Cloud Workloads

This section provides the purpose, elements, and actions performed on the Cloud Workloads pages.

Virtual Machines
Kubernetes Clusters
Serverless

Purpose

The Virtual Machines page displays and manages all virtual machine instances across cloud providers, showing their configuration details, network information, and associated resources.

Elements

Virtual Machines table: Shows a list of all virtual machine instances with their details including name, VPC/VNet, instance ID, size, cloud provider, region, and network information.
Actions menu: Bulk action to create a SmartGroup from the selected virtual machines (disabled until at least one eligible row is selected; gateway rows cannot be selected for SmartGroups; select up to 20 virtual machines).
View selector (Default View / Modified View): Loads the default table view or your current modified column, filter, and sort layout.
Save View button (labeled Save As New View when the default system view is loaded): Saves the current column, filter, and sort layout as a new view, or updates an existing custom view when one is loaded. The adjacent More Options button opens a menu with Discard Changes to revert unsaved changes.
Manage Views link: Opens from the view selector to rename, delete, or manage saved table views.
Filter button: Button to show or hide filter options for the virtual machines table.
Columns button: Button to select which columns to display in the table.
Download button: Button to download virtual machines data.
Search box: Search box for filtering virtual machines in the table.
Table row checkboxes: Checkboxes for selecting individual virtual machines.
Table header checkbox: Checkbox in table header to select all virtual machines.
Row actions menu: Per-row menu with Create SmartGroup for virtual machines that are not Aviatrix gateways (admin users only).
Total count display: Text showing total number of virtual machines (e.g., “Total 3 Virtual Machines”).
Refresh status: Text showing last refresh time with a refresh button.

Actions

View Virtual Machines

To view virtual machines:

Go to Cloud Resources > Cloud Workloads > Virtual Machines.
The Virtual Machines page appears with the Virtual Machines table listing all instances.
Optionally, use Search, Filter, Columns, or the View selector to customize the view.
Optionally, use Save View or Manage Views to save or manage table views.
Optionally, click Download to download data or use the refresh control to refresh the table.
Select rows with Table row checkboxes or Table header checkbox to use Actions for bulk operations, or use the Row actions menu for a single instance.

The table shows Name, VPC/VNet, VPC/VNet ID, Instance ID, Instance Size, Cloud, Region, Availability Zone, Subnet ID, Account, Billing ID, Private IP Address, Public IP Address, Cloud Tags, SmartGroups, and Aviatrix Managed for each virtual machine.

Parameter Details

CoPilot Parameter Name	Description
Name	Shows the name of the virtual machine instance.
VPC/VNet	Shows the Virtual Private Cloud or Virtual Network name that the virtual machine is associated with.
VPC/VNet ID	Shows the unique identifier of the VPC or VNet.
Instance ID	Shows the unique identifier of the virtual machine instance.
Instance Size	Shows the instance type or size (e.g., t3.large, m5.2xlarge, c5.2xlarge).
Cloud	Shows the cloud provider where the virtual machine runs (e.g., AWS, Azure, GCP).
Region	Shows the cloud region where the virtual machine is located.
Availability Zone	Shows the availability zone where the virtual machine is deployed.
Subnet ID	Shows the subnet ID that the virtual machine uses.
Account	Shows the cloud account name under which the virtual machine runs.
Billing ID	Shows the billing account ID associated with the virtual machine.
Private IP Address	Shows the private IP address assigned to the virtual machine.
Public IP Address	Shows the public IP address assigned to the virtual machine (if applicable).
Cloud Tags	Shows the cloud tags or labels associated with the virtual machine.
SmartGroups	Shows the SmartGroups that the virtual machine belongs to.
Aviatrix Managed	Indicates whether the virtual machine is managed by Aviatrix (Yes/No).

Purpose

The Kubernetes Clusters page displays all Kubernetes clusters discovered across cloud accounts and allows you to onboard clusters to enable Distributed Cloud Firewall enforcement on Kubernetes workloads.

