category Detailed description Status display Data Flow Services status - Creating: Creating
- Running: Running
- Updating: Updating configuration
- Terminating: Terminating service
- Error: Creation failed or service unavailable
Hosts file configuration information Button to view and copy the host file information needed to access Data Flow Services Delete Data Flow Services Cancel Service button Table. Data Flow Services status information and additional functions
- Data Flow Services Details At the top of the page, status information and additional feature information are displayed.
Detailed Information
Data Flow Services List page lets you view detailed information of the selected resource and edit the information if needed.
| Category | Detailed description |
|---|---|
| service | Service name |
| Resource Type | Resource Type |
| SRN | Unique resource ID in Samsung Cloud Platform
|
| Resource name | Resource name
|
| Resource ID | Unique resource ID in the service |
| constructor | User who created the service |
| Creation date and time | Service creation date and time |
| editor | User who edited the service information |
| Modification date | Date and time the service information was modified |
| Data Flow name | Data Flow name |
| Storage Class | Storage class used by the selected cluster |
| description | Additional information or explanation about Data Flow Services |
| Domain Settings | Data Flow Services domain name |
| Node Selector | Node Label |
| Web Url | Data Flow Services URL |
| account | Airflow account |
| Host Alias | Host information to be connected to Data Flow Services |
tag
Data Flow Services List page allows you to view the tag information of the selected resource, and you can add, modify, or delete it.
| Category | Detailed description |
|---|---|
| Tag list | Tag list
|
Job History
Data Flow Services List page lets you view the operation history of the selected resource.
| Category | Detailed description |
|---|---|
| Task History List | Resource Change History
|
Terminate Data Flow Services
You can cancel unused Data Flow Services to reduce operating costs. However, if you cancel the service, the running service may be stopped immediately, so you should thoroughly consider the impact of service interruption before proceeding with the cancellation.
To cancel Data Flow or Data Flow Services, follow the steps below.
- Click the All Services > Data Analytics > Data Flow menu. You will be taken to the Service Home page of Data Flow.
- On the Service Home page, click the Data Flow Services menu. You will be taken to the Data Flow Services list page.
- On the Data Flow Services List page, select the resource to cancel, and click the Data Flow Services Delete button.
- When termination is complete, check on the Data Flow Services list page whether the resource has been terminated.
- If you cancel Data Flow Services, the created namespace will also be deleted.
4.2.2 - Install Ingress Controller
The user must install an Ingress Controller before creating a Data Flow service. Only one Ingress Controller should be installed in the Kubernetes cluster.
Installing Ingress Controller using Container Registry
Follow these steps to install the Ingress Controller using the Container Registry.
- After checking the service domain, download the corresponding Ingress Controller image file.Table. Yaml file by domain
- Click the All Services > Container > Kubernetes Engine > Workloads > Pods menu. You will be taken to the Pod List page.
- Click the Create Object button. The Create Object popup window opens.
- After selecting the cluster where you will install Data Flow, copy and paste the contents of the Yaml file.
- Click the Confirm button to complete the installation. The installed Ingress Controller can be viewed in the list.
IngressController For Enterprise (KR-WEST1)
apiVersion: v1
kind: Namespace
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
rules:
- apiGroups:
-
resources:
- namespaces
verbs:
- get
- apiGroups:
-
resources:
- configmaps
- pods
- secrets
- endpoints
verbs:
- get
- list
- watch
- apiGroups:
-
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- coordination.k8s.io
resourceNames:
- dss-ingress-nginx-leader
resources:
- leases
verbs:
- get
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- apiGroups:
-
resources:
- events
verbs:
- create
- patch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
rules:
- apiGroups:
- ""
resources:
- configmaps
- endpoints
- nodes
- pods
- secrets
- namespaces
verbs:
- list
- watch
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- list
- watch
- apiGroups:
- ""
resources:
- nodes
verbs:
- get
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: v1
data:
allow-snippet-annotations: "true"
annotations-risk-level: Critical
kind: ConfigMap
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
externalTrafficPolicy: Cluster
ipFamilies:
- IPv4
ipFamilyPolicy: SingleStack
ports:
- appProtocol: http
name: http
nodePort: 30708
port: 80
protocol: TCP
targetPort: http
- appProtocol: https
name: https
nodePort: 31416
port: 443
protocol: TCP
targetPort: https
selector:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
minReadySeconds: 0
revisionHistoryLimit: 10
selector:
matchLabels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
strategy:
rollingUpdate:
maxUnavailable: 1
type: RollingUpdate
template:
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
spec:
containers:
- args:
- /nginx-ingress-controller
- --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
- --election-id=dss-ingress-nginx-leader
- --controller-class=k8s.io/dss-ingress-controller
- --ingress-class=dss-nginx
- --configmap=$(POD_NAMESPACE)/dss-ingress-controller
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: LD_PRELOAD
value: /usr/local/lib/libmimalloc.so
image: brightixscr.scr.private.kr-west1.e.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
exec:
command:
- /wait-shutdown
livenessProbe:
failureThreshold: 5
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: controller
ports:
- containerPort: 80
name: http
protocol: TCP
- containerPort: 443
name: https
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources:
requests:
cpu: 100m
memory: 90Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
add:
- NET_BIND_SERVICE
drop:
- ALL
readOnlyRootFilesystem: false
runAsGroup: 82
runAsNonRoot: true
runAsUser: 101
seccompProfile:
type: RuntimeDefault
dnsPolicy: ClusterFirst
nodeSelector:
kubernetes.io/os: linux
serviceAccountName: dss-ingress
terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
annotations:
ingressclass.kubernetes.io/is-default-class: "true"
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-nginx
spec:
controller: k8s.io/dss-ingress-controllerapiVersion: v1
kind: Namespace
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
rules:
- apiGroups:
-
resources:
- namespaces
verbs:
- get
- apiGroups:
-
resources:
- configmaps
- pods
- secrets
- endpoints
verbs:
- get
- list
- watch
- apiGroups:
-
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- coordination.k8s.io
resourceNames:
- dss-ingress-nginx-leader
resources:
- leases
verbs:
- get
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- apiGroups:
-
resources:
- events
verbs:
- create
- patch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
rules:
- apiGroups:
- ""
resources:
- configmaps
- endpoints
- nodes
- pods
- secrets
- namespaces
verbs:
- list
- watch
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- list
- watch
- apiGroups:
- ""
resources:
- nodes
verbs:
- get
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: v1
data:
allow-snippet-annotations: "true"
annotations-risk-level: Critical
kind: ConfigMap
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
externalTrafficPolicy: Cluster
ipFamilies:
- IPv4
ipFamilyPolicy: SingleStack
ports:
- appProtocol: http
name: http
nodePort: 30708
port: 80
protocol: TCP
targetPort: http
- appProtocol: https
name: https
nodePort: 31416
port: 443
protocol: TCP
targetPort: https
selector:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
minReadySeconds: 0
revisionHistoryLimit: 10
selector:
matchLabels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
strategy:
rollingUpdate:
maxUnavailable: 1
type: RollingUpdate
template:
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
spec:
containers:
- args:
- /nginx-ingress-controller
- --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
- --election-id=dss-ingress-nginx-leader
- --controller-class=k8s.io/dss-ingress-controller
- --ingress-class=dss-nginx
- --configmap=$(POD_NAMESPACE)/dss-ingress-controller
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: LD_PRELOAD
value: /usr/local/lib/libmimalloc.so
image: brightixscr.scr.private.kr-west1.e.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
exec:
command:
- /wait-shutdown
livenessProbe:
failureThreshold: 5
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: controller
ports:
- containerPort: 80
name: http
protocol: TCP
- containerPort: 443
name: https
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources:
requests:
cpu: 100m
memory: 90Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
add:
- NET_BIND_SERVICE
drop:
- ALL
readOnlyRootFilesystem: false
runAsGroup: 82
runAsNonRoot: true
runAsUser: 101
seccompProfile:
type: RuntimeDefault
dnsPolicy: ClusterFirst
nodeSelector:
kubernetes.io/os: linux
serviceAccountName: dss-ingress
terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
annotations:
ingressclass.kubernetes.io/is-default-class: "true"
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-nginx
spec:
controller: k8s.io/dss-ingress-controllerIngressController For Enterprise (KR-EAST1)
apiVersion: v1
kind: Namespace
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
rules:
- apiGroups:
- ""
resources:
- namespaces
verbs:
- get
- apiGroups:
- ""
resources:
- configmaps
- pods
- secrets
- endpoints
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- coordination.k8s.io
resourceNames:
- dss-ingress-nginx-leader
resources:
- leases
verbs:
- get
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
rules:
- apiGroups:
-
resources:
- configmaps
- endpoints
- nodes
- pods
- secrets
- namespaces
verbs:
- list
- watch
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- list
- watch
- apiGroups:
-
resources:
- nodes
verbs:
- get
- apiGroups:
-
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
-
resources:
- events
verbs:
- create
- patch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: v1
data:
allow-snippet-annotations: "true"
annotations-risk-level: Critical
kind: ConfigMap
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
externalTrafficPolicy: Cluster
ipFamilies:
- IPv4
ipFamilyPolicy: SingleStack
ports:
- appProtocol: http
name: http
nodePort: 30708
port: 80
protocol: TCP
targetPort: http
- appProtocol: https
name: https
nodePort: 31416
port: 443
protocol: TCP
targetPort: https
selector:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
minReadySeconds: 0
revisionHistoryLimit: 10
selector:
matchLabels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
strategy:
rollingUpdate:
maxUnavailable: 1
type: RollingUpdate
template:
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
spec:
containers:
- args:
- /nginx-ingress-controller
- --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
- --election-id=dss-ingress-nginx-leader
- --controller-class=k8s.io/dss-ingress-controller
- --ingress-class=dss-nginx
- --configmap=$(POD_NAMESPACE)/dss-ingress-controller
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: LD_PRELOAD
value: /usr/local/lib/libmimalloc.so
image: brightixscr.scr.private.kr-east1.e.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
exec:
command:
- /wait-shutdown
livenessProbe:
failureThreshold: 5
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: controller
ports:
- containerPort: 80
name: http
protocol: TCP
- containerPort: 443
name: https
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources:
requests:
cpu: 100m
memory: 90Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
add:
- NET_BIND_SERVICE
drop:
- ALL
readOnlyRootFilesystem: false
runAsGroup: 82
runAsNonRoot: true
runAsUser: 101
seccompProfile:
type: RuntimeDefault
dnsPolicy: ClusterFirst
nodeSelector:
kubernetes.io/os: linux
serviceAccountName: dss-ingress
terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
annotations:
ingressclass.kubernetes.io/is-default-class: "true"
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-nginx
spec:
controller: k8s.io/dss-ingress-controllerapiVersion: v1
kind: Namespace
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
rules:
- apiGroups:
- ""
resources:
- namespaces
verbs:
- get
- apiGroups:
- ""
resources:
- configmaps
- pods
- secrets
- endpoints
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- coordination.k8s.io
resourceNames:
- dss-ingress-nginx-leader
resources:
- leases
verbs:
- get
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
rules:
- apiGroups:
-
resources:
- configmaps
- endpoints
- nodes
- pods
- secrets
- namespaces
verbs:
- list
- watch
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- list
- watch
- apiGroups:
-
resources:
- nodes
verbs:
- get
- apiGroups:
-
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
-
resources:
- events
verbs:
- create
- patch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: v1
data:
allow-snippet-annotations: "true"
annotations-risk-level: Critical
kind: ConfigMap
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
externalTrafficPolicy: Cluster
ipFamilies:
- IPv4
ipFamilyPolicy: SingleStack
ports:
- appProtocol: http
name: http
nodePort: 30708
port: 80
protocol: TCP
targetPort: http
- appProtocol: https
name: https
nodePort: 31416
port: 443
protocol: TCP
targetPort: https
selector:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
minReadySeconds: 0
revisionHistoryLimit: 10
selector:
matchLabels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
strategy:
rollingUpdate:
maxUnavailable: 1
type: RollingUpdate
template:
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
spec:
containers:
- args:
- /nginx-ingress-controller
- --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
- --election-id=dss-ingress-nginx-leader
- --controller-class=k8s.io/dss-ingress-controller
- --ingress-class=dss-nginx
- --configmap=$(POD_NAMESPACE)/dss-ingress-controller
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: LD_PRELOAD
value: /usr/local/lib/libmimalloc.so
image: brightixscr.scr.private.kr-east1.e.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
exec:
command:
- /wait-shutdown
livenessProbe:
failureThreshold: 5
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: controller
ports:
- containerPort: 80
name: http
protocol: TCP
- containerPort: 443
name: https
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources:
requests:
cpu: 100m
memory: 90Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
add:
- NET_BIND_SERVICE
drop:
- ALL
readOnlyRootFilesystem: false
runAsGroup: 82
runAsNonRoot: true
runAsUser: 101
seccompProfile:
type: RuntimeDefault
dnsPolicy: ClusterFirst
nodeSelector:
kubernetes.io/os: linux
serviceAccountName: dss-ingress
terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
annotations:
ingressclass.kubernetes.io/is-default-class: "true"
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-nginx
spec:
controller: k8s.io/dss-ingress-controllerIngressController For Samsung (KR-WESTT1)
apiVersion: v1
kind: Namespace
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
rules:
- apiGroups:
-
resources:
- namespaces
verbs:
- get
- apiGroups:
-
resources:
- configmaps
- pods
- secrets
- endpoints
verbs:
- get
- list
- watch
- apiGroups:
-
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- coordination.k8s.io
resourceNames:
- dss-ingress-nginx-leader
resources:
- leases
verbs:
- get
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- apiGroups:
-
resources:
- events
verbs:
- create
- patch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
rules:
- apiGroups:
- ""
resources:
- configmaps
- endpoints
- nodes
- pods
- secrets
- namespaces
verbs:
- list
- watch
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- list
- watch
- apiGroups:
- ""
resources:
- nodes
verbs:
- get
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: v1
data:
allow-snippet-annotations: "true"
annotations-risk-level: Critical
kind: ConfigMap
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
externalTrafficPolicy: Cluster
ipFamilies:
- IPv4
ipFamilyPolicy: SingleStack
ports:
- appProtocol: http
name: http
nodePort: 30708
port: 80
protocol: TCP
targetPort: http
- appProtocol: https
name: https
nodePort: 31416
port: 443
protocol: TCP
targetPort: https
selector:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
minReadySeconds: 0
revisionHistoryLimit: 10
selector:
matchLabels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
strategy:
rollingUpdate:
maxUnavailable: 1
type: RollingUpdate
template:
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
spec:
containers:
- args:
- /nginx-ingress-controller
- --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
- --election-id=dss-ingress-nginx-leader
