The page has been translated by Gen AI.

How-to guides

Users can enter the required information for the Kubernetes Engine and select detailed options through the Samsung Cloud Platform Console to create a service.

Create Kubernetes Engine

You can create and use the Kubernetes Engine service from the Samsung Cloud Platform Console.

You can create and manage clusters to use the Kubernetes Engine service. After creating the cluster, you can add services needed for operation, such as nodes, namespaces, and workloads.

Caution
  • You can select up to 4 Security Groups in the network settings of Kubernetes Engine.

    • If you manually add a Security Group to a node created by Kubernetes Engine on the Virtual Server service page, it may be automatically removed because it is not managed by Kubernetes Engine.
    • For nodes, be sure to add and manage the Security Group in the network settings of the Kubernetes Engine service.
  • Managed Security Group is automatically managed in Kubernetes Engine.

    • Do not use it for any user-defined purpose because if you delete a Managed Security Group or add/delete rules, it will automatically be restored.

Create a cluster

You can create and use a Kubernetes Engine cluster service in the Samsung Cloud Platform Console.

To create a Kubernetes Engine cluster, follow these steps.

  1. Click the All Services > Container > Kubernetes Engine menu. 1. Go to the Service Home page of Kubernetes Engine.
  2. On the Service Home page, click the Create Cluster button. 2. Go to the Create Cluster page.
  3. On the Create Cluster page, enter the information required to create a service and select detailed options.
    • Enter or select the required information in the Service Information Input area.
      Category
      Required status
      Detailed description
      Cluster nameEssentialCluster name
      • must start with an English letter and be entered using English letters, numbers, and special characters (-) within 3 - 30 characters
      Control Plane Settings > Kubernetes VersionEssentialSelect Kubernetes version
      Control Plane Settings > Private Endpoint Access Allowed ResourcesSelectionAfter selecting a resource, click Add to select the resource that will be allowed to access the private endpoint
      • Only resources in the same account and the same region can be registered
      • Regardless of whether it is enabled, the nodes of the cluster can access the private endpoint
      Control Plane Settings > Public EndpointSelectionAfter selecting Use, enter the public endpoint Allowed IP range as 192.168.99.0/24
      • Set the access control IP range to allow external access to the Kubernetes API server endpoint
      • If external access is not required, you can disable it to reduce security threats
      ServiceWatch log collectionSelectionSet whether to enable log collection so that cluster logs can be viewed in ServiceWatch
      • If you select Enable, log storage up to 5 GB for all services within the Account is provided free of charge, and charges apply based on storage volume if it exceeds 5 GB
      • If you need to view cluster logs, it is recommended to enable the ServiceWatch log collection feature
      Cloud Monitoring log collectionSelectionSet whether to enable log collection so that logs for the cluster can be viewed in Cloud Monitoring
      • If you select Enable, 1 GB of log storage is provided for free across all services in the Account, and any data exceeding 1 GB is deleted sequentially
      Network SettingsRequiredNetwork connection settings for the node pool
      • VPC name: Select a pre-created VPC
      • Subnet name: Select a standard Subnet to use from the subnets of the selected VPC
      Network Settings > Security GroupSelectionSecurity Group: After clicking the Select button, select a Security Group in the Select Security Group popup
      • Up to 4 Security Group can be selected
      StorageClass configurationRequiredSelect the storage volume to use in the cluster
      • NFS Volume: Click the Search button and then select File Storage in the File Storage Selection popup. The default File Storage supports only the NFS format. A StorageClass and Provisioner appropriate for the selected File Storage are provided
      • Block Storage provides a StorageClass and CSI by default, so no additional configuration is required
      Table. Kubernetes Engine service information input fields
    • Additional Information Input area, enter or select the required information.
      Category
      Required
      Detailed description
      tagSelectionAdd Tag
      • Up to 50 per resource can be added
      • After clicking the Add Tag button, enter or select Key, Value values
      Table. Kubernetes Engine additional information input items
  4. Summary Review the detailed information and estimated charges generated in the panel, then click the Create button.
    • When creation is complete, check the created resources on the Cluster List page.

Check cluster detailed information

The Kubernetes Engine service allows you to view and edit the full list of resources and detailed information. Cluster Details page includes Details, Node Pools, Tags, Job History tabs.

To view detailed cluster information, follow these steps.

