The page has been translated by Gen AI.

How-to guides

Users can create a service by entering the required information for the Kubernetes Engine and selecting detailed options through the Samsung Cloud Platform Console.

Create Kubernetes Engine

You can create and use the Kubernetes Engine service from the Samsung Cloud Platform Console.

You can create and manage clusters to use the Kubernetes Engine service. After creating the cluster, you can add services needed for operation such as nodes, namespaces, and workloads.

Caution

  • In the network settings of Kubernetes Engine, you can select up to 4 Security Groups.

    • If you manually add a Security Group to a node created by Kubernetes Engine on the Virtual Server service page, it may be automatically removed because it is not managed by Kubernetes Engine.
    • For nodes, be sure to add and manage the Security Group in the network settings of the Kubernetes Engine service.

  • Managed Security Group is automatically managed in Kubernetes Engine.

    • Do not use the Managed Security Group for any custom purposes, as it will automatically revert if you delete it or add or remove rules.

Create Cluster

You can create and use a Kubernetes Engine cluster service in the Samsung Cloud Platform Console.

To create a Kubernetes Engine cluster, follow these steps.

  1. Click the All Services > Container > Kubernetes Engine menu. 1. Navigate to the Service Home page of Kubernetes Engine.
  2. On the Service Home page, click the Cluster Creation button. 2. Go to the Create Cluster page.
  3. On the Create Cluster page, enter the information required to create the service and select detailed options.
    • In the Service Information Input area, enter or select the required information.
Category
Required
Detailed description
Cluster nameRequiredCluster name
  • must start with an English letter and use English letters, numbers, and special characters (-) within 3 - 30 characters
Control Plane Settings > Kubernetes VersionrequiredSelect Kubernetes version
Control plane settings > Private endpoint allowed resourcesSelectionAfter selecting a resource, click Add to select the resource that will be allowed to access the private endpoint
  • Only resources in the same account and the same region can be registered
  • Regardless of whether usage is enabled, the nodes of the cluster can access the private endpoint
Control Plane Settings > Public EndpointSelectionUse after selecting, enter the public endpoint Allowed IP range for access as 192.168.99.0/24
  • Set the access control IP range to allow external access to the Kubernetes API server endpoint
  • If external access is not required, you can disable Use to reduce security threats
ServiceWatch log collectionSelectionSet whether to enable log collection so that logs for the cluster can be viewed in ServiceWatch
  • Select Enable to provide free 5 GB log storage for all services within the Account, and charges apply based on storage volume if it exceeds 5 GB
  • If you need to view cluster logs, it is recommended to enable the ServiceWatch log collection feature
Deletion ProtectionSelectionSet whether to enable the deletion protection feature that prevents clusters from being accidentally deleted
  • If you select Enabled, you cannot terminate the cluster until you disable Deletion Protection
  • Even after creating the cluster, you can change the setting on the Cluster Details page. For more information, refer to Deletion Protection Edit
Network Settings > VPC NameRequiredSelect a pre‑created VPC
Network Settings > Default SubnetRequiredSelect the default Subnet among the Subnets of the chosen VPC
Network Settings > Add SubnetSelectClick the Select button to select an additional Subnet to connect to the cluster
  • Only Subnets in the same VPC can be selected
  • You can select up to two
  • Subnets chosen as the default Subnet are not shown in the additional Subnet list
Network Settings > Security GroupSelectionSecurity Group: Select after clicking the button, in the Security Group selection popup, select a Security Group
  • Up to 4 Security Group can be selected
StorageClass configurationSelectionSelect the storage volume to use in the cluster
  • NFS Volume: After selecting Use, choose the File Storage to use from the list; the default File Storage supports only the NFS format
    • The appropriate StorageClass and Provisioner for the selected File Storage are provided by default
  • Block Storage includes a default StorageClass and CSI, so no additional configuration is required
Cluster connection resourcesSelectionConfigure File Storage and Object Storage connection resources that require access from all nodes in the cluster
  • Add button to click and select File Storage and Object Storage resources to connect to the cluster, up to three resources can be selected per type
Table. Kubernetes Engine service information input items
  • Additional Information Input Enter or select the required information.
    Category
    Required
    		Detailed description
    tagSelectAdd Tag
    • Up to 50 per resource can be added
    • Add Tag button after clicking, input or select Key, Value values
    Table. Kubernetes Engine additional information entry fields
  1. Summary Check the detailed information and estimated charges generated in the panel, and click the Create button.
    • When creation is complete, check the created resources on the Cluster List page.