- --controller-class=k8s.io/dss-ingress-controller
- --ingress-class=dss-nginx
- --configmap=$(POD_NAMESPACE)/dss-ingress-controller
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: LD_PRELOAD
value: /usr/local/lib/libmimalloc.so
image: brightixscr.scr.private.kr-west1.s.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
exec:
command:
- /wait-shutdown
livenessProbe:
failureThreshold: 5
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: controller
ports:
- containerPort: 80
name: http
protocol: TCP
- containerPort: 443
name: https
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources:
requests:
cpu: 100m
memory: 90Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
add:
- NET_BIND_SERVICE
drop:
- ALL
readOnlyRootFilesystem: false
runAsGroup: 82
runAsNonRoot: true
runAsUser: 101
seccompProfile:
type: RuntimeDefault
dnsPolicy: ClusterFirst
nodeSelector:
kubernetes.io/os: linux
serviceAccountName: dss-ingress
terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
annotations:
ingressclass.kubernetes.io/is-default-class: "true"
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-nginx
spec:
controller: k8s.io/dss-ingress-controllerapiVersion: v1
kind: Namespace
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
rules:
- apiGroups:
-
resources:
- namespaces
verbs:
- get
- apiGroups:
-
resources:
- configmaps
- pods
- secrets
- endpoints
verbs:
- get
- list
- watch
- apiGroups:
-
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- coordination.k8s.io
resourceNames:
- dss-ingress-nginx-leader
resources:
- leases
verbs:
- get
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- apiGroups:
-
resources:
- events
verbs:
- create
- patch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
rules:
- apiGroups:
- ""
resources:
- configmaps
- endpoints
- nodes
- pods
- secrets
- namespaces
verbs:
- list
- watch
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- list
- watch
- apiGroups:
- ""
resources:
- nodes
verbs:
- get
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: v1
data:
allow-snippet-annotations: "true"
annotations-risk-level: Critical
kind: ConfigMap
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
externalTrafficPolicy: Cluster
ipFamilies:
- IPv4
ipFamilyPolicy: SingleStack
ports:
- appProtocol: http
name: http
nodePort: 30708
port: 80
protocol: TCP
targetPort: http
- appProtocol: https
name: https
nodePort: 31416
port: 443
protocol: TCP
targetPort: https
selector:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
minReadySeconds: 0
revisionHistoryLimit: 10
selector:
matchLabels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
strategy:
rollingUpdate:
maxUnavailable: 1
type: RollingUpdate
template:
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
spec:
containers:
- args:
- /nginx-ingress-controller
- --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
- --election-id=dss-ingress-nginx-leader
- --controller-class=k8s.io/dss-ingress-controller
- --ingress-class=dss-nginx
- --configmap=$(POD_NAMESPACE)/dss-ingress-controller
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: LD_PRELOAD
value: /usr/local/lib/libmimalloc.so
image: brightixscr.scr.private.kr-west1.s.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
exec:
command:
- /wait-shutdown
livenessProbe:
failureThreshold: 5
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: controller
ports:
- containerPort: 80
name: http
protocol: TCP
- containerPort: 443
name: https
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources:
requests:
cpu: 100m
memory: 90Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
add:
- NET_BIND_SERVICE
drop:
- ALL
readOnlyRootFilesystem: false
runAsGroup: 82
runAsNonRoot: true
runAsUser: 101
seccompProfile:
type: RuntimeDefault
dnsPolicy: ClusterFirst
nodeSelector:
kubernetes.io/os: linux
serviceAccountName: dss-ingress
terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
annotations:
ingressclass.kubernetes.io/is-default-class: "true"
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-nginx
spec:
controller: k8s.io/dss-ingress-controllerIngressController For Samsung (KR-EAST1)
apiVersion: v1
kind: Namespace
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
rules:
- apiGroups:
- ""
resources:
- namespaces
verbs:
- get
- apiGroups:
- ""
resources:
- configmaps
- pods
- secrets
- endpoints
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- coordination.k8s.io
resourceNames:
- dss-ingress-nginx-leader
resources:
- leases
verbs:
- get
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
rules:
- apiGroups:
-
resources:
- configmaps
- endpoints
- nodes
- pods
- secrets
- namespaces
verbs:
- list
- watch
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- list
- watch
- apiGroups:
-
resources:
- nodes
verbs:
- get
- apiGroups:
-
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
-
resources:
- events
verbs:
- create
- patch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: v1
data:
allow-snippet-annotations: "true"
annotations-risk-level: Critical
kind: ConfigMap
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
externalTrafficPolicy: Cluster
ipFamilies:
- IPv4
ipFamilyPolicy: SingleStack
ports:
- appProtocol: http
name: http
nodePort: 30708
port: 80
protocol: TCP
targetPort: http
- appProtocol: https
name: https
nodePort: 31416
port: 443
protocol: TCP
targetPort: https
selector:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
minReadySeconds: 0
revisionHistoryLimit: 10
selector:
matchLabels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
strategy:
rollingUpdate:
maxUnavailable: 1
type: RollingUpdate
template:
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
spec:
containers:
- args:
- /nginx-ingress-controller
- --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
- --election-id=dss-ingress-nginx-leader
- --controller-class=k8s.io/dss-ingress-controller
- --ingress-class=dss-nginx
- --configmap=$(POD_NAMESPACE)/dss-ingress-controller
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: LD_PRELOAD
value: /usr/local/lib/libmimalloc.so
image: brightixscr.scr.private.kr-east1.s.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
exec:
command:
- /wait-shutdown
livenessProbe:
failureThreshold: 5
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: controller
ports:
- containerPort: 80
name: http
protocol: TCP
- containerPort: 443
name: https
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources:
requests:
cpu: 100m
memory: 90Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
add:
- NET_BIND_SERVICE
drop:
- ALL
readOnlyRootFilesystem: false
runAsGroup: 82
runAsNonRoot: true
runAsUser: 101
seccompProfile:
type: RuntimeDefault
dnsPolicy: ClusterFirst
nodeSelector:
kubernetes.io/os: linux
serviceAccountName: dss-ingress
terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
annotations:
ingressclass.kubernetes.io/is-default-class: "true"
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-nginx
spec:
controller: k8s.io/dss-ingress-controllerapiVersion: v1
kind: Namespace
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
rules:
- apiGroups:
- ""
resources:
- namespaces
verbs:
- get
- apiGroups:
- ""
resources:
- configmaps
- pods
- secrets
- endpoints
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- coordination.k8s.io
resourceNames:
- dss-ingress-nginx-leader
resources:
- leases
verbs:
- get
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
rules:
- apiGroups:
-
resources:
- configmaps
- endpoints
- nodes
- pods
- secrets
- namespaces
verbs:
- list
- watch
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- list
- watch
- apiGroups:
-
resources:
- nodes
verbs:
- get
- apiGroups:
-
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
-
resources:
- events
verbs:
- create
- patch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: v1
data:
allow-snippet-annotations: "true"
annotations-risk-level: Critical
kind: ConfigMap
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
externalTrafficPolicy: Cluster
ipFamilies:
- IPv4
ipFamilyPolicy: SingleStack
ports:
- appProtocol: http
name: http
nodePort: 30708
port: 80
protocol: TCP
targetPort: http
- appProtocol: https
name: https
nodePort: 31416
port: 443
protocol: TCP
targetPort: https
selector:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
minReadySeconds: 0
revisionHistoryLimit: 10
selector:
matchLabels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
strategy:
rollingUpdate:
maxUnavailable: 1
type: RollingUpdate
template:
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
spec:
containers:
- args:
- /nginx-ingress-controller
- --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
- --election-id=dss-ingress-nginx-leader
- --controller-class=k8s.io/dss-ingress-controller
- --ingress-class=dss-nginx
- --configmap=$(POD_NAMESPACE)/dss-ingress-controller
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: LD_PRELOAD
value: /usr/local/lib/libmimalloc.so
image: brightixscr.scr.private.kr-east1.s.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
exec:
command:
- /wait-shutdown
livenessProbe:
failureThreshold: 5
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: controller
ports:
- containerPort: 80
name: http
protocol: TCP
- containerPort: 443
name: https
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources:
requests:
cpu: 100m
memory: 90Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
add:
- NET_BIND_SERVICE
drop:
- ALL
readOnlyRootFilesystem: false
runAsGroup: 82
runAsNonRoot: true
runAsUser: 101
seccompProfile:
type: RuntimeDefault
dnsPolicy: ClusterFirst
nodeSelector:
kubernetes.io/os: linux
serviceAccountName: dss-ingress
terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
annotations:
ingressclass.kubernetes.io/is-default-class: "true"
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-nginx
spec:
controller: k8s.io/dss-ingress-controller4.3 - API Reference
4.4 - CLI Reference
4.5 - Release Note
Data Flow
- The Data Flow service, which extracts, transforms, and transfers data from various sources and automates data processing workflows, has been launched.
- Provides the open-source Apache NiFi.
5 - Data Ops
5.1 - Overview
Service Overview
Data Ops is a managed workflow orchestration service based on Apache Airflow that creates workflows for data processing tasks that occur periodically or repeatedly and automates task scheduling. Users can automate the process of delivering useful data to the right place at the required time and monitor the configuration and progress of data pipelines.
Provided features
Data Ops provides the following features.
- Convenient Installation and Management: Data Ops can be easily installed via a web-based Console in a standard Kubernetes cluster environment. Apache Airflow and management modules are installed automatically, and the integrated dashboard provides unified monitoring of the web server and scheduler execution status.
- Dynamic Pipeline Configuration: You can configure pipelines for data tasks based on Python code. Because it integrates with data task scheduling and creates tasks dynamically, you can freely design the desired workflow shape and scheduling.
- Convenient workflow management: DAG (Direct Acyclic Graph: directed acyclic graph) configuration is visualized and managed through a web-based UI, allowing you to easily understand the sequence and parallel relationships of data flow. Additionally, you can easily manage each task’s timeout, retry count, and priority definitions.
Component
Data Ops consists of Manager and Service modules and provides a packaged Apache Airflow.
Data Ops Manager
Data Ops Manager provides various managing features to enable more efficient use of Airflow.
- Through Ops Manager, you can upload Plugin File, Shared File, and Python Library File for use in Ops Service.
- You can easily provision configuration information for Airflow components within the cluster.
- You can manage configuration information for other services within the Airflow cluster and provision it easily.
Data Ops Service
- We provide a managed workflow orchestration service based on Apache Airflow.
- When providing Airflow, you can set the Description, required resource size, DAGs GitSync, and Host Alias.
- After creating the service, you can modify the Description, resource size, DAGs GitSync, and Host Alias to apply changes to the service.
Server spec type
When creating a Data Ops service, check the following.
- Recommended Service Installation Specifications: CPU KubernetesExecutor 43 core, CPU CeleryExecutor 25 core, Memory 50 GB, Storage 100 GB or more
- Before creating the Data Ops service, you need to install the Ingress Controller.
- Only one Ingress Controller can be installed in a Kubernetes cluster.
- For more details, refer to Ingress Controller Installation.
Provision status by region
Data Ops is available in the environments below.
| region | Provision status |
|---|---|
| Korea West (kr-west1) | Provide |
| Korea East (kr-east1) | Provide |
| South Korea South 1 (kr-south1) | Not provided |
| South Korea South 2 (kr-south2) | Not provided |
| Korea South 3 (kr-south3) | Not provided |
Pre-service
This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service for details and prepare them in advance.
| Service Category | service | Detailed description |
|---|---|---|
| Storage | File Storage | Storage that enables multiple client servers to share files over a network connection. |
| Container | Kubernetes Engine | Kubernetes container orchestration service |
5.1.1 - ServiceWatch metric
In ServiceWatch, you can view Kubernetes Engine metrics for the Kubernetes Engine created by Data Ops. As with Kubernetes Engine, the metrics provided by default monitoring are data collected at one‑minute intervals.
Basic Metrics
The following are the default metrics for the Kubernetes Engine namespace.
The metrics whose names are displayed in bold below are the key metrics selected from the default metrics provided by Kubernetes Engine. Key metrics are used to build service dashboards that are automatically created for each service in ServiceWatch.
Each metric provides guidance in the user guide on which statistical values are meaningful when querying that metric, and among the meaningful statistics, the values shown in bold are the primary statistics. In the service dashboard, you can view key metrics using primary statistical values.
| Indicator name | Detailed description | unit | meaningful statistics |
|---|---|---|---|
| cluster_up | Cluster up | Count |
|
| cluster_node_count | Number of cluster nodes | Count |
|
| cluster_failed_node_count | Number of failed nodes in the cluster | Count |
|
| cluster_namespace_phase_count | Number of cluster namespace phases | Count |
|
| cluster_pod_phase_count | Cluster pod phase count | Count |
|
| node_cpu_allocatable | Node CPU allocatable amount | - |
|
| node_cpu_capacity | Node CPU capacity | - |
|
| node_cpu_usage | Node CPU usage | - |
|
| node_cpu_utilization | Node CPU usage | - |
|
| node_memory_allocatable | Node memory allocatable amount | Bytes |
|
| node_memory_capacity | Node memory capacity | Bytes |
|
| node_memory_usage | Node memory usage | Bytes |
|
| node_memory_utilization | Node memory utilization | - |
|
| node_network_rx_bytes | Node network received bytes | Bytes/Second |
|
| node_network_tx_bytes | Node network transmitted bytes | Bytes/Second |
|
| node_network_total_bytes | Total bytes of the node network | Bytes/Second |
|
| node_number_of_running_pods | Number of pods running on the node | Count |
|
| namespace_number_of_running_pods | Number of running pods in the namespace | Count |
|
| namespace_deployment_pod_count | Namespace deployment pod count | Count |
|
| namespace_statefulset_pod_count | Namespace StatefulSet pod count | Count |
|
| namespace_daemonset_pod_count | Namespace daemonset pod count | Count |
|
| namespace_job_active_count | Active namespace job count | Count |
|
| namespace_cronjob_active_count | Number of active namespace cronjobs | Count |
|
| pod_cpu_usage | Pod CPU usage | - |
|
| pod_memory_usage | Pod memory usage | Bytes |
|
| pod_network_rx_bytes | Pod network received bytes | Bytes/Second |
|
| pod_network_tx_bytes | Pod network transmitted bytes | Bytes/Second |
|
| pod_network_total_bytes | Pod network total bytes | Count |
|
| container_cpu_usage | Container CPU usage | - |
|
| container_cpu_limit | Container CPU limit | - |
|
| container_cpu_utilization | Container CPU usage | - |
|
| container_memory_usage | Container memory usage | Bytes |
|
| container_memory_limit | Container memory limit | Bytes |
|
| container_memory_utilization | Container memory usage | - |
|
| node_gpu_count | Node GPU count | Count |
|
| gpu_temp | GPU temperature | - |
|
| gpu_power_usage | GPU power usage | - |
|
| gpu_util | GPU utilization | Percent |
|
| gpu_sm_clock | GPU SM clock | - |
|
| gpu_fb_used | GPU FB usage | Megabytes |
|
| gpu_tensor_active | GPU Tensor Utilization | - |
|
| pod_gpu_util | Pod GPU utilization | Percent |
|
| pod_gpu_tensor_active | Pod GPU Tensor Utilization Rate | - |
|
5.2 - How-to guides
Users can create the service by entering the required Data Ops information and selecting detailed options through the Samsung Cloud Platform Console.