  1. All Services > Container > Kubernetes Engine Click the menu. 1. Go to the Service Home page of Kubernetes Engine.
  2. On the Service Home page, click the Cluster menu. 2. Navigate to the Cluster List page.
  3. Cluster List page, click the resource (cluster) to view its detailed information. 3. Go to the Cluster Details page.
    • Cluster Details page displays the cluster’s status information and detailed information, and consists of Details, Node Pool, Tags, Job History tabs.
      CategoryDetailed description
      Cluster statusKubernetes Engine cluster status
      • Creating: Creating
      • Running: Creation complete/running
      • Updating: Upgrading version
      • Deleting: Deleting
      • Error: Error occurred
      Service cancellationButton to delete a Kubernetes Engine cluster
      • To delete a Kubernetes Engine service, you must delete all node pools added to the cluster
      • If the service is deleted, the running service may be stopped immediately, so deletion is required after considering the impact of service interruption
      Table. Cluster status information and additional features

Detailed Information

On the Cluster List page, you can view detailed information of the selected resource and, if necessary, edit the information.

Category
Detailed description
serviceService name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
Resource NameResource name
  • In the Kubernetes Engine service, it refers to the cluster name
Resource IDUnique resource ID in the service
ConstructorUser who created the service
Creation Date/TimeService creation date and time
ModifierUser who edited the service information
Modification date and timeDate and time the service information was modified
Cluster nameCluster name
LLM EndpointLLM Endpoint information
Control Area SettingsCheck the assigned Kubernetes control plane (Control Plane) version and allowed access range
  • If a Kubernetes version of the control plane that can be upgraded is available, click the Edit icon to perform a Cluster version upgrade. See Cluster version upgrade for details
  • Click the Download Admin Kubeconfig/Download User Kubeconfig button for the private endpoint address to download the kubeconfig settings for each role as a yaml document
  • Click the Edit icon of the private endpoint access‑allowed resource to modify the allowed resource
  • Click the Download Admin Kubeconfig/Download User Kubeconfig button for the public endpoint address to download the kubeconfig settings for each role as a yaml document
  • Click the Edit icon of the public endpoint to modify its enabled status and allowed IP range
  • Click the Edit icon of ServiceWatch log collection to toggle its enabled status. When log collection is enabled, view the control plane’s Audit/Event logs in ServiceWatch > Log Group
  • Click the Edit icon of Cloud Monitoring log collection to toggle its enabled status. When log collection is enabled, view the control plane’s Audit/Event logs in Cloud Monitoring > Log Analysis
Network SettingsView the VPC, Subnet, and Security Group information configured when creating a Kubernetes Engine cluster
  • Click each setting to view detailed information on the details page
  • If you need to change the Security Group, click the Edit icon to configure
  • Managed Security Groups are system-provided items that are created automatically
StorageClass configurationIf you click the NFS volume name, you can view detailed information on the storage details page
Table. Cluster Details Tab Items
Reference
  • The version of Kubernetes Engine is expressed as [major].[minor].[patch], and you can upgrade only one minor version at a time.
    • Example: version 1.11.x > 1.13.x (Not allowed) / version 1.11.x > 1.12.x (Allowed)
  • If you are using a Kubernetes version that has reached end of support or a version that is scheduled to reach end of support, a red exclamation mark will appear to the right of the version. * If this icon appears, we recommend upgrading the Kubernetes version.

Node pool

You can view, add, modify, or delete cluster node pool information. For detailed information on using node pools, refer to Managing Nodes.

CategoryDetailed description
Add node poolAdd a node pool to the current cluster
Node pool listView the list of node pools created in the current cluster
  • Click a node pool name to navigate to its detail page and view detailed information
More menu
  • Node List: displays node name, version, and status information
  • Upgrade: upgrade the node pool version
  • Node Count Adjustment: adjust node count
  • Delete Node Pool: delete the node pool
Node pool detailsProvides node pool management features
  • Node List: Displays node name, version, and status information
  • Upgrade: Upgrade node pool version
  • Adjust Node Count: Adjust node count
  • Delete Node Pool: Delete node pool
  • Server Information: Displays server information of the node pool
  • Network Information: Displays network information of the node pool
  • Node Information: Displays version, labels, taints, and advanced settings
  • Connected Resources: Displays connected resources of the node pool
Table. Node pool tab items
Reference

If a red exclamation mark icon appears on the node pool version, the server OS of that node pool is not supported in newer Kubernetes versions. The node pool server OS must be upgraded to ensure stable service.

  • To upgrade the node pool version, delete the existing node pool and then create a new node pool with a higher server OS version.

Tag

On the Cluster List page, you can view the tag information of the selected resource and add, modify, or delete it.

CategoryDetailed description
Tag listTag list
  • You can view the Key and Value information of the tag
  • Up to 50 tags can be added per resource
  • When entering a tag, you can search and select from the list of previously created Keys and Values
Table. Cluster Tag Tab Items

Job History

You can view the operation history of the selected resource on the Cluster List page.

