All Documentation
Cloud Container Engine
Cloud Container Engine
All results for "
" in this service
All results for "
" in this service
What's New
Function Overview
Product Bulletin
Latest Notices
Product Change Notices
Support for Docker
Support for containerd
Service Account Token Security Improvement
Upgrade of Helm v2 to Helm v3
Problems Caused by conn_reuse_mode Settings in the IPVS Forwarding Mode of CCE Clusters
Optimized Key Authentication of the everest Add-on
Release Notes for Cluster Versions
End of Maintenance for Clusters 1.21
End of Maintenance for Clusters 1.19
End of Maintenance for Clusters 1.17
End of Maintenance for Clusters 1.15
End of Maintenance for Clusters 1.13
Creation of CCE Clusters 1.13 and Earlier Not Supported
Upgrade for Kubernetes Clusters 1.9
Vulnerability Notices
Vulnerability Fixing Policies
Notice on the Impact of runC Vulnerability (CVE-2024-21626)
Notice on the Kubernetes Security Vulnerability (CVE-2022-3172)
Privilege Escalation Vulnerability in Linux Kernel openvswitch Module (CVE-2022-2639)
Notice on nginx-ingress Add-On Security Vulnerability (CVE-2021-25748)
Notice on nginx-ingress Security Vulnerabilities (CVE-2021-25745 and CVE-2021-25746)
Notice on the containerd Process Privilege Escalation Vulnerability (CVE-2022-24769)
Notice on CRI-O Container Runtime Engine Arbitrary Code Execution Vulnerability (CVE-2022-0811)
Notice on the Container Escape Vulnerability Caused by the Linux Kernel (CVE-2022-0492)
Notice on the Non-Security Handling Vulnerability of containerd Image Volumes (CVE-2022-23648)
Linux Kernel Integer Overflow Vulnerability (CVE-2022-0185)
Linux Polkit Privilege Escalation Vulnerability (CVE-2021-4034)
Notice on the Vulnerability of Kubernetes subPath Symlink Exchange (CVE-2021-25741)
Notice on runC Vulnerability that Allows a Container Filesystem Breakout via Directory Traversal (CVE-2021-30465)
Notice on the Docker Resource Management Vulnerability (CVE-2021-21285)
Notice on the NVIDIA GPU Driver Vulnerability (CVE-2021-1056)
Notice on the Sudo Buffer Vulnerability (CVE-2021-3156)
Notice on the Kubernetes Security Vulnerability (CVE-2020-8554)
Notice on the Apache containerd Security Vulnerability (CVE-2020-15257)
Notice on the Docker Engine Input Verification Vulnerability (CVE-2020-13401)
Notice on the Kubernetes kube-apiserver Input Verification Vulnerability (CVE-2020-8559)
Notice on the Kubernetes kubelet Resource Management Vulnerability (CVE-2020-8557)
Notice on the Kubernetes kubelet and kube-proxy Authorization Vulnerability (CVE-2020-8558)
Notice on Fixing Kubernetes HTTP/2 Vulnerability
Notice on Fixing Linux Kernel SACK Vulnerabilities
Notice on Fixing the Docker Command Injection Vulnerability (CVE-2019-5736)
Notice on Fixing the Kubernetes Permission and Access Control Vulnerability (CVE-2018-1002105)
Notice on Fixing the Kubernetes Dashboard Security Vulnerability (CVE-2018-18264)
Product Release Records
Cluster Versions
Kubernetes Version Policy
Kubernetes Version Release Notes
Kubernetes 1.28 Release Notes
Kubernetes 1.27 Release Notes
Kubernetes 1.25 Release Notes
Kubernetes 1.23 Release Notes
Kubernetes 1.21 Release Notes
Kubernetes 1.19 (EOM) Release Notes
Kubernetes 1.17 (EOM) Release Notes
Kubernetes 1.15 (EOM) Release Notes
Kubernetes 1.13 (EOM) Release Notes
Kubernetes 1.11 (EOM) Release Notes
Kubernetes 1.9 (EOM) and Earlier Versions Release Notes
Patch Versions
OS Images
OS Version Support Mechanism
OS Image Version Release Notes
Add-on Versions
CoreDNS Release History
CCE Container Storage (Everest) Release History
CCE Node Problem Detector Release History
Kubernetes Dashboard Release History
CCE Cluster Autoscaler Release History
NGINX Ingress Controller Release History
Kubernetes Metrics Server Release History
CCE Advanced HPA Release History
CCE Cloud Bursting Engine for CCI Release History
CCE AI Suite (NVIDIA GPU) Release History
CCE AI Suite (Ascend NPU) Release History
Volcano Scheduler Release History
CCE Secrets Manager for DEW Release History
CCE Network Metrics Exporter Release History
NodeLocal DNSCache Release History
Cloud Native Cluster Monitoring Release History
Cloud Native Logging Release History
CCE Cluster Backup & Recovery (End of Maintenance) Release History
Kubernetes Web Terminal (End of Maintenance) Release History
Prometheus (End of Maintenance) Release History
Service Overview
CCE Infographic
What Is CCE?
Product Advantages
Application Scenarios
Containerized Application Management
Auto Scaling in Seconds
Microservice Management
DevOps and CI/CD
Hybrid Cloud
High-Performance Scheduling
Security
Shared Responsibilities
Identity Authentication and Access Control
Data Protection
Audit and Logging
Security Risk Monitoring
Certificates
Notes and Constraints
Billing
Permissions
Related Services
Regions and AZs
Billing
Billing Overview
Billed Items
Billing Modes
Overview
Yearly/Monthly Billing
Pay-per-Use Billing
Billing Examples
Modifying Resource Specifications
Billing Mode Changes
Overview
Pay-per-Use to Yearly/Monthly
Yearly/Monthly to Pay-per-Use
Renewing Subscriptions
Overview
Manually Renewing a CCE Resource
Automatically Renewing a CCE Resource
Bills
Arrears
Billing Termination
Billing FAQ
Kubernetes Basics
Overview
Container and Kubernetes
Container
Kubernetes
Using kubectl to Perform Operations on a Cluster
Pod, Label, and Namespace
Pod: the Smallest Scheduling Unit in Kubernetes
Liveness Probe
Label for Managing Pods
Namespace for Grouping Resources
Pod Orchestration and Scheduling
Deployment
StatefulSet
Job and Cron Job
DaemonSet
Affinity and Anti-Affinity Scheduling
Configuration Management
ConfigMap
Secret
Kubernetes Networking
Container Networking
Service
Ingress
Readiness Probe
NetworkPolicy
Persistent Storage
Volume
PersistentVolume, PersistentVolumeClaim, and StorageClass
Authentication and Authorization
ServiceAccount
RBAC
Auto Scaling
Getting Started
Introduction
Preparations
Creating a Kubernetes Cluster
Creating a Deployment (Nginx)
Deploying WordPress and MySQL That Depend on Each Other
Overview
Creating a MySQL Workload
Creating a WordPress Workload
Deploying WordPress Using Helm
User Guide
High-Risk Operations and Solutions
Clusters
Cluster Overview
Basic Cluster Information
Kubernetes Release Notes
Kubernetes 1.28 Release Notes
Kubernetes 1.27 Release Notes
Kubernetes 1.25 Release Notes
Kubernetes 1.23 Release Notes
Kubernetes 1.21 Release Notes
Kubernetes 1.19 (EOM) Release Notes
Kubernetes 1.17 (EOM) Release Notes
Kubernetes 1.15 (EOM) Release Notes
Kubernetes 1.13 (EOM) Release Notes
Kubernetes 1.11 (EOM) Release Notes
Release Notes for Kubernetes 1.9 (EOM) and Earlier Versions
Release Notes for CCE Cluster Versions
Buying a Cluster
CCE Turbo Clusters and CCE Standard Clusters
Buying a CCE Cluster
Comparing iptables and IPVS
Connecting to a Cluster
Connecting to a Cluster Using kubectl
Connecting to a Cluster Using CloudShell
Connecting to a Cluster Using an X.509 Certificate
Accessing a Cluster Using a Custom Domain Name
Upgrading a Cluster
Upgrade Overview
Before You Start
Performing an In-place Upgrade
Performing Post-Upgrade Verification
Cluster Status Check
Node Status Check
Node Skipping Check
Service Check
New Node Check
New Pod Check
Migrating Services Across Clusters of Different Versions
Troubleshooting for Pre-upgrade Check Exceptions
Pre-upgrade Check
Node Restrictions
Upgrade Management
Add-ons
Helm Charts
SSH Connectivity of Master Nodes
Node Pools
Security Groups
To-Be-Migrated Nodes
Discarded Kubernetes Resources
Compatibility Risks
CCE Agent Versions
Node CPU Usage
CRDs
Node Disks
Node DNS
Node Key Directory File Permissions
Kubelet
Node Memory
Node Clock Synchronization Server
Node OS
Node CPUs
Node Python Commands
ASM Version
Node Readiness
Node journald
containerd.sock
Internal Errors
Node Mount Points
Kubernetes Node Taints
Everest Restrictions
cce-hpa-controller Restrictions
Enhanced CPU Policies
Health of Worker Node Components
Health of Master Node Components
Memory Resource Limit of Kubernetes Components
Discarded Kubernetes APIs
Node NetworkManager
Node ID File
Node Configuration Consistency
Node Configuration File
CoreDNS Configuration Consistency
sudo Commands of a Node
Key Commands of Nodes
Mounting of a Sock File on a Node
HTTPS Load Balancer Certificate Consistency
Node Mounting
Login Permissions of User paas on a Node
Private IPv4 Addresses of Load Balancers
Historical Upgrade Records
CIDR Block of the Cluster Management Plane
GPU Add-on
Nodes' System Parameter Settings
Residual Package Versions
Node Commands
Node Swap
nginx-ingress Upgrade
Managing a Cluster
Cluster Configuration Management
Cluster Overload Control
