Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Deploying Kubernetes with OpenNebula 7.2.1

Open Nebula
06/11/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


Hello and welcome to the OpenEBOLA Kubernetes Service Screencast. In this screencast, we will walk through the KHS deployment using the new 1KS service available in 7.2.1. OpenEBOLA leverages Cluster API to provision and manage Kubernetes clusters. Cluster API was firstly introduced in OpenEBOLA 7.0 and now is heavily used by 1KS. Unlike 1KE that was relying on one flow service, 1KS is available directly in Sunstone as a separate tab. This tab is fully dedicated to the purpose of running and managing Kubernetes clusters on top of OpenEBOLA. To use this new functionality, you must install the OpenEBOLA-KS package. For now, it's only available in the Enterprise Edition repository. The service must be installed and started. Before starting the service, it is mandatory to configure tproxy for 1Gate. If it's not configured, OpenEBOLA-KS service will detect it and will fail to start. Please refer to the official OpenEBOLA documentation for step-by-step instructions to configure and enable tproxy. To access Kubernetes Management, open the Kubernetes KHS Cluster tab. All provisioned clusters are listed here. Currently, there are no clusters, so the list is empty. Let's start by creating one. Press the Create button to initiate the wizard. Give your cluster a name and optionally a description. Now select a public network. This must be a routable network. For this demonstration, the routable network is named EVPN0. Next, select a private network. It may or may not be connected to the internet. Then, select the Kubernetes version for this cluster. Let's proceed with the latest available. Lastly, we must decide whether this cluster is a single node or HA deployment. In an HA setup, three control plane nodes are deployed instead of one. For this demonstration, we will proceed with a single node deployment. Press Finish to start provisioning the cluster. First, a specific virtual machine called the seed VM will be deployed. This virtual machine handles the cluster build and then performs a pivot to the actual control plane. After that, the seed VM is destroyed. During deployment, you can monitor the progress using the Logs tab. If any errors occur, this is the first place to check. Once the control plane is running, you can extract kube-config by simply navigating to the kube-config tab. By looking at the Instances VMs tab, we can find two virtual machines, the control plane and the virtual router. To run workloads, we must deploy a node group, which is a set of worker VMs. Under the Node Group tab, press the Add Node Group button. Give this node group a name. The value supplied here will become part of the virtual machine names. Then, select the size of your worker nodes. Currently, we have small, medium, and large worker nodes with their respective configuration. For this demonstration, we will proceed with small nodes. Verify that the size meets your needs and then set the number of nodes to two. Then, press Finish. The cluster now enters the scaling state. In the logs, you can see that deployed virtual machines are now joining the cluster. You can also find the virtual machine IDs there. Switching back to the VMs view, we see two virtual machines that are named Test App. Once the cluster returns to the running state, let's extract the kube-config and switch to the command line. Create the config file under your home directory .kube-config and paste the contents from your clipboard. Once saved, let's verify connectivity by running kubectl get pods nodes. There are no pods right now. However, we can confirm we are connected to the correct cluster by looking at the node names. The Test App prefix is present. Now it's time to deploy an application and verify that the cluster can handle the workload and expose it using a load balancer service. The test application YAML files were uploaded beforehand. It's a simple web-based application with a SQL-based backend that creates a schema and then writes and reads data, perfect for testing connectivity between pods and exposure via a load balancer. Simply execute kubectl apply –f and then put the dot to pick up YAML files from the exact same directory. Based on the output, we can confirm that the deployments and services have been created. Switch to the virtual machines view in Sunstone. We can locate a new virtual machine with the ID 9. This is a virtual router deployed because we requested a load balancer service. This appliance handles routing traffic from the routable network to the exposed service. Back to the command line, let's extract the external IP address of the load balancer so we can reach our application. As we can see, the web application is exposed and reachable. First, let's create the database schema. The schema was created without errors, meaning the application pod can communicate with the database. Now let's write data to the database. We will perform this action a few times to generate some entries. Our final test is to read the data from the database. As seen on the screen, the read was successful. The application has fulfilled its task and can be destroyed by executing the kubectl delete command. We can see confirmation that the resources were successfully deleted. Switching back to the virtual machines tab in Sunstone confirms that the virtual router with the virtual machine ID 9 is also gone. This proves that the resources are managed automatically by 1KS, requiring no manual interaction. And this concludes the screencast where we have shown the 1KS service that simplifies deployment and consumption of Kubernetes on top of OpenAbyllu. Thank you for watching and see you in the next screencast.

TL;DR

  • OpenNebula 7.2.1 introduces OneKS, a new Kubernetes service built on RKE2 and Cluster API that replaces OneKE with a dedicated Sunstone interface for streamlined cluster management
  • Deployment uses a seed VM approach that provisions the cluster, pivots to the control plane, and self-destructs, with support for both single-node and high-availability configurations
  • The service automatically manages infrastructure resources including worker node groups and load balancer virtual routers, requiring no manual intervention for resource cleanup
  • Enterprise Edition exclusive feature requires tproxy configuration for OneGate and provides integrated monitoring through logs, kubeconfig extraction, and VM instance tracking

OneKS Service Overview and Architecture

This demonstration showcases the new OpenNebula Kubernetes Service (OneKS) introduced in version 7.2.1, which fundamentally changes how Kubernetes clusters are deployed and managed within OpenNebula environments. Built on RKE2 and integrated with Cluster API through CAPONE, OneKS represents a significant evolution from the previous OneKE service by moving away from OneFlow dependencies and providing a dedicated Sunstone interface. The service requires the OpenNebula-KS package from the Enterprise Edition repository and mandates tproxy configuration for OneGate before deployment. The architecture leverages a seed VM approach for initial cluster provisioning, which handles the cluster build process before pivoting to the actual control plane and self-destructing, demonstrating an automated and efficient deployment methodology.