Create Data Ops
You can create and use the Data Ops service in the Samsung Cloud Platform Console.
To create a Data Ops, follow the steps below.
Click the All Services > Data Analytics > Data Ops menu. Navigate to the Service Home page of Data Ops.
On the Service Home page, click the Create Data Ops button. You will be taken to the Create Data Ops page.
On the Data Ops Creation page, enter the information required to create the service and select detailed options.
- Select the required information in the Version selection area.
Category RequiredDetailed description Data Ops version Required Select version of the selected image - Provide a list of versions for the provided server image
Table. Data Ops version selection item - Enter or select the required information in the Cluster Selection area. To install Data Ops, you must first create nodes for the Kubernetes cluster and the work environment.
Category RequiredDetailed description Cluster name Required Select the cluster to use Ingress Controller Required Select the Ingress Controller installed in the cluster Table. Data Ops cluster selection options - Enter or select the required information in the Service Information Input area.
Category Required statusDetailed description Data Ops name Required Enter Data Ops name - Start with a lowercase English letter and ensure it does not end with a special character (
-), using lowercase letters, numbers, and special characters (-) to enter 3 to 30 characters
Storage Class Required Select the storage class used by the selected cluster description Select Enter additional information or description about Data Ops within 150 characters. Domain Settings Required Enter Data Ops domain - Enter 3 to 50 characters, starting with a lowercase English letter and not ending with a special character (
-), using lowercase letters, numbers, and special characters (-)
- {Data Ops name}.{configured domain} becomes the Data Ops access URL.
Node Selector Required To install on a specific node, enter a distinguishable label among the node’s labels - If you enter an incorrect node label, installation errors may occur, so verify the node label in advance
- Node labels can be found in the node’s yaml file
account Required Enter Data Ops Manager account - ID: Start with a lowercase English letter and use lowercase letters and numbers, entering a value between 6 and 30 characters
- Password: Include uppercase (English), lowercase (English), numbers, and special characters (
!@#$%^&*) and enter 8 to 50 characters
- Password Confirmation: Enter the same password again
Host Alias Selection Add host information to be linked with Data Ops (up to 20 total, including defaults) - Select Use, then click the + button
- Hostname: Enter the host name or domain format using lowercase letters, numbers, and special characters (
-) with a length of 3 to 63 characters
- IP: Enter in IP format
- Click the X button to delete
- The firewall between the cluster and the server must be open for the added host information to be usable
Table. Data Ops Service Information Input Items - Start with a lowercase English letter and ensure it does not end with a special character (
- In the Additional Information Input area, enter or select the required information.
Category RequiredDetailed description tag Selection Add Tag - Add Tag Click the button to create and add a tag, or add an existing tag.
- You can add up to 50 tags.
- The newly added tags will be applied after the service creation is completed.
Table. Data Ops additional information input fields
- Select the required information in the Version selection area.
In the Summary panel, verify the detailed information and estimated billing amount, then click the Complete button.
- Once creation is complete, check the created resources on the Data Ops List page.
Check detailed information for Data Ops
You can view and edit the full list of Data Ops resources and detailed information. The Data Ops Details page consists of Details, Tags, Activity History tabs.
To view detailed information about Data Ops, follow these steps.
- Click the All Services > Data Analytics > Data Ops menu. Navigate to the Service Home page of Data Ops.
- On the Service Home page, click the Data Ops menu. You will be taken to the Data Ops List page.
- On the Data Ops List page, click the resource to view detailed information. You will be taken to the Data Ops Detail page.
- Data Ops Details At the top of the page, status information and details about additional features are displayed.
Category Detailed description Status indicator Data Ops status - Creating: Creating
- Running: Running, Data Ops Services are in a creatable state
- Updating: Updating settings
- Terminating: Terminating service
- Error: Error: error occurred during creation or service abnormal state
Hosts file configuration information Button to view and copy the host file information for accessing Data Ops Service termination Button to cancel the service Table. Data Ops status information and additional features
- Data Ops Details At the top of the page, status information and details about additional features are displayed.
Detailed Information
On the Data Ops List page, you can view detailed information of the selected resource and edit the information if needed.
| Category | Detailed description |
|---|---|
| service | Service name |
| Resource Type | Resource Type |
| SRN | Unique resource ID in Samsung Cloud Platform
|
| Resource name | Resource name
|
| Resource ID | Unique resource ID in the service |
| constructor | User who created the service |
| Creation date and time | Service creation date and time |
| editor | User who edited the service information |
| Modification date | Date and time the service information was modified |
| Cluster name | Cluster name of the configured servers |
| Storage Class | Storage class used by the selected cluster |
| description | Additional information or explanation about Data Ops |
| Domain Settings | Data Ops domain name |
| Node Selector | Node Label |
| Web Url | Data Ops URL |
| account | Data Ops Manager account |
| Host Alias | Host information to be connected to Data Ops |
tag
Data Ops list page lets you view the tag information of the selected resource, and you can add, modify, or delete it.
| Category | Detailed description |
|---|---|
| Tag list | Tag list
|
Job History
On the Data Ops List page, you can view the operation history of the selected resource.
| Category | Detailed description |
|---|---|
| Task History List | Resource Change History
|
Terminate Data Ops
You can cancel unused Data Ops to reduce operating costs. However, if you cancel the service, the running service may be terminated immediately, so you should thoroughly consider the impact of service interruption before proceeding with the cancellation.
To terminate Data Ops, follow the steps below.
- Click the All Services > Data Analytics > Data Ops menu. Go to the Service Home page of Data Ops.
- On the Service Home page, click the Data Ops menu. You will be taken to the Data Ops List page.
- On the Data Ops List page, select the resource to cancel, and click the Cancel Service button.
- When termination is complete, verify on the Data Ops List page whether the resource has been terminated.
5.2.1 - Data Ops Services
Users can create the service by entering the required information for Data Ops Services within the Data Ops service through the Samsung Cloud Platform Console and selecting detailed options.
Create Data Ops Services
Users can add a service by selecting detailed options of Data Ops or by entering configuration values.
To create Data Ops Services, follow these steps.
Click the All Services > Data Analytics > Data Ops menu. Navigate to the Service Home page of Data Ops.
On the Service Home page, click Data Ops Servies. You will be taken to the Data Ops Services list page.
On the Data Ops Services List page, click the Create Data Ops Services button. You will be taken to the Create Data Ops Services page.
On the Data Ops Services Creation page, enter the information required to create the service and select detailed options.
- Enter or select the required information in the Service Information Input area.
Category Required statusDetailed description Data Ops name Required Select Data Ops Ops Service name Required Enter the Data Ops Services name - starting with a lowercase English letter and not ending with a special character (
-), using lowercase letters, numbers, and special characters (-) for 3 to 30 characters
Storage Class Required Select the storage class used by the selected cluster Explanation Selection Enter additional information or description about Data Ops Services within 150 characters. Domain Settings Required Data Ops Services domain entry - Enter 3 to 50 characters, starting with a lowercase English letter, not ending with special characters (
-), using lowercase letters, numbers, and special characters (-)
- {Data Ops Services name}.{configured domain} becomes the Data Ops Services access address.
Node Selector Required To install on a specific node, enter a distinguishable label among the node’s Labels - If you enter an incorrect node label, installation errors may occur, so verify the node label in advance
- The node label can be checked in the node’s yaml file
Service Workload Required - Web Server: Provides visualization of DAG components and status, and serves as the Airflow configuration management module
- Scheculer: Manages DAG scheduling and execution to orchestrate various DAGs and their tasks
- Worker: Executes actual orchestration and data processing tasks
- Worker(Kubernetes): When the Worker operates, pods are dynamically created, allowing efficient resource usage. When Kubernetes is selected, the Replica text box is disabled.
- Worker(Celery): When the Worker operates, a static pod is created and maintained, enabling faster handling of a large number of requests. When Celery is selected, the Replica text box is enabled and user input is allowed.
- The selected executor type cannot be changed once chosen
account Required Airflow account input - ID: Start with a lowercase English letter and use lowercase letters and numbers, entering a value between 6 and 30 characters
- Password: Include uppercase (English), lowercase (English), numbers, and special characters (
!@#$%^&*) and enter 8 to 50 characters
- Confirm Password: Re-enter the password identically
Table. Data Ops Services service information input items - starting with a lowercase English letter and not ending with a special character (
- Additional Information Input area, enter or select the required information.
Category required or notDetailed description Host Alias Select Add host information to be linked with Data Ops (up to 20 total, including defaults) - Select Use, then click the + button
- Hostname: Enter the host name or domain format using lowercase letters, numbers, and special characters (
-) with a length of 3 to 63 characters
- IP: Enter in IP format
- Click the X button to delete
- The firewall between the cluster and the server must be open to use the added host information
tag Selection Add Tag - Add Tag Click the button to create and add a tag, or add an existing tag.
- You can add up to 50 tags.
- The newly added tags will be applied after the service creation is completed.
Table. Data Ops additional information input fields
- Enter or select the required information in the Service Information Input area.
Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.
- Once creation is complete, check the created resources on the Data Ops Services List page.
Data Ops Services View detailed information
You can view and edit the full list of resources and detailed information for Data Ops Services. The Data Ops Services Details page consists of Details, Tags, Activity History tabs.
Follow these steps to view detailed information about Data Ops Services.
- Click the All Services > Data Analytics > Data Ops menu. You will be taken to the Service Home page of Data Ops.
- On the Service Home page, click the Data Ops Services menu. You will be taken to the Data Ops Services list page.
- On the Data Ops Services List page, click the resource to view detailed information. You will be taken to the Data Ops Services Details page.
- Data Ops Services Details At the top of the page, status information and additional feature information are displayed.
Category Detailed description Status display Data Ops Services status - Creating: Creating
- Running: Running
- Updating: Updating configuration
- Terminating: Terminating service
- Error: Creation failed or service unavailable
Hosts file configuration information Button to view and copy host file information for accessing Data Ops Services Delete Data Ops Services Cancel service button Table. Data Ops Services status information and additional features
- Data Ops Services Details At the top of the page, status information and additional feature information are displayed.
Detailed Information
Data Ops Services List page lets you view detailed information of the selected resource and modify the information if necessary.
| Category | Detailed description |
|---|---|
| service | Service name |
| Resource Type | Resource Type |
| SRN | Unique resource ID in Samsung Cloud Platform
|
| Resource name | Resource name
|
| Resource ID | Unique resource ID in the service |
| constructor | User who created the service |
| Creation date and time | Service creation date and time |
| editor | User who edited the service information |
| Modification date | Date and time the service information was modified |
| Data Ops name | Data Ops name |
| Storage Class | Storage class used by the selected cluster |
| description | Additional information or explanation about Data Ops Services |
| Domain Settings | Data Ops Services domain name |
| Node Selector | Node Lable |
| Web Url | Data Ops Services URL |
| account | Airflow account |
| Host Alias | Host information to be connected to Data Ops Services |
tag
Data Ops Services List page allows you to view the tag information of the selected resource, and to add, modify, or delete it.
| Category | Detailed description |
|---|---|
| Tag list | Tag list
|
Job History
You can view the operation history of the selected resource on the Data Ops Services List page.
| Category | Detailed description |
|---|---|
| Task History List | Resource Change History
|
Data Ops Services Terminate
You can cancel unused Data Ops Services to reduce operating costs. However, canceling a service may cause the running service to stop immediately, so you should fully consider the impact of any service interruption before proceeding with the cancellation.
To cancel Data Ops Services, follow the steps below.
- Click the All Services > Data Analytics > Data Ops menu. Go to the Service Home page of Data Ops.
- From the Service Home page, click the Data Ops Services menu. You will be taken to the Data Ops Services list page.
- On the Data Ops Services List page, select the resource to cancel and click the Data Ops Services Delete button.
- When termination is complete, verify on the Data Ops Services List page whether the resource has been terminated.
5.2.2 - Installing Ingress Controller
The user must install an Ingress Controller before creating a Data Ops service. Only one Ingress Controller should be installed in the Kubernetes cluster.
Installing Ingress Controller using Container Registry
Follow these steps to install the Ingress Controller using the Container Registry.
- After checking the service domain, you can locate the corresponding Ingress Controller image file and copy or download it.Table. Yaml file by domain
- Click the All Services > Container > Kubernetes Engine > Workloads > Pods menu. You will be taken to the Pod List page.
- Click the Create Object button. The Create Object popup opens.
- After selecting the cluster where you will install Data Ops, copy and paste the contents of the Yaml file.
- Click the Confirm button to complete the installation. The installed Ingress Controller can be viewed in the list.
