Banzai Cloud Pipeline provides a number of integrated services that allow for simple configuration and deployment of frequently used cluster-related services.

These services can be activated using the web UI or the Banzai CLI tool. Note that the banzai CLI tool supports a wider range of configuration options.

The following sections provide a brief introduction to each integrated service.

Note: The command line examples assume that you have installed the Banzai CLI tool, logged in, and selected a cluster to operate on.

DNS 🔗︎

Use the DNS integrated service to enable public access to services on your cluster by using domain names.

  • To configure the DNS integrated service on the web interface, see External DNS.
  • To use the configure the DNS integrated service from the command line, see External DNS CLI.

Cluster monitoring 🔗︎

Use the Cluster monitoring integrated service to gather and view cluster metrics.

Activate the Cluster monitoring integrated service 🔗︎

Open a shell and run the following command:

% banzai cluster service monitoring activate

Complete the interactive wizard, or specify the options in a file or on standard input:

% banzai cluster service monitoring activate --file - <<EOF
{
  "prometheus": {
      "enabled": true,
      "storage": {
          "size": 1000,
          "retention": "10d"
      }
  },
  "exporters": {
      "enabled": true,
      "nodeExporter": {
          "enabled": true
      },
      "kubeStateMetrics": {
          "enabled": true
      }
  }
}
EOF

Deactivate the Cluster monitoring integrated service 🔗︎

Open a shell and run the following command:

% banzai cluster service monitoring deactivate

Security scan 🔗︎

Use the Security scan integrated service to automatically check the images used in your pods before they are deployed. That way you can prevent deploying pods that contain known security vulnerabilities, based on the Common Vulnerabilities and Exposures (CVE) database. Read a more detailed overview.

  • To configure this integrated service on the web interface, see Security scan.
  • To configure this integrated service from the command line, see Security scan CLI.

Bank-Vaults 🔗︎

Use the Bank-Vaults integrated service to enhance security by injecting secrets directly into the pods from Bank-Vaults.

Activate the Bank-Vaults integrated service 🔗︎

Open a shell and run the following command:

% banzai cluster service vault activate

Complete the interactive wizard, or specify the options in a file or on standard input:

% banzai cluster service vault activate --file - <<EOF
{
  "settings": {
      "namespaces": ["default"],
      "serviceAccounts": ["*"]
  }
}
EOF

Deactivate the Bank-Vaults integrated service 🔗︎

Open a shell and run the following command:

% banzai cluster service vault deactivate

Expiration 🔗︎

Remove your cluster automatically at the specified date, or after the specified time. You can modify the date later, or deactivate the Expiration service to keep the cluster indefinitely.

  • To configure this integrated service on the web interface, see Expiration.
  • To configure this integrated service from the command line, see Expiration CLI.