How-To
Step-by-step guides to configure the service and use specific features, with clear instructions for common tasks and problem solving.
Secure SKS outbound traffic with egress filtering by allowing only required DNS, NTP, image pull, control plane, and API rules.
Manage the SKS lifecycle with supported versions, sequential upgrades, nodepool rotation, managed addons, backups, and plan changes.
Use Gateway API on Exoscale SKS with Traefik to define entry points, advanced HTTP routing, and Kubernetes traffic management.
Autoscale Exoscale SKS node pools with Cluster Autoscaler to add or remove nodes based on workload demand and scheduling needs.
Enable GPU support on Exoscale SKS nodes to run ML, analytics, and accelerated workloads with NVIDIA device plugins and GPU pods.
Use Karpenter on Exoscale SKS to automate node provisioning, fine-tune scaling, and match workloads with the right compute resources.
Expose services on Exoscale SKS with network load balancers and Traefik ingress for external access, routing, and traffic distribution.
Isolate critical SKS components on dedicated nodes with taints, tolerations, and node pools to improve cluster stability and security.
Manage SKS certificate authorities and addon credentials, retrieve public certs, and rotate CCM or CSI keys when needed.
Manage Kubernetes Feature Gates on Exoscale SKS by enabling or disabling supported features for clusters and Karpenter nodes.
Use Kubernetes Audit on Exoscale SKS to send API server audit events to a secure webhook endpoint for monitoring and analysis.
Use OpenID Connect on Exoscale SKS to enable external authentication and integrate cluster access with your identity provider.
Use labels on Exoscale SKS clusters, nodepools, and Karpenter resources to organize workloads and control scheduling behavior.
Set custom instance prefixes for Exoscale SKS nodepools to control how managed compute instance names are generated and displayed.
Use Kubernetes taints on Exoscale SKS nodepools to control pod scheduling and require matching tolerations for selected workloads.
Use a custom CNI on Exoscale SKS by configuring Pod CIDR, API access, DNS, network interfaces, and service proxy behavior.
Disable kube-proxy on Exoscale SKS when using a custom CNI with proxy replacement, configured at cluster creation via CLI or Terraform.
Use user namespaces on Exoscale SKS to improve pod isolation by mapping container root to unprivileged host user IDs for better security.
Mount Exoscale SOS buckets in SKS with the Mountpoint S3 CSI driver for read-heavy workloads, shared volumes, and prefix isolation.
Last updated on