Cluster Deployment and Workload Management

The walkthrough demonstrates a complete cluster lifecycle from initial provisioning through workload deployment and teardown. The deployment process begins with cluster creation through a wizard interface that configures networking (both public routable and private networks), Kubernetes version selection, and deployment topology (single node versus high-availability with three control planes). Once the control plane is operational, the demonstration shows node group creation with configurable worker VM sizes (small, medium, large) and automatic scaling. The practical validation includes deploying a web application with SQL backend, demonstrating pod-to-pod communication, and exposing services via automatically provisioned load balancer virtual routers. The automatic cleanup of infrastructure resources when services are deleted highlights the service's intelligent resource management capabilities.

Chapters

0:00 - Introduction to OneKS
0:31 - Installation and Configuration Requirements
1:06 - Creating a Kubernetes Cluster
2:37 - Deploying Node Groups
4:06 - Application Deployment and Testing
5:56 - Conclusion

Key Quotes

0:21 "Unlike 1KE that was relying on one flow service, 1KS is available directly in Sunstone as a separate tab."
0:38 "For now, it's only available in the Enterprise Edition repository."
1:53 "First, a specific virtual machine called the seed VM will be deployed. This virtual machine handles the cluster build and then performs a pivot to the actual control plane. After that, the seed VM is destroyed."
5:51 "This proves that the resources are managed automatically by 1KS, requiring no manual interaction."

FAQ

What are the prerequisites for deploying OneKS in OpenNebula 7.2.1?

You must install the OpenNebula-KS package from the Enterprise Edition repository and configure tproxy for OneGate before starting the service. The service will detect missing tproxy configuration and fail to start if it's not properly configured.

What's the difference between single-node and HA deployment options in OneKS?

Single-node deployment provisions one control plane node, while high-availability (HA) deployment creates three control plane nodes for redundancy. The demonstration uses single-node deployment for simplicity.


Categories:
  • » Cybersecurity » Application Security
  • » Cybersecurity » Cloud Security
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Cloud Security
  • DevSecOps
  • Demo
  • Technical Deep Dive
  • Getting Started
  • Kubernetes deployment
  • OpenNebula platform
  • Cluster API integration
  • RKE2
  • Infrastructure automation
  • Load balancer provisioning
  • Enterprise cloud management
  • Virtual machine orchestration
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Deploying Kubernetes with OpenNebula 7.2.1

              Upcoming Webinar Calendar

              • 06/17/2026
                12:00 PM
                06/17/2026
                Action1: The Remediation Gap: Vulnerability Management in the Age of AI
                https://www.truthinit.com/index.php/channel/2010/action1-the-remediation-gap-vulnerability-management-in-the-age-of-ai/
              • 06/23/2026
                01:00 PM
                06/23/2026
                The AI-Powered VMware Alternative
                https://www.truthinit.com/index.php/channel/2009/the-ai-powered-vmware-alternative/
              • 06/24/2026
                11:00 AM
                06/24/2026
                LATAM: Accelerating Insights on AI Through an Engaging Webinar Series
                https://www.truthinit.com/index.php/channel/2012/accelerating-insights-on-ai-through-an-engaging-webinar-series/
              • 06/25/2026
                01:00 PM
                06/25/2026
                Generative AI Security: Preventing AI from Becoming a Data Breach Multiplier
                https://www.truthinit.com/index.php/channel/1998/generative-ai-security-preventing-ai-from-becoming-a-data-breach-multiplier/
              • 07/01/2026
                04:00 AM
                07/01/2026
                Schutz von KI in Anwendungen, Agenten und APIs.
                https://www.truthinit.com/index.php/channel/2008/schutz-von-ki-in-anwendungen-agenten-und-apis/
              • 07/02/2026
                10:00 AM
                07/02/2026
                Resilience Insights from Hybrid Threats When the Cloud Faces Challenges
                https://www.truthinit.com/index.php/channel/2011/resilience-insights-from-hybrid-threats-when-the-cloud-faces-challenges/

              Upcoming Events

              • Jun
                17

                Action1: The Remediation Gap: Vulnerability Management in the Age of AI

                06/17/202612:00 PM ET
                • Jun
                  23

                  The AI-Powered VMware Alternative

                  06/23/202601:00 PM ET
                  • Jun
                    24

                    LATAM: Accelerating Insights on AI Through an Engaging Webinar Series

                    06/24/202611:00 AM ET
                    • Jun
                      25

                      Generative AI Security: Preventing AI from Becoming a Data Breach Multiplier

                      06/25/202601:00 PM ET
                      • Jul
                        01

                        Schutz von KI in Anwendungen, Agenten und APIs.

                        07/01/202604:00 AM ET
                        More events
                        Truth in IT
                        • Sponsor
                        • About Us
                        • Terms of Service
                        • Privacy Policy
                        • Contact Us
                        • Preference Management
                        Desktop version
                        Standard version