Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW
  • CPE

Deploying Kubernetes with OpenNebula 7.2.1

Open Nebula
06/11/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


Hello and welcome to the OpenEBOLA Kubernetes Service Screencast. In this screencast, we will walk through the KHS deployment using the new 1KS service available in 7.2.1. OpenEBOLA leverages Cluster API to provision and manage Kubernetes clusters. Cluster API was firstly introduced in OpenEBOLA 7.0 and now is heavily used by 1KS. Unlike 1KE that was relying on one flow service, 1KS is available directly in Sunstone as a separate tab. This tab is fully dedicated to the purpose of running and managing Kubernetes clusters on top of OpenEBOLA. To use this new functionality, you must install the OpenEBOLA-KS package. For now, it's only available in the Enterprise Edition repository. The service must be installed and started. Before starting the service, it is mandatory to configure tproxy for 1Gate. If it's not configured, OpenEBOLA-KS service will detect it and will fail to start. Please refer to the official OpenEBOLA documentation for step-by-step instructions to configure and enable tproxy. To access Kubernetes Management, open the Kubernetes KHS Cluster tab. All provisioned clusters are listed here. Currently, there are no clusters, so the list is empty. Let's start by creating one. Press the Create button to initiate the wizard. Give your cluster a name and optionally a description. Now select a public network. This must be a routable network. For this demonstration, the routable network is named EVPN0. Next, select a private network. It may or may not be connected to the internet. Then, select the Kubernetes version for this cluster. Let's proceed with the latest available. Lastly, we must decide whether this cluster is a single node or HA deployment. In an HA setup, three control plane nodes are deployed instead of one. For this demonstration, we will proceed with a single node deployment. Press Finish to start provisioning the cluster. First, a specific virtual machine called the seed VM will be deployed. This virtual machine handles the cluster build and then performs a pivot to the actual control plane. After that, the seed VM is destroyed. During deployment, you can monitor the progress using the Logs tab. If any errors occur, this is the first place to check. Once the control plane is running, you can extract kube-config by simply navigating to the kube-config tab. By looking at the Instances VMs tab, we can find two virtual machines, the control plane and the virtual router. To run workloads, we must deploy a node group, which is a set of worker VMs. Under the Node Group tab, press the Add Node Group button. Give this node group a name. The value supplied here will become part of the virtual machine names. Then, select the size of your worker nodes. Currently, we have small, medium, and large worker nodes with their respective configuration. For this demonstration, we will proceed with small nodes. Verify that the size meets your needs and then set the number of nodes to two. Then, press Finish. The cluster now enters the scaling state. In the logs, you can see that deployed virtual machines are now joining the cluster. You can also find the virtual machine IDs there. Switching back to the VMs view, we see two virtual machines that are named Test App. Once the cluster returns to the running state, let's extract the kube-config and switch to the command line. Create the config file under your home directory .kube-config and paste the contents from your clipboard. Once saved, let's verify connectivity by running kubectl get pods nodes. There are no pods right now. However, we can confirm we are connected to the correct cluster by looking at the node names. The Test App prefix is present. Now it's time to deploy an application and verify that the cluster can handle the workload and expose it using a load balancer service. The test application YAML files were uploaded beforehand. It's a simple web-based application with a SQL-based backend that creates a schema and then writes and reads data, perfect for testing connectivity between pods and exposure via a load balancer. Simply execute kubectl apply –f and then put the dot to pick up YAML files from the exact same directory. Based on the output, we can confirm that the deployments and services have been created. Switch to the virtual machines view in Sunstone. We can locate a new virtual machine with the ID 9. This is a virtual router deployed because we requested a load balancer service. This appliance handles routing traffic from the routable network to the exposed service. Back to the command line, let's extract the external IP address of the load balancer so we can reach our application. As we can see, the web application is exposed and reachable. First, let's create the database schema. The schema was created without errors, meaning the application pod can communicate with the database. Now let's write data to the database. We will perform this action a few times to generate some entries. Our final test is to read the data from the database. As seen on the screen, the read was successful. The application has fulfilled its task and can be destroyed by executing the kubectl delete command. We can see confirmation that the resources were successfully deleted. Switching back to the virtual machines tab in Sunstone confirms that the virtual router with the virtual machine ID 9 is also gone. This proves that the resources are managed automatically by 1KS, requiring no manual interaction. And this concludes the screencast where we have shown the 1KS service that simplifies deployment and consumption of Kubernetes on top of OpenAbyllu. Thank you for watching and see you in the next screencast.

