Bring your own cloud

​

Architecture overview

Before creating a BYOC deployment, familiarize yourself with the following architecture. In the BYOC environment, the entire data plane is deployed in the user’s space. To manage the RisingWave clusters within this environment, we deploy two key services for operation delegation:

• Agent Service: This service manages Kubernetes (K8s) and cloud resources. It handles tasks such as managing RisingWave Pods, storage services (including AWS S3, GCS, and Azure Blob Storage), IAM roles/accounts associated with the RisingWave cluster, network endpoints, etc.
• RWProxy: This is a TCP proxy that routes SQL statements from the control plane to the appropriate RisingWave instances.

​

Create a BYOC environment

Follow the steps below to create your own cloud environment.

1. Navigate to the Project page and click Create project.
2. Choose Advanced and enter your invitation code. If you do not have an invitation code, please contact our support team or sales team to obtain one.
3. Once you’ve redeemed the invitation code, select BYOC as the deployment type, and select your cloud platform as AWS or GCP (see Resource and permission for more details), region, and ID as necessary.
4. After configuring these settings, you’ll see additional instructions on your screen. Follow these steps to establish your BYOC environment. Please be aware that the final command rwc byoc apply --name xxx may take 30 to 40 minutes to complete, and a progress bar will be shown to keep you updated. During this time, it’s crucial to ensure a stable internet connection. If the command is interrupted or fails due to network instability, you can safely retry it.

5. Click Next to continue the configuration of cluster size and nodes. To learn more about the nodes, see the architecture of RisingWave.
6. Click Next, name your cluster, and execute the command that pops up to establish a BYOC cluster in your environment.

Once the cluster is successfully created, you can manage it through the portal just like hosted clusters.

​

Configure custom settings

RisingWave provides several custom settings for BYOC deployments. To enable this feature, you need to create a configuration file containing the custom settings. These settings can be applied when creating a new BYOC environment or updating an existing one.

Below are supported custom settings:

1. Container security context that applies to all RisingWave namespaces, including:

   • cloudagent (hosting the agent service for Kubernetes operation delegation)
   • rwproxy (hosting psql proxy for RisingWave clusters)
   • risingwave-operator-system (hosting RisingWave operator managing the RisingWave cluster CRD)
   • rwc-* (namespaces hosting RisingWave clusters)

   For more information, please see Security context.

2. Namespace labels to enforce Pod Security Standard for all namespaces mentioned above.

   For more information, please see Pod Security Admission labels for namespaces.

3. Tags for Cloud vendor resources managed by RisingWave.

4. AWS custom EKS AMI version for the EKS nodes.

​

Create a configuration file

1. Create a file at path BYOC_CONFIG with desired custom settings. You can include only the settings you need and omit others:

container_security_context:
  allowPrivilegeEscalation: false
  capabilities:
    drop:
    - ALL
  readOnlyRootFilesystem: true
  runAsNonRoot: true
  runAsUser: 65521
  seccompProfile:
    type: RuntimeDefault
pod_security_admission_labels:
  pod-security.kubernetes.io/enforce: restricted
extra_tags:
  foo: bar
aws_settings:
  eks_node_ami_release_version: 1.32.0-20241225

2. Save the file path $BYOC_CONFIG, as you will use it in the later steps.

​

Apply to a BYOC environment

You may either create a new BYOC environment or update your existing one to apply the custom settings.

• Create a new BYOC environment
• Update an existing BYOC environment

$ rwc byoc create \
	--cidr $BYOC_CIDR \
	--cloud-account-id $ACCOUNT_ID \
	--name $BYOC_NAME \
	--custom-settings-path $BYOC_CONFIG

$ rwc byoc apply --name $BYOC_NAME

​

Resource and permission

When you customize your cloud platform, refer to the following notes to see what we’ve set up for you and the permissions you need to enable.

• AWS
• GCP
• Azure

​

Delete a BYOC environment

Follow the steps below to delete a BYOC environment deployed in your cloud.

1. Delete all BYOC clusters running in the environment. Navigate to the Clusters page, click the delete icon to delete all of your BYOC clusters.
2. Delete resources you created that are not managed by RisingWave, such as VPC Peerings, GCP Firewalls, and other common resources you might have used.
3. Open the terminal and execute the following commands:

$ rwc byoc terminate --name default-byoc-environment # This may take 2-3 minutes.
$ rwc byoc delete --name default-byoc-environment # This may take 30-40 minutes.