Swisscom Kubernetes

Platform configuration

In this section we go through the properties you need to define if your kubernetes runs on Swisscom Kubernetes.

  platform:
    kubernetes: pks
    s3: compatible

• As aws is the default provider value, you need to adjust the platform.kubernetes value to pks.
• As s3 is the default s3 provider value, you need to adjust the platform.s3 value to compatible.

NOTE: For the other platform configuration properties, please consult the platform configuration section.

Swisscom specific configuration

DNS

In order to be able to access the kube+ system components you need to set up a CNAME-Record for the system_domain on the DNS servers used by your Kubernetes cluster.

Certificates

If your Kubernetes cluster has Internet access, you can use the Lets encrypt component. If not, you will have to disable Lets encrypt and provide your own certificates:

• certificates.issuer - only required when lets_encrypt.enabled is set to false. Supported values are self-signed and customer-provided
• certificates.customer-provided.tls_crt - only required when certificates.issuer is set to customer-provided. It should be a wildcard certificate for the system_domain
• certificates.customer-provided.tls_key - only required when certificates.issuer is set to customer-provided
• certificates.customer-provided.tls_ca - only required when certificates.issuer is set to customer-provided

  lets_encrypt:
    enabled: false
  certificates:
    issuer: customer-provided
    customer_provided:
      tls_crt: |
        -----BEGIN CERTIFICATE-----
        MIIEYjCCAkoCFG+M4YbhF2i7GYHBquO0vt5QxDfSMA0GCSqGSIb3DQEBCwUAMFwx
        CzAJBgNVBAYTAkNIMQ8wDQYDVQQIDAZadXJpY2gxDzANBgNVBAcMBlp1cmljaDER
        MA8GA1UECgwIS3ViZXBsdXMxGDAWBgNVBAMMDyoubXktZG9tYWluLmNvbTAeFw0y
        MjAzMjUwODM2MzNaFw0yMzA4MDcwODM2MzNaMH8xCzAJBgNVBAYTAkNIMQ8wDQYD
        VQQIDAZadXJpY2gxDzANBgNVBAcMBlp1cmljaDEhMB8GA1UECgwYSW50ZXJuZXQg
        V2lkZ2l0cyBQdHkgTHRkMREwDwYDVQQLDAhLdWJlcGx1czEYMBYGA1UEAwwPKi5t
        eS1kb21haW4uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8hr
        f3CoYTSQmM9nOxcZ3qtyErlBWSydhNzU0bPkdpptzbD9XM9kc/FD1zek3hemZbKC
        MLB055CFJLipl322KzhU8GZlFVIABGpK392ZVgaOvXPRkZOEbrLJmm6MpOIhv/Kt
        XnRHmNZIoSfGce10QhZwjBi9ODPosOui3NKMnf4h8MDBL507SU1DVxRpYiwyKVNN
        vUOxAduX0Z7jfVBmbivc4CjTCgBsQREQcVAeal0P+kWrzdaI5G6FlXMrVc8Cw4qY
        J57jEUzFyJSoVIg0i24pz8c6sdP1WNs24r/KS2MIO9XnftCxH9HUYejRjkFVubii
        XtyvbDVW4XAxBs0IYwIDAQABMA0GCSqGSIb3DQEBCwUAA4ICAQClG7BUYzf5Tutu