TL;DR

  • OpenNebula 7.2.1 introduces OneKS, a new Kubernetes service built on RKE2 and Cluster API that replaces OneKE with a dedicated Sunstone interface for streamlined cluster management
  • Deployment uses a seed VM approach that provisions the cluster, pivots to the control plane, and self-destructs, with support for both single-node and high-availability configurations
  • The service automatically manages infrastructure resources including worker node groups and load balancer virtual routers, requiring no manual intervention for resource cleanup
  • Enterprise Edition exclusive feature requires tproxy configuration for OneGate and provides integrated monitoring through logs, kubeconfig extraction, and VM instance tracking

OneKS Service Overview and Architecture

This demonstration showcases the new OpenNebula Kubernetes Service (OneKS) introduced in version 7.2.1, which fundamentally changes how Kubernetes clusters are deployed and managed within OpenNebula environments. Built on RKE2 and integrated with Cluster API through CAPONE, OneKS represents a significant evolution from the previous OneKE service by moving away from OneFlow dependencies and providing a dedicated Sunstone interface. The service requires the OpenNebula-KS package from the Enterprise Edition repository and mandates tproxy configuration for OneGate before deployment. The architecture leverages a seed VM approach for initial cluster provisioning, which handles the cluster build process before pivoting to the actual control plane and self-destructing, demonstrating an automated and efficient deployment methodology.

Cluster Deployment and Workload Management

The walkthrough demonstrates a complete cluster lifecycle from initial provisioning through workload deployment and teardown. The deployment process begins with cluster creation through a wizard interface that configures networking (both public routable and private networks), Kubernetes version selection, and deployment topology (single node versus high-availability with three control planes). Once the control plane is operational, the demonstration shows node group creation with configurable worker VM sizes (small, medium, large) and automatic scaling. The practical validation includes deploying a web application with SQL backend, demonstrating pod-to-pod communication, and exposing services via automatically provisioned load balancer virtual routers. The automatic cleanup of infrastructure resources when services are deleted highlights the service's intelligent resource management capabilities.

Chapters

0:00 - Introduction to OneKS
0:31 - Installation and Configuration Requirements
1:06 - Creating a Kubernetes Cluster
2:37 - Deploying Node Groups
4:06 - Application Deployment and Testing
5:56 - Conclusion

Key Quotes

0:21 "Unlike 1KE that was relying on one flow service, 1KS is available directly in Sunstone as a separate tab."
0:38 "For now, it's only available in the Enterprise Edition repository."
1:53 "First, a specific virtual machine called the seed VM will be deployed. This virtual machine handles the cluster build and then performs a pivot to the actual control plane. After that, the seed VM is destroyed."
5:51 "This proves that the resources are managed automatically by 1KS, requiring no manual interaction."

FAQ

What are the prerequisites for deploying OneKS in OpenNebula 7.2.1?

You must install the OpenNebula-KS package from the Enterprise Edition repository and configure tproxy for OneGate before starting the service. The service will detect missing tproxy configuration and fail to start if it's not properly configured.

What's the difference between single-node and HA deployment options in OneKS?

Single-node deployment provisions one control plane node, while high-availability (HA) deployment creates three control plane nodes for redundancy. The demonstration uses single-node deployment for simplicity.


Categories:
  • » Cybersecurity » Application Security
  • » Cybersecurity » Cloud Security
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Cloud Security
  • DevSecOps
  • Demo
  • Technical Deep Dive
  • Getting Started
  • Kubernetes deployment
  • OpenNebula platform
  • Cluster API integration
  • RKE2
  • Infrastructure automation
  • Load balancer provisioning
  • Enterprise cloud management
  • Virtual machine orchestration
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Deploying Kubernetes with OpenNebula 7.2.1

              View CPE Certificates

              Upcoming 360 View Events

              • Nov
                19

                Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection

                11/19/202601:00 PM ET
                More events

                XStreaminars (watch here)

                • Oct
                  27

                  Illumio: See It. Stop It. Contain It. Lateral Movement Defense in Action

                  10/27/202611:00 AM ET
                  • Oct
                    28

                    EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure

                    10/28/202601:00 PM ET
                    • Nov
                      10

                      Zendesk: From AI Readiness to Results: A Framework for Transforming IT Service

                      11/10/202601:00 PM ET
                      • Nov
                        12

                        Leaving VMware Means Leaving vSAN: Your VMware Exit Is Really a Storage Decision

                        11/12/202601:00 PM ET
                        More events

                        Industry Events (Sponsor Hosted)

                        • Oct
                          27

                          Maximize the Value and Security of Your Microsoft Investment

                          10/27/202611:00 AM ET
                          • Oct
                            27

                            The HUMAN Experience: Real-Time Insights into Page Intelligence

                            10/27/202601:00 PM ET
                            • Oct
                              28

                              Ensuring Universal AI Security Across the APAC Region

                              10/28/202601:00 AM ET
                              • Oct
                                28

