Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Open Nebula: Kubernetes Lifecycle Management Across Distributed Infrastructure

Open Nebula
06/27/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


Center Cloud Edge Continuum screencast. In this screencast, we will walk through the Distributed Kubernetes lifecycle management on OpenAbula. The goal is to show how 1KS, the OpenAbula Kubernetes service, can create, manage, and validate Kubernetes clusters across different infrastructure locations, from an on-premises data center to a cloud or edge environment. The demonstration focuses on a practical scenario, using a single OpenAbula deployment to manage Kubernetes clusters across two hypervisor hosts, creating one cluster through Sunstone, another through the 1KS command-line interface, and validating the result by deploying an NGINX workload. By the end of the screencast, we will have shown how OpenAbula and 1KS simplify Kubernetes consumption across distributed infrastructure while keeping cluster lifecycle operations under a single service model. Distributed applications increasingly need infrastructure that spans the data center, the cloud, and the edge. This is not only a matter of capacity. It's also about performance, locality, operation consistency, and the ability to place workloads close to where they are needed. The challenge is that these environments are often heterogeneous and operationally fragmented. Operators may need to provision clusters in different locations, manage workload capacity, retrieve access credentials, validate readiness, and keep the configuration consistent over time. Doing this manually increases operation complexity and rises the risk of configuration drift. 1KS addresses this by providing Kubernetes lifecycle management as an OpenAbula service. It is built on RKE2 and integrates with ClusterAPI through CAP1, OpenAbula's cluster API provider. This allows operators to create and manage Kubernetes clusters on top of OpenAbula infrastructure using a structured and repeatable workflow. In this demonstration, we validate the approach by deploying an NGINX workload on the cloud cluster, confirming that the cluster can schedule and serve applications correctly. Here we can find the role of 1KS inside the OpenAbula stack. At the bottom, OpenAbula provides the infrastructure layer. It manages the underlying fertile machines, bare metal resources, and infrastructure abstraction. Above that, 1KS provides the managed Kubernetes layer. It turns infrastructure capacity into a ready-to-use Kubernetes cluster. At the top, users can run their cloud-native applications, AI workloads, and other containerized services without having to manage all the underlying provisioning details manually. Instead of asking operators to assemble Kubernetes clusters from low-level primitives every time, 1KS provides a service-oriented lifecycle model for creating, accessing, scaling, upgrading, recovering, and retrieving clusters. 1KS provides the core lifecycle operations required for Kubernetes management on distributed OpenAbula infrastructure. The first capability is cluster scaling. Operators can adjust cluster capacity as workload demand changes. The second capability is HA-ready deployment. At deployment time, users can choose whether the cluster should be created in a high availability or non-high availability configuration. The third capability is cluster upgrades. Cluster nodes can be updated without requiring a full rebuild from scratch. The fourth capability is basic recovery. 1KS provides mechanisms to recover from common operational issues without forcing operators to manually recreate the whole cluster. Together, these capabilities move Kubernetes management away from one-off provisioning and towards a controlled lifecycle model. The demo uses a single OpenAbula deployment managing two hypervisor hosts across distributed infrastructure. Host O represents the on-premises data center location. This is the local infrastructure location where the first 1KS cluster is deployed. Host 1 represents the cloud or edge location. This is the remote infrastructure location where the second 1KS cluster is deployed. The demo follows two operational workflows. First, we create a Kubernetes cluster from Sunstone, OpenAbula's graphical UI. Second, we create another Kubernetes cluster through 1KS command-line interface. After both clusters are created, we retrieve the kubectl check cluster readiness and deploy an NGINX workload on a cloud cluster. That NGINX deployment is the validation step. It proves that the cluster is not only created but actually able to schedule and serve an application. From Sunstone, we can see both hypervisor hosts registered in OpenAbula, each one with a different pool of resources in terms of CPU and memory. Before creating the first cluster, we configure 1KS placement so that the control plane and the worker nodes are scheduled on host 0. This represents deploying a Kubernetes cluster in the on-prem location. This placement step is currently performed from the configurational layer. In future versions, the workflow can be improved to make location selection easier for users. Now, we create the first 1KS cluster from the Sunstone web UI. We select the Kubernetes version, the public and private networks, and the control plane flavor. Once submitted, 1KS starts provisioning the required infrastructure. After a few moments, the cluster reaches the running state. We can verify that the control plane virtual machine has been created and is running on the on-premises host. Next, we add worker capacity by creating a node group from the cluster view. We retrieve the kube-config and validate the cluster with kubectl. Now, we switch the placement configuration to host 1, which represents the cloud or Azure location. This allows us to deploy a second Kubernetes cluster in a different infrastructure location managed by the same Openable environment. For the second cluster, we use the 1KS CLI to show the interactive deployment flow. The CLI asks for the cluster name, Kubernetes version, control plane flavor, public network, and private network. Once the second cluster is running, we add a node group from the command line and select the worker flavor and a node count. This demonstrates the same 1KS lifecycle operations through the command line interface. Before the final validation, we deploy a simple workload in the cloud or edge cluster to confirm that the Kubernetes cluster is not only provisioned but also able to run applications. Once the pod is created, we check that it reaches the running state. Then expose the pod as a Kubernetes service. To validate in-cluster connectivity, we launch a temporary curl pod and send a request to the engine service. A response code 200 confirms that the workload is running, the service is reachable, and the cloud or edge cluster can schedule and serve a basic application. This screencast was developed in the scope of EAP-SciS project. Thank you for watching and see you in the next screencast.

