How-to guides
Users can enter the required information for the Kubernetes Engine and select detailed options through the Samsung Cloud Platform Console to create a service.
Create Kubernetes Engine
You can create and use the Kubernetes Engine service from the Samsung Cloud Platform Console.
You can create and manage clusters to use the Kubernetes Engine service. After creating the cluster, you can add services needed for operation, such as nodes, namespaces, and workloads.
You can select up to 4 Security Groups in the network settings of Kubernetes Engine.
- If you manually add a Security Group to a node created by Kubernetes Engine on the Virtual Server service page, it may be automatically removed because it is not managed by Kubernetes Engine.
- For nodes, be sure to add and manage the Security Group in the network settings of the Kubernetes Engine service.
Managed Security Group is automatically managed in Kubernetes Engine.
- Do not use it for any user-defined purpose because if you delete a Managed Security Group or add/delete rules, it will automatically be restored.
Create a cluster
You can create and use a Kubernetes Engine cluster service in the Samsung Cloud Platform Console.
To create a Kubernetes Engine cluster, follow these steps.
- Click the All Services > Container > Kubernetes Engine menu. 1. Go to the Service Home page of Kubernetes Engine.
- On the Service Home page, click the Create Cluster button. 2. Go to the Create Cluster page.
- On the Create Cluster page, enter the information required to create a service and select detailed options.
- Enter or select the required information in the Service Information Input area.
Category Required statusDetailed description Cluster name Essential Cluster name - must start with an English letter and be entered using English letters, numbers, and special characters (
-) within 3 - 30 characters
Control Plane Settings > Kubernetes Version Essential Select Kubernetes version Control Plane Settings > Private Endpoint Access Allowed Resources Selection After selecting a resource, click Add to select the resource that will be allowed to access the private endpoint - Only resources in the same account and the same region can be registered
- Regardless of whether it is enabled, the nodes of the cluster can access the private endpoint
Control Plane Settings > Public Endpoint Selection After selecting Use, enter the public endpoint Allowed IP range as 192.168.99.0/24 - Set the access control IP range to allow external access to the Kubernetes API server endpoint
- If external access is not required, you can disable it to reduce security threats
ServiceWatch log collection Selection Set whether to enable log collection so that cluster logs can be viewed in ServiceWatch - If you select Enable, log storage up to 5 GB for all services within the Account is provided free of charge, and charges apply based on storage volume if it exceeds 5 GB
- If you need to view cluster logs, it is recommended to enable the ServiceWatch log collection feature
Cloud Monitoring log collection Selection Set whether to enable log collection so that logs for the cluster can be viewed in Cloud Monitoring - If you select Enable, 1 GB of log storage is provided for free across all services in the Account, and any data exceeding 1 GB is deleted sequentially
Network Settings Required Network connection settings for the node pool - VPC name: Select a pre-created VPC
- Subnet name: Select a standard Subnet to use from the subnets of the selected VPC
Network Settings > Security Group Selection Security Group: After clicking the Select button, select a Security Group in the Select Security Group popup - Up to 4 Security Group can be selected
StorageClass configuration Required Select the storage volume to use in the cluster - NFS Volume: Click the Search button and then select File Storage in the File Storage Selection popup. The default File Storage supports only the NFS format. A StorageClass and Provisioner appropriate for the selected File Storage are provided
- Block Storage provides a StorageClass and CSI by default, so no additional configuration is required
Table. Kubernetes Engine service information input fields - must start with an English letter and be entered using English letters, numbers, and special characters (
- Additional Information Input area, enter or select the required information.
Category RequiredDetailed description tag Selection Add Tag - Up to 50 per resource can be added
- After clicking the Add Tag button, enter or select Key, Value values
Table. Kubernetes Engine additional information input items
- Enter or select the required information in the Service Information Input area.
- Summary Review the detailed information and estimated charges generated in the panel, then click the Create button.
- When creation is complete, check the created resources on the Cluster List page.