IngressController For Enterprise (KR-WEST1)
apiVersion: v1
kind: Namespace
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
rules:
- apiGroups:
-
resources:
- namespaces
verbs:
- get
- apiGroups:
-
resources:
- configmaps
- pods
- secrets
- endpoints
verbs:
- get
- list
- watch
- apiGroups:
-
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- coordination.k8s.io
resourceNames:
- dss-ingress-nginx-leader
resources:
- leases
verbs:
- get
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- apiGroups:
-
resources:
- events
verbs:
- create
- patch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
rules:
- apiGroups:
- ""
resources:
- configmaps
- endpoints
- nodes
- pods
- secrets
- namespaces
verbs:
- list
- watch
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- list
- watch
- apiGroups:
- ""
resources:
- nodes
verbs:
- get
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: v1
data:
allow-snippet-annotations: "true"
annotations-risk-level: Critical
kind: ConfigMap
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
externalTrafficPolicy: Cluster
ipFamilies:
- IPv4
ipFamilyPolicy: SingleStack
ports:
- appProtocol: http
name: http
nodePort: 30708
port: 80
protocol: TCP
targetPort: http
- appProtocol: https
name: https
nodePort: 31416
port: 443
protocol: TCP
targetPort: https
selector:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
minReadySeconds: 0
revisionHistoryLimit: 10
selector:
matchLabels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
strategy:
rollingUpdate:
maxUnavailable: 1
type: RollingUpdate
template:
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
spec:
containers:
- args:
- /nginx-ingress-controller
- --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
- --election-id=dss-ingress-nginx-leader
- --controller-class=k8s.io/dss-ingress-controller
- --ingress-class=dss-nginx
- --configmap=$(POD_NAMESPACE)/dss-ingress-controller
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: LD_PRELOAD
value: /usr/local/lib/libmimalloc.so
image: brightixscr.scr.private.kr-west1.e.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
exec:
command:
- /wait-shutdown
livenessProbe:
failureThreshold: 5
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: controller
ports:
- containerPort: 80
name: http
protocol: TCP
- containerPort: 443
name: https
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources:
requests:
cpu: 100m
memory: 90Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
add:
- NET_BIND_SERVICE
drop:
- ALL
readOnlyRootFilesystem: false
runAsGroup: 82
runAsNonRoot: true
runAsUser: 101
seccompProfile:
type: RuntimeDefault
dnsPolicy: ClusterFirst
nodeSelector:
kubernetes.io/os: linux
serviceAccountName: dss-ingress
terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
annotations:
ingressclass.kubernetes.io/is-default-class: "true"
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-nginx
spec:
controller: k8s.io/dss-ingress-controllerapiVersion: v1
kind: Namespace
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
rules:
- apiGroups:
-
resources:
- namespaces
verbs:
- get
- apiGroups:
-
resources:
- configmaps
- pods
- secrets
- endpoints
verbs:
- get
- list
- watch
- apiGroups:
-
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- coordination.k8s.io
resourceNames:
- dss-ingress-nginx-leader
resources:
- leases
verbs:
- get
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- apiGroups:
-
resources:
- events
verbs:
- create
- patch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
rules:
- apiGroups:
- ""
resources:
- configmaps
- endpoints
- nodes
- pods
- secrets
- namespaces
verbs:
- list
- watch
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- list
- watch
- apiGroups:
- ""
resources:
- nodes
verbs:
- get
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: v1
data:
allow-snippet-annotations: "true"
annotations-risk-level: Critical
kind: ConfigMap
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
externalTrafficPolicy: Cluster
ipFamilies:
- IPv4
ipFamilyPolicy: SingleStack
ports:
- appProtocol: http
name: http
nodePort: 30708
port: 80
protocol: TCP
targetPort: http
- appProtocol: https
name: https
nodePort: 31416
port: 443
protocol: TCP
targetPort: https
selector:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
minReadySeconds: 0
revisionHistoryLimit: 10
selector:
matchLabels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
strategy:
rollingUpdate:
maxUnavailable: 1
type: RollingUpdate
template:
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
spec:
containers:
- args:
- /nginx-ingress-controller
- --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
- --election-id=dss-ingress-nginx-leader
- --controller-class=k8s.io/dss-ingress-controller
- --ingress-class=dss-nginx
- --configmap=$(POD_NAMESPACE)/dss-ingress-controller
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: LD_PRELOAD
value: /usr/local/lib/libmimalloc.so
image: brightixscr.scr.private.kr-west1.e.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
exec:
command:
- /wait-shutdown
livenessProbe:
failureThreshold: 5
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: controller
ports:
- containerPort: 80
name: http
protocol: TCP
- containerPort: 443
name: https
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources:
requests:
cpu: 100m
memory: 90Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
add:
- NET_BIND_SERVICE
drop:
- ALL
readOnlyRootFilesystem: false
runAsGroup: 82
runAsNonRoot: true
runAsUser: 101
seccompProfile:
type: RuntimeDefault
dnsPolicy: ClusterFirst
nodeSelector:
kubernetes.io/os: linux
serviceAccountName: dss-ingress
terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
annotations:
ingressclass.kubernetes.io/is-default-class: "true"
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-nginx
spec:
controller: k8s.io/dss-ingress-controllerIngressController For Enterprise (KR-EAST1)
apiVersion: v1
kind: Namespace
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
rules:
- apiGroups:
- ""
resources:
- namespaces
verbs:
- get
- apiGroups:
- ""
resources:
- configmaps
- pods
- secrets
- endpoints
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- coordination.k8s.io
resourceNames:
- dss-ingress-nginx-leader
resources:
- leases
verbs:
- get
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
rules:
- apiGroups:
-
resources:
- configmaps
- endpoints
- nodes
- pods
- secrets
- namespaces
verbs:
- list
- watch
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- list
- watch
- apiGroups:
-
resources:
- nodes
verbs:
- get
- apiGroups:
-
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
-
resources:
- events
verbs:
- create
- patch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: v1
data:
allow-snippet-annotations: "true"
annotations-risk-level: Critical
kind: ConfigMap
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
externalTrafficPolicy: Cluster
ipFamilies:
- IPv4
ipFamilyPolicy: SingleStack
ports:
- appProtocol: http
name: http
nodePort: 30708
port: 80
protocol: TCP
targetPort: http
- appProtocol: https
name: https
nodePort: 31416
port: 443
protocol: TCP
targetPort: https
selector:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
minReadySeconds: 0
revisionHistoryLimit: 10
selector:
matchLabels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
strategy:
rollingUpdate:
maxUnavailable: 1
type: RollingUpdate
template:
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
spec:
containers:
- args:
- /nginx-ingress-controller
- --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
- --election-id=dss-ingress-nginx-leader
- --controller-class=k8s.io/dss-ingress-controller
- --ingress-class=dss-nginx
- --configmap=$(POD_NAMESPACE)/dss-ingress-controller
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: LD_PRELOAD
value: /usr/local/lib/libmimalloc.so
image: brightixscr.scr.private.kr-east1.e.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
exec:
command:
- /wait-shutdown
livenessProbe:
failureThreshold: 5
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: controller
ports:
- containerPort: 80
name: http
protocol: TCP
- containerPort: 443
name: https
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources:
requests:
cpu: 100m
memory: 90Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
add:
- NET_BIND_SERVICE
drop:
- ALL
readOnlyRootFilesystem: false
runAsGroup: 82
runAsNonRoot: true
runAsUser: 101
seccompProfile:
type: RuntimeDefault
dnsPolicy: ClusterFirst
nodeSelector:
kubernetes.io/os: linux
serviceAccountName: dss-ingress
terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
annotations:
ingressclass.kubernetes.io/is-default-class: "true"
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-nginx
spec:
controller: k8s.io/dss-ingress-controllerapiVersion: v1
kind: Namespace
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
rules:
- apiGroups:
- ""
resources:
- namespaces
verbs:
- get
- apiGroups:
- ""
resources:
- configmaps
- pods
- secrets
- endpoints
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- coordination.k8s.io
resourceNames:
- dss-ingress-nginx-leader
resources:
- leases
verbs:
- get
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
rules:
- apiGroups:
-
resources:
- configmaps
- endpoints
- nodes
- pods
- secrets
- namespaces
verbs:
- list
- watch
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- list
- watch
- apiGroups:
-
resources:
- nodes
verbs:
- get
- apiGroups:
-
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
-
resources:
- events
verbs:
- create
- patch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: v1
data:
allow-snippet-annotations: "true"
annotations-risk-level: Critical
kind: ConfigMap
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
externalTrafficPolicy: Cluster
ipFamilies:
- IPv4
ipFamilyPolicy: SingleStack
ports:
- appProtocol: http
name: http
nodePort: 30708
port: 80
protocol: TCP
targetPort: http
- appProtocol: https
name: https
nodePort: 31416
port: 443
protocol: TCP
targetPort: https
selector:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
minReadySeconds: 0
revisionHistoryLimit: 10
selector:
matchLabels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
strategy:
rollingUpdate:
maxUnavailable: 1
type: RollingUpdate
template:
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
spec:
containers:
- args:
- /nginx-ingress-controller
- --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
- --election-id=dss-ingress-nginx-leader
- --controller-class=k8s.io/dss-ingress-controller
- --ingress-class=dss-nginx
- --configmap=$(POD_NAMESPACE)/dss-ingress-controller
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: LD_PRELOAD
value: /usr/local/lib/libmimalloc.so
image: brightixscr.scr.private.kr-east1.e.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
exec:
command:
- /wait-shutdown
livenessProbe:
failureThreshold: 5
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: controller
ports:
- containerPort: 80
name: http
protocol: TCP
- containerPort: 443
name: https
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources:
requests:
cpu: 100m
memory: 90Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
add:
- NET_BIND_SERVICE
drop:
- ALL
readOnlyRootFilesystem: false
runAsGroup: 82
runAsNonRoot: true
runAsUser: 101
seccompProfile:
type: RuntimeDefault
dnsPolicy: ClusterFirst
nodeSelector:
kubernetes.io/os: linux
serviceAccountName: dss-ingress
terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
annotations:
ingressclass.kubernetes.io/is-default-class: "true"
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-nginx
spec:
controller: k8s.io/dss-ingress-controllerIngressController For Samsung (KR-WEST1)
apiVersion: v1
kind: Namespace
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
rules:
- apiGroups:
-
resources:
- namespaces
verbs:
- get
- apiGroups:
-
resources:
- configmaps
- pods
- secrets
- endpoints
verbs:
- get
- list
- watch
- apiGroups:
-
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- coordination.k8s.io
resourceNames:
- dss-ingress-nginx-leader
resources:
- leases
verbs:
- get
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- apiGroups:
-
resources:
- events
verbs:
- create
- patch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
rules:
- apiGroups:
- ""
resources:
- configmaps
- endpoints
- nodes
- pods
- secrets
- namespaces
verbs:
- list
- watch
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- list
- watch
- apiGroups:
- ""
resources:
- nodes
verbs:
- get
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: v1
data:
allow-snippet-annotations: "true"
annotations-risk-level: Critical
kind: ConfigMap
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
externalTrafficPolicy: Cluster
ipFamilies:
- IPv4
ipFamilyPolicy: SingleStack
ports:
- appProtocol: http
name: http
nodePort: 30708
port: 80
protocol: TCP
targetPort: http
- appProtocol: https
name: https
nodePort: 31416
port: 443
protocol: TCP
targetPort: https
selector:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
minReadySeconds: 0
revisionHistoryLimit: 10
selector:
matchLabels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
strategy:
rollingUpdate:
maxUnavailable: 1
type: RollingUpdate
template:
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
spec:
containers:
- args:
- /nginx-ingress-controller
- --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
- --election-id=dss-ingress-nginx-leader
- --controller-class=k8s.io/dss-ingress-controller
- --ingress-class=dss-nginx
- --configmap=$(POD_NAMESPACE)/dss-ingress-controller
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: LD_PRELOAD
value: /usr/local/lib/libmimalloc.so
image: brightixscr.scr.private.kr-west1.s.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
exec:
command:
- /wait-shutdown
livenessProbe:
failureThreshold: 5
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: controller
ports:
- containerPort: 80
name: http
protocol: TCP
- containerPort: 443
name: https
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources:
requests:
cpu: 100m
memory: 90Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
add:
- NET_BIND_SERVICE
drop:
- ALL
readOnlyRootFilesystem: false
runAsGroup: 82
runAsNonRoot: true
runAsUser: 101
seccompProfile:
type: RuntimeDefault
dnsPolicy: ClusterFirst
nodeSelector:
kubernetes.io/os: linux
serviceAccountName: dss-ingress
terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
annotations:
ingressclass.kubernetes.io/is-default-class: "true"
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-nginx
spec:
controller: k8s.io/dss-ingress-controllerapiVersion: v1
kind: Namespace
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
rules:
- apiGroups:
-
resources:
- namespaces
verbs:
- get
- apiGroups:
-
resources:
- configmaps
- pods
- secrets
- endpoints
verbs:
- get
- list
- watch
- apiGroups:
-
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- coordination.k8s.io
resourceNames:
- dss-ingress-nginx-leader
resources:
- leases
verbs:
- get
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- apiGroups:
-
resources:
- events
verbs:
- create
- patch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
rules:
- apiGroups:
- ""
resources:
- configmaps
- endpoints
- nodes
- pods
- secrets
- namespaces
verbs:
- list
- watch
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- list
- watch
- apiGroups:
- ""
resources:
- nodes
verbs:
- get
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: v1
data:
allow-snippet-annotations: "true"