Changing Cluster Scale
Changing the Default Security Group of a Node
Deleting a Cluster
Hibernating and Waking Up a (Pay-per-Use) Cluster
Renewing a Yearly/Monthly-Billed Cluster
Changing the Billing Mode from Pay-per-Use to Yearly/Monthly
Nodes
Node Overview
Container Engine
Node OS
Creating a Node
Adding Nodes for Management
Logging In to a Node
Management Nodes
Managing Node Labels
Managing Node Taints
Resetting a Node
Removing a Node
Synchronizing Data with Cloud Servers
Draining a Node
Deleting a Node
Changing the Billing Mode of a Node to Yearly/Monthly
Stopping a Node
Performing Rolling Upgrade for Nodes
Node O&M
Node Resource Reservation Policy
Data Disk Space Allocation
Maximum Number of Pods That Can Be Created on a Node
Migrating Nodes from Docker to containerd
Optimizing Node System Parameters
List of Node System Parameters That Can Be Optimized
Changing the RuntimeMaxUse of the Memory Used by the Log Cache on a Node
Changing the Maximum Number of File Handles
Modifying Node Kernel Parameters
Changing Process ID Limits (kernel.pid_max)
Node Fault Detection Policy
Node Pools
Node Pool Overview
Creating a Node Pool
Managing a Node Pool
Updating a Node Pool
Updating an AS Configuration
Configuring a Node Pool
Copying a Node Pool
Synchronizing Node Pools
Upgrading an OS
Migrating a Node
Deleting a Node Pool
Workloads
Overview
Creating a Workload
Creating a Deployment
Creating a StatefulSet
Creating a DaemonSet
Creating a Job
Creating a Cron Job
Configuring a Container
Configuring Time Zone Synchronization
Configuring an Image Pull Policy
Using Third-Party Images
Configuring Container Specifications
Configuring Container Lifecycle Parameters
Configuring Container Health Check
Configuring Environment Variables
Configuring APM Settings for Performance Bottleneck Analysis
Workload Upgrade Policies
Scheduling Policies (Affinity/Anti-affinity)
Taints and Tolerations
Labels and Annotations
Accessing a Container
Managing Workloads and Jobs
Kata Runtime and Common Runtime
Scheduling
Overview
CPU Scheduling
CPU Policy
Enhanced CPU Policy
GPU Scheduling
Default GPU Scheduling in Kubernetes
GPU Virtualization
Overview
Preparing xGPU Resources
Using GPU Virtualization
Supporting Kubernetes' Default GPU Scheduling
Monitoring GPU Metrics
GPU Fault Handling
NPU Scheduling
Volcano Scheduling
Overview
Scheduling Workloads
Resource Usage-based Scheduling
Bin Packing
Descheduling
Node Pool Affinity
Load-aware Scheduling
Configuration Cases for Resource Usage-based Scheduling
Priority-based Scheduling
Priority-based Scheduling and Preemption
AI Performance-based Scheduling
DRF
Gang
NUMA Affinity Scheduling
Cloud Native Hybrid Deployment
Dynamic Resource Oversubscription
CPU Burst
Egress Network Bandwidth Guarantee
Network
Overview
Container Network Models
Overview
Container Tunnel Network
VPC Network
Cloud Native 2.0 Network
Service
Overview
ClusterIP
NodePort
LoadBalancer
Creating a LoadBalancer Service
Using Annotations to Configure Load Balancing
Service Using HTTP or HTTPS
Configuring Health Check for Multiple Ports
Setting the Pod Ready Status Through the ELB Health Check
Configuring Timeout for a LoadBalancer Service
Enabling Passthrough Networking for LoadBalancer Services
Enabling ICMP Security Group Rules
DNAT
Headless Service
Ingresses
Overview
ELB Ingresses
Creating an ELB Ingress on the Console
Using kubectl to Create an ELB Ingress
Configuring ELB Ingresses Using Annotations
Configuring HTTPS Certificates for ELB Ingresses
Configuring the Server Name Indication (SNI) for ELB Ingresses
ELB Ingresses Routing to Multiple Services
Interconnecting ELB Ingresses with HTTPS Backend Services
Configuring Timeout for an ELB Ingress
Nginx Ingresses
Creating Nginx Ingresses on the Console
Using kubectl to Create an Nginx Ingress
Configuring Nginx Ingresses Using Annotations
Configuring HTTPS Certificates for Nginx Ingresses
Configuring URL Rewriting Rules for Nginx Ingresses
Interconnecting Nginx Ingresses with HTTPS Backend Services
Nginx Ingresses Using Consistent Hashing for Load Balancing
DNS
Overview
DNS Configuration
Using CoreDNS for Custom Domain Name Resolution
Using NodeLocal DNSCache to Improve DNS Performance
Container Network Settings
Host Network
Configuring QoS for a Pod
Container Tunnel Network Settings
Network Policies
Cloud Native Network 2.0 Settings
Security Group Policies
Container Network Configurations (NetworkAttachmentDefinitions)
Configuring a Static IP Address for a Pod
Configuring an EIP for a Pod
Configuring a Static EIP for a Pod
Cluster Network Settings
Adding a Secondary VPC CIDR Block for a Cluster
Switching a Node Subnet
Adding a Container CIDR Block for a Cluster
Configuring Intra-VPC Access
Accessing Public Networks from a Container
Storage
Overview
Storage Basics
Elastic Volume Service
Overview
Using an Existing EVS Disk Through a Static PV
Using an EVS Disk Through a Dynamic PV
Dynamically Mounting an EVS Disk to a StatefulSet
Snapshots and Backups
Scalable File Service
Overview
Using an Existing SFS File System Through a Static PV
Using an SFS File System Through a Dynamic PV
Configuring SFS Volume Mount Options
SFS Turbo
Overview
Using an Existing SFS Turbo File System Through a Static PV
Configuring SFS Turbo Mount Options
Using StorageClass to Dynamically Create a Subdirectory in an SFS Turbo File System
Object Storage Service
Overview
Using an Existing OBS Bucket Through a Static PV
Using an OBS Bucket Through a Dynamic PV
Configuring OBS Mount Options
Using a Custom Access Key (AK/SK) to Mount an OBS Volume
Using OBS Buckets Across Regions
Local Persistent Volumes
Overview
Importing a PV to a Storage Pool
Using a Local PV Through a Dynamic PV
Dynamically Mounting a Local PV to a StatefulSet
Ephemeral Volumes
Overview
Importing an EV to a Storage Pool
Using a Local EV
Using a Temporary Path
hostPath
StorageClass
Observability
Overview
Monitoring Center
Overview
Enabling Cluster Monitoring
Container Insights
Clusters
Nodes
Workloads
Pod
Events
Health Diagnosis
Dashboard
Using Dashboard
Logging
Overview
Collecting Container Logs
Collecting Container Logs Using Cloud Native Logging
Collecting Container Logs Using ICAgent (Not Recommended)
Collecting Control Plane Component Logs
Collecting Kubernetes Audit Logs
Collecting Kubernetes Events
Alarm Assistant
Overview
Configuring Alarms in Alarm Assistant
Configuring Custom Alarms on CCE
Configuring Custom Alarms on AOM
Best Practices
Monitoring Custom Metrics Using the Cloud Native Monitoring Add-on
Monitoring Custom Metrics on AOM
Monitoring Metrics of Master Node Components Using On-Premises Prometheus
Monitoring Metrics of NGINX Ingress Controller
Monitoring Container Network Metrics of CCE Turbo Clusters
Cloud Trace Service
CCE Operations Supported by Cloud Trace Service
Querying Real-Time Traces
Namespaces
Creating a Namespace
Managing Namespaces
Configuring Resource Quotas
ConfigMaps and Secrets
Creating a ConfigMap
Using a ConfigMap
Creating a Secret
Using a Secret
Cluster Secrets
Auto Scaling
Overview
Scaling a Workload
Workload Scaling Rules
HPA Policies
CronHPA Policies
CustomedHPA Policies
Managing Workload Scaling Policies
Scaling a Node
Node Scaling Rules
Creating a Node Scaling Policy
Managing Node Scaling Policies
Using HPA and CA for Auto Scaling of Workloads and Nodes
Elastic Scaling of CCE Pods to CCI
Add-ons
Overview
CoreDNS
CCE Container Storage (Everest)
CCE Node Problem Detector
Kubernetes Dashboard
CCE Cluster Autoscaler
Nginx Ingress Controller
Kubernetes Metrics Server
CCE Advanced HPA
CCE Cloud Bursting Engine for CCI
CCE AI Suite (NVIDIA GPU)
CCE AI Suite (Ascend NPU)
Volcano Scheduler
CCE Secrets Manager for DEW
CCE Network Metrics Exporter
NodeLocal DNSCache
Cloud Native Cluster Monitoring
Cloud Native Logging
e-backup (EOM)
web-terminal (EOM)
Prometheus (EOM)
FlexVolume (Discarded)
Helm Chart
Overview
Deploying an Application from a Chart
Differences Between Helm v2 and Helm v3 and Adaptation Solutions
Deploying an Application Through the Helm v2 Client
Deploying an Application Through the Helm v3 Client
Converting a Release from Helm v2 to v3
Permissions
Permissions Overview
Granting Cluster Permissions to an IAM User
Namespace Permissions (Kubernetes RBAC-based)
Example: Designing and Configuring Permissions for Users in a Department
Permission Dependency of the CCE Console
Pod Security
Configuring a Pod Security Policy
Configuring Pod Security Admission
Service Account Token Security Improvement
System Entrustment Description
Storage Management: FlexVolume (Deprecated)
FlexVolume Overview
How Do I Change the Storage Class Used by a Cluster of v1.15 from FlexVolume to CSI Everest?