        pdB8gqlm5FqgCmZYyoozuxqDA3GcI8kJY5T5FZyp/XTuV9otp4daMGynzhqaVUMu
        imoF2L3ujQ9TN/pNYhXA+RoEVdrowoQ9cnwoyQuu+2QBg+ZrBIlYGSi/AYEh+nUl
        buQpnTiqmgzN82c+x0Npll6JcTWZVQzi1WdqmQVYN49UtC7g/R7N9X47Yjy5R9bI
        kWWMw2ROeWOWe9fTX1lMKeheH/lkDdBbkcthu9AvAx/wMasf4mSZX6N+5oFEYG3c
        HT2uNHooW0upgigihmgbHh9w1ojklQWn847X81oVbB6qDjw9wGit3ov3phdvEj21
        O1b9bJ2qBN1qRot2q28jaFUf5fiZNBtZQUkmxdtquEiwLHdozWp5MRhlm138UzPs
        XxU6+5qX0W223chkMDbFeFNJgJnF68YGE+P/bp82fJicENnn9nWgqCwvyRTWJDgE
        Yv8KXZq+mxiR81/6iRKdWZH+848oYgr1mgqF3EknPuP5ppbPG5ZxDMHy+tGIe52K
        sh/DznUHeSkSP7Ys+qReZk8hm9sK4qQTdCK2/pGOsqIx/aKq10aPA39wU9sD1Fwg
        ya0f1s5hS/bqJwMu444q9/jSWglRq0K9gGg0bPsnQXg1o91uXwvjzkm/MTkDcYow
        sl/FNITvzB7x/AlkQ/kiiLmPizvPIw==
        -----END CERTIFICATE-----
      tls_key: |
        -----BEGIN RSA PRIVATE KEY-----
        MIIEpAIBAAKCAQEAv8hrf3CoYTSQmM9nOxcZ3qtyErlBWSydhNzU0bPkdpptzbD9
        XM9kc/FD1zek3hemZbKCMLB055CFJLipl322KzhU8GZlFVIABGpK392ZVgaOvXPR
        kZOEbrLJmm6MpOIhv/KtXnRHmNZIoSfGce10QhZwjBi9ODPosOui3NKMnf4h8MDB
        L507SU1DVxRpYiwyKVNNvUOxAduX0Z7jfVBmbivc4CjTCgBsQREQcVAeal0P+kWr
        zdaI5G6FlXMrVc8Cw4qYJ57jEUzFyJSoVIg0i24pz8c6sdP1WNs24r/KS2MIO9Xn
        ftCxH9HUYejRjkFVubiiXtyvbDVW4XAxBs0IYwIDAQABAoIBAC3Py1Xy7FXj/5Jx
        IMCtwQE+xQ4R8LlDfhEpyzCYnz9xnj8fQzZzWBSWElWLtjdTQO1UGeNVk2dpT1S5
        Q9GrNuPWHfwbCZRxNQ3Y8i/NuH4jLN+2ld4HdgAXdy8Lr08HsXYvmxhQAHZS4aCV
        ZsL6LOZIg/QDSNfvFmuEri+/n9VxYIA7+rQVjxmQ4BpmlbuGvX3KHjVhKLTwoA95
        /oIknZEHTRBSnwSNQ11GJToEoRvq4+TOkuLiftKcMperYrdrJrGtGeKy2XmnfWzo
        mE/fke3NCbvNtuZ70PNbp0IsoBcz9Kleobk1L9t55lfV7V9/scYmyJyvOyux7ngy
        2wk3GikCgYEA3bk4pAPz425K330lW/8bUmBjqUakcla91RWplGllv1xyK7CoV+09
        YPbW3+9F2QDrhRWSR6u+GG/yHtwBYf7bvdR4jX9c1foJ6ueVODAccMiCvfF846Ax
        jg6fyilAc92/3Hjfnx4SMHtQdOf37uA1/PC4QJW4b+2AnLbNvWqicYcCgYEA3W5J
        6N+3OTmcC2VDWQhEvow5q7MOJZDIe1p6vxMUom5Q4wShaNPKv19Uhny+hhgGIBl2
        g/Kme5bkOHs9Ui5ycQ5XClmOqQVjaWbTwbOOpeU+iGwsspuGMCmZS3+5vqmeM7Qg
        HHUax3iioxlCjAU8PJRWRQvpbhnfx+q9WQkv2UUCgYEAxBsnwsGQPA74ADWjDnxT
        QQfp/fVyS4L3AfnX9GFIUfnFLWlha+t0R0frg0MRRz7uENake+mmB90zjCHQw0j0
        ODEtsxD8HnG5xd+wdnLvJL3kDXYCnR251siOgfL8g76VDL6IIycotWLMJapp+wiq
        F58diFokODMbdwCkdi1Tog8CgYAJgtY74XgeRiI0vxnAdkF1qdJEVMGTzX8/BSjm
        kiw9ud1Rkv5X4VkBFVgtGqiYW+nPcSiNDFwoTNfqsSh2IjaaMpJ8iFI/YlLd0SPh
        WxQSfiFMfNECrvl5kh/ahVb2IJUCBYenkUQgM0dRGCGqoALxWzHFb3iMWSIqlSOi