annotations-risk-level: Critical
kind: ConfigMap
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
externalTrafficPolicy: Cluster
ipFamilies:
- IPv4
ipFamilyPolicy: SingleStack
ports:
- appProtocol: http
name: http
nodePort: 30708
port: 80
protocol: TCP
targetPort: http
- appProtocol: https
name: https
nodePort: 31416
port: 443
protocol: TCP
targetPort: https
selector:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
minReadySeconds: 0
revisionHistoryLimit: 10
selector:
matchLabels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
strategy:
rollingUpdate:
maxUnavailable: 1
type: RollingUpdate
template:
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
spec:
containers:
- args:
- /nginx-ingress-controller
- --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
- --election-id=dss-ingress-nginx-leader
- --controller-class=k8s.io/dss-ingress-controller
- --ingress-class=dss-nginx
- --configmap=$(POD_NAMESPACE)/dss-ingress-controller
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: LD_PRELOAD
value: /usr/local/lib/libmimalloc.so
image: brightixscr.scr.private.kr-west1.s.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
exec:
command:
- /wait-shutdown
livenessProbe:
failureThreshold: 5
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: controller
ports:
- containerPort: 80
name: http
protocol: TCP
- containerPort: 443
name: https
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources:
requests:
cpu: 100m
memory: 90Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
add:
- NET_BIND_SERVICE
drop:
- ALL
readOnlyRootFilesystem: false
runAsGroup: 82
runAsNonRoot: true
runAsUser: 101
seccompProfile:
type: RuntimeDefault
dnsPolicy: ClusterFirst
nodeSelector:
kubernetes.io/os: linux
serviceAccountName: dss-ingress
terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
annotations:
ingressclass.kubernetes.io/is-default-class: "true"
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-nginx
spec:
controller: k8s.io/dss-ingress-controllerIngressController For Samsung (KR-EAST1)
apiVersion: v1
kind: Namespace
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
rules:
- apiGroups:
- ""
resources:
- namespaces
verbs:
- get
- apiGroups:
- ""
resources:
- configmaps
- pods
- secrets
- endpoints
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- coordination.k8s.io
resourceNames:
- dss-ingress-nginx-leader
resources:
- leases
verbs:
- get
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
rules:
- apiGroups:
-
resources:
- configmaps
- endpoints
- nodes
- pods
- secrets
- namespaces
verbs:
- list
- watch
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- list
- watch
- apiGroups:
-
resources:
- nodes
verbs:
- get
- apiGroups:
-
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
-
resources:
- events
verbs:
- create
- patch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: v1
data:
allow-snippet-annotations: "true"
annotations-risk-level: Critical
kind: ConfigMap
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
externalTrafficPolicy: Cluster
ipFamilies:
- IPv4
ipFamilyPolicy: SingleStack
ports:
- appProtocol: http
name: http
nodePort: 30708
port: 80
protocol: TCP
targetPort: http
- appProtocol: https
name: https
nodePort: 31416
port: 443
protocol: TCP
targetPort: https
selector:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
minReadySeconds: 0
revisionHistoryLimit: 10
selector:
matchLabels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
strategy:
rollingUpdate:
maxUnavailable: 1
type: RollingUpdate
template:
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
spec:
containers:
- args:
- /nginx-ingress-controller
- --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
- --election-id=dss-ingress-nginx-leader
- --controller-class=k8s.io/dss-ingress-controller
- --ingress-class=dss-nginx
- --configmap=$(POD_NAMESPACE)/dss-ingress-controller
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: LD_PRELOAD
value: /usr/local/lib/libmimalloc.so
image: brightixscr.scr.private.kr-east1.s.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
exec:
command:
- /wait-shutdown
livenessProbe:
failureThreshold: 5
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: controller
ports:
- containerPort: 80
name: http
protocol: TCP
- containerPort: 443
name: https
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources:
requests:
cpu: 100m
memory: 90Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
add:
- NET_BIND_SERVICE
drop:
- ALL
readOnlyRootFilesystem: false
runAsGroup: 82
runAsNonRoot: true
runAsUser: 101
seccompProfile:
type: RuntimeDefault
dnsPolicy: ClusterFirst
nodeSelector:
kubernetes.io/os: linux
serviceAccountName: dss-ingress
terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
annotations:
ingressclass.kubernetes.io/is-default-class: "true"
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-nginx
spec:
controller: k8s.io/dss-ingress-controllerapiVersion: v1
kind: Namespace
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
name: dss-ingress
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
rules:
- apiGroups:
- ""
resources:
- namespaces
verbs:
- get
- apiGroups:
- ""
resources:
- configmaps
- pods
- secrets
- endpoints
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- coordination.k8s.io
resourceNames:
- dss-ingress-nginx-leader
resources:
- leases
verbs:
- get
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
rules:
- apiGroups:
-
resources:
- configmaps
- endpoints
- nodes
- pods
- secrets
- namespaces
verbs:
- list
- watch
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- list
- watch
- apiGroups:
-
resources:
- nodes
verbs:
- get
- apiGroups:
-
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
-
resources:
- events
verbs:
- create
- patch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- list
- watch
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
namespace: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: dss-ingress
subjects:
- kind: ServiceAccount
name: dss-ingress
namespace: dss-ingress
---
apiVersion: v1
data:
allow-snippet-annotations: "true"
annotations-risk-level: Critical
kind: ConfigMap
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
---
apiVersion: v1
kind: Service
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
externalTrafficPolicy: Cluster
ipFamilies:
- IPv4
ipFamilyPolicy: SingleStack
ports:
- appProtocol: http
name: http
nodePort: 30708
port: 80
protocol: TCP
targetPort: http
- appProtocol: https
name: https
nodePort: 31416
port: 443
protocol: TCP
targetPort: https
selector:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-ingress-controller
namespace: dss-ingress
spec:
minReadySeconds: 0
revisionHistoryLimit: 10
selector:
matchLabels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
strategy:
rollingUpdate:
maxUnavailable: 1
type: RollingUpdate
template:
metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
spec:
containers:
- args:
- /nginx-ingress-controller
- --publish-service=$(POD_NAMESPACE)/dss-ingress-controller
- --election-id=dss-ingress-nginx-leader
- --controller-class=k8s.io/dss-ingress-controller
- --ingress-class=dss-nginx
- --configmap=$(POD_NAMESPACE)/dss-ingress-controller
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: LD_PRELOAD
value: /usr/local/lib/libmimalloc.so
image: brightixscr.scr.private.kr-east1.s.samsungsdscloud.com/brightics-df/nginx-ingress-controller:v1.12.3
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
exec:
command:
- /wait-shutdown
livenessProbe:
failureThreshold: 5
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: controller
ports:
- containerPort: 80
name: http
protocol: TCP
- containerPort: 443
name: https
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources:
requests:
cpu: 100m
memory: 90Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
add:
- NET_BIND_SERVICE
drop:
- ALL
readOnlyRootFilesystem: false
runAsGroup: 82
runAsNonRoot: true
runAsUser: 101
seccompProfile:
type: RuntimeDefault
dnsPolicy: ClusterFirst
nodeSelector:
kubernetes.io/os: linux
serviceAccountName: dss-ingress
terminationGracePeriodSeconds: 300
---
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
annotations:
ingressclass.kubernetes.io/is-default-class: "true"
labels:
app: ingress-controller
app.kubernetes.io/component: controller
app.kubernetes.io/instance: dss-ingress
app.kubernetes.io/name: dss-ingress
app.kubernetes.io/part-of: dss-ingress
app.kubernetes.io/version: 1.12.3
name: dss-nginx
spec:
controller: k8s.io/dss-ingress-controller5.3 - API Reference
5.4 - CLI Reference
5.5 - Release Note
Data Ops
- A Data Ops service that creates workflows for data processing tasks that occur periodically or repeatedly and automates job scheduling has been launched.
- It is a managed workflow orchestration service based on Apache Airflow.
6 - Quick Query
6.1 - Overview
Service Overview
Quick Query is an interactive query service that allows you to easily and quickly analyze large-scale data using standard SQL. It is automatically installed on a standard Kubernetes cluster, and you can easily and quickly access various data sources such as Cloud Hadoop, Object Storage, and RDB for data retrieval and processing.
Features
- Easy and Fast Data Retrieval: After defining a schema for data stored in Object Storage and executing queries using standard SQL, you can retrieve data easily and quickly. Any user who can work with SQL can easily analyze large data sets, even without being a professional analyst.
- Fast Parallel Distributed Processing: Using the Trino engine capable of parallel distributed processing, queries are automatically split and processed in parallel across multiple nodes simultaneously, allowing rapid query results even for large-scale data.
- Various Service Architectures: We provide a public fixed-resource mode, a public resource-scaling mode, and a personal resource-scaling mode. The public fixed-resource mode supports stable response times for large-scale data queries, while the public resource-scaling mode can be used at a lower cost when usage frequency is irregular. Additionally, the personal resource-scaling mode enables each user to perform analysis tasks in an independent environment, allowing the use of Quick Query with a structure that meets user requirements.
Service Architecture Diagram
Provided features
Quick Query provides the following features.
- Support single access to various data sources (support for 11 types of data sources)
- Automatic saving of result data in Object Storage
- Result reuse feature for identical queries
- Access control feature through Ranger integration
- Data Usage Control Feature
| Category | type | Remarks |
|---|---|---|
| Cloud Hadoop | hive_on_cloud_hadoop iceberg_on_cloud_hadoop | Using Hive Metastore in Cloud Hadoop |
| Object Storage | hive_on_object_storage iceberg_on_object_storag | Deploy and use Hive Metastore in Quick Query |
| RDB | postgresql mariadb sqlserver oracle mysql | JDBC Driver Upload needed (license) |
| TPCDS | tpcds | Built-in Data Source provided by Quick Query |
| TPCH | tpch | Built-in Data Source provided by Quick Query |
| type | select | insert | uptate | delete | create | drop | alter | analyze | call |
|---|---|---|---|---|---|---|---|---|---|
| hive_on_cloud_hadoop | O | O | O | O | O | O | O | O | O |
| iceberg_on_cloud_hadoop | O | O | O | O | O | O | O | O | O |
| hive_on_object_storage | O | O | O | O | O | O | O | O | O |
| iceberg_on_object_storage | O | O | O | O | O | O | O | O | O |
| postgresql | O | O | O | O | O | O | |||
| mariadb | O | O | O | O | O | O | |||
| sqlserver | O | O | O | O | O | O | |||
| greenplum | O | O | O | O | O | O | |||
| oracle | O | O | O | O | O | O | |||
| mysql | O | O | O | O | O | O | |||
| tpcds | O | ||||||||
| tpch | O |
Component
Query Engine Type: Shared
The query engine is structured so that a single instance, once started, can be shared by multiple users.
Fixed Resource Mode (Auto Scaling Disabled): When Auto Scaling is not used, the query engine for the fixed resources is launched according to the resources selected by the user. Because the query engine always runs on the same resources, it can guarantee consistent query performance.
Figure. Fixed resource mode (Auto Scaling not used) Resource Expansion Mode (Auto Scaling enabled): When Auto Scaling is used, the query engine’s Worker nodes automatically scale in/out based on throughput. If the throughput is low, the number of Worker nodes can be reduced to as few as one, and when the throughput increases, the Worker nodes expand. Additionally, resources can be adjusted according to the cluster size.
Figure. Resource expansion mode (using Auto Scaling)
Query Engine Type: Private
Resource Expansion Mode (Auto Scaling Enabled): The personal query engine type runs a separate query engine for each user. Each query engine supports Auto Scale in/out, and if unused for an extended period, the engine automatically stops. When reconnecting for reuse, the query engine automatically restarts. When the throughput is low, the number of Worker nodes can decrease to as few as one, and when the throughput increases, the number of Worker nodes grows. Additionally, resources can be adjusted according to the cluster size.
Figure. Resource Expansion Mode (using Auto Scaling)
Server type
The server types supported by Quick Query are as follows.
| Category | example | Detailed description |
|---|---|---|
| Server type | Standard | Provided server types
|
| Server size | s1v2m4 | Provided server specifications
|
The minimum specifications required to use Quick Query are as follows.
| Category | Details | Cluster size (user input value) | Fixed node pool | Auto-scaling node pool |
|---|---|---|---|---|
| Common | Fixed resource mode (Auto Scaling not used) | Replica: 1 CPU: 4 Core Memory: 8GB | 8 Core, 16GB * 4 | N/A |
| Common | Resource expansion mode (Auto Scaling enabled) | Small(1 Core, 4GB) | 8 Core, 16GB * 3 | 8 Core, 16GB * 1 |
| Personal | Resource expansion mode (Auto Scaling enabled) | Small(1 Core, 4GB) | 8 Core, 16GB * 3 | 8 Core, 32GB * 2 |
Provision status by region
Quick Query is available in the following environments.
| region | Provision status |
|---|---|
| Korea West (kr-west1) | Provide |
| Korea East (kr-east1) | Provide |
| South Korea 1 (kr-south1) | Not provided |
| South Korea South 2 (kr-south2) | Not provided |
| South Korea 3 (kr-south3) | Not provided |
Preliminary Service
This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service and prepare in advance.
| Service Category | service | Detailed description |
|---|---|---|
| Networking | VPC | A service that provides an isolated virtual network in a cloud environment |
| Networking | Security Group | Virtual firewall that controls server traffic |
| Storage | File Storage | A storage system that enables multiple client servers to share files over a network connection. |
6.1.1 - ServiceWatch metric
You can view Kubernetes Engine metrics in ServiceWatch for the Kubernetes Engine created from Quick Query. As with Kubernetes Engine, the metrics provided by default monitoring are data collected at one‑minute intervals.
Basic Metrics
The following are basic metrics for the Kubernetes Engine namespace.
The metrics whose names are shown in bold below are the key metrics selected from the default metrics provided by Kubernetes Engine. Key metrics are used to build service dashboards that are automatically created for each service in ServiceWatch.