Using EVS Disks as Storage Volumes
Overview
(kubectl) Automatically Creating an EVS Disk
(kubectl) Creating a PV from an Existing EVS Disk
(kubectl) Creating a Pod Mounted with an EVS Volume
Using SFS Turbo File Systems as Storage Volumes
Overview
(kubectl) Creating a PV from an Existing SFS Turbo File System
(kubectl) Creating a Deployment Mounted with an SFS Turbo Volume
(kubectl) Creating a StatefulSet Mounted with an SFS Turbo Volume
Using OBS Buckets as Storage Volumes
Overview
(kubectl) Automatically Creating an OBS Volume
(kubectl) Creating a PV from an Existing OBS Bucket
(kubectl) Creating a Deployment Mounted with an OBS Volume
(kubectl) Creating a StatefulSet Mounted with an OBS Volume
Using SFS File Systems as Storage Volumes
Overview
(kubectl) Automatically Creating an SFS Volume
(kubectl) Creating a PV from an Existing SFS File System
(kubectl) Creating a Deployment Mounted with an SFS Volume
(kubectl) Creating a StatefulSet Mounted with an SFS Volume
Best Practices
Checklist for Deploying Containerized Applications in the Cloud
Containerization
Containerizing an Enterprise Application (ERP)
Solution Overview
Resource and Cost Planning
Procedure
Containerizing an Entire Application
Containerization Process
Analyzing the Application
Preparing the Application Runtime
Compiling a Startup Script
Compiling the Dockerfile
Building and Uploading an Image
Creating a Container Workload
Migration
Migrating Container Images
Overview
Migrating Images to SWR Using Docker Commands
Migrating Images to SWR Using image-syncer
Synchronizing Images Across Clouds from Harbor to SWR
Migrating On-premises Kubernetes Clusters to CCE
Solution Overview
Planning Resources for the Target Cluster
Migrating Resources Outside a Cluster
Installing the Migration Tool
Migrating Resources in a Cluster (Velero)
Updating Resources Accordingly
Performing Additional Tasks
Troubleshooting
Migrating Clusters from Other Clouds to CCE
Solution Overview
Resource and Cost Planning
Procedure
Migrating Data
Installing the Migration Tool
Migrating Resources in a Cluster (Velero)
Preparing Object Storage and Velero
Backing Up Kubernetes Objects of the ACK Cluster
Restoring Kubernetes Objects in the Created CCE Cluster
Updating Resources Accordingly
Debugging and Starting the Application
Others
DevOps
Installing, Deploying, and Interconnecting Jenkins with SWR and CCE Clusters
Solution Overview
Resource and Cost Planning
Procedure
Installing and Deploying Jenkins Master
Configuring Jenkins Agent
Using Jenkins to Build a Pipeline
Interconnecting Jenkins with RBAC of Kubernetes Clusters (Example)
Interconnecting GitLab with SWR and CCE for CI/CD
Disaster Recovery
Recommended Configurations for Cluster HA
Implementing High Availability for Applications in CCE
Security
Suggestions on Selecting CCE Clusters
Cluster Security
Node Security
Container Security
Secret Security
Workload Identities
Auto Scaling
Using HPA and CA for Auto Scaling of Workloads and Nodes
Elastic Scaling of CCE Pods to CCI
Auto Scaling Based on ELB Monitoring Metrics
Monitoring
Using Prometheus for Multi-cluster Monitoring
Using dcgm-exporter to Monitor GPU Metrics
Cluster
Configuring a CCE Cluster
Creating an IPv4/IPv6 Dual-Stack Cluster in CCE
Creating a Custom CCE Node Image
Executing the Post-installation Command During Node Creation
Creating a Node Injection Script
Connecting to Multiple Clusters Using kubectl
Selecting a Data Disk for the Node
Analyzing Costs by Cluster
Networking
Planning CIDR Blocks for a Cluster
Selecting a Network Model
Allowing Containers and IDCs to Communicate with Each Other Through VPC and Direct Connect
Enabling a CCE Cluster to Resolve Domain Names on Both On-Premises IDCs and HUAWEI CLOUD
Solution Overview
Solution 1: Using a DNS Endpoint for Cascading Resolution
Solution 2: Changing the CoreDNS Configurations
Implementing Sticky Session Through Load Balancing
Obtaining the Client Source IP Address for a Container
Increasing the Listening Queue Length by Configuring Container Kernel Parameters
Using Multiple ENIs on a Node in a CCE Cluster
Enabling Passthrough Networking for LoadBalancer Services
Deploying Nginx Ingress Controllers Using a Chart
Deploying Multiple Nginx Ingress Controllers
Advanced Configuration of Nginx Ingress Controller
CoreDNS Configuration Optimization
Overview
Client
Optimizing Domain Name Resolution Requests
Selecting a Proper Image
Avoiding Occasional DNS Resolution Timeout Caused by IPVS Defects
Using NodeLocal DNSCache
Upgrading the CoreDNS in the Cluster Timely
Adjusting the DNS Configuration of the VPC and VM
Server
Monitoring the coredns Add-on
Adjusting the coredns Deployment Status
Configuring coredns
Pre-Binding Container ENI for CCE Turbo Clusters
Connecting a Cluster to the Peer VPC Through an Enterprise Router
Storage
Expanding the Storage Space
Mounting an Object Storage Bucket of a Third-Party Tenant
Dynamically Creating and Mounting Subdirectories of an SFS Turbo File System
How Do I Change the Storage Class Used by a Cluster of v1.15 from FlexVolume to CSI Everest?
