• Buy Now
    • Rackspace Cloud
    • Email & Apps
    • Fanatical Support for AWS
    • Managed Google Cloud Platform
    • Office 365
  • Log In
    • MyRackspace Portal
    • Cloud Control Panel
    • Rackspace Webmail Login
    • Cloud Office Control Panel
  • Rackspace Logo
  • Developer Home
  • Developer Documentation
  • Blogs ▼
    • Technical Blog
    • Rackspace Blog
    • Solve: Thought Leadership
  • Support Documentation

Developer Docs


Let’s Build Something Powerful Together!

End-to-End Multicloud Solutions.   Solving Together.™   Learn more at Rackspace.com

Submit an issue
  • Rackspace KaaS
  • Release Notes
    • Preface
    • Known issues
    • What's new in 1.0.x
      • General changes and improvements
      • Kubernetes
      • Rackspace KaaS Control Panel
      • Private Docker image registry
      • Monitoring
      • Logging
      • Networking
      • Storage
    • What's new in 1.1.0
    • List of components and versions
    • Document history and additional information
    • Disclaimer
  • Technical FAQ
    • Preface
    • Technical FAQ
    • Document history and additional information
    • Disclaimer
  • User Guide
    • Overview
      • Managed services
      • Ingress controller
        • Authentication and authorization
      • Cluster roles
      • High availability
      • Resource limits
    • Prerequisites
      • Access your Kubernetes cluster
    • Configure your environment
      • Install the Kubernetes certificate authority
      • Configure application metrics monitoring
      • Access the Rackspace KaaS dashboards
    • Example of basic operations
      • Launch a new Deployment
      • Expose your Deployment with a LoadBalancer
      • Access your Deployment
      • Add persistent storage to your Deployment
        • Using local storage
      • Scale replicas for your Deployment
      • Clean up the Deployment
    • Set up your cluster to use a private Docker image registry
      • Examples of usage
        • Example of private Docker registry usage
        • Example of the library project usage
    • Logging and monitoring
      • Logging
        • Using Kibana
      • Monitoring
        • Using Grafana
    • Platform security
      • Limitations
      • Configure Kubernetes namespaces
        • Isolate a user to a specific namespace
      • Configure users, roles, and groups
        • Add a user with cluster-wide privileges
      • Configure network policies
        • Example of a restrictive network policy
      • Configure Pod security policies
        • Pod security policies

Configure your environment#

After obtaining all the required items described in Prerequisites, set up your environment by configuring the environment variables provided by your administrator. Use the export command to set up your username, cluster name, and domain as environment variables.

To configure the environment variables, run the following commands:

export RS_OS_USERNAME=<my-openstack-username>
export RS_K8S_CLUSTER_NAME=<my-cluster-name>
export RS_K8S_DOMAIN=<my-cluster-domain>

Install the Kubernetes certificate authority#

To configure your web browser and personal Docker Engine to work with the managed services, install the Kubernetes CA certificate. You must perform this configuration once.

To install the Kubernetes CA certificate, perform the following steps:

  1. Run the installation script:

    ./install-kubernetes-ca-cert.sh
    
  2. If you are using MacOS or Windows, restart Docker:

    docker-machine restart <docker-machine>
    

Configure application metrics monitoring#

Rackspace Kubernetes-as-a-Service (KaaS) provides an easy to use and configure Prometheus cloud monitoring solution that visualizes alerts and metrics through the Grafana dashboards. You can configure Prometheus to collect metrics from your Kubernetes applications through a Kubernetes Custom Resource Definition (CRD) called ServiceMonitor. You can define the ServiceMonitor in a simple yaml file and apply this file to your configuration using kubectl.

To configure application metrics monitoring, complete the following steps:

  1. Create a yaml configuration file:

    apiVersion: monitoring.coreos.com/v1alpha1
    kind: ServiceMonitor
    metadata:
      name: your-application
      namespace: rackspace-monitoring
      labels:
      monitor: rackspace-prometheus # needs to have this label to be detected by the managed prometheus resource
    spec:
      selector:
        matchLabels:
          some-label: <that-will-match-your-application-service>
      namespaceSelector:
        matchNames:
        - the-namespace-where-your-application-lives # needs to be the namespace
          the app got deployed to
      endpoints:
      - port: the-name-of-the-port-that-exposes-your-metrics-endpoint
    
  2. Save as service-monitor.yaml.

  3. Apply this configuration:

    $ kubectl apply -f service-monitor.yaml
    

Access the Rackspace KaaS dashboards#

The Rackspace KaaS solution enables you to access the managed services user interface by using your web browser.

To access the dashboards, you need the following information:

  • Kubernetes cluster name
  • OpenStack DNS zone for the Kubernetes cluster
  • Login and password

To get the required information for logging in to the Kubernetes dashboards:

  1. Get the name of your Kubernetes cluster:

    kubectl config get-clusters
    

    System response:

    NAME
    kubernetes-test
    
  2. Get the DNS zone name for your Kubernetes cluster:

    openstack zone list
    

    Example of system response:

    +--------------+-------------------+---------+----------+--------+--------+
    | id           | name              | type    |   serial | status | action |
    +--------------+-------------------+---------+----------+--------+--------+
    | 034d29de ... | test.mk8s.systems.| PRIMARY | 92303 ...| ACTIVE | NONE   |
    +--------------+-------------------+---------+----------+--------+--------+
    

    If your cluster name is kubernetes-test and the DNS zone name is test.mk8s.systems, the URL to log in to the manage services dashboards is https://ingress.kubernetes-test.test.mk8s.systems/<dashboard>.

  3. Use the username and password provided to you by your administrator to log in.

The following table lists the customer-facing dashboards.

Managed service URL Credentials
Rackspace KaaS UI https://<openstack-env-domain-name>:8891/login
  • Login: RS_K8S_USERNAME
  • Password: RS_K8S_PASSWORD
Prometheus Monitoring https://ingress.<cluster-name>.<dns-zone>/prometheus/graph
  • Login: RS_K8S_USERNAME
  • Password: RS_K8S_PASSWORD
Grafana Dashboards https://ingress.<cluster-name>.<dns-zone>/monitoring
  • Login: RS_K8S_USERNAME
  • Password: RS_K8S_PASSWORD
Logging https://ingress.<cluster-name>.<dns-zone>/logs
  • Login: RS_K8S_USERNAME
  • Password: RS_K8S_PASSWORD
Private registry https://registry.<cluster-name>.<dns-zone>
  • Login: RS_K8S_USERNAME
  • Password: RS_K8S_PASSWORD
Kubernetes Web UI https://<cluster-name>.<dns-zone>/dashboard
  • Login: RS_K8S_USERNAME
  • Password: RS_K8S_PASSWORD
Previous Prerequisites
Next Example of basic operations
Developer Network
  • Developer Center
  • API Documentation and User Guides
  • SDKs
  • Rackspace How-To
Blogs
  • Technical Blog
  • Rackspace Blog
  • Solve: Thought Leadership
Other Information
  • Customer Stories
  • Events
  • Programs
  • Careers
  • Style Guide for Technical Content
©2020 Rackspace US, Inc.
  • ©2020 Rackspace US, Inc.
  • About Rackspace
  • Privacy Statement
  • Website Terms
  • Trademarks