Check Cluster Detailed Information

The Kubernetes Engine service allows you to view and edit the full list of resources and detailed information. Cluster Details page consists of Details, Node Pools, Tags, Job History tabs.

To view detailed cluster information, follow these steps.

  1. All Services > Container > Kubernetes Engine Click the menu. 1. Navigate to the Service Home page of Kubernetes Engine.
  2. Click the Cluster menu on the Service Home page. 2. Navigate to the Cluster List page.
  3. Cluster List page, click the resource (cluster) whose detailed information you want to view. 3. Navigate to the Cluster Details page.
    • Cluster Details page displays the cluster’s status and detailed information, and is composed of Details, Node Pools, Tags, Operation History tabs.
      CategoryDetailed description
      Cluster statusKubernetes Engine cluster status
      • Creating: in progress
      • Running: creation complete / running
      • Updating: upgrading version
      • Deleting: deleting
      • Error: error occurred
      Service cancellationButton to delete a Kubernetes Engine cluster
      • To delete a Kubernetes Engine service, you must delete all node pools added to the cluster
      • If the service is deleted, running services may be terminated immediately, so consider the impact of service interruption before deleting
      • Deletion Protection-enabled clusters cannot be deleted, and a notification popup appears when clicked. To delete, you must first disable Deletion Protection
      Table. Cluster status information and additional features

Detailed Information

On the Cluster List page, you can view detailed information of the selected resource and, if necessary, edit the information.

Category
Detailed description
serviceService Name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
Resource nameResource name
  • In the Kubernetes Engine service, it refers to the cluster name
Resource IDUnique resource ID in the service
constructorUser who created the service
Creation date and timeService creation date and time
EditorUser who edited the service information
Modification date and timeDate and time the service information was modified
Cluster nameCluster name
Control Area SettingsCheck the assigned Kubernetes control plane (Control Plane) version and allowed access scope
  • If a Kubernetes version of the control plane that can be upgraded is available, click the Edit icon to perform a Cluster Version Upgrade. See 클러스터 버전 업그레이드 for details
  • Click the Admin Kubeconfig Download/User Kubeconfig Download button for the private endpoint address to download the kubeconfig settings for each role as a yaml document
  • Click the Edit icon of the private endpoint access permission resource to modify the access permission resource
  • Click the Edit icon of the public endpoint to modify its enabled status and allowed IP range
  • Click the Admin Kubeconfig Download/User Kubeconfig Download button for the public endpoint address to download the kubeconfig settings for each role as a yaml document
  • Click the Edit icon of ServiceWatch log collection to toggle its enabled status. When the log collection feature is enabled, view the control plane’s Audit/Event logs in ServiceWatch > log group
  • Click the Edit icon of Deletion Protection to change whether the deletion protection feature is enabled
Network SettingsView the VPC, Subnet, and Security Group information configured when creating a Kubernetes Engine cluster
  • Click each setting to view detailed information on the details page
  • If you need to change an additional Subnet, click the Edit icon to configure
  • If you need to change the Security Group, click the Edit icon to configure
  • Managed Security Groups are items provided by the system and are created automatically
StorageClass configurationIf you click the NFS volume name, you can view detailed information on the storage details page
  • If you need to modify the NFS volume, click the Edit icon to configure
Cluster connection resourcesSelected connection resource information
  • If you need to change the cluster connection resource, click the Edit icon to configure
Table. Cluster Detail Information Tab Items
Reference
  • The version of Kubernetes Engine is expressed as [major].[minor].[patch] in order, and only one minor version can be upgraded at a time.
    • Example: version 1.11.x > 1.13.x (not allowed) / version 1.11.x > 1.12.x (allowed)
  • If you are using a Kubernetes version that is no longer supported or a version scheduled for end of support, a red exclamation mark will appear to the right of the version. * If this icon is displayed, we recommend upgrading the Kubernetes version.