                                EMEA: Ensuring Comprehensive AI Security Across All Fronts

                                10/28/202606:00 AM ET
                                • Oct
                                  28

                                  Securing AI Across the Americas for a Safer Future

                                  10/28/202601:00 PM ET
                                  More events

                                  Upcoming Webinar Calendar

                                  • 10/27/2026
                                    11:00 AM
                                    10/27/2026
                                    Maximize the Value and Security of Your Microsoft Investment
                                    https://www.truthinit.com/index.php/channel/2178/maximize-the-value-and-security-of-your-microsoft-investment/
                                  • 10/27/2026
                                    11:00 AM
                                    10/27/2026
                                    Illumio: See It. Stop It. Contain It. Lateral Movement Defense in Action
                                    https://www.truthinit.com/index.php/channel/2182/see-it-stop-it-contain-it-lateral-movement-defense-in-action/
                                  • 10/27/2026
                                    01:00 PM
                                    10/27/2026
                                    The HUMAN Experience: Real-Time Insights into Page Intelligence
                                    https://www.truthinit.com/index.php/channel/2139/the-human-experience-real-time-insights-into-page-intelligence/
                                  • 10/28/2026
                                    01:00 AM
                                    10/28/2026
                                    Ensuring Universal AI Security Across the APAC Region
                                    https://www.truthinit.com/index.php/channel/2125/ensuring-universal-ai-security-across-the-apac-region/
                                  • 10/28/2026
                                    06:00 AM
                                    10/28/2026
                                    EMEA: Ensuring Comprehensive AI Security Across All Fronts
                                    https://www.truthinit.com/index.php/channel/2127/emea-ensuring-comprehensive-ai-security-across-all-fronts/
                                  • 10/28/2026
                                    01:00 PM
                                    10/28/2026
                                    Securing AI Across the Americas for a Safer Future
                                    https://www.truthinit.com/index.php/channel/2126/securing-ai-across-the-americas-for-a-safer-future/
                                  • 10/28/2026
                                    01:00 PM
                                    10/28/2026
                                    EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure
                                    https://www.truthinit.com/index.php/channel/2179/envzero-near-zero-time-to-resolution-live-agentic-remediation-for-failed-and-drifted-infrastructure/
                                  • 11/04/2026
                                    11:00 AM
                                    11/04/2026
                                    Aligning Agentic Intent: Understanding Your Agents' Purpose vs. Their Actions
                                    https://www.truthinit.com/index.php/channel/2158/aligning-agentic-intent-understanding-your-agents-purpose-vs-their-actions/
                                  • 11/05/2026
                                    02:00 PM
                                    11/05/2026
                                    HUMAN Dialogue: Embracing the Rise of the Empowered AI Consumer.
                                    https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-empowered-ai-consumer/
                                  • 11/05/2026
                                    02:00 PM
                                    11/05/2026
                                    Reclaim Your Evenings: Leverage Data Intelligence to Minimize Risk and Boost AI Adoption
                                    https://www.truthinit.com/index.php/channel/2172/reclaim-your-evenings-leverage-data-intelligence-to-minimize-risk-and-boost-ai-adoption/
                                  • 11/10/2026
                                    01:00 PM
                                    11/10/2026
                                    Zendesk: From AI Readiness to Results: A Framework for Transforming IT Service
                                    https://www.truthinit.com/index.php/channel/2191/zendesk-from-ai-readiness-to-results-a-framework-for-transforming-it-service/
                                  • 11/10/2026
                                    01:00 PM
                                    11/10/2026
                                    Agentic Shopping Trends: Insights for the 2026 Holiday Season
                                    https://www.truthinit.com/index.php/channel/2219/agentic-shopping-trends-insights-for-the-2026-holiday-season/
                                  • 11/12/2026
                                    01:00 PM
                                    11/12/2026
                                    Leaving VMware Means Leaving vSAN: Your VMware Exit Is Really a Storage Decision
                                    https://www.truthinit.com/index.php/channel/2192/leaving-vmware-means-leaving-vsan-your-vmware-exit-is-really-a-storage-decision/
                                  • 11/19/2026
                                    01:00 PM
                                    11/19/2026
                                    Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection
                                    https://www.truthinit.com/index.php/channel/2076/securing-the-microsoft-enterprise-strengthening-configuration-management-identity-security-and-data-protection/
                                  • 11/19/2026
                                    01:00 PM
                                    11/19/2026
                                    Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents
                                    https://www.truthinit.com/index.php/channel/2181/zendesk-deep-dive-get-the-work-done-faster-with-employee-service-ai-agents/
                                  Truth in IT
                                  • Sponsor
                                  • About Us
                                  • Terms of Service
                                  • Privacy Policy
                                  • Contact Us
                                  • Preference Management
                                  Desktop version
                                  Standard version