External panel

Last update: December 25 2024

External panel

The external panel is a control panel where you can work only with a specific project. It does not display tickets and consumption, you cannot manage project quotas.

Using an external dashboard, you can grant cloud space to individual users or teams and set resource consumption quotas for them.

The outer panel can be opened:

• through view domain project_number.selvpc.ru. This domain is created automatically for each project. The external panel will be accessible via HTTPS protocol with a certificate *.selvpc.ru;
• your own domain for example cloud.yourdomain.com. By default, the external panel will only be accessible via HTTP protocol — you can configure HTTPS access if required.

The outer panel is not covered account restriction.

You can change the design of the outer panel — choose a fill color and change the logo.

For your information

The external dashboard is only available for cloud platform products: Cloud servers, Managed Kubernetes, Managed databases, Container Registry, Secrets manager.

Log in to the external panel via project_number.selvpc.ru⁠

To access the external panel through the domain in the format project_number.selvpc.ru you need to create a service user with role Project Administrator.

You can log in to the panel using the login and password of the Project Administrator. The external panel will be opened via HTTPS protocol.

1. Add a service user. Select the Project Administrator role and add it to the desired project.

   A new user can only be created by users with roles Account Owner and User Administrator.

2. In control panel go to Identity & Access Management → Projects.

3. Open the tab External panel.

4. In the field Login link click on the following link 123456.selvpc.ru.

5. Enter the Project Administrator's name and password.

Configure access to the external panel through your own domain⁠

Access to the external panel can be set up through your domain, e.g. cloud.yourdomain.com. The frontend will open over HTTP protocol without a TLS (SSL)-certificate.

If necessary, you can set up access via an encrypted HTTPS connection.

HTTP

1. In control panels go to Identity & Access Management → Projects.

2. Open the tab External panel.

3. Copy the value from the field Login link.

4. On your domain registrar's side, create a CNAME record for the third-level domain:

   <cloud.yourdomain.com> CNAME <project_number.selvpc.ru>

   Specify:

   • <cloud.yourdomain.com> — domain name, by which the external panel will be opened. You can use only third-level domain — add the identifier cloud or another name;
   • <project_number.selvpc.ru> — login link that you copied in step 2.

5. Specify the NS servers serving the domain for the record. It may take up to 48 hours to update DNS records.

6. In control panels go to Identity & Access Management → Projects.

7. Open the tab External panel.

8. In the field CNAME record click .

9. Enter the CNAME record you created. The original link to the external panel will change to your link.

HTTPS

To configure access to the external panel via HTTPS, you need to create an intermediate proxy server, upload a TLS (SSL) certificate to it and configure request forwarding.

1. Create a cloud server. You can select the lowest possible configuration, such as a fixed Shared Line configuration with 1 vCPU and 512 MB RAM.

2. Configure the cloud server to access to and from the Internet via a public IP address.

3. On your domain registrar's side, create an A-record for the third-level domain:

   <cloud.yourdomain.com> A <ip_address>

   Specify:

   • <cloud.yourdomain.com> — domain name, by which the external panel will be opened. You can use only the third level domain — add the identifier cloud or another name;
   • <ip_address> — The public IP address that you connected to the cloud server in step 2.

4. In control panels go to Identity & Access Management → Projects.

5. Open the tab External panel.

6. Copy the value from the field Login link.

7. Install nginx on the cloud server.

8. Add a block to the nginx configuration file describing the reverse proxy server:

   server {
       listen              443 ssl;
       server_name         <cloud.yourdomain.com>;
       ssl_certificate     </etc/nginx/ssl/cert.pem>;
       ssl_certificate_key </etc/nginx/ssl/privkey.pem>;
   
       location / {
       proxy_pass <project_url>;
       }
   }

   Specify:

   • <project_url> — link to enter the external view panel https://<project_number>.selvpc.ruthat you copied in step 5;
   • </etc/nginx/ssl/cert.pem> — path to the certificate file. If you are using a TLS (SSL) certificate from Let's Encrypt®, the file is named cert.pem;
   • </etc/nginx/ssl/privkey.pem> — path to the file containing the certificate's private key. If you are using Let's Encrypt®, the file is called privkey.pem.

9. Upload the TLS (SSL) certificate and certificate private key to the cloud server in the directories that you specified in the configuration file in step 8. If you do not have a TLS (SSL) certificate for the domain, you can free of charge issue a Let's Encrypt® certificate in the Selectel Certificate Manager.

10. In control panels go to Identity & Access Management → Projects.

11. Open the tab External panel.

12. In the field CNAME record click .

13. Enter the A-record you created. The original link to the external panel will change to your link.

14. If a warning message appears when you log in to the panel Мы не смогли обнаружить DNS-запись...ignore him.

Change the design of the external panel⁠

You can customize the appearance of the login window and use your corporate colors and logos.

1. In control panels go to Identity & Access Management → Projects.
2. Open the tab External panel.
3. In the block Panel design click Change the design.
4. Specify the fill color in the panel.
5. Click Downloadto download the logo. The maximum size of the logo is 64 KB.
6. Click Save.