Node Pool

You can view, add, modify, or delete cluster node pool information. For detailed information on using node pools, see Node Management.

CategoryDetailed description
Add node poolAdd a node pool to the current cluster
Node pool listView the list of node pools created in the current cluster
  • Click a node pool name to navigate to its details page and view detailed information
More options menu
  • Node list: displays node name, version, and status information
  • Upgrade: upgrade the node pool version
  • Node count adjustment: adjust node count
  • Delete node pool: delete the node pool
Node Pool Detail PageClicking the node pool name allows you to view information and manage the node pool on the details page
  • Node control functions
    • Node List: Displays node name, version, and status information
    • Upgrade: Upgrade the node pool version
    • Adjust Node Count: Adjust the number of nodes
    • Delete Node Pool: Delete the node pool
  • Node Details
    • Resource Information: Displays the resource information of the node pool
    • Server Information: Displays the server information of the node pool
    • Network Information: Displays the network information of the node pool
    • Node Information: Shows version, labels, taints, and advanced settings
    • Node Pool Connected Resources: Displays the node pool’s connected resources
Table. Node pool tab items
Reference

If a red exclamation‑mark icon appears on the node pool version, the node pool’s server OS is not supported in newer Kubernetes versions. To ensure stable service, the node pool server OS must be upgraded.

  • To upgrade the node pool version, delete the existing node pool and then create a new node pool with a higher server OS version.

Tag

On the Cluster List page, you can view the tag information of the selected resource and add, modify, or delete it.

CategoryDetailed description
Tag listTag list
  • You can view the Key and Value information of the tag
  • Up to 50 tags can be added per resource
  • When entering a tag, you can search and select from the list of previously created Keys and Values
Table. Cluster Tag Tab Items

Job History

Cluster List page lets you view the operation history of the selected resource.

CategoryDetailed description
Task History ListResource Change History
  • You can view the work details, work date and time, resource type, resource name, work result, and operator information
  • Work History List When you click the corresponding resource in the list, the Work History Details popup opens
Table. Cluster job history tab items

Managing Cluster Resources

To manage cluster resources, we provide features such as cluster version upgrades, kubeconfig downloads, and control plane logging modifications.

Caution
To use Kubernetes Engine, you need at least read permissions for VPC, VPC Subnet, Security Group, FileStorage, and Virtual Server.
Even without create/delete permissions, Security Group and Virtual Server are created/deleted by Kubernetes Engine for lifecycle management purposes, and the creator/modifier is recorded as System.

Cluster version upgrade

If there is a version available for upgrade from the cluster’s Kubernetes version, you can perform the upgrade on the Cluster Details page.

Reference
  • Before upgrading the cluster, check the following items.
    • Verify that the cluster status is Running
    • Check that the status of all node pools in the cluster is Running or Deleting.
    • Verify that the version of every node pool in the cluster matches the cluster’s version.
    • Check whether automatic scaling of all node pools in the cluster and the node auto‑recovery feature are disabled.
  • After upgrading the cluster, proceed with the node pool upgrade. * The control plane and node pool upgrades of a Kubernetes cluster are performed separately.
  • You can upgrade only one minor version at a time.
    • Example: version 1.12.x > 1.13.x (possible) / version 1.11.x > 1.13.x (not possible)
  • After an upgrade, you cannot perform a downgrade or rollback, so to use a previous version again, you must create a new cluster.