Each metric provides guidance in the user guide on which statistical values are meaningful when querying that metric, and among the meaningful statistics, the values shown in bold are the primary statistics. In the service dashboard, you can view key metrics using primary statistical values.
| Indicator Name | Detailed description | unit | meaningful statistics |
|---|---|---|---|
| cluster_up | Cluster up | Count |
|
| cluster_node_count | Number of cluster nodes | Count |
|
| cluster_failed_node_count | Number of failed nodes in the cluster | Count |
|
| cluster_namespace_phase_count | Number of cluster namespace phases | Count |
|
| cluster_pod_phase_count | Number of cluster pod phases | Count |
|
| node_cpu_allocatable | Node CPU allocatable amount | - |
|
| node_cpu_capacity | Node CPU capacity | - |
|
| node_cpu_usage | Node CPU usage | - |
|
| node_cpu_utilization | Node CPU usage | - |
|
| node_memory_allocatable | Node memory allocatable amount | Bytes |
|
| node_memory_capacity | Node memory capacity | Bytes |
|
| node_memory_usage | Node memory usage | Bytes |
|
| node_memory_utilization | Node memory usage rate | - |
|
| node_network_rx_bytes | Node network received bytes | Bytes/Second |
|
| node_network_tx_bytes | Node network transmitted bytes | Bytes/Second |
|
| node_network_total_bytes | Total bytes of the node network | Bytes/Second |
|
| node_number_of_running_pods | Number of pods running on the node | Count |
|
| namespace_number_of_running_pods | Number of running pods in the namespace | Count |
|
| namespace_deployment_pod_count | Namespace deployment pod count | Count |
|
| namespace_statefulset_pod_count | Namespace StatefulSet pod count | Count |
|
| namespace_daemonset_pod_count | Number of DaemonSet Pods per Namespace | Count |
|
| namespace_job_active_count | Active namespace job count | Count |
|
| namespace_cronjob_active_count | Number of active namespace cronjobs | Count |
|
| pod_cpu_usage | Pod CPU usage | - |
|
| pod_memory_usage | Pod memory usage | Bytes |
|
| pod_network_rx_bytes | Pod network received bytes | Bytes/Second |
|
| pod_network_tx_bytes | Pod network transmitted bytes | Bytes/Second |
|
| pod_network_total_bytes | Total pod network bytes | Count |
|
| container_cpu_usage | Container CPU usage | - |
|
| container_cpu_limit | Container CPU limit | - |
|
| container_cpu_utilization | Container CPU usage | - |
|
| container_memory_usage | Container memory usage | Bytes |
|
| container_memory_limit | Container memory limit | Bytes |
|
| container_memory_utilization | Container memory usage rate | - |
|
| node_gpu_count | Node GPU count | Count |
|
| gpu_temp | GPU temperature | - |
|
| gpu_power_usage | GPU power consumption | - |
|
| gpu_util | GPU utilization | Percent |
|
| gpu_sm_clock | GPU SM clock | - |
|
| gpu_fb_used | GPU FB usage | Megabytes |
|
| gpu_tensor_active | GPU tensor utilization | - |
|
| pod_gpu_util | Pod GPU utilization | Percent |
|
| pod_gpu_tensor_active | Pod GPU Tensor Utilization Rate | - |
|
6.2 - How-to guides
Users can create the service by entering the required Quick Query information and selecting detailed options through the Samsung Cloud Platform Console.
Create Quick Query
You can create and use the Quick Query service in the Samsung Cloud Platform Console.
To create a Quick Query, follow these steps.
Click the All Services > Data Analytics > Quick Query menu. Go to the Service Home page of Quick Query.
On the Service Home page, click the Quick Query Create button. You will be taken to the Quick Query Create page.
On the Quick Query creation page, enter the information required to create the service and select detailed options.
- In the Version selection area, select the required information.
Category Required statusDetailed description Quick Query Required Select Quick Query Service Version - Provide a list of available versions
Table. Quick Query Service Version Selection - In the Service Information Input area, enter or select the required information.
Category Required statusDetailed description Quick Query name Required Enter Quick Query name - Start with a lowercase English letter and ensure it does not end with a special character (
-), using lowercase letters, numbers, and special characters (-) to enter 3 ~ 30 characters
description Selection Enter additional information or description about Quick Query within 150 characters. Domain Settings Required Enter Quick Query domain - must start with a lowercase English letter and must not end with a special character (
-,.), using lowercase letters, numbers, and special characters (-,.) to enter 3 to 50 characters
- {Quick Query name}.{configured domain} becomes the Quick Query access URL.
Query engine type Required Select query engine type - Shared: A single query engine is shared among multiple users
- Personal: Each user uses a separate engine
Cluster size Required Select resource capacity for cluster configuration - When the engine type is selected as Public
- If Auto Scaling is set to Enabled, you can choose the cluster capacity from Small, Medium, Large, or Extra Large.
- If Auto Scaling is not set to Enabled, you can configure the cluster capacity by specifying Replica, CPU, and Memory.
- When the engine type is selected as Private
- You can select the cluster capacity from Small, Medium, Large, or Extra Large.
- Engine capacity (when Auto Scaling is enabled)
- Small: 1Core, 4GB
- Medium: 4Core, 16GB
- Large: 8Core, 64GB
- Extra Large: 16Core, 128GB
- Engine capacity (when Auto Scaling is disabled)
- Replica: can be set from 1 to 9, default: 1
- CPU: can be set from 4 to 24 (allowed values: 4, 6, 8, 10, 12, 14, 16, 18, 20, 22, 24), default: 4
- Memory: can be set from 8 to 256 (allowed values: 8, 16, 32, 64, 128, 192, 256), default: 8
Maximum number of concurrent queries Required Select the maximum number of queries to run simultaneously in Quick Query - Selectable values: 32, 64, 96, 128
Data Service Console connection Required Enter Data Service Console domain - that starts with a lowercase English letter and does not end with a special character (
-,.)using lowercase letters, numbers, and special characters (-,.)to enter 3 to 50 characters
Host Alias Selection Add host information to be linked with Quick Query (up to 20 total, including defaults) - After selecting Use, click the + button
- Hostname: Enter 3–63 characters using lowercase letters, numbers, and special characters (
-,.) in host name or domain format
- IP: Enter in IP format
- To delete, click the X button
- The added host information can be used only if the firewall between the cluster and the server is open
Table. Quick Query Service Information Input - Start with a lowercase English letter and ensure it does not end with a special character (
- In the Cluster Information Input area, enter or select the required information.
Category RequiredDetailed description Cluster name Required Enter cluster name - must start with a lowercase English letter and must not end with a special character (
-), using lowercase letters, numbers, and special characters (-) enter 3 to 30 characters
Control area setting Required/Optional - Kubernetes version: Display Kubernetes version
- You can upgrade the Kubernetes version after provisioning.
- Public endpoint access: To enable access to the Kubernetes API server endpoint from outside, select Use and then enter the Access control IP range (cannot be changed after service request).
- Control plane logging: Select whether to enable control plane logging
- If you select Use, you can view the cluster control plane’s Audit/Event logs in Management > Cloud Monitoring > Log Analytics.
- Log storage up to 1GB for all services in the project is provided for free, and logs exceeding 1GB are deleted sequentially.
Network Settings Required Network Connection Settings - VPC: Use the same VPC as the Data Service Console
- Subnet: Select the subnet to use from the chosen VPC’s subnets
- Security Group: After clicking Search, select a security group in the Select Security Group popup
File Storage configuration Required Select file storage volume to use in the cluster - Default Volume (NFS): After clicking Search, select file storage in the File Storage Selection popup
Table. Quick Query Service Cluster Information Input - must start with a lowercase English letter and must not end with a special character (
- Node Pool Information Input Enter or select the required information in this area.
Category Required statusDetailed description Node pool configuration Required/Optional Enter detailed information for the node pool to add - * Items marked with an asterisk are required fields
- If the Query Engine Type is Public and Auto Scaling is set to Disabled, only the Node Pool Configuration (Fixed) option can be configured.
- Keypair: Select the authentication method used when connecting to the Virtual Server
Table. Quick Query Service Node Pool Information Input - * Items marked with an asterisk are required fields
- In the Additional Information Input area, enter or select the required information.
Category Whether requiredDetailed description tag Selection Add Tag - Add Tag Click the button to create and add a tag, or add an existing tag.
- You can add up to 50 tags.
- The newly added tags will be applied after the service creation is completed.
Table. Quick Query Service Additional Information Input
- In the Version selection area, select the required information.
Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.
- When creation is complete, check the created resource on the Quick Query List page.
Quick Query Check detailed information
You can view and edit the complete list of resources and detailed information of the Quick Query service. The Quick Query Details page consists of Detailed Information, Tags, Activity Log tabs.
Follow these steps to view the detailed information of the Quick Query service.
- Click the All Services > Data Analytics > Quick Query menu. Navigate to the Service Home page of Quick Query.
- On the Service Home page, click the Quick Query menu. Navigate to the Quick Query list page.
- Quick Query List page: click the resource to view detailed information. You will be taken to the Quick Query Detail page.
- Quick Query Details At the top of the page, status information and additional feature information are displayed.
Category Detailed description Status display Status of user-created Quick Query - Creating: In progress
- Running: Creation complete, service available
- Updating: Updating settings
- Terminating: Service termination in progress
- Error: Error occurred during creation or service abnormal state
Hosts file configuration information Button to view and copy host file information for accessing Quick Query and Data Service Console Service termination Cancel service button Table. Quick Query Status Information and Additional Features
- Quick Query Details At the top of the page, status information and additional feature information are displayed.
Detailed Information
Quick Query List page allows you to view detailed information of the selected resource and edit the information if needed.
| Category | Detailed description |
|---|---|
| service | Service name |
| Resource Type | Resource Type |
| SRN | Unique resource ID in Samsung Cloud Platform
|
| Resource name | Resource name
|
| Resource ID | Unique resource ID in the service |
| constructor | User who created the service |
| Creation date and time | Service creation date and time |
| editor | User who edited the service information |
| Modification date | Date and time the service information was modified |
| Quick Query name | Quick Query name |
| description | Additional information or explanation about Quick Query |
| Version | Quick Query version |
| Service type | Quick Query Service Type |
| Query engine type | Quick Query engine type |
| Engine Spec |
|
| Maximum number of concurrent queries | Maximum number of queries to run simultaneously in Quick Query |
| Domain Settings | Quick Query domain |
| Data Service Console | Data Service Console domain |
| Host Alias | Host information for Quick Query connection |
| Web URL | Web URLs of Data Service Console and Quick Query |
| Cluster name | Cluster name of the configured servers |
| Installation node information | Detailed information of the installed node pool |
tag
Quick Query List page lets you view the tag information of the selected resource, and add, modify, or delete it.
| Category | Detailed description |
|---|---|
| Tag list | Tag list
|
Job History
You can view the operation history of the selected resource on the Quick Query List page.
| Category | Detailed description |
|---|---|
| Task History List | Resource Change History
|
Quick Query Connect
Follow these steps to access Quick Query.
- Check the IP of the Windows system(PC) that will connect to Quick Query.
- Since external access is required, you need to check the system’s public IP.
- Check that the IGW connection in the VPC where Quick Query is installed is enabled.
- An Internet Gateway that can be connected must be configured for external access.
- Add the following to the Windows system’s hosts file. You can view it by clicking Hosts file setting information on the Quick Query detail screen.
- Domain address of Data Service Console
- Domain address of Data Service Console IAM
- Domain address of Quick Query
- Add the following rule to the VPC IGW firewall you selected when applying for the Quick Query service.
Category Protocol Source Target IP Port Inbound TCP User IP Load Balancer service IP 80,443 Table. VPC IGW Firewall Rules - Add the following rule to the Load Balancer Firewall you selected when applying for the Quick Query service.
Category Protocol Source Target IP Port Outbound TCP User IP Load Balancer service IP 80,443 Inbound TCP Load Balancer’s Source NAT IP Subnet range of the Kubernetes Node Pool 30000-32767 TCP Load Balancer’s Health Check IP Subnet range of the Kubernetes Node Pool 30000-32767 Table. Load Balancer Firewall Rules - Add the following rule to the Security Group you selected when applying for the Quick Query service.
Category Protocol Target IP Port Inbound TCP Load Balancer’s Source NAT IP 30000-32767 TCP Load Balancer’s Health Check IP 30000-32767 Table. Security Group Rules - On the Windows system (PC) you want to connect to, launch the Chrome browser and then access the Quick Query URL.
Terminate Quick Query
You can cancel the unused service to reduce operating costs. However, canceling the service may immediately stop the running service, so you should thoroughly consider the impact of service interruption before proceeding with the cancellation.
To cancel Quick Query, follow the steps below.
- Click the All Services > Data Analytics > Quick Query menu. Go to the Service Home page of Quick Query.
- On the Service Home page, click the Quick Query menu. You will be taken to the Quick Query List page.
- On the Quick Query List page, select the resource to cancel, and click the Cancel Service button.
- After the termination is complete, check on the Quick Query list page whether the resource has been terminated.
6.3 - API Reference
6.4 - CLI Reference
6.5 - Release Note
Quick Query
- The Quick Query service, which allows you to easily analyze large-scale data using standard SQL, has been launched.
7 - Cloud Hadoop
7.1 - Overview
Service Overview
Cloud Hadoop is a service for easily and quickly analyzing large-scale data, providing a Hadoop cluster (computing resources, management tools, and applications) used for big data processing and analysis in the SCP environment.
Features
Cloud Hadoop provides an automated cluster creation service through the Hadoop Manager and the Hadoop Ecosystem(ecosystem) composed of Spark, HDFS(Hadoop distributed file system), Hive, etc., enabling anyone to easily build, optimize, or flexibly scale infrastructure for big data analysis.
Service Diagram
Provided features
Cloud Hadoop provides the following features.
Provide Hadoop Cluster as a cloud service
- Providing a Hadoop Cluster through automated cluster installation in the SDS Cloud environment
- Perform essential operational activities for cluster management (cluster operation/monitoring)
- Provides a Hadoop ecosystem with verified interoperability and allows users to access the server (VM)
Offer the Hadoop service stack as separate products (increase nodes per product)
- Minimum node allocation per product for stable service operation
- Providing diverse product selection opportunities to meet user needs and reduce costs
Providing user-friendly features for Hadoop services
- Provides installation and management functions for each Hadoop ecosystem, optimal configuration values, and version management features.
- Provide an integrated monitoring dashboard for system resources
- Provides Service Failure Alert feature
Component
We package the major components of the Hadoop ecosystem to deliver an enterprise data cloud.
Service Configuration
Cloud Hadoop provides the following services.
- Basic Installation Service
- HDFS 3.3.6
- YARN 3.3.6
- Hbase 2.4.17
- Hive 3.1.2
- Tez 0.9.1
- Hue 4.11.0
- Solr 8.11.4
- Spark 3.4.1
- Zookeeper 3.8.5
- Additional Option Service
- Data Governance: Atlas 2.1.0, Ranger 2.1.0
- Analytical Data Warehouse: Iceberg 1.8.0, Kyuubi 1.10.2
- Data Ingestion: Sqoop 1.4.7, Kafka 3.9.1, Flume 1.11.0
Server type
The server types supported by Cloud Hadoop are as follows.
Category | example | Detailed description |
|---|---|---|
| Server type | Standard | Provided server types
|
| Server size | s1v4m32 | Provided server specifications
|
The minimum specifications for using Cloud Hadoop are as follows.