Check cluster detailed information
The Kubernetes Engine service allows you to view and edit the full list of resources and detailed information. Cluster Details page includes Details, Node Pools, Tags, Job History tabs.
To view detailed cluster information, follow these steps.
- All Services > Container > Kubernetes Engine Click the menu. 1. Go to the Service Home page of Kubernetes Engine.
- On the Service Home page, click the Cluster menu. 2. Navigate to the Cluster List page.
- Cluster List page, click the resource (cluster) to view its detailed information. 3. Go to the Cluster Details page.
- Cluster Details page displays the cluster’s status information and detailed information, and consists of Details, Node Pool, Tags, Job History tabs.
Category Detailed description Cluster status Kubernetes Engine cluster status - Creating: Creating
- Running: Creation complete/running
- Updating: Upgrading version
- Deleting: Deleting
- Error: Error occurred
Service cancellation Button to delete a Kubernetes Engine cluster - To delete a Kubernetes Engine service, you must delete all node pools added to the cluster
- If the service is deleted, the running service may be stopped immediately, so deletion is required after considering the impact of service interruption
Table. Cluster status information and additional features
- Cluster Details page displays the cluster’s status information and detailed information, and consists of Details, Node Pool, Tags, Job History tabs.
Detailed Information
On the Cluster List page, you can view detailed information of the selected resource and, if necessary, edit the information.
| Category | Detailed description |
|---|---|
| service | Service name |
| Resource Type | Resource Type |
| SRN | Unique resource ID in Samsung Cloud Platform |
| Resource Name | Resource name
|
| Resource ID | Unique resource ID in the service |
| Constructor | User who created the service |
| Creation Date/Time | Service creation date and time |
| Modifier | User who edited the service information |
| Modification date and time | Date and time the service information was modified |
| Cluster name | Cluster name |
| LLM Endpoint | LLM Endpoint information |
| Control Area Settings | Check the assigned Kubernetes control plane (Control Plane) version and allowed access range
|
| Network Settings | View the VPC, Subnet, and Security Group information configured when creating a Kubernetes Engine cluster
|
| StorageClass configuration | If you click the NFS volume name, you can view detailed information on the storage details page |
- The version of Kubernetes Engine is expressed as
[major].[minor].[patch], and you can upgrade only one minor version at a time.- Example: version
1.11.x > 1.13.x(Not allowed) / version1.11.x > 1.12.x(Allowed)
- Example: version
- If you are using a Kubernetes version that has reached end of support or a version that is scheduled to reach end of support, a red exclamation mark will appear to the right of the version. * If this icon appears, we recommend upgrading the Kubernetes version.
Node pool
You can view, add, modify, or delete cluster node pool information. For detailed information on using node pools, refer to Managing Nodes.
| Category | Detailed description |
|---|---|
| Add node pool | Add a node pool to the current cluster
|
| Node pool list | View the list of node pools created in the current cluster
|
| Node pool details | Provides node pool management features
|
If a red exclamation mark icon appears on the node pool version, the server OS of that node pool is not supported in newer Kubernetes versions. The node pool server OS must be upgraded to ensure stable service.
- To upgrade the node pool version, delete the existing node pool and then create a new node pool with a higher server OS version.
Tag
On the Cluster List page, you can view the tag information of the selected resource and add, modify, or delete it.
| Category | Detailed description |
|---|---|
| Tag list | Tag list
|
Job History
You can view the operation history of the selected resource on the Cluster List page.
| Category | Detailed description |
|---|---|
| Task History List | Resource Change History
|
Managing Cluster Resources
To manage cluster resources, we provide cluster version upgrade, kubeconfig download, and control plane logging modification features.
Security Group and Virtual Server are created/deleted by Kubernetes Engine for lifecycle management purposes even without create/delete permissions, and the creator/modifier is recorded as System.
Cluster version upgrade
If there is a version that can be upgraded from the cluster’s Kubernetes version, you can perform the upgrade on the Cluster Details page.