CategoryDetailed description
Task History ListResource Change History
  • You can view the work details, work date and time, resource type, resource name, work result, and operator information
  • Work History List When you click the corresponding resource in the list, Work History Details a popup window opens
Table. Cluster job history tab items

Managing Cluster Resources

To manage cluster resources, we provide cluster version upgrade, kubeconfig download, and control plane logging modification features.

Caution
To use Kubernetes Engine, you need minimum view permissions for VPC, VPC Subnet, Security Group, FileStorage, and Virtual Server.
Security Group and Virtual Server are created/deleted by Kubernetes Engine for lifecycle management purposes even without create/delete permissions, and the creator/modifier is recorded as System.

Cluster version upgrade

If there is a version that can be upgraded from the cluster’s Kubernetes version, you can perform the upgrade on the Cluster Details page.

Reference
  • Check the following items before upgrading the cluster.
    • Check if the cluster status is Running
    • Check whether the status of all node pools in the cluster is Running or Deleting.
    • Check that all node pool versions in the cluster match the cluster’s version.
    • Check whether automatic scaling up/down of all node pools in the cluster and the node auto-recovery feature are disabled.
  • After upgrading the cluster, proceed with the node pool upgrade. * The control plane and node pool upgrades of a Kubernetes cluster are performed separately.
  • You can upgrade only one minor version at a time.
    • Example: version 1.12.x > 1.13.x (possible) / version 1.11.x > 1.13.x (not possible)
  • After an upgrade, you cannot perform a downgrade or rollback, so to use a previous version again, you must create a new cluster.

Caution
  • Since user systems using an end‑of‑life Kubernetes version may become vulnerable, upgrade the control plane and node pool versions directly from the Samsung Cloud Platform Console.
    • There is no additional cost for the upgrade.
  • Please conduct compatibility testing of the upgrade version in advance to ensure stable system operation for users.

Pre-upgrade preparation for cluster version

When upgrading the cluster version, there is no need to delete and recreate API objects. For the migrated API, all existing API objects can be read and updated using the new API version. However, due to the deprecated API in older versions of Kubernetes, you may be unable to read or modify existing objects, or create new ones. Therefore, to ensure system stability, it is recommended to migrate the client and manifest before upgrading.

Migrate the client and manifest using the following method.

Reference
Since the deprecated API differs for each cluster version, the scope of application and system impact may vary. For detailed information, refer to the 쿠버네티스 공식 문서 > Deprecation Guide.

Upgrade cluster and node pool versions

To update the cluster and node pool, follow these steps.

  1. Click the All Services > Container > Kubernetes Engine menu. 1. Navigate to the Service Home page of Kubernetes Engines.
  2. Service Home page, click the Cluster menu. 2. Navigate to the Cluster List page.
  3. On the Cluster List page, click the resource (cluster) to upgrade the version. 3. Navigate to the Cluster Details page.
  4. Cluster Details page, click the Edit icon for the Kubernetes Version. 4. Cluster version upgrade A popup window opens.
  5. Select the Kubernetes version to upgrade, and click the Confirm button.
    • It may take a few minutes for the cluster upgrade to complete.
    • While the upgrade is in progress, the cluster status is shown as Updating, and when the upgrade completes, it is shown as Running.
  6. When the upgrade is complete, select the Node Pool tab. 6. Go to the Node Pool page.
  7. Click the More button of the node pool item and click Upgrade. 7. Node pool version upgrade A popup window opens.
  8. Node Pool Version Upgrade After checking the message in the popup window, click the Confirm button.
    • It may take a few minutes for the node pool upgrade to complete.
    • While the upgrade is in progress, the node pool status is shown as Updating, and when the upgrade is complete, it is shown as Running.

kubeconfig download

You can download the admin/user kubeconfig settings for the cluster’s public and private endpoints as a yaml document.

To download the cluster’s kubeconfig settings, follow these steps.

  1. Click the All Services > Container > Kubernetes Engine menu. 1. Navigate to the Service Home page of Kubernetes Engines. Service Home 페이지에서 클러스터 메뉴를 클릭하세요. 2. Navigate to the Cluster List page.
  2. On the Cluster List page, click the resource (cluster) to download the kubeconfig. 3. Navigate to the Cluster Details page.
  3. Cluster Details page, click the Download admin kubeconfig/Download user kubeconfig button for the desired endpoint.
    • You can download the kubeconfig file in YAML format for each permission.

Modify resources that allow private endpoint access

You can modify the resource settings that allow private endpoint access to the cluster.