Using OBS Parallel File Systems
Custom Storage Classes
Enabling Automatic Topology for EVS Disks When Nodes Are Deployed in Different AZs (csi-disk-topology)
Container
Properly Allocating Container Computing Resources
Upgrading Pods Without Interrupting Services
Modifying Kernel Parameters Using a Privileged Container
Using Init Containers to Initialize an Application
Setting Time Zone Synchronization
Setting the Container Network Bandwidth Limit
Using hostAliases to Configure /etc/hosts in a Pod
Configuring Domain Name Resolution for CCE Containers
Using Dual-Architecture Images (x86 and Arm) in CCE
Configuring Core Dumps
Configuring Parameters to Delay the Pod Startup in a CCE Turbo Cluster
Permission
Configuring kubeconfig for Fine-Grained Management on Cluster Resources
Performing Cluster Namespace RBAC
Release
Overview
Using Services to Implement Simple Grayscale Release and Blue-Green Deployment
Using Nginx Ingress to Implement Grayscale Release and Blue-Green Deployment
Batch Computing
Running Kubeflow in CCE
Deploying Kubeflow
Training a TensorFlow Model
Using Kubeflow and Volcano to Train an AI Model
Running Caffe in CCE
Prerequisites
Preparing Resources
Caffe Classification Example
Running TensorFlow in CCE
Running Flink in CCE
Deploying ClickHouse on CCE
Creating a CCE Cluster
Configuring kubectl
Deploying ClickHouse Operator
Example
Running Spark on CCE
Installing Spark
Using Spark on CCE
API Reference
Before You Start
Overview
API Calling
Endpoints
Constraints
Concepts
API Overview
Calling APIs
Making an API Request
Authentication
Response
APIs
API URL
Cluster Management
Creating a Cluster
Reading a Specified Cluster
Listing Clusters in a Specified Project
Updating a Specified Cluster
Deleting a Cluster
Hibernating a Cluster
Waking Up a Cluster
Obtaining a Cluster Certificate
Modifying Cluster Specifications
Querying a Job
Binding/Unbinding Public API Server Address
Obtaining Cluster Access Address
Obtaining a Cluster's Logging Configurations
Configuring Cluster Logs
Obtaining the Partition List
Creating a Partition
Obtaining Partition Details
Updating a Partition
Node Management
Creating a Node
Reading a Specified Node
Listing All Nodes in a Cluster
Updating a Specified Node
Deleting a Node
Accepting a Node
Resetting a Node
Removing a Node
Migrating a Node
Node Pool Management
Creating a Node Pool
Reading a Specified Node Pool
Listing All Node Pools in a Specified Cluster
Updating a Specified Node Pool
Deleting a Node Pool
Storage Management
Creating a PVC (to be discarded)
Deleting a PVC (to be discarded)
Add-on Management
Installing an Add-on Instance
Listing Add-on Templates
Updating an Add-on Instance
Rolling Back an Add-on Instance
Deleting an Add-on Instance
Querying an Add-on Instance
Listing Add-on Instances
Cluster Upgrade
Upgrading a Cluster
Obtaining Cluster Upgrade Task Details
Retrying a Cluster Upgrade Task
Suspending a Cluster Upgrade Task (Deprecated)
Continuing to Execute a Cluster Upgrade Task (Deprecated)
Obtaining a List of Cluster Upgrade Task Details
Pre-upgrade Check
Obtaining Details About a Pre-upgrade Check Task of a Cluster
Obtaining a List of Pre-upgrade Check Tasks of a Cluster
Post-upgrade Check
Cluster Backup
Obtaining a List of Cluster Backup Task Details
Obtaining the Cluster Upgrade Information
Obtaining a Cluster Upgrade Path
Obtaining the Configuration of Cluster Upgrade Feature Gates
Enabling the Cluster Upgrade Process Booting Task
Obtaining a List of Upgrade Workflows
Obtaining Details About a Specified Cluster Upgrade Task
Updating the Status of a Specified Cluster Upgrade Booting Task
Quota Management
Querying Resource Quotas
API Versions
Obtaining API Versions
Tag Management
Adding Resource Tags to a Specified Cluster in Batches
Deleting Resource Tags of a Specified Cluster in Batches
Configuration Management
Obtaining the Parameters That Can Be Configured for a Node Pool
Obtaining the List of Parameters That Can Be Configured for a Cluster
Obtaining the Parameters That Can Be Configured for a Node Pool
Changing the Values of Configuration Parameters of a Node Pool
Chart Management
Uploading a Chart
Obtaining a Chart List
Obtaining a Release List
Updating a Chart
Creating a Release
Deleting a Chart
Updating a Release
Obtaining a Chart
Deleting a Release
Downloading a Chart
Obtaining a Release
Obtaining Chart Values
Obtaining Historical Records of a Release
Obtaining the Quota of a User Chart
Add-on Instance Parameter Description
virtual-kubelet
Kubernetes APIs
Out-of-Date APIs
Obtaining Cluster Certificates
Creating a PersistentVolume
Deleting a PersistentVolume
Permissions and Supported Actions
Appendix
Status Code
Error Codes
Obtaining a Project ID
Obtaining an Account ID
Specifying Add-ons to Be Installed During Cluster Creation
How to Obtain Parameters in the API URI
Creating a VPC and Subnet
Creating a Key Pair
Node Flavor Description
Adding a Salt in the password Field When Creating a Node
Maximum Number of Pods That Can Be Created on a Node
Node OS
Data Disk Space Allocation
Attaching Disks to a Node
SDK Reference
SDK Overview
FAQs
Common Questions
Billing
How Is CCE Billed/Charged?
How Do I Change the Billing Mode of a CCE Cluster from Pay-per-Use to Yearly/Monthly?
Can I Change the Billing Mode of CCE Nodes from Pay-per-Use to Yearly/Monthly?
Which Invoice Modes Are Supported by Huawei Cloud?
Will I Be Notified When My Balance Is Insufficient?
Will I Be Notified When My Account Balance Changes?
Can I Delete a Yearly/Monthly-Billed CCE Cluster Directly When It Expires?
How Do I Unsubscribe From CCE?
Cluster
Cluster Creation
Why Cannot I Create a CCE Cluster?
Is Management Scale of a Cluster Related to the Number of Master Nodes?
How Do I Update the Root Certificate When Creating a CCE Cluster?
Which Resource Quotas Should I Pay Attention To When Using CCE?
Cluster Running
How Do I Rectify the Fault When the Cluster Status Is Unavailable?
How Do I Reset or Reinstall a CCE Cluster?
How Do I Check Whether a Cluster Is in Multi-Master Mode?
Can I Directly Connect to the Master Node of a Cluster?
How Do I Retrieve Data After a Cluster Is Deleted?
Why Does CCE Display Node Disk Usage Inconsistently with Cloud Eye?
How Do I Change a Cluster Name?
Cluster Deletion
Failed to Delete a Cluster: Residual ENIs
How Do I Clear Residual Resources After a Non-Running Cluster Is Deleted?
Cluster Upgrade
What Do I Do If a Cluster Add-On Fails to be Upgraded During the CCE Cluster Upgrade?
Node
Node Creation
How Do I Troubleshoot Problems Occurred When Adding Nodes to a CCE Cluster?
How Do I Troubleshoot Problems Occurred When Accepting Nodes into a CCE Cluster?
What Should I Do If a Node Fails to Be Accepted Because It Fails to Be Installed?
Node Running
What Should I Do If a Cluster Is Available But Some Nodes Are Unavailable?
How Do I Troubleshoot the Failure to Remotely Log In to a Node in a CCE Cluster?
How Do I Log In to a Node Using a Password and Reset the Password?
How Do I Collect Logs of Nodes in a CCE Cluster?
What Can I Do If the Container Network Becomes Unavailable After yum update Is Used to Upgrade the OS?
What Should I Do If the vdb Disk of a Node Is Damaged and the Node Cannot Be Recovered After Reset?
Which Ports Are Used to Install kubelet on CCE Cluster Nodes?
How Do I Configure a Pod to Use the Acceleration Capability of a GPU Node?
What Should I Do If I/O Suspension Occasionally Occurs When SCSI EVS Disks Are Used?
What Should I Do If Excessive Docker Audit Logs Affect the Disk I/O?
How Do I Fix an Abnormal Container or Node Due to No Thin Pool Disk Space?
Which Ports Does a Node Listen On?
How Do I Rectify Failures When the NVIDIA Driver Is Used to Start Containers on GPU Nodes?
What Should I Do If a Node Does Not Synchronize with the NTP Clock Source?
What Should I Do If the Data Disk Usage Is High Because a Large Volume of Data Is Written Into the Log File?
Why Does My Node Memory Usage Obtained by Running the kubelet top node Command Exceeds 100%?
Specification Change
How Do I Change the Node Specifications in a CCE Cluster?
What Should I Do If I Fail to Restart or Create Workloads on a Node After Modifying the Node Specifications?
Can I Change the IP Address of a Node in a CCE Cluster?
OSs
When Applications Are Repeatedly Created and Deleted on a CentOS Node with an Earlier Kernel Version, cgroup Kmem Leakage Occasionally Occurs
What Should I Do If There Is a Service Access Failure After a Backend Service Upgrade or a 1-Second Latency When a Service Accesses the CCE Cluster?
Why Are Pods Evicted by kubelet Due to Abnormal cgroup Statistics?
When Container OOM Occurs on the CentOS Node with an Earlier Kernel Version, the Ext4 File System Is Occasionally Suspended
What Should I Do If a DNS Resolution Failure Occurs Due to a Defect in IPVS?
What Should I Do If the Number of ARP Entries Exceeds the Upper Limit?
Node Pool
What Should I Do If No Node Creation Record Is Displayed When the Node Pool Is Being Expanding?
What Should I Do If a Node Pool Scale-Out Fails?
What Should I Do If Some Kubernetes Events Fail to Display After Nodes Were Added to or Deleted from a Node Pool in Batches?
Workload
Workload Abnormalities
How Do I Use Events to Fix Abnormal Workloads?
What Should I Do If Pod Scheduling Fails?
What Should I Do If a Pod Fails to Pull the Image?
What Should I Do If Container Startup Fails?
What Should I Do If a Pod Fails to Be Evicted?
What Should I Do If a Storage Volume Cannot Be Mounted or the Mounting Times Out?
What Should I Do If a Workload Remains in the Creating State?
What Should I Do If Pods in the Terminating State Cannot Be Deleted?
What Should I Do If a Workload Is Stopped Caused by Pod Deletion?
What Should I Do If an Error Occurs When Deploying a Service on the GPU Node?
Why Does Pod Fail to Write Data?
Why Is Pod Creation or Deletion Suspended on a Node Where File Storage Is Mounted?
How to Locate Faults Using an Exit Code?
Container Configuration
When Is Pre-stop Processing Used?
How Do I Set an FQDN for Accessing a Specified Container in the Same Namespace?
What Should I Do If Health Check Probes Occasionally Fail?
How Do I Set the umask Value for a Container?
What Can I Do If an Error Is Reported When a Deployed Container Is Started After the JVM Startup Heap Memory Parameter Is Specified for ENTRYPOINT in Dockerfile?
What Is the Retry Mechanism When CCE Fails to Start a Pod?
Alarm Monitoring
How Long Are the Events of a Workload Stored?
Scheduling Policies
How Do I Evenly Distribute Multiple Pods to Each Node?
How Do I Prevent a Container on a Node from Being Evicted?
Why Are Pods Not Evenly Distributed to Nodes?
How Do I Evict All Pods on a Node?
