How to create a fixed set of public IP addresses for a node group

​

Prerequisites

1. Install and configure the Nebius AI Cloud CLI.
2. Make sure you are in a group that has at least the editor role within your tenant or project; for example, the default editors group. You can check this in the Administration → IAM section of the web console.
3. Make sure that you have enough quota on IP addresses to support your node group deployment strategy. You can check the quota on the Administration → Limits → Quotas page of the web console. By default, no additional public IP addresses are required during an update. If you configure a surge-based strategy, reserve enough extra public IP addresses for the additional nodes that can be created during the update. Otherwise, updates or upgrades can stop when trying to create a new node.

​

How to create a fixed set of IP addresses

1. Create a subnet with public IP address CIDRs:
   nebius vpc subnet create \
     --name <subnet_name> \
     --network-id <network_ID> \
     --ipv4-public-pools-use-network-pools=false \
     --ipv4-public-pools-pools='[
     {
       "cidrs": [
         {"cidr": "/32"},
         {"cidr": "/32"},
         {"cidr": "/32"}
       ]
     }]'
   
   Specify the following parameters:
   • name: Name of the subnet with a dedicated IP addresses set.
   • network-id: Network ID.
   • ipv4-public-pools-pools.cidrs: One or more IPv4 CIDR blocks. The number of these blocks define how many public IP addresses the subnet has. The nodes in the node group receive these addresses randomly. In the example, three CIDR blocks are defined, each with one public IP address.
   In the output, copy the metadata.id value — this is the subnet ID.
2. Create a node group with the --template-network-interfaces parameter. Specify the new subnet ID in it:
   nebius mk8s node-group create \
     ... \
     --template-network-interfaces "[{\"public_ip_address\": {}, \"subnet_id\": \"<subnet_ID>\"}]"
   
   This configuration assigns random public IP addresses from the CIDR blocks defined in the subnet.