Kubernetes Installation

Kubernetes Installation

Deploy SSH-KLM on Kubernetes for production environments requiring high availability and scalability.

Use Cases

• Production deployments
• High availability requirements
• Large-scale environments (100+ hosts)
• Cloud-native infrastructure

Prerequisites

Requirement	Version	Notes
Kubernetes	1.25+	kubectl version
Helm	3.10+	helm version
kubectl	Configured	Cluster access
Storage Class	Default	For PVCs

Step-by-Step Guide

Step 1: Add Helm Repository

# Add QCecuring Helm repo
helm repo add qcecuring https://charts.qcecuring.com
helm repo update

# Verify repo added
helm search repo qcecuring/ssh-klm

Step 2: Create Namespace

kubectl create namespace ssh-klm

Step 3: Configure Values

Create values.yaml:

values.yaml

global:
  storageClass: "standard"  # Your storage class

api:
  replicas: 2
  resources:
    requests:
      cpu: 500m
      memory: 512Mi
    limits:
      cpu: 2000m
      memory: 2Gi

worker:
  replicas: 3
  resources:
    requests:
      cpu: 250m
      memory: 256Mi
    limits:
      cpu: 1000m
      memory: 1Gi

postgresql:
  enabled: true  # Set false for external DB
  auth:
    postgresPassword: "your-secure-password"
    database: sshklm

redis:
  enabled: true
  auth:
    password: "your-redis-password"

ingress:
  enabled: true
  className: nginx
  hosts:
    - host: ssh-klm.example.com
      paths:
        - path: /
          pathType: Prefix
  tls:
    - secretName: ssh-klm-tls
      hosts:
        - ssh-klm.example.com

Step 4: Install Chart

helm install ssh-klm qcecuring/ssh-klm \
  --namespace ssh-klm \
  --values values.yaml \
  --wait

Step 5: Verify Installation

# Check pods
kubectl get pods -n ssh-klm

# Check services
kubectl get svc -n ssh-klm

# Check ingress
kubectl get ingress -n ssh-klm

Step 6: Access Dashboard

# If using ingress
open https://ssh-klm.example.com

# If using port-forward (testing)
kubectl port-forward svc/ssh-klm-api 8081:8081 -n ssh-klm
open http://localhost:8081

Examples

External PostgreSQL

# values.yaml for external database
postgresql:
  enabled: false

externalDatabase:
  host: your-rds-instance.amazonaws.com
  port: 5432
  database: sshklm
  username: sshklm
  existingSecret: ssh-klm-db-secret
  existingSecretPasswordKey: password

Create the secret:

kubectl create secret generic ssh-klm-db-secret \
  --from-literal=password=your-db-password \
  -n ssh-klm

High Availability Setup

values-ha.yaml

api:
  replicas: 3
  affinity:
    podAntiAffinity:
      requiredDuringSchedulingIgnoredDuringExecution:
        - labelSelector:
            matchLabels:
              app: ssh-klm-api
          topologyKey: kubernetes.io/hostname

worker:
  replicas: 5

postgresql:
  architecture: replication
  readReplicas:
    replicaCount: 2

Troubleshooting

Pods Not Starting

Issue: Pods stuck in Pending state

Solution:

# Check events
kubectl describe pod <pod-name> -n ssh-klm

# Common issues:
# - Insufficient resources: Scale down or add nodes
# - PVC not binding: Check storage class

Database Connection Issues

Issue: API pods crash with database errors

Solution:

# Check PostgreSQL pod
kubectl logs -l app.kubernetes.io/name=postgresql -n ssh-klm

# Verify secret
kubectl get secret ssh-klm-postgresql -n ssh-klm -o yaml

Maintenance

Upgrade

# Update repo
helm repo update

# Upgrade release
helm upgrade ssh-klm qcecuring/ssh-klm \
  --namespace ssh-klm \
  --values values.yaml

Backup

# Backup PostgreSQL
kubectl exec -it ssh-klm-postgresql-0 -n ssh-klm -- \
  pg_dump -U postgres sshklm > backup.sql

Next Steps

• Agent Installation
• Monitoring Setup
• Scaling Guide

Related Pages

• Docker Installation
• Architecture Overview