Caution
  • User systems running an end-of-support Kubernetes version may become vulnerable, so upgrade the control plane and node pool versions directly from the Samsung Cloud Platform Console.
    • There is no additional cost for the upgrade.
  • Please conduct compatibility testing for the upgrade version in advance to ensure stable system operation for users.

Cluster Version Upgrade Pre-Preparation

When upgrading the cluster version, there is no need to delete and recreate API objects. For the migrated API, all existing API objects can be read and updated using the new API version. However, due to the deprecated API in older versions of Kubernetes, you may be unable to read or modify existing objects or create new ones. Therefore, we recommend migrating the client and manifest before upgrading for system stability.

Migrate the client and manifest using the following method.

Reference
Since the deprecated APIs differ for each cluster version, the scope of application and system impact may also vary. For detailed information, refer to the Kubernetes Official Documentation > Deprecation Guide.

Upgrade cluster and node pool versions

To update the cluster and node pool, follow these steps.

  1. All Services > Container > Kubernetes Engine Click the menu. 1. Navigate to the Service Home page of Kubernetes Engines.
  2. On the Service Home page, click the Cluster menu. 2. Navigate to the Cluster List page.
  3. On the Cluster List page, click the resource (cluster) to upgrade the version. 3. Go to the Cluster Details page.
  4. On the Cluster Details page, click the edit icon of the Kubernetes version. 4. Cluster version upgrade A popup window opens.
  5. Select the Kubernetes version to upgrade and click the Confirm button.
    • It may take a few minutes for the cluster upgrade to complete.
    • While the upgrade is in progress, the cluster status is displayed as Updating, and when the upgrade is complete, it is displayed as Running.
  6. When the upgrade is complete, select the Node Pool tab. 6. Navigate to the Node Pool page.
  7. Click the More button of the node pool item and click Upgrade. 7. Node Pool Version Upgrade A popup window opens.
  8. Node Pool Version Upgrade After checking the message in the popup window, click the Confirm button.
    • It may take a few minutes for the node pool upgrade to complete.
    • While the upgrade is in progress, the node pool status is shown as Updating, and when the upgrade is complete, it is shown as Running.

kubeconfig download

You can download the administrator/user kubeconfig settings for the cluster’s public and private endpoints as a yaml document.

To download the cluster’s kubeconfig settings, follow these steps.

  1. Click the All Services > Container > Kubernetes Engine menu. 1. Go to the Service Home page of Kubernetes Engines.
  2. Click the Cluster menu on the Service Home page. 2. Navigate to the Cluster List page.
  3. Cluster List page, click the resource (cluster) to download the kubeconfig. 3. Navigate to the Cluster Details page.
  4. On the Cluster Details page, click the Admin kubeconfig download/User kubeconfig download button for the desired endpoint.
    • You can download the kubeconfig file in YAML format for each permission.

Modify resources that allow private endpoint access

You can modify the resource settings that allow private endpoint access to the cluster.

  1. Click the All Services > Container > Kubernetes Engine menu. 1. Go to the Service Home page of Kubernetes Engines.
  2. On the Service Home page, click the Cluster menu. 2. Navigate to the Cluster List page.
  3. On the Cluster List page, click the resource (cluster) whose private endpoint access control you want to modify. 3. Navigate to the Cluster Details page.
  4. On the Cluster Details page, click the Edit icon for Private Endpoint Allowed Resources. 4. Modify resources that allow private endpoint access A popup window opens.
  5. Private Endpoint Access Allowed Resource Modification In the popup, set the Private Endpoint Access Allowed Resource’s usage status, add the allowed resource, and then click the Confirm button.

Modify Public Endpoint

You can change the public endpoint settings of the cluster.