Elements

Onboarding info alert: Dismissible banner summarizing automated onboarding support (public clusters and private clusters on Aviatrix Transit or Cloud Native Transit). Includes a Read More link to Kubernetes prerequisites documentation.
Kubernetes Clusters table: Lists all discovered clusters with their name, cloud account, VPC/VNets, access type, associated SmartGroups, namespace count, service count, pod count, Distributed Cloud Firewall (DCF) rule count, and onboarding status.
Manually Onboard Cluster button: Opens the Manual Onboard workflow to onboard a cluster that is not publicly accessible or not connected through Aviatrix Transit.
Onboard link: Appears in the Onboarded column for clusters with a No status. Opens the automated onboard workflow for that cluster.
View Details link: Appears in the Onboarded column for clusters with Partial or Fail status. Opens error details with Retry Sync or Retry Onboarding as applicable.
Edit action: Row action (visible icon) for onboarded clusters. Opens the edit cluster workflow.
Offboard action: Row action for clusters that are not in No status. Offboards the cluster after confirmation (disabled while associated SmartGroups exist).
Create SmartGroup action: Row menu action for clusters with Onboarded status Yes. Opens the Create SmartGroup dialog.
Cluster name link: Opens the cluster detail dialog.
Total count display: Text showing total number of clusters (e.g., “Total 0 clusters”).
Refresh status: Text showing last refresh time with a refresh button.

Actions

Onboard a Kubernetes Cluster

To onboard a Kubernetes cluster automatically:

Go to Cloud Resources > Cloud Workloads > Kubernetes Clusters.
In the Kubernetes Clusters table, locate the cluster with Onboarded status of No.
Click Onboard in the Onboarded column.
Complete the onboard workflow.

The cluster onboarding status changes to Onboarding, then to Yes when complete.

Automated onboarding is available for publicly accessible clusters and private clusters connected through Aviatrix Transit or Cloud Native Transit. Clusters using overlay networks have limited support for Distributed Cloud Firewall.

Parameter Details

CoPilot Parameter Name	Description
Name	The name of the Kubernetes cluster. Click to open the cluster detail dialog.
Cloud Account	The cloud account that hosts the cluster.
VPC/VNets	The VPC or VNet where the cluster is deployed.
VPC/VNets ID	The unique identifier of the VPC or VNet (hidden by default).
Access Type	The network access type of the cluster (e.g., Public or Private).
Associated SmartGroups	The SmartGroups associated with the cluster.
Namespaces	The number of namespaces in the cluster. Displays namespace names when the cluster is onboarded.
Services	The number of services in the cluster. Displays service names when the cluster is onboarded.
Pods	The number of pods in the cluster. Displays pod names when the cluster is onboarded.
DCF Rules	The number of Distributed Cloud Firewall rules associated with the cluster.
Onboarded	The onboarding status of the cluster: Yes, No, Partial, Onboarding, or Fail. Onboard appears for No; View Details appears for Partial or Fail.

View Kubernetes cluster error details

To view onboarding or sync errors and retry:

Go to Cloud Resources > Cloud Workloads > Kubernetes Clusters.
In the Onboarded column, click View Details for a Partial or Fail cluster.
Review the error details dialog. Click Retry Sync or Retry Onboarding to retry, or Close to dismiss.

Edit a Kubernetes cluster

To edit an onboarded Kubernetes cluster:

Go to Cloud Resources > Cloud Workloads > Kubernetes Clusters.
Locate the cluster in the table and click Edit in the row actions column.
Complete the edit workflow.

Requires Controller 10.1.0 or later.

Manually Onboard a Kubernetes Cluster

To manually onboard a Kubernetes cluster:

Go to Cloud Resources > Cloud Workloads > Kubernetes Clusters.
Click Manually Onboard Cluster.
Complete the manual onboard workflow.

Use manual onboarding for clusters that are not publicly accessible and are not connected through Aviatrix Transit.

Offboard a Kubernetes Cluster

To offboard a Kubernetes cluster:

Go to Cloud Resources > Cloud Workloads > Kubernetes Clusters.
Locate the cluster in the table and click the row actions menu.
Select Offboard.
Confirm the offboard operation.