        8mkSvQKBgQCJD2OO/NKHV3OFdkPRLAlGKG+mhQuDxdHT4+UnQm0JvbFc9gnkhit8
        qQUUQcE91kdKLGaeZczljVXHfqJG93hJtBS0Io7RbvjNJHf2eY7WoLkjv2J84ewm
        9dS5YoPOp0uzMzBTJH6ekLTe+fP84u6uw0I8UvFlVRI7CRgIRpajNw==
        -----END RSA PRIVATE KEY-----
      ca_crt: |
        -----BEGIN CERTIFICATE-----
        MIIFmTCCA4GgAwIBAgIUPDOucEBtvv7aFUDAbEn+oGHsXFwwDQYJKoZIhvcNAQEL
        BQAwXDELMAkGA1UEBhMCQ0gxDzANBgNVBAgMBlp1cmljaDEPMA0GA1UEBwwGWnVy
        aWNoMREwDwYDVQQKDAhLdWJlcGx1czEYMBYGA1UEAwwPKi5teS1kb21haW4uY29t
        MB4XDTIyMDMyNTA4MzMzMVoXDTI1MDExMjA4MzMzMVowXDELMAkGA1UEBhMCQ0gx
        DzANBgNVBAgMBlp1cmljaDEPMA0GA1UEBwwGWnVyaWNoMREwDwYDVQQKDAhLdWJl
        cGx1czEYMBYGA1UEAwwPKi5teS1kb21haW4uY29tMIICIjANBgkqhkiG9w0BAQEF
        AAOCAg8AMIICCgKCAgEAyvgjEpiwToxRRuFFHSyuHq5LpAS4cNoDBi98GQPfhCkw
        CGfYg3Z+YEehyD0CbPTPUy5ml78jwy0lYlqv7Akkw5VuiZAUJe3Rp6TYR1t+v4UV
        BsUB+G1SKDURJcojLxorf/DpSMeRprc79hFbj48wfEX2inWMsyoIhPfpP/oWKZhb
        ggOilG5B0w6ZzSFy4h+QrfdvynmQjV++khmV17MJ2zsHQf1MdR/ol22j7hWMJ8dd
        QOdipmRfYvThnXj4UcYzUEkv0aXBVww5AfmPZC2P2Rqag8amxzrtOhJCmWAUJqwR
        tkz8vaa0dSY9tMVzCIs0cB+SRzpbZVyXDGjH0kPKhNbc065vCDnbGoeg5WlQEYbR
        QQ6pCrTKKzkVHf5SywanUOIdpyE5aa2IZOdJ/lyBXc5XHWHTNbKH3oxsjv2oxCxh
        URoGRiSrOkEzG6rc4QVudPOB1rS9NuW556IUPQPeMBYzjTDeGthVib1P4+JwWm9z
        287KVHihP9IaK3vseyY6G84XJoT10IXNsMN1TWnVu+oW8XhDtGh+7prevoJQ4mEI
        E5UNJLOvnE1WNbuD6MKKS/mxLL7A5J+Kxe4Jd3i6Mtcj/pVcxKAX6BTF4EbDJIq1
        kWyDVJtpMd18pwvtUW0mviKIZGLIvTyeN2nWYpC57pazCLnR8pi0q8drpwH1b6MC
        AwEAAaNTMFEwHQYDVR0OBBYEFBoocTXdVZ8tFVN7tDHS3PK7fXD9MB8GA1UdIwQY
        MBaAFBoocTXdVZ8tFVN7tDHS3PK7fXD9MA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZI
        hvcNAQELBQADggIBAFPgJchQ3VMj5vgBrJ0eyN/FAWi93P+4FHvwsExJ7TLFT6yc
        GmmJYwGuvyI8gJlvrXFa1qVd49LjXyDO0fF96s6sa2MMRj1D94TEL52zZca3voTt
        XrQxBcjyPVTAQkCFEO3O9xaW0L2EHtafp/+aPPKYZOrNos40A1dXcuRPcfhSoQAk
        bJ61GB3SGJ1H10KQCdiJVCkyGq1vBYFfzeZWgeIaW4v09GVqcHCxE/DCKlVn/NFv
        tsWocOhsoW8WffIZoC7P8kPWa9EBRlbkWN+o7NFjVkSDzI6ZN/j29aeS8AHbW+V5
        WMkXRnnZCswpXasMp4WZxB91RcnmcBPCBNsbZjDWLKkhlMPO3eyall0Rou5k/I6W
        NMg3S5cR5LciUvI17ZDpg5fqBqlA1CZF3nrn3wsfalKw2BlNzGgYuwqlI4JBAq4g
        EYM0/xvMPNxJdnqmgrKwjiTnJOg2O7do12Mftny69sn2tXUoz59iXl/Yd4x6Usjl
        /s1R827cqooceSaZUKmSgwHGtLBoYHe4X0mcvS0NUOeOECxKBo2s9HGnyCpSSoo9
        V9oCqU1cf3cBbfepe+YVDLRgB6/4ZXdcKgFSg2hfN8oC5y0H1qiiQ35J1WB1foS3
        6GfwGmY/FN2Jk7KeRQGs9FHxu/J87Fa1uJqcdOfnJYDzw4M9kt/OT9GAgcyP
        -----END CERTIFICATE-----