Category | Algebra | Instance size (user-selected value) |
|---|---|---|
| Master | 2(fixed) | CPU: 4 Core Memory: 32 GB |
| Worker | 3(minimum) | CPU: 4 Core Memory: 32 GB |
| Data Governance | None | |
| Analytical Data Warehouse | None | |
| Ingestion | 3 (minimum) | CPU: 4 Core Memory: 32 GB |
Provision status by region
Cloud Hadoop is available in the following environments.
| region | Provision status |
|---|---|
| Korea West (kr-west1) | Provide |
| Korea East (kr-east1) | Provide |
| South Korea South1(kr-south1) | Not provided |
| South Korea South 2 (kr-south2) | Not provided |
| South Korea 3 (kr-south3) | Not provided |
Preliminary Service
This is a list of services that need to be pre-configured before creating the service. Please refer to the guide provided for each service and prepare in advance.
| Service Category | service | Detailed description |
|---|---|---|
| Networking | VPC | A service that provides an isolated virtual network in a cloud environment |
| Networking | Security Group | Virtual firewall that controls server traffic |
| Storage | Object Storage | Object storage that simplifies data storage and retrieval |
7.1.1 - ServiceWatch metric
You can view Virtual Server metrics in ServiceWatch for servers created in Cloud Hadoop. Like Virtual Server, the metrics provided by default monitoring are data collected at 5‑minute intervals. In the Virtual Server detailed view, enabling detailed monitoring allows you to view data collected at 1‑minute intervals. For more details, Virtual Server > Enable ServiceWatch Detailed Monitoring
- The basic monitoring and detailed monitoring of Cloud Hadoop are provided with the same metrics as Virtual Server, and the namespace is also provided as Virtual Server.
Basic Metrics
The following are the basic metrics for the Virtual Server namespace.
The indicators whose names are displayed in bold below are the key indicators selected from the basic metrics provided by Virtual Server. Key metrics are used to build service dashboards that are automatically created for each service in ServiceWatch.
Each metric provides guidance in the user guide on which statistical value is meaningful when viewing that metric, and among the meaningful statistics, the values shown in bold are the primary statistics. In the service dashboard, you can view key metrics using primary statistical values.
| Performance items | Detailed description | unit | meaningful statistics |
|---|---|---|---|
| Instance State | Instance status display
| None |
|
| CPU Usage | CPU usage | Percent |
|
| Disk Read Bytes | Bytes read from block device (bytes) | Bytes |
|
| Disk Read Requests | Number of read requests on a block device | Count |
|
| Disk Write Bytes | Write capacity (bytes) on block device | Bytes |
|
| Disk Write Requests | Number of write requests on block device | Count |
|
| Network In Bytes | Received bytes on the network interface | Bytes |
|
| Network In Dropped | Number of packet drops received on the network interface | Count |
|
| Network In Packets | Number of packets received on the network interface | Count |
|
| Network Out Bytes | Data transmitted from the network interface (bytes) | Bytes |
|
| Network Out Dropped | Number of packet drops transmitted from the network interface | Count |
|
| Network Out Packets | Number of packets transmitted on the network interface | Count |
|
7.2 - How-to guides
Users can create the service by entering the required information for Cloud Hadoop and selecting detailed options through the Samsung Cloud Platform Console.
Create Cloud Hadoop
You can create and use the Cloud Hadoop service in the Samsung Cloud Platform Console.
To create Cloud Hadoop, follow these steps.
All Services > Data Analytics > Cloud Hadoop Click the menu. You will be taken to the Service Home page of Cloud Hadoop.
On the Service Home page, click the Create Cloud Hadoop button. You will be taken to the Create Cloud Hadoop page.
On the Cloud Hadoop Creation page, enter the information required to create the service and select detailed options.
- Select the required information in the Image and version selection area.
Category RequiredDetailed description image Required Select the type of image provided - Cloud Hadoop With Ubuntu 22.04
Image version Required Select version of the selected image - Provide a list of versions of the provided image
Table. Cloud Hadoop image and version selection options - Enter or select the required information in the Service Information Input area.
Category RequiredDetailed description Server name Prefix Required Server name for installing Cloud Hadoop - must start with a lowercase English letter and be entered using lowercase letters, numbers, and special characters (
-) with a length of 3 to 13 characters
- A postfix such as 001, 002 is appended to the server name to create the actual server name
Cluster name Required Cluster name of the servers - Enter using English letters, 3 to 20 characters
- A cluster is a unit that groups multiple servers
Planned Compute Selection For servers where Cloud Hadoop is installed, you can use a discounted price by selecting a Planned Compute commitment - All Services > Financial Management > Planned Compute menu can be applied
- For more details, refer to Planned Compute Apply
Master Node > Number of Master Nodes Required Number of Master nodes - The number of Master nodes is fixed at two per Hadoop cluster
- A Master node is the node where Hadoop Master is installed and provides the default HA (high availability) configuration
- The Master node includes Hadoop Manager and various Hadoop ecosystem components installed together
Master Node > Server Type Required CPU and Memory types for distributed data processing - Standard-1: Standard specifications commonly used
- High Capacity-2: Large-capacity server with 24 vCores or more
- Recommended specifications: vCPU 8, Memory 64G
Master Node > Block Storage Required Block Storage type to be used for the Master node - Basic OS: Area where the engine is installed
- DATA: Data file storage area
- Select a storage type and then enter the capacity (see Create Block Storage for details on each Block Storage type)
- SSD: High‑performance general volume
- HDD: General volume
- Capacity can be entered in multiples of 8 within the range 25 to 1,536
- Select a storage type and then enter the capacity (see Create Block Storage for details on each Block Storage type)
- Delete on termination: When the server is terminated, the volume is terminated as well; however, volumes with snapshots are not deleted even when Delete on termination is enabled.
- Add Disk: Data storage area
- After selecting Use, enter the capacity of the storage
- Click the + button to add storage, or the x button to delete. Up to 9 can be added
- Capacity can be entered in multiples of 8 within the range 25 to 1,536
Worker Node > Number of Worker Nodes Required Number of Worker nodes - Worker nodes can be selected from 3 to 90
- Worker nodes are the nodes where Hadoop data nodes and the Resource Manager are installed, and they process and store distributed data
Worker Node > Server Type Required CPU and Memory types for distributed data processing - Standard-1: Standard specification commonly used
- High Capacity-2: Large-capacity server with 24 vCore or more
- Recommended specification: vCPU 8, Memory 64G
- For detailed information about server types provided by Cloud Hadoop, see Cloud Hadoop Server Types
Worker Node > Block Storage Required Block Storage type to be used on the Worker node - Basic OS: Area where the engine is installed
- DATA: Data file storage area
- Select the storage type and then enter the capacity (see Block Storage 생성하기 for details on each Block Storage type)
- SSD: High‑performance general volume
- HDD: General volume
- Capacity can be entered in multiples of 8 within the range 25 to 1,536
- Select the storage type and then enter the capacity (see Block Storage 생성하기 for details on each Block Storage type)
- Delete on termination: When the server is terminated, the volume is terminated as well; however, volumes with snapshots are not deleted even when Delete on termination is enabled.
- Add Disk: Data storage area
- After selecting Use, enter the capacity of the storage
- Click the + button to add storage, or the x button to delete. Up to 9 can be added
- Capacity can be entered in multiples of 8 within the range 25 to 1,536
Data Governance Selection Additional installation of the Hadoop ecosystem for data governance - If you select Use, Atlas and Ranger are installed automatically
- Cannot be modified or removed after creation
Analytical Data Warehouse Selection Additional installation of the Hadoop ecosystem for fast data analysis - If you select Use, Iceberg and Kyuubi are installed automatically
- Cannot be modified or removed after creation
Data Ingestion Selection Additional installation of the Hadoop ecosystem for data collection and loading - If you select Use, Kafka, Flume, and Sqoop are installed automatically
Data Ingestion > Ingestion Node count Selection Ingestion node count - Ingestion nodes can be selected from 3 to 10
- Worker nodes are the nodes where Hadoop data nodes and the Resource Manager are installed, and they process and store distributed data
Data Ingestion > Server Type Selection CPU and Memory types for distributed data processing - Standard-1: Standard specification commonly used
- High Capacity-2: Large-capacity server with 24 vCore or more
- Recommended specification: vCPU 8, Memory 64G
- For detailed information about the server types provided by Cloud Hadoop, see Cloud Hadoop server types
Data Ingestion > Block Storage Selection Block Storage type to be used for the Ingestion node - Base OS: Area where the engine is installed
- DATA: Data file storage area
- Select a storage type and then enter the capacity (see Create Block Storage for details on each Block Storage type)
- SSD: High-performance general volume
- HDD: General volume
- Capacity can be entered in multiples of 8 within the range 25 to 1,536
- Select a storage type and then enter the capacity (see Create Block Storage for details on each Block Storage type)
- Add Disk: Data storage area
- After selecting Use, enter the storage capacity
- Click the + button to add storage, or the x button to delete. Up to 9 can be added
- Capacity can be entered in multiples of 8 within the range 25 to 1,536, and up to 9 can be created
Object Storage bucket Selection Object Storage to be used in the cluster - Bucket Selection after selecting, select Object Storage bucket
- You can add up to 10, to delete click the x button
- After adding a bucket, to set access permission for that bucket, select server resources from the All Services > Object Storage list > the relevant Object Storage Details > Access Control > Allow Server Resources menu
Table. Cloud Hadoop Service Information Input Items - must start with a lowercase English letter and be entered using lowercase letters, numbers, and special characters (
- In the Required Information Input area, enter or select the required information.
Category RequiredDetailed description Enter PrivateLink information Required Enter authentication key for PrivateLink connection - Create authentication key: IAM > My info > Authentication Key Management tab > Click Create Authentication Key button
- Copy authentication key: IAM > My info > Authentication Key Management tab > Click the generated authentication key > Authentication Key Details > Basic Information tab > Authentication Key > Click View button > Copy the authentication key from the popup screen
- Access Key: Enter Access Key, can be entered only when first applying for the service
- Secret Key: Enter Secret Key, can be entered only when first applying for the service
Cloud Hadoop Manager account Required Enter the account and password to log in to Cloud Hadoop Manager - Account name: Enter the account to use for login
- Password: Enter the password to use for login
- Confirm password: Re-enter the password
Network > Common Settings Required Network settings for servers created by the service - Select this when you want to apply the same settings to all servers being installed
- Select the pre‑created VPC and Subnet
- IP is generated automatically
- Public NAT: Available when the VPC is connected to an Internet Gateway and the Subnet is of Public type. Checking Use enables NAT IP configuration
Network > Server-specific Settings Required Network settings for servers created by the service - Select when you want to apply different settings for each server being installed
- Select a pre‑created VPC and Subnet
- Automatically displayed according to the selected node
- Enter the IP for each server
- Public NAT: Available when the VPC is connected to an Internet Gateway and the Subnet is of type Public. When Use is checked, NAT IP can be configured. See Create Public IP for details
Security Group Required Add Security Group - Click the Select button to choose from the list
- Before the service creation is complete, you can delete the added Security Group by clicking the x button on its right
Keypair Required Select the user authentication method used when connecting to the Virtual Server - Default login accounts by OS
- Alma Linux: almalinux
- Oracle Linux: cloud-user
- RHEL:cloud-user
- Rocky Linux: rocky
- Ubuntu: ubuntu
- Windows: sysadmin
Table. Cloud Hadoop required information input itemsCaution- For a PrivateLink connection, you must enter an authentication key that was generated as a permanent key, and you must not delete that key.
If the authentication key expires or is deleted, rendering it invalid, it may cause issues with resource changes or service termination in the Cloud Hadoop service. - When using a public subnet and assigning a public IP, you may be exposed to security attacks such as external hacking and malware infection.
information- When creating a Cloud Hadoop service, only one Security Group can be selected, but after the service is created, you can select up to four Security Groups, including the initially selected one. However, the Security Group chosen at the initial service creation cannot be modified or deleted.
- If Cloud Hadoop is installed correctly, API communication between the installed Cloud Hadoop service and the Samsung Cloud Platform Console may occur continuously for the following reasons.
- Changing resources of Cloud Hadoop service (adding nodes and resources)
- State changes of Cloud Hadoop services (start, stop, restart, and termination)
- Check the status of Cloud Hadoop service (Health Check)
- In the Additional Information Input area, enter or select the required information.
Category Required statusDetailed description time zone Required Select the time zone for the database to use tag Selection Add Tag - Add Tag Click the button to create and add a tag, or add an existing tag
- You can add up to 50
- The newly added tags are applied after the service creation is completed
Table. Cloud Hadoop additional information input fields
- Select the required information in the Image and version selection area.
Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.
- Once creation is complete, check the created resource on the Resource List page.
View detailed information of Cloud Hadoop
Cloud Hadoop service allows you to view and edit the full resource list and detailed information. The Cloud Hadoop Details page consists of Details, Tags, Job History tabs.
To view detailed information about the Cloud Hadoop service, follow these steps.
- Click the All Services > Data Analytics > Cloud Hadoop menu. Navigate to the Service Home page of Cloud Hadoop.
- On the Service Home page, click the Cloud Hadoop menu. You will be taken to the Cloud Hadoop List page.
- On the Cloud Hadoop List page, click the resource you want to view detailed information for. You will be taken to the Cloud Hadoop Details page.
- Cloud Hadoop Details At the top of the page, status information and details about additional features are displayed.
Category Detailed description status Cloud Hadoop Service Status - Creating: Creating
- Running: Created, service is available
- Updating: Updating settings
- Stopping: Stopping
- Starting: Starting
- Stopped: Stopped
- Restarting: Restarting
- Terminating: Terminating service
- Error: Error occurred during creation or service abnormal state
- Undeployed: Deployment error occurred
Start Start of discontinued service operation Stop Force service termination Restart Restart the service Add Worker Node Add a server with the same specifications as the previously created Worker node to the cluster. Service termination Terminate all Cloud Hadoop services and servers Table. Cloud Hadoop status information and additional features
- Cloud Hadoop Details At the top of the page, status information and details about additional features are displayed.
- The status indicator reflects the state of the Cloud Hadoop service, and the server status can be checked in the server information.
