Jump to contentJump to page navigation: previous page [access key p]/next page [access key n]
Navigation
SUSE CaaS Platform 4.2.3

Administration Guide

This guide describes general and specialized administrative tasks for SUSE CaaS Platform 4.2.3.

Authors: Markus Napp and Nora Kořánová
Publication Date: 2020-10-21
1 About This Guide
1.1 Required Background
1.2 Available Documentation
1.3 Feedback
1.4 Documentation Conventions
2 Cluster Management
2.1 Prerequisites
2.2 Bootstrap and Initial Configuration
2.3 Adding Nodes
2.4 Removing Nodes
2.5 Reconfiguring Nodes
2.6 Node Operations
3 Software Management
3.1 Software Installation
4 Cluster Updates
4.1 Update Requirements
4.2 Updating Kubernetes Components
4.3 Updating Nodes
4.4 Base OS Updates
5 Security
5.1 Network Access Considerations
5.2 Access Control
5.3 Role Management
5.4 Managing Users and Groups
5.5 Role Based Access Control (RBAC)
5.6 Configuring an External LDAP Server
5.7 Pod Security Policies
5.8 NGINX Ingress Controller
5.9 Admission Controllers
5.10 Certificates
6 Logging
6.1 Introduction
6.2 Logging in skuba
6.3 Audit Log
6.4 Centralized Logging
7 Monitoring
7.1 Monitoring Stack
7.2 Health Checks
7.3 Horizontal Pod Autoscaler
7.4 Stratos Web Console
8 Storage
8.1 vSphere Storage
9 Integration
9.1 SUSE Enterprise Storage Integration
9.2 SUSE Cloud Application Platform Integration
10 Cluster Disaster Recovery
10.1 Backing Up etcd Cluster Data
10.2 Recovering Master Nodes
11 Backup and Restore with Velero
11.1 Limitations
11.2 Prerequisites
11.3 Known Issues
11.4 Deployment
11.5 Operations
11.6 Backup
11.7 Restore
11.8 Use Cases
11.9 Uninstall
12 Miscellaneous
12.1 Configuring HTTP/HTTPS Proxy for CRI-O
12.2 Configuring Container Registries for CRI-O
12.3 FlexVolume Configuration
12.4 Configuring kubelet
13 Troubleshooting
13.1 The supportconfig Tool
13.2 Cluster definition directory
13.3 Log collection
13.4 Debugging SLES Nodes provision
13.5 Debugging Cluster Deployment
13.6 Error x509: certificate signed by unknown authority
13.7 Error Invalid client credentials
13.8 Replacing a Lost Node
13.9 Rebooting an Undrained Node with RBD Volumes Mapped
13.10 ETCD Troubleshooting
13.11 Kubernetes debugging tips
13.12 Helm Error: context deadline exceeded
13.13 AWS Deployment fails with cannot attach profile error
14 Glossary
A GNU Licenses
A.1 GNU Free Documentation License
Print this page