How Do I Check Whether a Pod Is Bound with CPU Cores?
What Should I Do If Pods cannot Be Rescheduled After the Node Is Stopped?
How Do I Prevent a Non-GPU or NPU Workload from Being Scheduled to a GPU or NPU Node?
Others
What Should I Do If a Scheduled Task Cannot Be Restarted After Being Stopped for a Period of Time?
What Is a Headless Service When I Create a StatefulSet?
What Should I Do If Error Message "Auth is empty" Is Displayed When a Private Image Is Pulled?
Why Cannot a Pod Be Scheduled to a Node?
What Is the Image Pull Policy for Containers in a CCE Cluster?
Why Is the Mount Point of a Docker Container in the Kunpeng Cluster Uninstalled?
What Can I Do If a Layer Is Missing During Image Pull?
Why the File Permission and User in the Container Are Question Marks?
Networking
Network Planning
What Is the Relationship Between Clusters, VPCs, and Subnets?
How Do I View the VPC CIDR Block?
How Do I Set the VPC CIDR Block and Subnet CIDR Block for a CCE Cluster?
How Do I Set a Container CIDR Block for a CCE Cluster?
When Should I Use Cloud Native Network 2.0?
What Is an ENI?
Configuring Cluster Security Group Rules
How Do I Set an IPv6 Service CIDR Block?
Network Fault
How Do I Locate a Workload Networking Fault?
Why the ELB Address Cannot Be used to Access Workloads in a Cluster?
Why the Ingress Cannot Be Accessed Outside the Cluster?
Why Does the Browser Return Error Code 404 When I Access a Deployed Application?
What Should I Do If a Container Fails to Access the Internet?
What Can I Do If a VPC Subnet Cannot Be Deleted?
How Do I Restore a Faulty Container NIC?
What Should I Do If a Node Fails to Connect to the Internet (Public Network)?
How Do I Resolve a Conflict Between the VPC CIDR Block and the Container CIDR Block?
What Should I Do If the Java Error "Connection reset by peer" Is Reported During Layer-4 ELB Health Check
How Do I Locate the Service Event Indicating That No Node Is Available for Binding?
Why Does "Dead loop on virtual device gw_11cbf51a, fix it urgently" Intermittently Occur When I Log In to a VM using VNC?
Why Does a Panic Occasionally Occur When I Use Network Policies on a Cluster Node?
Why Are Lots of source ip_type Logs Generated on the VNC?
What Should I Do If Status Code 308 Is Displayed When the Nginx Ingress Controller Is Accessed Using the Internet Explorer?
What Should I Do If an Nginx Ingress Access in the Cluster Is Abnormal After the Add-on Is Upgraded?
Security Hardening
How Do I Prevent Cluster Nodes from Being Exposed to Public Networks?
Network Configuration
How Does CCE Communicate with Other HUAWEI CLOUD Services over an Intranet?
How Do I Set the Port When Configuring the Workload Access Mode on CCE?
How Can I Achieve Compatibility Between Ingress's property and Kubernetes client-go?
Others
How Do I Obtain a TLS Key Certificate?
Can Multiple NICs Be Bound to a Node in a CCE Cluster?
Why Is the Backend Server Group of an ELB Automatically Deleted After a Service Is Published to the ELB?
Why Cannot an Ingress Be Created After the Namespace Is Changed?
How Do I Obtain the Actual Source IP Address of a Client After a Service Is Added into Istio?
How Do I Change the Security Group of Nodes in a Cluster in Batches?
Storage
What Are the Differences Among CCE Storage Classes in Terms of Persistent Storage and Multi-node Mounting?
Can I Add a Node Without a Data Disk?
Can I Restore an EVS Disk Used as a Persistent Volume in a CCE Cluster After the Disk Is Deleted or Expires?
What Should I Do If the Host Cannot Be Found When Files Need to Be Uploaded to OBS During the Access to the CCE Service from a Public Network?
How Many Nodes (ECSs) Can an SFS File System Be Mounted to?
How Can I Achieve Compatibility Between ExtendPathMode and Kubernetes client-go?
What Should I Do If a Storage Volume Fails to Be Created?
Can CCE PVCs Detect Underlying Storage Faults?
An Error Is Reported When the Owner Group and Permissions of the Mount Point of the SFS 3.0 File System in the OS Are Modified
Why Cannot I Delete a PV or PVC Using the kubectl delete Command?
Namespace
What Should I Do If a Namespace Fails to Be Deleted Due to an APIService Object Access Failure?
How Do I Delete a Namespace in the Terminating State?
Chart and Add-on
What Should I Do If the nginx-ingress Add-on Fails to Be Installed on a Cluster and Remains in the Creating State?
What Should I Do If Residual Process Resources Exist Due to an Earlier npd Add-on Version?
What Should I Do If a Chart Release Cannot Be Deleted Because the Chart Format Is Incorrect?
Does CCE Support nginx-ingress?
Why Does Add-on Installation Fail and Prompt "The release name is already exist"?
What Should I Do If a Release Creation or Upgrade Fails and "rendered manifests contain a resource that already exists" Is Displayed?
What Should I Do If a kube-prometheus-stack Pod Fails to Be Scheduled and the Message "node(s) had volume node affinity conflict" Is Displayed?
What Should I Do If a Chart Fails to Be Uploaded?
How Do I Configure the Add-on Resource Quotas Based on Cluster Scale?
API & kubectl FAQs
How Can I Access a CCE Cluster?
Can the Resources Created Using APIs or kubectl Be Displayed on the CCE Console?
How Do I Download kubeconfig for Connecting to a Cluster Using kubectl?
How Do I Rectify the Error Reported When Running the kubectl top node Command?
Why Is "Error from server (Forbidden)" Displayed When I Use kubectl?
DNS FAQs
What Should I Do If Domain Name Resolution Fails?
Why Does a Container in a CCE Cluster Fail to Perform DNS Resolution?
Why Cannot the Domain Name of the Tenant Zone Be Resolved After the Subnet DNS Configuration Is Modified?
How Do I Optimize the Configuration If the External Domain Name Resolution Is Slow or Times Out?
How Do I Configure a DNS Policy for a Container?
Image Repository FAQs
How Do I Create a Docker Image and Solve the Problem of Slow Image Pull?
How Do I Upload My Images to CCE?
Permissions
Can I Configure Only Namespace Permissions Without Cluster Management Permissions?
Can I Use CCE APIs If the Cluster Management Permissions Are Not Configured?
Can I Use kubectl If the Cluster Management Permissions Are Not Configured?
Reference
How Do I Expand the Storage Capacity of a Container?
How Can Container IP Addresses Survive a Container Restart?
What Are the Differences Between CCE and CCI?
What Are the Differences Between CCE and ServiceStage?
Videos
More Documents
User Guide (ME-Abu Dhabi Region)
Service Overview
What Is Cloud Container Engine?