  1. Click the All Services > Container > Kubernetes Engine menu. 1. Navigate to the Service Home page of Kubernetes Engines.
  2. On the Service Home page, click the Cluster menu. 2. Go to the Cluster List page.
  3. On the Cluster List page, click the resource (cluster) you want to modify the public endpoint access control for. 3. Navigate to the Cluster Details page.
  4. On the Cluster Details page, click the Public Endpoint Edit icon. 4. Edit Public Endpoint The popup window opens.
  5. Public Endpoint Edit In the popup, configure the Public Endpoint usage setting, add the allowed IP address range, and then click the Confirm button.

Modify control plane log collection settings

You can change the log collection settings of the cluster’s control plane. Detailed logs of the cluster can be viewed in the ServiceWatch service.

To change the control plane log collection settings of the cluster, follow the steps below.

  1. All Services > Container > Kubernetes Engine Click the menu. 1. Go to the Service Home page of Kubernetes Engines.
  2. Click the Cluster menu on the Service Home page. 2. Navigate to the Cluster List page.
  3. Cluster List page, click the resource (cluster) whose control plane logging you want to modify. 3. Navigate to the Cluster Details page.
  4. On the Cluster Details page, click the Edit icon for ServiceWatch Log Collection. 4. ServiceWatch log collection The popup window opens.
  5. ServiceWatch Log Collection in the popup window, set the usage of ServiceWatch Log Modification, then click the Confirm button.
Reference

When log collection is enabled, you can view the Audit/Event logs of the cluster control plane in each service. Detailed logs can be accessed on the next page.

Edit Deletion Protection

You can change the cluster’s Deletion Protection (deletion protection) setting to prevent the cluster from being accidentally deleted.

Reference
  • If you use Deletion Protection, you cannot terminate the cluster until you disable it.
  • It can be edited in all cluster states except the Deleting state.

To change the Deletion Protection setting of a cluster, follow the steps below.

  1. Click the All Services > Container > Kubernetes Engine menu. 1. Go to the Service Home page of Kubernetes Engine.
  2. On the Service Home page, click the Cluster menu. 2. Navigate to the Cluster List page.
  3. On the Cluster List page, click the resource (cluster) whose Deletion Protection you want to modify. 3. Navigate to the Cluster Details page.
  4. On the Cluster Details page, in the Control Area Settings area, click the Edit icon for Deletion Protection. 4. Deletion Protection Edit The popup window opens.
  5. Deletion Protection Edit In the popup window, after setting the Deletion Protection Usage, click the Confirm button.
    • If you select a value that is the same as the currently set value, the Confirm button will not be activated.

Modify Security Group

You can modify the cluster’s Security Group.

Caution

  • You can select up to four Security Groups in the network settings of Kubernetes Engine.

    • If you manually add a Security Group to a node created by Kubernetes Engine on the Virtual Server service page, it may be automatically removed because it is not managed by Kubernetes Engine.
    • For nodes, you must add and manage the Security Group in the network settings of the Kubernetes Engine service.

  • Managed Security Group is automatically managed in Kubernetes Engine.

    • Do not use it for any user-defined purpose because if you delete a Managed Security Group or add/delete rules, it will automatically be restored.

To modify the cluster’s Security Group, follow these steps.

  1. Click the All Services > Container > Kubernetes Engine menu. 1. Go to the Service Home page of Kubernetes Engines.
  2. On the Service Home page, click the Cluster menu. 2. Navigate to the Cluster List page.
  3. Cluster List page, click the resource (cluster) whose Security Group you want to modify. 3. Navigate to the Cluster Details page.
  4. On the Cluster Details page, click the Edit icon of the Security Group. 4. Security Group Edit The popup window opens.
  5. After selecting or deselecting the Security Group to modify, click the Confirm button.

Modify Additional Subnet

You can modify the additional Subnet connected to the cluster.

Caution
  • You can select up to two additional subnets.
  • A Subnet selected as the default Subnet cannot be selected as an additional Subnet.
  • You cannot deselect an additional Subnet that is being used by the node pool.

