Jump to contentJump to page navigation: previous page [access key p]/next page [access key n]
Navigation
SUSE CaaS Platform 4.5.2

Administration Guide

This guide describes general and specialized administrative tasks for SUSE CaaS Platform 4.5.2.

Authors: Markus Napp and Nora Kořánová
Publication Date: 2020-12-11
1 About This Guide
1.1 Required Background
1.2 Available Documentation
1.3 Feedback
1.4 Documentation Conventions
2 Cluster Management
2.1 Prerequisites
2.2 Bootstrap and Initial Configuration
2.3 Adding Nodes
2.4 Removing Nodes
2.5 Reconfiguring Nodes
2.6 Node Operations
2.7 Graceful Cluster Shutdown & Startup
2.8 Post Startup Activities
3 Software Management
3.1 Software Installation
4 Cluster Updates
4.1 Update Requirements
4.2 Updating Kubernetes Components
4.3 Updating Nodes
4.4 Base OS Updates
5 Upgrading SUSE CaaS Platform
5.1 Migration to SUSE CaaS Platform 4.5
6 Security
6.1 Network Access Considerations
6.2 Access Control
6.3 Authentication
6.4 Managing LDAP Users and Groups
6.5 Role-Based Access Control (RBAC)
6.6 Admission Controllers
6.7 Pod Security Policies
6.8 NGINX Ingress Controller
6.9 Certificates
7 Logging
7.1 Introduction
7.2 Logging in skuba
7.3 Audit Log
7.4 Centralized Logging
8 Monitoring
8.1 Monitoring Stack
8.2 Health Checks
8.3 Horizontal Pod Autoscaler
8.4 Stratos Web Console
9 Storage
9.1 vSphere Storage
10 Integration
10.1 SUSE Enterprise Storage Integration
10.2 SUSE Cloud Application Platform Integration
11 GPU-Dependent Workloads
11.1 NVIDIA GPUs
12 Cluster Disaster Recovery
12.1 Backing Up etcd Cluster Data
12.2 Recovering Master Nodes
13 Backup and Restore with Velero
13.1 Limitations
13.2 Prerequisites
13.3 Known Issues
13.4 Deployment
13.5 Operations
13.6 Backup
13.7 Restore
13.8 Use Cases
13.9 Uninstall
14 Miscellaneous
14.1 Configuring HTTP/HTTPS Proxy for CRI-O
14.2 Configuring Container Registries for CRI-O
14.3 FlexVolume Configuration
14.4 Configuring kubelet
14.5 Changes from Kubernetes 1.17 to 1.18
15 Troubleshooting
15.1 The supportconfig Tool
15.2 Cluster definition directory
15.3 Log collection
15.4 Debugging SLES Nodes provision
15.5 Debugging Cluster Deployment
15.6 Error x509: certificate signed by unknown authority
15.7 Error Invalid client credentials
15.8 Replacing a Lost Node
15.9 Rebooting an Undrained Node with RBD Volumes Mapped
15.10 ETCD Troubleshooting
15.11 Kubernetes debugging tips
15.12 AWS Deployment fails with cannot attach profile error
16 Glossary
A Contributors
B GNU Licenses
B.1 GNU Free Documentation License
Print this page