Product Advantages
Application Scenarios
Infrastructure and Containerized Application Management
Auto Scaling in Seconds
DevOps and CI/CD
Hybrid Cloud Architecture
Constraints
Permissions
Basic Concepts
Basic Concepts
Mappings Between CCE and Kubernetes Terms
Regions and AZs
Related Services
Getting Started
Introduction
Preparations
Creating a Kubernetes Cluster
Creating a Deployment (Nginx)
Deploying WordPress and MySQL That Depend on Each Other
Overview
Creating a MySQL Workload
Creating a WordPress Workload
High-Risk Operations and Solutions
Clusters
Cluster Overview
Basic Cluster Information
Kubernetes Release Notes
Kubernetes 1.27 Release Notes
Kubernetes 1.25 Release Notes
Kubernetes 1.23 Release Notes
Kubernetes 1.21 Release Notes
Kubernetes 1.19 Release Notes
Kubernetes 1.17 (EOM) Release Notes
Release Notes for CCE Cluster Versions
Buying a Cluster
CCE Turbo Clusters and CCE Standard Clusters
Buying a CCE Cluster
Comparing iptables and IPVS
Connecting to a Cluster
Connecting to a Cluster Using kubectl
Connecting to a Cluster Using an X.509 Certificate
Accessing a Cluster Using a Custom Domain Name
Upgrading a Cluster
Upgrade Overview
Before You Start
Performing an In-place Upgrade
Performing Post-Upgrade Verification
Pod Check
Node and Container Network Check
Node Label and Taint Check
Node Skipping Check
Service Check
New Node Check
New Pod Check
Migrating Services Across Clusters of Different Versions
Troubleshooting for Pre-upgrade Check Exceptions
Pre-upgrade Check
Node Restrictions
Upgrade Management
Add-ons
Helm Charts
SSH Connectivity of Master Nodes
Node Pools
Security Groups
Arm Node Restrictions
To-Be-Migrated Nodes
Discarded Kubernetes Resources
Compatibility Risks
Node CCE Agent Versions
Node CPU Usage
CRDs
Node Disks
Node DNS
Node Key Directory File Permissions
Kubelet
Node Memory
Node Clock Synchronization Server
Node OS
Node CPUs
Node Python Commands
ASM Version
Node Readiness
Node journald
containerd.sock
Internal Errors
Node Mount Points
Kubernetes Node Taints
Everest Restrictions
cce-hpa-controller Restrictions
Enhanced CPU Policies
Health of Worker Node Components
Health of Master Node Components
Memory Resource Limit of Kubernetes Components
Discarded Kubernetes APIs
IPv6 Capabilities of a CCE Turbo Cluster
Node NetworkManager
Node ID File
Node Configuration Consistency
Node Configuration File
CoreDNS Configuration Consistency
sudo Commands of a Node
Key Commands of Nodes
Mounting of a Sock File on a Node
HTTPS Load Balancer Certificate Consistency
Node Mounting
Login Permissions of User paas on a Node
Private IPv4 Addresses of Load Balancers
Historical Upgrade Records
CIDR Block of the Cluster Management Plane
GPU Add-on
Nodes' System Parameter Settings
Residual Package Versions
Node Commands
Node Swap
nginx-ingress Upgrade
Managing a Cluster
Cluster Configuration Management
Cluster Overload Control
Changing Cluster Scale
Changing the Default Security Group of a Node
Deleting a Cluster
Hibernating and Waking Up a Cluster
Nodes
Node Overview
Container Engine
Creating a Node
Adding Nodes for Management
Logging In to a Node
Management Nodes
Managing Node Labels
Managing Node Taints
Resetting a Node
Removing a Node
Synchronizing Data with Cloud Servers
Draining a Node
Deleting a Node
Stopping a Node
Performing Rolling Upgrade for Nodes
Node O&M
Node Resource Reservation Policy
Data Disk Space Allocation
Maximum Number of Pods That Can Be Created on a Node
Migrating Nodes from Docker to containerd
Node Fault Detection Policy
Node Pools
Node Pool Overview
Creating a Node Pool
Managing a Node Pool
Updating a Node Pool
Updating an AS Configuration
Configuring a Node Pool
Copying a Node Pool
Migrating a Node
Deleting a Node Pool
Workloads
Overview
Creating a Workload
Creating a Deployment
Creating a StatefulSet
Creating a DaemonSet
Creating a Job
Creating a Cron Job
Configuring a Container
Configuring Time Zone Synchronization
Configuring an Image Pull Policy
Using Third-Party Images
Configuring Container Specifications
Configuring Container Lifecycle Parameters
Configuring Container Health Check
Configuring Environment Variables
Configuring APM Settings for Performance Bottleneck Analysis
Workload Upgrade Policies
Scheduling Policies (Affinity/Anti-affinity)
Taints and Tolerations
Labels and Annotations
Accessing a Container
Managing Workloads and Jobs
Kata Runtime and Common Runtime
Scheduling
Overview
CPU Scheduling
CPU Policy
GPU Scheduling
Default GPU Scheduling in Kubernetes
NPU Scheduling
Volcano Scheduling
Overview
Scheduling Workloads
Resource Utilization-based Scheduling
Binpack
Descheduler
Node Pool Affinity
AI Performance-based Scheduling
DRF
Gang
NUMA Affinity Scheduling
Network
Overview
Container Network Models
Overview
Container Tunnel Network
VPC Network
Cloud Native 2.0 Network
Service
Overview
ClusterIP
NodePort
LoadBalancer
Creating a LoadBalancer Service
Using Annotations to Configure Load Balancing
Service Using HTTP or HTTPS
Configuring Health Check for Multiple Ports
Setting the Pod Ready Status Through the ELB Health Check
Configuring Timeout for a LoadBalancer Service
Enabling Passthrough Networking for LoadBalancer Services
Enabling ICMP Security Group Rules
DNAT
Headless Service
Ingresses
Overview
ELB Ingresses
Creating an ELB Ingress on the Console
Using kubectl to Create an ELB Ingress
Configuring ELB Ingresses Using Annotations
Configuring HTTPS Certificates for ELB Ingresses
Configuring the Server Name Indication (SNI) for ELB Ingresses
ELB Ingresses Routing to Multiple Services
ELB Ingresses Using HTTP/2
Interconnecting ELB Ingresses with HTTPS Backend Services
Configuring Timeout for an ELB Ingress
Nginx Ingresses
Creating Nginx Ingresses on the Console
Using kubectl to Create an Nginx Ingress
Configuring Nginx Ingresses Using Annotations
Configuring HTTPS Certificates for Nginx Ingresses
Configuring URL Rewriting Rules for Nginx Ingresses
Interconnecting Nginx Ingresses with HTTPS Backend Services
Nginx Ingresses Using Consistent Hashing for Load Balancing
DNS
Overview
DNS Configuration
Using CoreDNS for Custom Domain Name Resolution
Using NodeLocal DNSCache to Improve DNS Performance
Container Network Settings
Host Network
Configuring QoS for a Pod
Container Tunnel Network Settings
Network Policies
Cloud Native Network 2.0 Settings
Security Group Policies
NetworkAttachmentDefinition
Cluster Network Settings
Switching a Node Subnet
Adding a Container CIDR Block for a Cluster
Configuring Intra-VPC Access
Accessing Public Networks from a Container
Storage
Overview
Storage Basics
Elastic Volume Service
Overview
Using an Existing EVS Disk Through a Static PV
Using an EVS Disk Through a Dynamic PV
Dynamically Mounting an EVS Disk to a StatefulSet
Snapshots and Backups
SFS Turbo
Overview
Using an Existing SFS Turbo File System Through a Static PV
Configuring SFS Turbo Mount Options
Dynamically Creating and Mounting Subdirectories of an SFS Turbo File System
Object Storage Service
Overview
Using an Existing OBS Bucket Through a Static PV
Using an OBS Bucket Through a Dynamic PV
Configuring OBS Mount Options
Using a Custom Access Key (AK/SK) to Mount an OBS Volume
Local Persistent Volumes
Overview
Importing a PV to a Storage Pool
Using a Local PV Through a Dynamic PV
Dynamically Mounting a Local PV to a StatefulSet
Ephemeral Volumes
Overview
Importing an EV to a Storage Pool
Using a Local EV
Using a Temporary Path
hostPath
StorageClass
Observability
Logging
Overview
Collecting Data Plane Logs
Connecting CCE to AOM
Best Practices
Monitoring Custom Metrics Using Prometheus
Monitoring Custom Metrics on AOM
Cloud Trace Service
CCE Operations Supported by Cloud Trace Service
Querying Real-Time Traces
Namespaces
Creating a Namespace
Managing Namespaces
Configuring Resource Quotas
ConfigMaps and Secrets
Creating a ConfigMap
Using a ConfigMap
Creating a Secret
Using a Secret
Cluster Secrets
Auto Scaling
Overview
Scaling a Workload
Workload Scaling Rules
HPA Policies
CronHPA Policies
CustomedHPA Policies
Managing Workload Scaling Policies
Scaling a Node
Node Scaling Rules
Creating a Node Scaling Policy
Managing Node Scaling Policies
Using HPA and CA for Auto Scaling of Workloads and Nodes
Add-ons
Overview
CoreDNS
CCE Container Storage (Everest)
CCE Node Problem Detector
Kubernetes Dashboard
CCE Cluster Autoscaler
Nginx Ingress Controller
Kubernetes Metrics Server
CCE Advanced HPA
CCE AI Suite (NVIDIA GPU)
CCE AI Suite (Ascend NPU)
Volcano Scheduler
CCE Secrets Manager for DEW
CCE Network Metrics Exporter
NodeLocal DNSCache
Prometheus
Helm Chart
Overview
Deploying an Application from a Chart
Differences Between Helm v2 and Helm v3 and Adaptation Solutions
Deploying an Application Through the Helm v2 Client
Deploying an Application Through the Helm v3 Client
Converting a Release from Helm v2 to v3
Permissions
Permissions Overview
Granting Cluster Permissions to an IAM User
Namespace Permissions (Kubernetes RBAC-based)
Example: Designing and Configuring Permissions for Users in a Department
Permission Dependency of the CCE Console
Pod Security
Configuring a Pod Security Policy
Configuring Pod Security Admission
Service Account Token Security Improvement
Best Practices
Checklist for Deploying Containerized Applications in the Cloud
Containerization
Containerizing an Enterprise Application (ERP)
Solution Overview
Procedure
Containerizing an Entire Application
Containerization Process
Analyzing the Application
Preparing the Application Runtime
Compiling a Startup Script
Compiling the Dockerfile
Building and Uploading an Image
Creating a Container Workload
Disaster Recovery
Implementing High Availability for Applications in CCE
Security
Cluster Security
Node Security
Container Security
Secret Security
Auto Scaling
Using HPA and CA for Auto Scaling of Workloads and Nodes
Monitoring
Using Prometheus for Multi-cluster Monitoring
Cluster
Creating a Custom CCE Node Image
Executing the Post-installation Command During Node Creation
Connecting to Multiple Clusters Using kubectl
Selecting a Data Disk for the Node
Networking
Planning CIDR Blocks for a Cluster
Selecting a Network Model
Implementing Sticky Session Through Load Balancing
Obtaining the Client Source IP Address for a Container
Deploying Nginx Ingress Controllers Using a Chart
Deploying Multiple Nginx Ingress Controllers
Advanced Configuration of Nginx Ingress Controller
Pre-Binding Container ENI for CCE Turbo Clusters
Storage
Expanding the Storage Space
Mounting an Object Storage Bucket of a Third-Party Tenant
Dynamically Creating and Mounting Subdirectories of an SFS Turbo File System
Custom Storage Classes
Enabling Automatic Topology for EVS Disks When Nodes Are Deployed in Different AZs (csi-disk-topology)
Container
Properly Allocating Container Computing Resources
Modifying Kernel Parameters Using a Privileged Container
Using Init Containers to Initialize an Application
Using hostAliases to Configure /etc/hosts in a Pod
Configuring Core Dumps
Permission
Configuring kubeconfig for Fine-Grained Management on Cluster Resources
Release
Overview
Using Services to Implement Simple Grayscale Release and Blue-Green Deployment
Using Nginx Ingress to Implement Grayscale Release and Blue-Green Deployment
FAQs
Common Questions
Cluster
Cluster Creation
Why Cannot I Create a CCE Cluster?
