vitrage/doc/source/contributor/k8s_datasource.rst

Kubernetes datasource

This document describes how to configure kubernetes datasource properly. Note that currently we support only Kubernetes on top of Nova (k8s nodes must be nova.instance)

Datasource configuration

Step 1

In order to access k8s cluster the following files should be copied from k8s master and stored in the same machine as vitrage :

• kubeconfig - kubernetes cluster config file is called kubeconfig.
• certificate-authority (ca.pem)
• client-certificate (kubectl.pem)
• client-key (kubectl-key.pem)

Kubeconfig example :

apiVersion: v1
kind: Config
clusters:
- cluster:
    certificate-authority: /home/k8s/ca.pem
    server: https://<IP>:<Port>
  name: bcmt-kubernetes
contexts:
- context:
    cluster: bcmt-kubernetes
    namespace: kube-system
    user: kubelet
  name: kubelet-context
current-context: kubelet-context
preferences: {}
users:
- name: kubelet
  user:
    client-certificate: /home/k8s/kubectl.pem
    client-key: /home/k8s/kubectl-key.pem

keys location (.pem) is usually at /etc/kubernetes/ssl

kubeconfig is usually at $HOME/.kube/config

Make sure to place the files in the same path as written in kubeconfig file. for example ca.pem at /home/k8s/ca.pem

Better option is to create a new user + corresponding SSL keys

This requires new SSL keys and some basic understanding in kubernetes (config new user credentials and rules). this might be more complicated than the first approach.

Step 2

In /etc/vitrage/vitrage.conf:

Set the location for kubeconfig file:

[kubernetes]

config_file = /home/k8s/kubeconfig

Add kubernetes to the list of active datasources:

[datasources]

types = nova.host,nova.instance,nova.zone,aodh,static,cinder.volume,neutron.network,neutron.port,kubernetes