The cluster is offboarded and its Distributed Cloud Firewall enforcement is removed.

Create SmartGroup from Kubernetes Cluster

To create a SmartGroup from a Kubernetes cluster:

Go to Cloud Resources > Cloud Workloads > Kubernetes Clusters.
Locate the onboarded cluster in the table and click the row actions menu.
Select Create SmartGroup.
Complete the Create SmartGroup dialog.

The SmartGroup is created and associated with the selected Kubernetes cluster.

Purpose

The Serverless page displays and manages serverless function workloads across cloud providers, showing their configuration details, network information, and associated resources.

Note: Serverless Functions is in Early Access. Early Access features are not safe for deployment in production environments.

Elements

Serverless Workloads table: Shows a list of all serverless function workloads with their details including name, serverless ID, type, cloud provider, region, and network information.
Actions button: Creates a SmartGroup from the selected serverless workloads (disabled until at least one row is selected). Only visible to admin users.
Filter button: Button to show or hide filter options for the serverless workloads table.
Columns button: Button to select which columns to display in the table.
Download button: Button to download serverless workloads data.
Search box: Search box for filtering serverless workloads in the table.
Table header checkbox: Checkbox in table header to select all serverless workloads.
Row actions menu: Per-row menu with a Create SmartGroup action. Only visible to admin users.
Total count display: Text showing total number of serverless workloads (e.g., “Total 0 Serverless Workloads”).
Refresh status: Text showing last refresh time with a refresh button.

Actions

View Serverless Workloads

To view serverless workloads:

Go to Cloud Resources > Cloud Workloads > Serverless.
The Serverless page appears with the Serverless Workloads table listing all serverless function workloads.
Optionally, use Filter, Columns, or Table header checkbox to customize the view or select items.
Optionally, click Download to download data or use the refresh control to refresh the table.
Select rows with Table header checkbox to use Actions to create a SmartGroup, or use the Row actions menu for a single workload.

The table shows Name, Serverless ID, Type, Cloud, Region, VPC/VNet, VPC/VNet ID (hidden by default), Availability Zone, Subnet ID, Account, Billing ID, IP CIDR, Cloud Tags (hidden by default), and SmartGroups (hidden by default) for each serverless workload.

Parameter Details

CoPilot Parameter Name	Description
Name	Shows the name of the serverless function workload.
Serverless ID	Shows the unique identifier of the serverless function workload.
Type	Shows the serverless workload type (e.g., AWS Lambda, AWS ECS, GCP Cloud Functions, GCP Cloud Run, Azure Functions, Azure Container Apps).
Cloud	Shows the cloud provider where the serverless function runs (e.g., AWS, Azure, GCP).
Region	Shows the cloud region where the serverless function is located.
VPC/VNet	Shows the Virtual Private Cloud or Virtual Network name that the serverless function is associated with (hidden by default).
VPC/VNet ID	Shows the unique identifier of the VPC or VNet (hidden by default).
Availability Zone	Shows the availability zone where the serverless function is deployed (if applicable).
Subnet ID	Shows the subnet ID that the serverless function uses (if applicable).
Account	Shows the cloud account name under which the serverless function runs.
Billing ID	Shows the billing account ID associated with the serverless function.
IP CIDR	Shows the IP CIDR range associated with the serverless function.
Cloud Tags	Shows the cloud tags associated with the serverless function (hidden by default).
SmartGroups	Shows the SmartGroups that the serverless function belongs to (hidden by default).

Concepts & Architecture

Guides

Reference

Purpose

Elements

Actions

Parameter Details

Purpose

Elements

Actions

Parameter Details

Purpose

Elements

Actions

Parameter Details

​Purpose

​Elements

​Actions

​Parameter Details

​Purpose

​Elements

​Actions

​Parameter Details

​Purpose

​Elements

​Actions

​Parameter Details

Purpose

Elements

Actions

Parameter Details

Purpose

Elements

Actions

Parameter Details

Purpose

Elements

Actions

Parameter Details