  1. Click the All Services > Container > Kubernetes Engine menu. 1. Navigate to the Service Home page of Kubernetes Engines.
  2. On the Service Home page, click the Cluster menu. 2. Navigate to the Cluster List page.
  3. On the Cluster List page, click the resource (cluster) for which you want to modify the private endpoint access control. 3. Navigate to the Cluster Details page.
  4. On the Cluster Details page, click the Edit icon of Private Endpoint Access Allowed Resources. 4. Edit Private Endpoint Access Allowed Resources The popup window opens.
  5. Edit Private Endpoint Access Allowed Resources In the popup window, set the Use status of Private Endpoint Access Allowed Resources, add the allowed access resource, and then click the Confirm button.

Modify public endpoint

You can change the public endpoint settings of the cluster.

  1. Click the All Services > Container > Kubernetes Engine menu. 1. Navigate to the Service Home page of Kubernetes Engines.
  2. Click the Cluster menu on the Service Home page. 2. Navigate to the Cluster List page.
  3. On the Cluster List page, click the resource (cluster) for which you want to modify the public endpoint access control. 3. Navigate to the Cluster Details page.
  4. Click the Edit icon of the Public Endpoint on the Cluster Details page. 4. Edit Public Endpoint The popup window opens.
  5. Public Endpoint Edit In the popup, set the Public Endpoint’s Usage status and add the allowed IP range, then click the Confirm button.

Modify control plane log collection settings

You can change the log collection settings of the cluster’s control plane (Control Plane). Detailed logs of the cluster can be viewed in the ServiceWatch service or the Cloud Monitoring service.

Reference

Even if you configure Cloud Monitoring log collection, you can view the cluster logs.

  • However, since the Cloud Moniotring log collection feature is scheduled for discontinuation, we recommend using ServiceWatch log collection.

To change the control plane log collection settings of the cluster, follow the steps below.

  1. Click the All Services > Container > Kubernetes Engine menu. 1. Navigate to the Service Home page of Kubernetes Engines. Service Home 페이지에서 클러스터 메뉴를 클릭하세요. 2. Navigate to the Cluster List page.
  2. Cluster List page, click the resource (cluster) you want to modify control plane logging for. 3. Go to the Cluster Details page.
  3. On the Cluster Details page, click the Edit icon for ServiceWatch log collection. 4. ServiceWatch log collection The popup window opens.
    • The Cloud Monitoring log collection feature can also be configured in the same way.
  4. ServiceWatch Log Collection in the popup window, set the use option for ServiceWatch Log Modification, then click the Confirm button.
Reference

When log collection is enabled, you can view the Audit/Event logs of the cluster control plane in each service. Detailed logs can be viewed on the next page.

Security Group Modify

You can modify the cluster’s Security Group.

Caution
  • In the network settings of Kubernetes Engine, you can select up to four Security Groups.

    • If you manually add a Security Group to a node created by Kubernetes Engine on the Virtual Server service page, it may be automatically removed because it is not managed by Kubernetes Engine.
    • For nodes, be sure to add and manage the Security Group in the network settings of the Kubernetes Engine service.
  • Managed Security Group is automatically managed in Kubernetes Engine.

    • Do not use it for any user-defined purpose because if you delete a Managed Security Group or add/delete rules, it will automatically be restored.

To modify the cluster’s Security Group, follow these steps.

  1. Click the All Services > Container > Kubernetes Engine menu. 1. Navigate to the Service Home page of Kubernetes Engines.
  2. Service Home page, click the Cluster menu. 2. Navigate to the Cluster List page.
  3. Cluster List page, click the resource (cluster) whose Security Group you want to modify. 3. Navigate to the Cluster Details page.
  4. On the Cluster Details page, click the Edit icon of the Security Group. 4. Security Group Edit The popup window opens.
  5. After selecting or deselecting the Security Group to modify, click the Confirm button.

Terminate Cluster

Caution
If you terminate the cluster, all associated node pools will be deleted, and all data in every pod within the cluster will be permanently removed.

To terminate the cluster, follow these steps.

  1. Click the All Services > Container > Kubernetes Engine menu. 1. Navigate to the Service Home page of Kubernetes Engines.
  2. On the Service Home page, click the Cluster menu. 2. Navigate to the Cluster List page.
  3. Cluster List page, click the resource (cluster) to view its detailed information. 3. Navigate to the Cluster Details page.
  4. On the Cluster Details page, click Cancel Service.
  5. Service Termination After reviewing the content in the popup window, click the Confirm button.
ServiceWatch Metrics
Managing Nodes