Is Management Scale of a Cluster Related to the Number of Master Nodes?
Which Resource Quotas Should I Pay Attention To When Using CCE?
Cluster Running
How Do I Rectify the Fault When the Cluster Status Is Unavailable?
How Do I Retrieve Data After a Cluster Is Deleted?
Cluster Deletion
Failed to Delete a Cluster: Residual ENIs
How Do I Clear Residual Resources After a Non-Running Cluster Is Deleted?
Cluster Upgrade
What Do I Do If a Cluster Add-On Fails to be Upgraded During the CCE Cluster Upgrade?
Node
Node Creation
How Do I Troubleshoot Problems Occurred When Adding Nodes to a CCE Cluster?
Node Running
What Should I Do If a Cluster Is Available But Some Nodes Are Unavailable?
How Do I Log In to a Node Using a Password and Reset the Password?
How Do I Collect Logs of Nodes in a CCE Cluster?
What Should I Do If the vdb Disk of a Node Is Damaged and the Node Cannot Be Recovered After Reset?
What Should I Do If I/O Suspension Occasionally Occurs When SCSI EVS Disks Are Used?
How Do I Fix an Abnormal Container or Node Due to No Thin Pool Disk Space?
How Do I Rectify Failures When the NVIDIA Driver Is Used to Start Containers on GPU Nodes?
Specification Change
How Do I Change the Node Specifications in a CCE Cluster?
What Should I Do If I Fail to Restart or Create Workloads on a Node After Modifying the Node Specifications?
Node Pool
What Should I Do If No Node Creation Record Is Displayed When the Node Pool Is Being Expanding?
Workload
Workload Abnormalities
How Do I Use Events to Fix Abnormal Workloads?
What Should I Do If Pod Scheduling Fails?
What Should I Do If a Pod Fails to Pull the Image?
What Should I Do If Container Startup Fails?
What Should I Do If a Pod Fails to Be Evicted?
What Should I Do If a Storage Volume Cannot Be Mounted or the Mounting Times Out?
What Should I Do If a Workload Remains in the Creating State?
What Should I Do If Pods in the Terminating State Cannot Be Deleted?
What Should I Do If a Workload Is Stopped Caused by Pod Deletion?
What Should I Do If an Error Occurs When Deploying a Service on the GPU Node?
Container Configuration
When Is Pre-stop Processing Used?
How Do I Set an FQDN for Accessing a Specified Container in the Same Namespace?
What Should I Do If Health Check Probes Occasionally Fail?
How Do I Set the umask Value for a Container?
What Can I Do If an Error Is Reported When a Deployed Container Is Started After the JVM Startup Heap Memory Parameter Is Specified for ENTRYPOINT in Dockerfile?
What Is the Retry Mechanism When CCE Fails to Start a Pod?
Scheduling Policies
How Do I Evenly Distribute Multiple Pods to Each Node?
How Do I Prevent a Container on a Node from Being Evicted?
Why Are Pods Not Evenly Distributed to Nodes?
How Do I Evict All Pods on a Node?
Others
What Should I Do If a Scheduled Task Cannot Be Restarted After Being Stopped for a Period of Time?
What Is a Headless Service When I Create a StatefulSet?
What Should I Do If Error Message "Auth is empty" Is Displayed When a Private Image Is Pulled?
Why Cannot a Pod Be Scheduled to a Node?
What Is the Image Pull Policy for Containers in a CCE Cluster?
What Can I Do If a Layer Is Missing During Image Pull?
Networking
Network Planning
What Is the Relationship Between Clusters, VPCs, and Subnets?
Configuring Cluster Security Group Rules
Network Fault
How Do I Locate a Workload Networking Fault?
Why Does the Browser Return Error Code 404 When I Access a Deployed Application?
What Should I Do If a Container Fails to Access the Internet?
What Should I Do If a Node Fails to Connect to the Internet (Public Network)?
Others
How Do I Change the Security Group of Nodes in a Cluster in Batches?
Storage
What Are the Differences Among CCE Storage Classes in Terms of Persistent Storage and Multi-node Mounting?
Can I Add a Node Without a Data Disk?
What Should I Do If the Host Cannot Be Found When Files Need to Be Uploaded to OBS During the Access to the CCE Service from a Public Network?
How Can I Achieve Compatibility Between ExtendPathMode and Kubernetes client-go?
Can CCE PVCs Detect Underlying Storage Faults?
Namespace
What Should I Do If a Namespace Fails to Be Deleted Due to an APIService Object Access Failure?
Chart and Add-on
Why Does Add-on Installation Fail and Prompt "The release name is already exist"?
API & kubectl FAQs
How Can I Access a CCE Cluster?
Can the Resources Created Using APIs or kubectl Be Displayed on the CCE Console?
How Do I Download kubeconfig for Connecting to a Cluster Using kubectl?
How Do I Rectify the Error Reported When Running the kubectl top node Command?
Why Is "Error from server (Forbidden)" Displayed When I Use kubectl?
DNS FAQs
What Should I Do If Domain Name Resolution Fails?
Why Does a Container in a CCE Cluster Fail to Perform DNS Resolution?
How Do I Optimize the Configuration If the External Domain Name Resolution Is Slow or Times Out?
How Do I Configure a DNS Policy for a Container?
Image Repository FAQs
How Do I Upload My Images to CCE?
Permissions
Can I Configure Only Namespace Permissions Without Cluster Management Permissions?
Can I Use CCE APIs If the Cluster Management Permissions Are Not Configured?
Can I Use kubectl If the Cluster Management Permissions Are Not Configured?
Reference
How Do I Expand the Storage Capacity of a Container?
How Can Container IP Addresses Survive a Container Restart?
API Reference (ME-Abu Dhabi Region)
Before You Start
Overview
API Calling
Endpoints
Constraints
Concepts
API Overview
Calling APIs
Making an API Request
Authentication
Response
APIs
API URL
Cluster Management
Creating a Cluster
Reading a Specified Cluster
Listing Clusters in a Specified Project
Updating a Specified Cluster
Deleting a Cluster
Hibernating a Cluster
Waking Up a Cluster
Obtaining a Cluster Certificate
Querying a Job
Binding/Unbinding Public API Server Address
Obtaining Cluster Access Address
Node Management
Creating a Node
Reading a Specified Node
Listing All Nodes in a Cluster
Updating a Specified Node
Deleting a Node
Accepting a Node
Resetting a Node
Removing a Node
Migrating a Node
Node Pool Management
Creating a Node Pool
Reading a Specified Node Pool
Listing All Node Pools in a Specified Cluster
Updating a Specified Node Pool
Deleting a Node Pool
Storage Management
Creating a PVC (to be discarded)
Deleting a PVC (to be discarded)
Add-on Management
Installing an Add-on Instance
Listing Add-on Templates
Updating an Add-on Instance
Deleting an Add-on Instance
Querying an Add-on Instance
Listing Add-on Instances
Quota Management
Querying Resource Quotas
API Versions
Listing API Versions
Kubernetes APIs
Permissions Policies and Supported Actions
Appendix
Status Code
Error Codes
Obtaining a Project ID
Obtaining the Account ID
Specifying Add-ons to Be Installed During Cluster Creation
How to Obtain Parameters in the API URI
Creating a VPC and Subnet
Creating a Key Pair
Node Flavor Description
Adding a Salt in the password Field When Creating a Node
Maximum Number of Pods That Can Be Created on a Node
Node OS
Data Disk Space Allocation
Attaching Disks to a Node
Change History
User Guide (Paris Regions)
Service Overview
What Is Cloud Container Engine?
