Start managing Kubernetes clusters from Astra Control Service

Contributors netapp-mwallis

After you set up your environment, you’re ready to create a Kubernetes cluster and then add it to Astra Control Service.

Create a Kubernetes cluster

If you don’t have a cluster yet, create one that meets the requirements of one of the following providers:

Note Astra Control Service supports AKS clusters that use Azure Active Directory (Azure AD) for authentication and identity management. When you create the cluster, follow the instructions in the official documentation to configure the cluster to use Azure AD. You’ll need to make sure your clusters meet the requirements for AKS-managed Azure AD integration.

Start managing Kubernetes clusters

After you log in to Astra Control Service, your first step is to start managing your clusters.

If no volume snapshot class is configured on the cluster when you add it, Astra Control Service attempts to install one with a default configuration.

Note

When Astra Control manages a cluster, it keeps track of the cluster’s default storage class. If you change the storage class using kubectl commands, Astra Control reverts the change. To change the default storage class in a cluster managed by Astra Control, use one of the following methods:

  • Use the Astra Control API PUT /managedClusters endpoint, and assign a different default storage class with the DefaultStorageClass parameter.

  • Use the Astra Control web UI to assign a different default storage class. See Change the default storage class.

What you’ll need
  • For Amazon Web Services, you should have the JSON file containing the credentials of the IAM user that created the cluster. Learn how to create an IAM user.

  • Astra Trident is required for Amazon FSx for NetApp ONTAP. If you plan to use Amazon FSx for NetApp ONTAP as a storage backend for your EKS cluster, ensure you have completed step number 7 of the setup instructions.

  • For GKE, you should have the service account key file for a service account that has the required permissions. Learn how to set up a service account.

  • For AKS, you should have the JSON file that contains the output from the Azure CLI when you created the service principal. Learn how to set up a service principal.

    You’ll also need your Azure subscription ID, if you didn’t add it to the JSON file.

  • For private AKS clusters:

    • The cluster should meet the requirements noted in the Azure documentation.

    • You need to install the Astra Connector on the AKS service cluster so that Astra Control Service can manage the cluster. To install the Astra Connector, follow these instructions.

Steps
  1. On the Dashboard, select Manage Kubernetes cluster.

    Follow the prompts to add the cluster.

  2. Provider: Select your cloud provider and then provide the required credentials.

    1. Amazon Web Services: Provide details about your Amazon Web Services IAM user account by uploading a JSON file or by pasting the contents of that JSON file from your clipboard.

      The JSON file should contain the credentials of the IAM user that created the cluster.

    2. Microsoft Azure: Provide details about your Azure service principal by uploading a JSON file or by pasting the contents of that JSON file from your clipboard.

      The JSON file should contain the output from the Azure CLI when you created the service principal. It can also include your subscription ID so it’s automatically added to Astra. Otherwise, you need to manually enter the ID after providing the JSON.

    3. Google Cloud Platform: Provide the service account key file either by uploading the file or by pasting the contents from your clipboard.

      Astra Control Service uses the service account to discover clusters running in Google Kubernetes Engine.

  3. Cluster: Select the cluster that you’d like to add.

    Pay careful attention to the Eligible tab. If a warning appears, hover over the warning to determine if there’s an issue with the cluster. For example, it might identify that the cluster doesn’t have a worker node.

    If you select a cluster that has not been configured for Cloud Volumes Service for Google Cloud, Azure NetApp Files, or Amazon Web Services, a warning appears. This cluster does not have NetApp Trident installed and configured. You can proceed with adding the cluster if you intend to use a different storage service.

  4. Storage: Select the storage class that you’d like Kubernetes applications deployed to this cluster to use by default.

    Note

    Each cloud provider storage service displays the following price, performance, and resilience information:

    • Cloud Volumes Service for Google Cloud: Price, performance, and resilience information

    • Google Persistent Disk: No price, performance, or resilience information available

    • Azure NetApp Files: Performance and resilience information

    • Azure Managed disks: No price, performance, or resilience information available

    • Amazon Elastic Block Store: No price, performance, or resilience information available

    • Amazon FSx for NetApp ONTAP: No price, performance, or resilience information available

    Each storage class can utilize one of the following services:

  5. Review & Approve: Review the configuration details and select Add cluster.

Result

Astra Control Service creates an object store for application backups on eligible clusters, creates an admin account on the cluster, and sets the default storage class that you specified. This process can take up to 5 minutes.

Provide cluster access to other users

You can optionally provide kubectl command access for a cluster to other IAM users that are not the cluster’s creator.

Change the default storage class

You can change the default storage class for a cluster.

Steps
  1. In the Astra Control Service UI, select Clusters.

  2. On the Clusters page, select the cluster that you want to change.

  3. Select the Storage tab.

  4. Select the Storage classes category.

  5. Select the Actions menu for the storage class that you want to set as default.

  6. Select Set as default.

For more information