- Check the following items before upgrading the cluster.
- Check if the cluster status is Running
- Check whether the status of all node pools in the cluster is Running or Deleting.
- Check that all node pool versions in the cluster match the cluster’s version.
- Check whether automatic scaling up/down of all node pools in the cluster and the node auto-recovery feature are disabled.
- After upgrading the cluster, proceed with the node pool upgrade. * The control plane and node pool upgrades of a Kubernetes cluster are performed separately.
- You can upgrade only one minor version at a time.
- Example: version 1.12.x > 1.13.x (possible) / version 1.11.x > 1.13.x (not possible)
- After an upgrade, you cannot perform a downgrade or rollback, so to use a previous version again, you must create a new cluster.
- Since user systems using an end‑of‑life Kubernetes version may become vulnerable, upgrade the control plane and node pool versions directly from the Samsung Cloud Platform Console.
- There is no additional cost for the upgrade.
- Please conduct compatibility testing of the upgrade version in advance to ensure stable system operation for users.
Pre-upgrade preparation for cluster version
When upgrading the cluster version, there is no need to delete and recreate API objects. For the migrated API, all existing API objects can be read and updated using the new API version. However, due to the deprecated API in older versions of Kubernetes, you may be unable to read or modify existing objects, or create new ones. Therefore, to ensure system stability, it is recommended to migrate the client and manifest before upgrading.
Migrate the client and manifest using the following method.
- Download the latest version of the client (e.g., kubectl), install it on the cluster, and modify the YAML to reference the new API.
- Or use a separate plugin (kubectl convert) to convert automatically. * For detailed instructions, refer to the 쿠버네티스 공식 문서 > 리눅스에 kubectl 설치 및 설정.
Upgrade cluster and node pool versions
To update the cluster and node pool, follow these steps.
- Click the All Services > Container > Kubernetes Engine menu. 1. Navigate to the Service Home page of Kubernetes Engines.
- Service Home page, click the Cluster menu. 2. Navigate to the Cluster List page.
- On the Cluster List page, click the resource (cluster) to upgrade the version. 3. Navigate to the Cluster Details page.
- Cluster Details page, click the Edit icon for the Kubernetes Version. 4. Cluster version upgrade A popup window opens.
- Select the Kubernetes version to upgrade, and click the Confirm button.
- It may take a few minutes for the cluster upgrade to complete.
- While the upgrade is in progress, the cluster status is shown as Updating, and when the upgrade completes, it is shown as Running.
- When the upgrade is complete, select the Node Pool tab. 6. Go to the Node Pool page.
- Click the More button of the node pool item and click Upgrade. 7. Node pool version upgrade A popup window opens.
- Node Pool Version Upgrade After checking the message in the popup window, click the Confirm button.
- It may take a few minutes for the node pool upgrade to complete.
- While the upgrade is in progress, the node pool status is shown as Updating, and when the upgrade is complete, it is shown as Running.
kubeconfig download
You can download the admin/user kubeconfig settings for the cluster’s public and private endpoints as a yaml document.
To download the cluster’s kubeconfig settings, follow these steps.
- Click the All Services > Container > Kubernetes Engine menu. 1. Navigate to the Service Home page of Kubernetes Engines. Service Home 페이지에서 클러스터 메뉴를 클릭하세요. 2. Navigate to the Cluster List page.
- On the Cluster List page, click the resource (cluster) to download the kubeconfig. 3. Navigate to the Cluster Details page.
- Cluster Details page, click the Download admin kubeconfig/Download user kubeconfig button for the desired endpoint.
- You can download the kubeconfig file in YAML format for each permission.
Modify resources that allow private endpoint access
You can modify the resource settings that allow private endpoint access to the cluster.
- Click the All Services > Container > Kubernetes Engine menu. 1. Navigate to the Service Home page of Kubernetes Engines.
- On the Service Home page, click the Cluster menu. 2. Navigate to the Cluster List page.