To modify the cluster’s additional Subnet, follow these steps.

  1. Click the All Services > Container > Kubernetes Engine menu. 1. Navigate to the Service Home page of Kubernetes Engine.
  2. On the Service Home page, click the Cluster menu. 2. Navigate to the Cluster List page.
  3. Cluster List page, click the resource (cluster) to edit the added Subnet. 3. Navigate to the Cluster Details page.
  4. On the Cluster Details page, click the Edit icon of Add Subnet. 4. Add Subnet Edit The popup window opens.
  5. Select the Subnet to add, or deselect the additional Subnet you are not using, then click the Confirm button.

Modify NFS volume

You can modify the NFS volume of the cluster.

Caution
  • If you change or disable the cluster’s File Storage volume, the StorageClass and Provisioner linked to the existing volume will be deleted, and the volume’s connection will also be removed. * PersistentVolumes created with this StorageClass cannot be used normally, and data stored on the volume will not be migrated automatically.
  • Among the cluster’s disk types, HighPerformanceSSD cannot be attached to regular Virtual Server nodes and can only be used with MNGC/Baremeral resources.

To modify the cluster’s NFS volume, follow the steps below.

  1. Click the All Services > Container > Kubernetes Engine menu. 1. Go to the Service Home page of Kubernetes Engines.
  2. On the Service Home page, click the Cluster menu. 2. Navigate to the Cluster List page.
  3. On the Cluster List page, click the resource (cluster) whose NFS volume you want to edit. 3. Go to the Cluster Details page.
  4. On the Cluster Details page, click the Edit icon of the NFS Volume. 4. Edit NFS Volume popup window opens.
  5. Select whether to use an NFS volume, choose the NFS volume to use from the list, and then click the Confirm button.

Modify Cluster Connection Resources

You can modify the cluster connection resources.

Caution
  • There is a limit on the number of cluster connection resources.
    • You can add up to 3 File Storage and up to 3 Object Storage, for a total of 6 connection resources.
  • StorageClass and Provisioner for cluster connection resources are not provided.
  • Do not arbitrarily modify the automatically added connection resources in the cluster within the File Storage and Object Storage services. * Changes may be reverted or cause unexpected behavior.

To modify the cluster connection resources, follow these steps.

  1. All Services > Container > Kubernetes Engine menu, click it. 1. Go to the Service Home page of Kubernetes Engines.
  2. On the Service Home page, click the Cluster menu. 2. Navigate to the Cluster List page.
  3. Cluster List page, click the resource (cluster) whose connected resources you want to edit. 3. Go to the Cluster Details page.
  4. On the Cluster Details page, click the Edit icon of the Cluster Connection Resources. 4. Edit Cluster Connection Resources The popup window opens.
  5. After selecting or deselecting the connection resource to modify, click the Confirm button.

Terminate Cluster

Caution
If you terminate the cluster, all connected node pools are deleted, and all data in every pod within the cluster is permanently deleted.
Reference

Clusters with Deletion Protection enabled cannot be terminated.

  • When you click Service Termination on the Cluster List page and the Cluster Details page, a notification popup appears and the termination does not proceed.
  • To delete the cluster, first disable Deletion Protection. * For more details, please refer to Deletion Protection 수정하기.

To terminate the cluster, follow the steps below.

  1. All Services > Container > Kubernetes Engine menu, click it. 1. Go to the Service Home page of Kubernetes Engines.
  2. Click the Cluster menu on the Service Home page. 2. Navigate to the Cluster List page.
  3. Cluster List page, click the resource (cluster) to view its detailed information. 3. Navigate to the Cluster Details page.
  4. On the Cluster Details page, click Cancel Service.
    • Clusters with Deletion Protection enabled display a notification popup and cannot be terminated. * After disabling Deletion Protection, try again.
  5. Service Termination After reviewing the content in the popup window, click the Confirm button.
ServiceWatch metric
Node Management