UI: Attach a Cluster
From the top menu bar, select your target workspace.
On the Dashboard page, select the Add Cluster option in the Actions dropdown menu at the top right.
Select Attach Cluster.
Select the Cluster has networking restrictions card to display the configuration page.
Enter the Cluster Name of the cluster you’re attaching.
Create additional new Labels as needed.
Select the hostname that is the Ingress for the cluster from the Load Balancer Hostname dropdown menu. The hostname must match the Kommander Host cluster to which you are attaching your existing cluster with network restrictions.
Specify the URL Path Prefix for your Load Balancer Hostname. This URL path will serve as the prefix for the specific tunnel services you want to expose on the Kommander management cluster. If no value is specified, the value defaults to
/dkp/tunnel
.NOTE: Kommander uses Traefik 2 ingress, which requires explicit definition of strip prefix middleware as a Kubernetes API object, opposed to a simple annotation. Kommander provides default middleware that supports creating tunnels only on the
/dkp/tunnel URL
prefix. This is indicated by using the extra annotation,traefik.ingress.kubernetes.io/router.middlewares: kommander-stripprefixes-kubetunnel@kubernetescrd
as shown in the code sample that follows. If you want to expose a tunnel on a different URL prefix, you must manage your own middleware configuration.(Optional) Enter a value for the Hostname field.
If you have not attached this cluster before, you must create a new secret in the Root CA Certificate drop down menu. To do this in your Konvoy management cluster, view your base64 encoded Kubernetes secret values to copy and paste into the Root CA Certificate field:
CODEecho $(kubectl get secret -n cert-manager kommander-ca -o=go-template='{{index .data "tls.crt"}}')
Otherwise, select from the list of available Secrets.
Add any Extra Annotations as needed.
Select the Save & Generate kubeconfig button to generate the kubeconfig file for the network tunnel.
Next Step:
UI: Finish Attaching the Existing Cluster
Related Topic:
For information on the TunnelGateway review the API documentation (v1alpha1).