Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Deploying Kubernetes with OpenNebula 7.2.1

Open Nebula
06/11/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


Hello and welcome to the OpenEBOLA Kubernetes Service Screencast. In this screencast, we will walk through the KHS deployment using the new 1KS service available in 7.2.1. OpenEBOLA leverages Cluster API to provision and manage Kubernetes clusters. Cluster API was firstly introduced in OpenEBOLA 7.0 and now is heavily used by 1KS. Unlike 1KE that was relying on one flow service, 1KS is available directly in Sunstone as a separate tab. This tab is fully dedicated to the purpose of running and managing Kubernetes clusters on top of OpenEBOLA. To use this new functionality, you must install the OpenEBOLA-KS package. For now, it's only available in the Enterprise Edition repository. The service must be installed and started. Before starting the service, it is mandatory to configure tproxy for 1Gate. If it's not configured, OpenEBOLA-KS service will detect it and will fail to start. Please refer to the official OpenEBOLA documentation for step-by-step instructions to configure and enable tproxy. To access Kubernetes Management, open the Kubernetes KHS Cluster tab. All provisioned clusters are listed here. Currently, there are no clusters, so the list is empty. Let's start by creating one. Press the Create button to initiate the wizard. Give your cluster a name and optionally a description. Now select a public network. This must be a routable network. For this demonstration, the routable network is named EVPN0. Next, select a private network. It may or may not be connected to the internet. Then, select the Kubernetes version for this cluster. Let's proceed with the latest available. Lastly, we must decide whether this cluster is a single node or HA deployment. In an HA setup, three control plane nodes are deployed instead of one. For this demonstration, we will proceed with a single node deployment. Press Finish to start provisioning the cluster. First, a specific virtual machine called the seed VM will be deployed. This virtual machine handles the cluster build and then performs a pivot to the actual control plane. After that, the seed VM is destroyed. During deployment, you can monitor the progress using the Logs tab. If any errors occur, this is the first place to check. Once the control plane is running, you can extract kube-config by simply navigating to the kube-config tab. By looking at the Instances VMs tab, we can find two virtual machines, the control plane and the virtual router. To run workloads, we must deploy a node group, which is a set of worker VMs. Under the Node Group tab, press the Add Node Group button. Give this node group a name. The value supplied here will become part of the virtual machine names. Then, select the size of your worker nodes. Currently, we have small, medium, and large worker nodes with their respective configuration. For this demonstration, we will proceed with small nodes. Verify that the size meets your needs and then set the number of nodes to two. Then, press Finish. The cluster now enters the scaling state. In the logs, you can see that deployed virtual machines are now joining the cluster. You can also find the virtual machine IDs there. Switching back to the VMs view, we see two virtual machines that are named Test App. Once the cluster returns to the running state, let's extract the kube-config and switch to the command line. Create the config file under your home directory .kube-config and paste the contents from your clipboard. Once saved, let's verify connectivity by running kubectl get pods nodes. There are no pods right now. However, we can confirm we are connected to the correct cluster by looking at the node names. The Test App prefix is present. Now it's time to deploy an application and verify that the cluster can handle the workload and expose it using a load balancer service. The test application YAML files were uploaded beforehand. It's a simple web-based application with a SQL-based backend that creates a schema and then writes and reads data, perfect for testing connectivity between pods and exposure via a load balancer. Simply execute kubectl apply –f and then put the dot to pick up YAML files from the exact same directory. Based on the output, we can confirm that the deployments and services have been created. Switch to the virtual machines view in Sunstone. We can locate a new virtual machine with the ID 9. This is a virtual router deployed because we requested a load balancer service. This appliance handles routing traffic from the routable network to the exposed service. Back to the command line, let's extract the external IP address of the load balancer so we can reach our application. As we can see, the web application is exposed and reachable. First, let's create the database schema. The schema was created without errors, meaning the application pod can communicate with the database. Now let's write data to the database. We will perform this action a few times to generate some entries. Our final test is to read the data from the database. As seen on the screen, the read was successful. The application has fulfilled its task and can be destroyed by executing the kubectl delete command. We can see confirmation that the resources were successfully deleted. Switching back to the virtual machines tab in Sunstone confirms that the virtual router with the virtual machine ID 9 is also gone. This proves that the resources are managed automatically by 1KS, requiring no manual interaction. And this concludes the screencast where we have shown the 1KS service that simplifies deployment and consumption of Kubernetes on top of OpenAbyllu. Thank you for watching and see you in the next screencast.