- On the Cluster List page, click the resource (cluster) for which you want to modify the private endpoint access control. 3. Navigate to the Cluster Details page.
- On the Cluster Details page, click the Edit icon of Private Endpoint Access Allowed Resources. 4. Edit Private Endpoint Access Allowed Resources The popup window opens.
- Edit Private Endpoint Access Allowed Resources In the popup window, set the Use status of Private Endpoint Access Allowed Resources, add the allowed access resource, and then click the Confirm button.
Modify public endpoint
You can change the public endpoint settings of the cluster.
- Click the All Services > Container > Kubernetes Engine menu. 1. Navigate to the Service Home page of Kubernetes Engines.
- Click the Cluster menu on the Service Home page. 2. Navigate to the Cluster List page.
- On the Cluster List page, click the resource (cluster) for which you want to modify the public endpoint access control. 3. Navigate to the Cluster Details page.
- Click the Edit icon of the Public Endpoint on the Cluster Details page. 4. Edit Public Endpoint The popup window opens.
- Public Endpoint Edit In the popup, set the Public Endpoint’s Usage status and add the allowed IP range, then click the Confirm button.
Modify control plane log collection settings
You can change the log collection settings of the cluster’s control plane (Control Plane). Detailed logs of the cluster can be viewed in the ServiceWatch service or the Cloud Monitoring service.
Even if you configure Cloud Monitoring log collection, you can view the cluster logs.
- However, since the Cloud Moniotring log collection feature is scheduled for discontinuation, we recommend using ServiceWatch log collection.
To change the control plane log collection settings of the cluster, follow the steps below.
- Click the All Services > Container > Kubernetes Engine menu. 1. Navigate to the Service Home page of Kubernetes Engines. Service Home 페이지에서 클러스터 메뉴를 클릭하세요. 2. Navigate to the Cluster List page.
- Cluster List page, click the resource (cluster) you want to modify control plane logging for. 3. Go to the Cluster Details page.
- On the Cluster Details page, click the Edit icon for ServiceWatch log collection. 4. ServiceWatch log collection The popup window opens.
- The Cloud Monitoring log collection feature can also be configured in the same way.
- ServiceWatch Log Collection in the popup window, set the use option for ServiceWatch Log Modification, then click the Confirm button.
When log collection is enabled, you can view the Audit/Event logs of the cluster control plane in each service. Detailed logs can be viewed on the next page.
Security Group Modify
You can modify the cluster’s Security Group.
In the network settings of Kubernetes Engine, you can select up to four Security Groups.
- If you manually add a Security Group to a node created by Kubernetes Engine on the Virtual Server service page, it may be automatically removed because it is not managed by Kubernetes Engine.
- For nodes, be sure to add and manage the Security Group in the network settings of the Kubernetes Engine service.
Managed Security Group is automatically managed in Kubernetes Engine.
- Do not use it for any user-defined purpose because if you delete a Managed Security Group or add/delete rules, it will automatically be restored.
To modify the cluster’s Security Group, follow these steps.
- Click the All Services > Container > Kubernetes Engine menu. 1. Navigate to the Service Home page of Kubernetes Engines.
- Service Home page, click the Cluster menu. 2. Navigate to the Cluster List page.
- Cluster List page, click the resource (cluster) whose Security Group you want to modify. 3. Navigate to the Cluster Details page.
- On the Cluster Details page, click the Edit icon of the Security Group. 4. Security Group Edit The popup window opens.
- After selecting or deselecting the Security Group to modify, click the Confirm button.
Terminate Cluster
To terminate the cluster, follow these steps.
- Click the All Services > Container > Kubernetes Engine menu. 1. Navigate to the Service Home page of Kubernetes Engines.
- On the Service Home page, click the Cluster menu. 2. Navigate to the Cluster List page.
- Cluster List page, click the resource (cluster) to view its detailed information. 3. Navigate to the Cluster Details page.
- On the Cluster Details page, click Cancel Service.
- Service Termination After reviewing the content in the popup window, click the Confirm button.