TL;DR

  • OneKS provides managed Kubernetes lifecycle operations across distributed OpenNebula infrastructure, eliminating manual cluster assembly and reducing configuration drift through a unified service model built on RKE2 and ClusterAPI.
  • The demonstration deploys two Kubernetes clusters across separate hypervisor hosts using both Sunstone GUI and OneKS CLI, showing consistent workflows for on-premises and cloud/edge locations managed from a single control plane.
  • Cluster validation through NGINX workload deployment confirms operational readiness, with successful pod scheduling, service exposure, and in-cluster connectivity testing proving the infrastructure can serve production applications.
  • OneKS capabilities include dynamic cluster scaling, HA-ready deployment options, in-place upgrades without rebuilds, and basic recovery mechanisms—moving Kubernetes management from one-off provisioning to controlled lifecycle operations.

OneKS Service Architecture and Capabilities

This technical demonstration showcases OpenNebula's OneKS (OpenNebula Kubernetes Service), a managed Kubernetes lifecycle platform built on RKE2 and integrated with ClusterAPI through CAP1. OneKS addresses the operational complexity of managing Kubernetes across heterogeneous infrastructure by providing a unified service model for cluster provisioning, scaling, upgrades, and recovery. The platform sits between OpenNebula's infrastructure layer and cloud-native applications, abstracting the underlying virtual machines and bare metal resources into ready-to-use Kubernetes clusters. Key capabilities include dynamic cluster scaling to adjust capacity based on workload demand, HA-ready deployment options for production environments, in-place cluster upgrades without full rebuilds, and basic recovery mechanisms for common operational issues.

Multi-Location Cluster Deployment Workflow

The demonstration uses a single OpenNebula deployment managing two hypervisor hosts representing different infrastructure locations: Host 0 for on-premises datacenter and Host 1 for cloud or edge environments. The workflow illustrates two deployment methods—first creating a cluster through Sunstone's graphical interface with placement configured for the on-prem host, then deploying a second cluster via the OneKS CLI targeting the cloud location. Both deployments follow the same lifecycle pattern: selecting Kubernetes version, configuring network settings, choosing control plane flavors, and adding worker node groups. The demonstration validates operational readiness by deploying an NGINX workload on the cloud cluster, confirming that the infrastructure can schedule pods, expose services, and handle in-cluster connectivity through a curl test returning HTTP 200.

Chapters

0:00 - Introduction and Demo Overview
0:53 - Distributed Infrastructure Challenges
1:55 - OneKS Architecture and Stack
2:38 - Core Lifecycle Capabilities
3:26 - Demo Environment Setup
4:19 - On-Premises Cluster via Sunstone
6:21 - Cloud Cluster via CLI
7:58 - NGINX Workload Validation

Key Quotes

0:41 "By the end of the screencast, we will have shown how OpenAbula and 1KS simplify Kubernetes consumption across distributed infrastructure while keeping cluster lifecycle operations under a single service model."
1:24 "... 1KS addresses this by providing Kubernetes lifecycle management as an OpenAbula service. It is built on RKE2 and integrates with ClusterAPI through CAP1, OpenAbula's cluster API provider."
2:26 "Instead of asking operators to assemble Kubernetes clusters from low-level primitives every time, 1KS provides a service-oriented lifecycle model for creating, accessing, scaling, upgrading, recovering, and retrieving clusters."
3:19 "Together, these capabilities move Kubernetes management away from one-off provisioning and towards a controlled lifecycle model."
8:30 "A response code 200 confirms that the workload is running, the service is reachable, and the cloud or edge cluster can schedule and serve a basic application."

FAQ

How does OneKS handle cluster placement across different infrastructure locations?

OneKS uses placement configuration to target specific hypervisor hosts representing different locations (on-premises, cloud, or edge). In the demonstration, placement is configured at the configuration layer before cluster creation to schedule control plane and worker nodes on the desired host. Future versions are expected to simplify location selection for users through improved workflow interfaces.

What validation steps confirm that a OneKS cluster is production-ready?

The demonstration validates cluster readiness by deploying an NGINX workload, exposing it as a Kubernetes service, and testing in-cluster connectivity using a temporary curl pod. A successful HTTP 200 response confirms that the cluster can schedule pods, handle service networking, and serve applications—proving operational readiness beyond basic provisioning.