- Start, Stop, Restart buttons control only the Cloud Hadoop service, while server control can be managed from the Compute > Virtual Server list.
Detailed Information
On the Cloud Hadoop List page, you can view detailed information of the selected resource and edit the information if necessary.
| Category | Detailed description |
|---|---|
| Server information | Server information configured in this cluster |
| service | Service name |
| Resource Type | Resource Type |
| SRN | Unique resource ID in Samsung Cloud Platform
|
| Resource name | Resource name
|
| Resource ID | Unique resource ID in the service |
| constructor | User who created the service |
| Creation date and time | Service creation date and time |
| editor | User who edited the service information |
| Modification date | Date and time the service information was modified |
| Image version | OS and service image version |
| Cluster name | Cluster name of the configured servers |
| Planned Compute | Resource status with Planned Compute configured
|
| Manager access URL | Cloud Hadoop Manager access URL |
| time zone | Standard time zone for the service |
| PrivateLink information | Access Key, Secret Key information |
| Network | VPC, Subnet information |
| Security Group | Security Group List |
| Keypair name | Created/selected Keypair name |
| Basic Service | Cloud Hadoop Basic Service Stack List |
| Optional Service | Cloud Hadoop option service stack list
|
| Master | Server type, base OS, and Disk information for the Master node
|
| Worker | Server type, default OS, and disk information for the Worker node |
| Ingestion | Server type, default OS, and disk information for the Ingestion node |
| Object Storage bucket | Object Storage List |
tag
On the Cloud Hadoop List page, you can view the tag information of the selected resource and add, modify, or delete it.
| Category | Detailed description |
|---|---|
| Tag list | Tag list
|
Job History
On the Cloud Hadoop List page, you can view the operation history of the selected resource.
| Category | Detailed description |
|---|---|
| Task History List | Resource Change History
|
Managing Cloud Hadoop Resources
If you need to modify the existing configuration options of a created Cloud Hadoop resource or require additional configuration, you can perform the operation on the Cloud Hadoop Details page.
Add Worker Node
If you need to scale a Cloud Hadoop cluster due to increased workload or other reasons, you can add Worker nodes with the same specifications as the existing Worker nodes.
- You can use up to 10 worker nodes per Cloud Hadoop cluster.
- When adding nodes, all settings except the number of nodes to add and the IP/NAT IP are fixed to the configuration entered during service application.
- If adding a node fails, contact the Samsung Cloud Platform service desk for troubleshooting.
Add Worker Node (Network configuration: common settings)
You can add a Worker node to a Cloud Hadoop cluster that was created with network settings as common settings.
To add a Worker node, follow the steps below.
- Click the All Services > Data Analytics > Cloud Hadoop menu. You will be taken to the Service Home page of Cloud Hadoop.
- On the Service Home page, click the Cloud Hadoop menu. You will be taken to the Cloud Hadoop List page.
- Cloud Hadoop List page, click the resource you want to add a node to. You will be taken to the Cloud Hadoop Details page.
- Click the Add Worker Node button. You will be taken to the Add Worker Node page.
- After selecting the Worker Node count, click the Complete button.
- All settings, including the server name of each Worker node, are fixed to the configuration entered when applying for the service.
Add Worker Node (Network configuration: per-server settings)
Network settings allow adding Worker nodes to a Cloud Hadoop cluster created with server-specific settings.
To add a Worker node, follow the steps below.
- Click the All Services > Data Analytics > Cloud Hadoop menu. You will be taken to the Service Home page of Cloud Hadoop.
- On the Service Home page, click the Cloud Hadoop menu. You will be taken to the Cloud Hadoop List page.
- On the Cloud Hadoop List page, click the resource you want to add a node to. You will be taken to the Cloud Hadoop Details page.
- Click the Add Worker Node button. You will be taken to the Add Worker Node page.
- Please select the Number of Worker Nodes. The server configuration area will be added automatically based on the selected number of nodes.
- In the added server configuration area, enter the IP and NAT IP, then click the Complete button.
- All settings, including the server name of each Worker node, are fixed to the configuration entered when applying for the service.
Change Security Group
To change the Security Group of Cloud Hadoop, follow the steps below.
- All Services > Data Analytics > Cloud Hadoop Click the menu. Navigate to the Service Home page of Cloud Hadoop.
- On the Service Home page, click the Cloud Hadoop menu. You will be taken to the Cloud Hadoop List page.
- Click the resource whose Security Group you want to change on the Cloud Hadoop List page. You will be taken to the Cloud Hadoop Details page.
- On the detail information page, click the Edit button of Security Group. The Security Group Selection popup window opens.
- Search for the Security Group you want to add, then select the checkbox. The selected Security Group will appear in the list below.
- Click Confirm. The selected Security Group will be applied.
- When creating a Cloud Hadoop service, you can select up to four Security Groups, including the Security Group selected at creation. However, the Security Group chosen during the initial service creation cannot be modified or deleted.
Add optional service
You can additionally install the Cloud Hadoop ecosystem (Data Governance, Analytical Data Warehouse, Data Ingestion).
Data Governance/Analytical Data Warehouse addition
Follow these steps to install Data Governance and the Analytical Data Warehouse additionally.
- Click the All Services > Data Analytics > Cloud Hadoop menu. You will be taken to the Service Home page of Cloud Hadoop.
- On the Service Home page, click the Cloud Hadoop menu. You will be taken to the Cloud Hadoop List page.
- On the Cloud Hadoop List page, click the resource for which you want to add an optional service. You will be taken to the Cloud Hadoop Details page.
- On the detail information page, click the Add button of the option service you want to add. A notification popup will open.
- After reviewing the contents of the popup window, click the Confirm button. The corresponding option service will be added automatically.
- It may take some time depending on the scale.
Add Data Ingestion
To install Data Ingestion additionally, follow the steps below.
- Click the All Services > Data Analytics > Cloud Hadoop menu. Navigate to the Service Home page of Cloud Hadoop.
- On the Service Home page, click the Cloud Hadoop menu. You will be taken to the Cloud Hadoop List page.
- Cloud Hadoop List page, click the resource you want to add an optional service to. Navigate to the Cloud Hadoop Details page.
- On the detail information page, click the Add button of Data Ingestion. You will be taken to the Data Ingestion Add page.
- After selecting the Ingestion Node count, server type, and storage type and capacity, click the Complete button. The selected option service will be added automatically.
- It may take some time depending on the scale.
Change Server Type
You can change the server type of the Master node, Worker node, or Ingestion node in Cloud Hadoop.
To change the server type, follow these steps.
- If the server type is configured as Standard, it cannot be changed to High Capacity. If you want to change to High Capacity, create a new service.
- If you modify the server type, a server restart is required. Please verify any software license changes or software settings and their implementation due to specification changes separately.
- Click the All Services > Data Analytics > Cloud Hadoop menu. Navigate to the Service Home page of Cloud Hadoop.
- On the Service Home page, click the Cloud Hadoop menu. You will be taken to the Cloud Hadoop List page.
- On the Cloud Hadoop List page, click the resource whose server type you want to change. You will be taken to the Cloud Hadoop Details page.
- On the detail information page, click the Edit button of the Server Type of the node you want to change. The Edit Server Type popup window opens.
- After selecting the server type, click the Confirm button. A notification popup will appear.
- Scale-Down for server type is not allowed.
- After reviewing the contents of the popup window, click the Confirm button.
- The entire server of the node will be changed to the requested specifications, and the Cloud Hadoop cluster will restart.
Expanding Storage
You can expand the storage added to the data zone up to a maximum of 12 TB based on the initially allocated capacity. You can expand the storage without stopping Cloud Hadoop, and if it is configured as a cluster, all nodes are expanded simultaneously.
- Storage capacity cannot be reduced; only expansion is allowed.
- It can be expanded up to a maximum of 12 TB, and if more than 12 TB is required, it can be expanded through a service request.
- It may take some time for the expansion to be completed after a request for expansion.
To increase storage capacity, follow the steps below.
- Click the All Services > Data Analytics > Cloud Hadoop menu. Navigate to the Service Home page of Cloud Hadoop.
- On the Service Home page, click the Cloud Hadoop menu. You will be taken to the Cloud Hadoop List page.
- On the Cloud Hadoop List page, click the resource you want to expand capacity for. Navigate to the Cloud Hadoop Details page.
- On the detail information page, click the Edit button of the node’s Disk you want to expand. The Disk Edit popup window opens.
- After entering the number of units, click the Confirm button. A notification popup will appear.
- You can set the capacity by entering the number of units provided in 8 GB increments.
- After reviewing the contents of the popup window, click the Confirm button.
- It may take some time depending on the scale.
Add storage
If the storage allocated to the data area exceeds 12 TB, you can add additional storage. When configured as a cluster, it is added simultaneously for each node type.
- The storage capacity can be set up to 12 TB.
- It may take some time for a storage addition request to be fully completed.
Follow the steps below to add storage.
- Click the All Services > Data Analytics > Cloud Hadoop menu. You will be taken to the Service Home page of Cloud Hadoop.
- On the Service Home page, click the Cloud Hadoop menu. You will be taken to the Cloud Hadoop List page.
- On the Cloud Hadoop List page, click the resource you want to add storage to. You will be taken to the Cloud Hadoop Details page.
- On the detail page, click the Add Disk button of the node where you want to add storage. The Add Disk popup will open.
- Select the disk type and enter the capacity, then click the Confirm button. A notification popup will appear.
- If encryption is configured on the existing Block Storage, encryption will also be applied to the additional Disk.
- If you configure it by selecting HDD, performance degradation may occur.
- After reviewing the contents of the popup window, click the Confirm button.
- It may take some time depending on the scale.
Connecting to Cloud Hadoop
To access Cloud Hadoop, follow the steps below.
- Check the IP of the Windows system(PC) that will connect to Cloud Hadoop.
- Since external access is required, you need to check the system’s NAT IP.
- Add the following content to the
hostsfile on a Windows system.- VM host IP of the Cloud Hadoop cluster
- VM host name of the Cloud Hadoop cluster
- Add the following rule to the Security Group you selected when applying for the Cloud Hadoop service.
- Category: Inbound
- Protocol: TCP
- Target address: Windows system IP
- Port: 7080
- On the Windows system you want to connect to, launch the Chrome browser and then access the Cloud Hadoop Manager URL.
Apache Hadoop Ecosystem Target IP/Port information
Item | Protocol | Source | Target IP | Port | Remarks
| Item | Protocal | Source | Target IP | Port | Remarks |
|---|---|---|---|---|---|
| Manager | TCP | User IP | Manager | 7080 | Cloud Hadoop Manager |
| HDFS | CP | User IP | Master | 8042 | nodemanager web http |
| HDFS | TCP | User IP | Master | 8044 | nodemanager web https |
| HDFS | CP | User IP | Master | 8088 | resource manager web http |
| HDFS | TCP | User IP | Master | 8090 | resource manager web https |
| HDFS | TCP | User IP | Master | 8188 | timelneservice web http |
| HDFS | TCP | User IP | Master | 8190 | timelneservice web https |
| HDFS | TCP | User IP | Master | 9093 | alert manager |
| HDFS | TCP | User IP | Master | 17000 | hbase master |
| HDFS | TCP | User IP | Master | 17010 | hbase master web |
| HDFS | TCP | User IP | Master | 17030 | hbase regionserver info |
| HDFS | TCP | User IP | Master | 19090 | hbase thriftserver |
| HDFS | TCP | User IP | Master | 19095 | hbase thriftserver info |
| HDFS | TCP | User IP | Master | 19888 | Job History Server Web |
| HDFS | TCP | User IP | Master | 50070 | name node web http |
| HDFS | TCP | User IP | Master | 50075 | data node web http |
| Atlas | TCP | User IP | Master | 21000 | atlas web http |
| Atlas | TCP | User IP | Master | 21443 | atlas web https |
| Hive | TCP | User IP | Master | 10000 | Hive sever2 thrift binary |
| Hive | TCP | User IP | Master | 10001 | Hive sever2 thrift http |
| Hive | TCP | User IP | Master | 10004 | Hive sever2 web binary |
| Hive | TCP | User IP | Master | 10002 | Hive sever2 web http |
| Hive | TCP | User IP | Master | 10005 | Hive sever2 HA web http |
| Kerberos | TCP | User IP | Master | 88 | key distribution server |
| Kerberos | TCP | User IP | Master | 749 | kadmin server |
| Ranger | TCP | User IP | Master | 9292 | ranger kms http |
| Ranger | TCP | User IP | Master | 6080 | ranger web http |
| Solr | TCP | User IP | Master | 8983 | solr |
| Solr | TCP | User IP | Master | 8988 | solr HA web http |
| Spark | TCP | User IP | Master | 18080 | spark history server web http |
| Spark | TCP | User IP | Master | 18082 | spark history server web https |
| Tez | TCP | User IP | Master | 8780 | tez ui |
| Monitoring | TCP | User IP | Master | 7100 | prometheus web http |
| Cmak | TCP | User IP | Master | 19000 | cmak web http |
| HA Proxy | TCP | User IP | Master | 38404 | HA Proxy web http |
| Hue | TCP | User IP | Master | 8000 | HUE web http |
| Hue | TCP | User IP | Master | 8005 | Hue HA web http |
| LLAP | TCP | User IP | Master | 15002 | llap web http |
Terminate Cloud Hadoop
You can reduce operating costs by terminating unused Cloud Hadoop.
- Data cannot be recovered after the service is terminated.
- When the service is terminated, the Cloud Hadoop service and all servers are terminated.
- If you cancel the service, the currently operating service will be terminated immediately. Proceed with the cancellation only after fully considering the impact that may arise from the service interruption.
To cancel the service, follow the steps below.
- Click the All Services > Data Analytics > Cloud Hadoop menu. Navigate to the Service Home page of Cloud Hadoop.
- On the Service Home page, click the Cloud Hadoop menu. You will be taken to the Cloud Hadoop list page.
- On the Cloud Hadoop List page, select the resource to cancel, then click the Cancel Service button. An alert popup will appear.
- Review the contents of the popup window, enter the name of the resource to be terminated, and then click the Confirm button.
- After the termination request is completed, verify on the Cloud Hadoop list page that the resource has been terminated.
- It may take some time depending on the scale.