TL;DR

  • OpenNebula 7.2.1 introduces OneKS, a new Kubernetes service built on RKE2 and Cluster API that replaces OneKE with a dedicated Sunstone interface for streamlined cluster management
  • Deployment uses a seed VM approach that provisions the cluster, pivots to the control plane, and self-destructs, with support for both single-node and high-availability configurations
  • The service automatically manages infrastructure resources including worker node groups and load balancer virtual routers, requiring no manual intervention for resource cleanup
  • Enterprise Edition exclusive feature requires tproxy configuration for OneGate and provides integrated monitoring through logs, kubeconfig extraction, and VM instance tracking

OneKS Service Overview and Architecture

This demonstration showcases the new OpenNebula Kubernetes Service (OneKS) introduced in version 7.2.1, which fundamentally changes how Kubernetes clusters are deployed and managed within OpenNebula environments. Built on RKE2 and integrated with Cluster API through CAPONE, OneKS represents a significant evolution from the previous OneKE service by moving away from OneFlow dependencies and providing a dedicated Sunstone interface. The service requires the OpenNebula-KS package from the Enterprise Edition repository and mandates tproxy configuration for OneGate before deployment. The architecture leverages a seed VM approach for initial cluster provisioning, which handles the cluster build process before pivoting to the actual control plane and self-destructing, demonstrating an automated and efficient deployment methodology.

Cluster Deployment and Workload Management

The walkthrough demonstrates a complete cluster lifecycle from initial provisioning through workload deployment and teardown. The deployment process begins with cluster creation through a wizard interface that configures networking (both public routable and private networks), Kubernetes version selection, and deployment topology (single node versus high-availability with three control planes). Once the control plane is operational, the demonstration shows node group creation with configurable worker VM sizes (small, medium, large) and automatic scaling. The practical validation includes deploying a web application with SQL backend, demonstrating pod-to-pod communication, and exposing services via automatically provisioned load balancer virtual routers. The automatic cleanup of infrastructure resources when services are deleted highlights the service's intelligent resource management capabilities.

Chapters

0:00 - Introduction to OneKS
0:31 - Installation and Configuration Requirements
1:06 - Creating a Kubernetes Cluster
2:37 - Deploying Node Groups
4:06 - Application Deployment and Testing
5:56 - Conclusion

Key Quotes

0:21 "Unlike 1KE that was relying on one flow service, 1KS is available directly in Sunstone as a separate tab."
0:38 "For now, it's only available in the Enterprise Edition repository."
1:53 "First, a specific virtual machine called the seed VM will be deployed. This virtual machine handles the cluster build and then performs a pivot to the actual control plane. After that, the seed VM is destroyed."
5:51 "This proves that the resources are managed automatically by 1KS, requiring no manual interaction."

FAQ

What are the prerequisites for deploying OneKS in OpenNebula 7.2.1?

You must install the OpenNebula-KS package from the Enterprise Edition repository and configure tproxy for OneGate before starting the service. The service will detect missing tproxy configuration and fail to start if it's not properly configured.

What's the difference between single-node and HA deployment options in OneKS?

Single-node deployment provisions one control plane node, while high-availability (HA) deployment creates three control plane nodes for redundancy. The demonstration uses single-node deployment for simplicity.


Categories:
  • » Cybersecurity » Application Security
  • » Cybersecurity » Cloud Security
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Cloud Security
  • DevSecOps
  • Demo
  • Technical Deep Dive
  • Getting Started
  • Kubernetes deployment
  • OpenNebula platform
  • Cluster API integration
  • RKE2
  • Infrastructure automation
  • Load balancer provisioning
  • Enterprise cloud management
  • Virtual machine orchestration
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Deploying Kubernetes with OpenNebula 7.2.1

              XStreaminars (watch here)

              • Jul
                28

                Illumio + Netskope: Zero Trust in the Age of AI Autonomy

                07/28/202601:00 PM ET
                • Jul
                  29

                  Ask Your Cloud Anything: Unlocking Governance Silos in your Environments

                  07/29/202601:00 PM ET
                  More events

                  Industry Events (watch there)

                  • Aug
                    03

                    Discover DLP Memories: The ever-evolving triage agent enhancing efficiency each shift.