Categories:
  • » Cybersecurity » Cloud Security
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Cloud Security
  • Technical Deep Dive
  • Demo
  • Getting Started
  • Kubernetes lifecycle management
  • Distributed infrastructure orchestration
  • Edge computing
  • Hybrid cloud management
  • Container orchestration
  • Infrastructure as a Service
  • ClusterAPI integration
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Open Nebula: Kubernetes Lifecycle Management Across Distributed Infrastructure

              Upcoming Webinar Calendar

              • 06/30/2026
                01:00 PM
                06/30/2026
                Master Active Directory Certificate Services and Maintain Your Edge
                https://www.truthinit.com/index.php/channel/2018/master-active-directory-certificate-services-and-maintain-your-edge/
              • 07/01/2026
                04:00 AM
                07/01/2026
                Integrating Security in AI: Automated Red Teaming Strategies for Private Models
                https://www.truthinit.com/index.php/channel/1969/integrating-security-in-ai-automated-red-teaming-strategies-for-private-models/
              • 07/01/2026
                04:00 AM
                07/01/2026
                Schutz von KI in Anwendungen, Agenten und APIs.
                https://www.truthinit.com/index.php/channel/2008/schutz-von-ki-in-anwendungen-agenten-und-apis/
              • 07/01/2026
                01:00 PM
                07/01/2026
                How to Prevent Your AI from Outsmarting You
                https://www.truthinit.com/index.php/channel/2021/how-to-prevent-your-ai-from-outsmarting-you/
              • 07/02/2026
                10:00 AM
                07/02/2026
                Resilience Insights from Hybrid Threats in a Dark Cloud Environment
                https://www.truthinit.com/index.php/channel/2011/resilience-insights-from-hybrid-threats-in-a-dark-cloud-environment/
              • 07/08/2026
                02:00 PM
                07/08/2026
                Understanding the Crucial Role of Context in AI Data
                https://www.truthinit.com/index.php/channel/2037/understanding-the-crucial-role-of-context-in-ai-data/
              • 07/09/2026
                01:00 PM
                07/09/2026
                The HUMAN Experience: Empowering Agentic Trust in Practice
                https://www.truthinit.com/index.php/channel/2026/the-human-experience-empowering-agentic-trust-in-practice/
              • 07/14/2026
                01:00 PM
                07/14/2026
                Crafting a Championship-Worthy Security Team for Maximum Defense Effectiveness
                https://www.truthinit.com/index.php/channel/2025/crafting-a-championship-worthy-security-team-for-maximum-defense-effectiveness/
              • 07/21/2026
                04:00 AM
                07/21/2026
                Strategies for Managing AI Governance and Securing App-to-LLM API Traffic
                https://www.truthinit.com/index.php/channel/1967/strategies-for-managing-ai-governance-and-securing-app-to-llm-api-traffic/
              • 07/21/2026
                01:00 PM
                07/21/2026
                HUMAN Dialogue: Insights from Attackers During the FIFA World Cup
                https://www.truthinit.com/index.php/channel/2029/human-dialogue-insights-from-attackers-during-the-fifa-world-cup/
              • 07/22/2026
                06:30 AM
                07/22/2026
                Insights and Strategies from the DPDP Webinar
                https://www.truthinit.com/index.php/channel/2000/insights-and-strategies-from-the-dpdp-webinar/
              • 07/28/2026
                01:00 PM
                07/28/2026
                Illumio + Netskope: Zero Trust in the Age of AI Autonomy
                https://www.truthinit.com/index.php/channel/2031/illumio-netskope-zero-trust-in-the-age-of-ai-autonomy/
              • 07/29/2026
                04:00 AM
                07/29/2026
                Real-Time Strategies for Safeguarding Against Prompt Injections
                https://www.truthinit.com/index.php/channel/1968/real-time-strategies-for-safeguarding-against-prompt-injections/
              • 08/19/2026
                12:00 PM
                08/19/2026
                Get Prepared to Thrive as an Agent in Just 30 Days
                https://www.truthinit.com/index.php/channel/2036/get-prepared-to-thrive-as-an-agent-in-just-30-days/
              • 09/30/2026
                04:00 AM
                09/30/2026
                AI Command Center: Optimizing Visibility and Control in Your Operations
                https://www.truthinit.com/index.php/channel/2024/ai-command-center-optimizing-visibility-and-control-in-your-operations/

              Upcoming Events

              • Jun
                30

                Master Active Directory Certificate Services and Maintain Your Edge

                06/30/202601:00 PM ET
                • Jul
                  01

                  Schutz von KI in Anwendungen, Agenten und APIs.

                  07/01/202604:00 AM ET
                  • Jul
                    01

                    Integrating Security in AI: Automated Red Teaming Strategies for Private Models

                    07/01/202604:00 AM ET
                    • Jul
                      01

                      How to Prevent Your AI from Outsmarting You

                      07/01/202601:00 PM ET
                      • Jul
                        02

                        Resilience Insights from Hybrid Threats in a Dark Cloud Environment

                        07/02/202610:00 AM ET
                        More events
                        Truth in IT
                        • Sponsor
                        • About Us
                        • Terms of Service
                        • Privacy Policy
                        • Contact Us
                        • Preference Management
                        Desktop version
                        Standard version