This page lists the reserved DNS names that Deckhouse Platform (DP) uses. The names are given in the table below.

Use the list if the cluster DNS name template (the modules.publicDomainTemplate parameter of the global ModuleConfig) is not a wildcard template (for example, %s-kube.company.my). In this case, add an A or CNAME record for each name. The record value is the public IP address of the Ingress controller (the HTTP/HTTPS traffic load balancer).

To get the command for adding the DNS names to the local hosts file, use the hosts file data generator.

Hosts file data generator

To access the cluster services without DNS records (for example, from a workstation), add entries for the required names from the table below to the hosts file. Enter your DNS name template (from the modules.publicDomainTemplate parameter of the global ModuleConfig) and the IP address of the Ingress controller in the generator. The generator returns a ready-to-run command:

Enter a DNS name template containing %s, for example, %s.domain.my, %s-kube.domain.my or kube-%s.domain.my.
Enter a valid IPv4 or IPv6 address.

List of reserved DNS names

The following table lists the DNS names reserved by DP and the services that use them.

When you add A or CNAME records, use the name from the table in place of %s in publicDomainTemplate. For example, for the %s.example.com template, the grafana service gets the name grafana.example.com, and for %s-kube.company.my — grafana-kube.company.my.

Name Source Purpose Note
api The control-plane-manager module Kubernetes API publication. External access to the Kubernetes API via Ingress or Gateway API To make the name available, enable API publication. The storage-volume-data-manager module also uses this name for data export and import (DataExport and DataImport resources). The module obtains the certificate from the Ingress that publishes the Kubernetes API. Therefore, this module also requires API publication
ai-models The ai-models module Model downloads and public model catalog (/v2, /api/distribution/...) The public catalog is available when distribution.mode: PublicCatalog is set
argocd The operator-argo module Argo CD web interface The name is published only if an Ingress is configured in the ArgoCD resource. The spec.server.host parameter sets the name
code Deckhouse Code Source code management and CI/CD platform The name is also used to access Code via SSH. You can override the name in the module settings
code-pages Deckhouse Code GitLab Pages sites The name is available when Pages are enabled in the CodeInstance resource (spec.features.pages). You can override the name with the spec.features.pages.ingress.hostname parameter
code-registry Deckhouse Code Deckhouse Code container image registry The name is available when the Registry component is enabled in the CodeInstance resource (spec.features.registry). You can override the name with the spec.features.registry.ingress.hostname parameter
commander The commander module Cluster lifecycle management (creation, updates, inventory)
console The console module Deckhouse web UI
dashboard The dashboard module Kubernetes Dashboard web interface for manual cluster management Deprecated. If the dashboard module is disabled, the console module takes over the dashboard name and responds with a 301 redirect to its own address
ddp Deckhouse Development Portal Deckhouse Development Portal web interface You can override the name with the domain.useCustomDomain and domain.customDomain parameters
dex The user-authn module OIDC provider: single sign-on (SSO) to web interfaces and the Kubernetes API. The name is also used by dex-authenticators of other modules and by basic-auth-proxy
documentation The documentation module Web interface with the documentation for the platform version running in the cluster
grafana The prometheus module Cluster metrics dashboards If Grafana of the prometheus module is not deployed and the console module is enabled, the prometheus module responds to this name with a redirect to the console module
hubble The cilium-hubble module Hubble UI: visualization of network interaction and Cilium network policies
istio The istio module Kiali web interface: service mesh observability
istio-api-proxy The istio module Kubernetes API proxy for multicluster: neighboring clusters access the API of this cluster through this proxy
istio-metadata The istio module Public cluster metadata (root certificate, public keys, API proxy address) for federation and multicluster
kubeconfig The user-authn module kubeconfig generation web interface for Kubernetes API access Deprecated. Starting from DP version 1.78, the web interface is no longer published
neuvector The neuvector module NeuVector web interface
neuvector-api The neuvector module NeuVector controller REST API, including the address for connecting other clusters The name is available when the controller.apiIngress.enable parameter is enabled
observability The observability module External read/write access to metrics (/metrics/main/api/v1/write) The name is available when the externalMetricsAccess.enable parameter is enabled
openvpn-admin The openvpn module Access to cluster resources via OpenVPN with certificate-based authentication
payload-registry The payload-registry module Access to payload-registry storage The name is not published when https.mode: Disabled
prometheus The prometheus module Prometheus web interface If Grafana of the prometheus module is not deployed and the console module is enabled, the prometheus module responds to this name with a redirect to the console module
registry The registry module External access point to the in-cluster image registry
registry-packages-proxy The registry-packages-proxy module In-cluster HTTP proxy. Provides access to packages from container image registries
status The upmeter module Component status page. Shows the availability level over the last 10 minutes
stronghold Deckhouse Stronghold Secrets management web interface
tools The deckhouse-tools module Deckhouse CLI download page
upmeter The upmeter module Web interface that shows the availability of cluster components
virtualization DP built-in virtualization Address for uploading images and disks