MKE 4 Documentation
API specification
Initializing search
MKE 4 Documentation
Introduction
Concepts
Concepts
Architecture
Configuration
k0rdent Templates
Container Network Interfaces (CNI)
MKE 4 Child Clusters
Getting started
Getting started
System requirements
Install the MKE 4 CLI (mkectl)
Install Windows worker nodes
SELinux support
Host preparation for FIPS
Antivirus and antimalware guidelines
Create a cluster
Open Ports to Incoming Traffic
Offline installation
Licensing MKE 4
Licensing MKE 4
Obtain your MKE 4 license
Set your license in the configuration
Apply an MKE 4 license following installation
Start interacting with the cluster
Access and manage the cluster with kubectl
Add and remove cluster nodes
Obtain the current MKE 4 configuration file
Obtain the current MKE 4 cluster version
Change your MKE 4 password
Uninstall a cluster
Upgrades
Upgrades
Upgrade Scenarios
Upgrade from MKE 3.7, 3.8 or 3.9
Upgrade from MKE 3.7, 3.8 or 3.9
Upgrade Considerations
Upgrade Prerequisites
Upgrade the data directory
Upgrade compatibility checks
Configure the load balancer
Configure NGINX controller
Upgrade the Configuration
Perform the Upgrade
Upgrade Verification and Access
Revert the Upgrade
RBAC Upgrades
CoreDNS Lameduck Upgrades
Upgrade with cert-manager
Upgrade with unmanaged CNI
Troubleshoot the Upgrade
Upgrade an existing MKE 4 cluster
Upgrade an existing MKE 4 cluster
Upgrade Monitoring CRDs
Perform an MKE 4 to MKE 4+ Upgrade
Configuration
Configuration
Authentication
Authentication
Basic authentication
OIDC
SAML
LDAP
kubectl Setup
Authorization
Authorization
Permissions
Create Organizations and Teams
Grants
Grants
Common grant scenarios
Create a grant
Grant service/proxy and Prometheus access
Grant node read access
Groups
Members and Users
Enable LDAP group and user search
Backup
Backup
Restore
Restore
Kubernetes components
Kubernetes components
kubelet
kube-apiserver
Audit logging
kube-controller-manager
kube-scheduler
etcd
etcd
Configure etcd storage quota
etcd maintenance service
etcd maintenance service
Kubernetes event cleanup and etcd compaction
etcd defragmentation
Maintenance operations scheduling
Maintenance operations auditing
Secrets Store CSI Driver addon
Add services
Ingress
Ingress
Gateway API
Gateway API
Configuration
Support scenarios
Kubernetes Ingress
Kubernetes Ingress
TCP and UDP services
Scale worker nodes
Scale worker nodes
Add worker nodes
Remove worker nodes
Node scenarios
Group Managed Service Accounts (gMSA)
MetalLB load balancer
MetalLB load balancer
Monitoring
System component resources
Support bundle
Telemetry
Control Plane Load Balancer
Child clusters
Child clusters
Infrastructure options
Infrastructure options
AWS
vSphere
kube-apiserver options
Network options
Audit logging options
Kubelet options
Drift detection options
Air gap options
Cloud provider options
Kubernetes provider specifications
MetalLB load balancer service
MKE 4 Dashboard service
Authentication options
Port ranges
CoreDNS Lameduck
MKE 4 Dashboard
NVIDIA GPU Workloads
Policy Controller
Policy Controller
OPA Gatekeeper
Admission Controller
Node Feature Discovery (NFD)
Cloud providers
Cloud providers
TLS certificates
Workload node deployment
Component scheduling
Multus
NodeLocalDNS
Configuration Drift Detection
Container Network Interfaces
Container Network Interfaces
CNI Configuration Example
Enable CNI Providers
Limitations
Network Configuration
Configure CNI Providers
Set up eBPF Data Plane
Unmanaged CNI Providers
Unmanaged CNI Providers
Limitations
Prerequisites for unmanaged CNI on MKE 4
Install an unmanaged CNI plugin
Considerations and Best Practices
Network policies
Configure time windows for network bootstrapping
Verify CNI plugin installation
Virtualization
Release notes
Release notes
Features Summary
Enhancements
Addressed issues
Upgrade details
Known issues
Major component versions
Deprecation notes
Tutorials
Tutorials
Create a Kubernetes cluster in AWS using Terraform and install MKE 4
Create a Kubernetes cluster in single node and install MKE 4
Setting up Okta as an OIDC provider
Setting up Okta as a SAML provider
Setting up OpenLDAP as an LDAP provider
Deploy an MKE 4 child cluster
Deploy an MKE 4 child cluster
AWS child cluster
vSphere child cluster
Grant Cluster-Admin Access to LDAP Users
API specification
API specification
CLI reference
CLI reference
mkectl airgap
mkectl airgap list-charts
mkectl airgap list-images
mkectl apply
mkectl backup
mkectl check
mkectl check mke3
mkectl config
mkectl config get
mkectl get-token
mkectl init
mkectl kubeconfig
mkectl login
mkectl node
mkectl node add
mkectl node remove
mkectl reset
mkectl restore
mkectl services
mkectl services get
mkectl services status
mkectl status
mkectl support
mkectl support collect
mkectl upgrade
mkectl version
CIS Benchmarks
CIS Benchmarks
1. Control plane node security configuration
2. etcd node configuration
3. Control plane configuration
4. Worker node security configuration
5. Kubernetes policies
Changed - Licenses
Support, Services, Contact
Support, Services, Contact
Get support
Mirantis CloudCare Portal
Contact us
API specification
MKE 4 API documentation