                    08/03/202611:00 AM ET
                    • Aug
                      06

                      Safeguarding Sensitive Data in the Era of AI Adoption

                      08/06/202604:00 AM ET
                      • Aug
                        06

                        Same Tactics, Enhanced Velocity: The Impact of AI Agents on Identity Attacks

                        08/06/202602:00 PM ET
                        More events

                        Upcoming Webinar Calendar

                        • 07/28/2026
                          01:00 PM
                          07/28/2026
                          Illumio + Netskope: Zero Trust in the Age of AI Autonomy
                          https://www.truthinit.com/index.php/channel/2031/illumio-netskope-zero-trust-in-the-age-of-ai-autonomy/
                        • 07/29/2026
                          04:00 AM
                          07/29/2026
                          Real-Time Strategies for Safeguarding Against Prompt Injections
                          https://www.truthinit.com/index.php/channel/1968/real-time-strategies-for-safeguarding-against-prompt-injections/
                        • 07/29/2026
                          01:00 PM
                          07/29/2026
                          Ask Your Cloud Anything: Unlocking Governance Silos in your Environments
                          https://www.truthinit.com/index.php/channel/2048/ask-your-cloud-anything-unlocking-governance-silos-in-your-environments/
                        • 08/03/2026
                          11:00 AM
                          08/03/2026
                          Discover DLP Memories: The ever-evolving triage agent enhancing efficiency each shift.
                          https://www.truthinit.com/index.php/channel/2062/discover-dlp-memories-the-ever-evolving-triage-agent-enhancing-efficiency-each-shift/
                        • 08/06/2026
                          04:00 AM
                          08/06/2026
                          Safeguarding Sensitive Data in the Era of AI Adoption
                          https://www.truthinit.com/index.php/channel/2058/safeguarding-sensitive-data-in-the-era-of-ai-adoption/
                        • 08/06/2026
                          02:00 PM
                          08/06/2026
                          Same Tactics, Enhanced Velocity: The Impact of AI Agents on Identity Attacks
                          https://www.truthinit.com/index.php/channel/2064/same-tactics-enhanced-velocity-the-impact-of-ai-agents-on-identity-attacks/
                        • 08/07/2026
                          11:30 AM
                          08/07/2026
                          Refreshing Beverage Ideas Paired with Essential Cybersecurity Insights
                          https://www.truthinit.com/index.php/channel/2063/refreshing-beverage-ideas-paired-with-essential-cybersecurity-insights/
                        • 08/13/2026
                          12:00 PM
                          08/13/2026
                          Harnessing AI for Secure Innovation in the Enterprise with Netskope & Omada
                          https://www.truthinit.com/index.php/channel/2065/harnessing-ai-for-secure-innovation-in-the-enterprise-with-netskope-omada/
                        • 08/19/2026
                          12:00 PM
                          08/19/2026
                          Becoming Agent Ready: Insights and Strategies with Cyera
                          https://www.truthinit.com/index.php/channel/2036/becoming-agent-ready-insights-and-strategies-with-cyera/
                        • 09/02/2026
                          12:00 PM
                          09/02/2026
                          Unified Data Security in Action: Uncover, Analyze, and Resolve Threats
                          https://www.truthinit.com/index.php/channel/2045/unified-data-security-in-action-uncover-analyze-and-resolve-threats/
                        • 09/30/2026
                          04:00 AM
                          09/30/2026
                          AI Command Center: Optimizing Visibility and Control in Your Operations
                          https://www.truthinit.com/index.php/channel/2024/ai-command-center-optimizing-visibility-and-control-in-your-operations/
                        Truth in IT
                        • Sponsor
                        • About Us
                        • Terms of Service
                        • Privacy Policy
                        • Contact Us
                        • Preference Management
                        Desktop version
                        Standard version