Product Advantages
Application Scenarios
Infrastructure and Containerized Application Management
Auto Scaling in Seconds
DevOps and CI/CD
Hybrid Cloud Architecture
Constraints
Permissions
Pricing Details
Basic Concepts
Basic Concepts
Mappings Between CCE and Kubernetes Terms
CCE Turbo Cluster
Regions and AZs
Related Services
Product Bulletin
Risky Operations on Cluster Nodes
CCE Security Guide
Cluster Node OS Patch Notes
Vulnerability Notice
Notice on the Kubernetes Security Vulnerability (CVE-2022-3172)
Privilege Escalation Vulnerability in Linux openvswitch Kernel Module (CVE-2022-2639)
Notice on CRI-O Container Runtime Engine Arbitrary Code Execution Vulnerability (CVE-2022-0811)
Notice on the Container Escape Vulnerability Caused by the Linux Kernel (CVE-2022-0492)
Linux Kernel Integer Overflow Vulnerability (CVE-2022-0185)
Kubernetes Basics
Overview
Container and Kubernetes
Containers
Kubernetes
Pod, Label, and Namespace
Pod: the Smallest Scheduling Unit in Kubernetes
Liveness Probe
Label for Managing Pods
Namespaces: Grouping Resources
Pod Orchestration and Scheduling
Deployment
StatefulSet
Job and Cron Job
DaemonSet
Affinity and Anti-Affinity Scheduling
Configuration Management
ConfigMap
Secret
Kubernetes Networking
Container Networking
Services
Ingresses
Readiness Probe
NetworkPolicy
Persistent Storage
Volume
PersistentVolumes, PersistentVolumeClaims, and StorageClasses
Authentication and Authorization
ServiceAccounts
RBAC
Auto Scaling
Getting Started
Introduction
Preparations
Creating a Kubernetes Cluster
Creating a Deployment (Nginx) from an Image
Deploying WordPress and MySQL That Depend on Each Other
Overview
Step 1: Create a MySQL Workload
Step 2: Create a WordPress Workload
High-Risk Operations and Solutions
Clusters
Cluster Overview
Basic Cluster Information
Kubernetes Release Notes
Kubernetes 1.27 Release Notes
Kubernetes 1.25 Release Notes
Kubernetes 1.23 Release Notes
Kubernetes 1.21 Release Notes
Kubernetes 1.19 Release Notes
Kubernetes 1.17 (EOM) Release Notes
Release Notes for CCE Cluster Versions
Creating a Cluster
CCE Turbo Clusters and CCE Clusters
Creating a Cluster
Comparing iptables and IPVS
Connecting to a Cluster
Connecting to a Cluster Using kubectl
Connecting to a Cluster Using an X.509 Certificate
Accessing a Cluster Using a Custom Domain Name
Upgrading a Cluster
Upgrade Overview
Before You Start
Performing In-place Upgrade
Performing Post-Upgrade Verification
Service Verification
Pod Check
Node and Container Network Check
Node Label and Taint Check
New Node Check
New Pod Check
Node Skipping Check
Migrating Services Across Clusters of Different Versions
Troubleshooting for Pre-upgrade Check Exceptions
Pre-upgrade Check
Node Restrictions
Upgrade Management
Add-ons
Helm Charts
SSH Connectivity of Master Nodes
Node Pools
Security Groups
Arm Node Restrictions
To-Be-Migrated Nodes
Discarded Kubernetes Resources
Compatibility Risks
Node CCE Agent Versions
Node CPU Usage
CRDs
Node Disks
Node DNS
Node Key Directory File Permissions
Kubelet
Node Memory
Node Clock Synchronization Server
Node OS
Node CPUs
Node Python Commands
ASM Version
Node Readiness
Node journald
containerd.sock
Internal Errors
Node Mount Points
Kubernetes Node Taints
everest Restrictions
cce-hpa-controller Restrictions
Enhanced CPU Policies
Health of Worker Node Components
Health of Master Node Components
Memory Resource Limit of Kubernetes Components
Discarded Kubernetes APIs
IPv6 Capabilities of a CCE Turbo Cluster
Node NetworkManager
Node ID File
Node Configuration Consistency
Node Configuration File
CoreDNS Configuration Consistency
sudo Commands of a Node
Key Commands of Nodes
Mounting of a Sock File on a Node
HTTPS Load Balancer Certificate Consistency
Node Mounting
Login Permissions of User paas on a Node
Private IPv4 Addresses of Load Balancers
Historical Upgrade Records
CIDR Block of the Cluster Management Plane
GPU Add-on
Nodes' System Parameter Settings
Residual Package Versions
Node Commands
Node Swap
nginx-ingress Upgrade
Managing a Cluster
Cluster Configuration Management
Cluster Overload Control
Changing Cluster Scale
Deleting a Cluster
Hibernating and Waking Up a Cluster
Nodes
Node Overview
Container Engine
Creating a Node
Adding Nodes for Management
Logging In to a Node
Management Nodes
Managing Node Labels
Managing Node Taints
Resetting a Node
Removing a Node
Synchronizing Data with Cloud Servers
Deleting a Node
Stopping a Node
Performing Rolling Upgrade for Nodes
Node O&M
Node Resource Reservation Policy
Data Disk Space Allocation
Maximum Number of Pods That Can Be Created on a Node
Migrating Nodes from Docker to containerd
Node Fault Detection Policy
Node Pools
Node Pool Overview
Creating a Node Pool
Managing a Node Pool
Updating a Node Pool
Configuring a Node Pool
Copying a Node Pool
Synchronizing Node Pools
Upgrading an OS
Migrating a Node
Deleting a Node Pool
Workloads
Overview
Creating a Workload
Creating a Deployment
Creating a StatefulSet
Creating a DaemonSet
Creating a Job
Creating a Cron Job
Configuring a Container
Configuring Time Zone Synchronization
Configuring an Image Pull Policy
Using Third-Party Images
Setting Container Specifications
Setting Container Lifecycle Parameters
Setting Health Check for a Container
Setting an Environment Variable
Configuring the Workload Upgrade Policy
Scheduling Policy (Affinity/Anti-affinity)
Taints and Tolerations
Labels and Annotations
Accessing a Container
Managing Workloads and Jobs
Scheduling
Overview
CPU Scheduling
CPU Policy
GPU Scheduling
Default GPU Scheduling in Kubernetes
Volcano Scheduling
NUMA Affinity Scheduling
Network
Overview
Container Network Models
Overview
Container Tunnel Network
VPC Network
Cloud Native 2.0 Network
Service
Overview
ClusterIP
NodePort
LoadBalancer
Creating a LoadBalancer Service
Using Annotations to Configure Load Balancing
Service Using HTTP
Configuring Health Check for Multiple Ports
Configuring Timeout for a LoadBalancer Service
Enabling Passthrough Networking for LoadBalancer Services
Enabling ICMP Security Group Rules
Headless Service
Ingresses
Overview
ELB Ingresses
Creating an ELB Ingress on the Console
Using kubectl to Create an ELB Ingress
Configuring ELB Ingresses Using Annotations
Configuring HTTPS Certificates for ELB Ingresses
Configuring the Server Name Indication (SNI) for ELB Ingresses
ELB Ingresses Routing to Multiple Services
ELB Ingresses Using HTTP/2
Interconnecting ELB Ingresses with HTTPS Backend Services
Configuring Timeout for an ELB Ingress
Nginx Ingresses
Creating Nginx Ingresses on the Console
Using kubectl to Create an Nginx Ingress
Configuring HTTPS Certificates for Nginx Ingresses
Configuring URL Rewriting Rules for Nginx Ingresses
Interconnecting Nginx Ingresses with HTTPS Backend Services
Nginx Ingresses Using Consistent Hashing for Load Balancing
Configuring Nginx Ingresses Using Annotations
DNS
Overview
DNS Configuration
Using CoreDNS for Custom Domain Name Resolution
Container Network Settings
Host Network
Configuring QoS Rate Limiting for Inter-Pod Access
Container Tunnel Network Settings
Network Policies
Cloud Native Network 2.0 Settings
Security Group Policies
NetworkAttachmentDefinition
Cluster Network Settings
Switching a Node Subnet
Adding a Container CIDR Block for a Cluster
Configuring Intra-VPC Access
Accessing Public Networks from a Container
Storage
Overview
Storage Basics
Elastic Volume Service (EVS)
Overview
Using an Existing EVS Disk Through a Static PV
Using an EVS Disk Through a Dynamic PV
Dynamically Mounting an EVS Disk to a StatefulSet
Snapshots and Backups
Scalable File Service (SFS)
Overview
Using an Existing SFS File System Through a Static PV
Using an SFS File System Through a Dynamic PV
Configuring SFS Volume Mount Options
SFS Turbo File Systems
Overview
Using an Existing SFS Turbo File System Through a Static PV
Configuring SFS Turbo Mount Options
Dynamically Creating and Mounting Subdirectories of an SFS Turbo File System
Object Storage Service (OBS)
Overview
Using an Existing OBS Bucket Through a Static PV
Using an OBS Bucket Through a Dynamic PV
Configuring OBS Mount Options
Using a Custom Access Key (AK/SK) to Mount an OBS Volume
Local Persistent Volumes (Local PVs)
Overview
Importing a PV to a Storage Pool
Using a Local PV Through a Dynamic PV
Dynamically Mounting a Local PV to a StatefulSet
Ephemeral Volumes (emptyDir)
Overview
Importing an EV to a Storage Pool
Using a Local EV
Using a Temporary Path
hostPath
StorageClass
Observability
Logging
Overview
Using ICAgent to Collect Container Logs
Monitoring
Monitoring Overview
Monitoring Custom Metrics on AOM
CTS Logs
CCE Operations Supported by CTS
Querying Real-Time Traces
Namespaces
Creating a Namespace
Managing Namespaces
Setting a Resource Quota
ConfigMaps and Secrets
Creating a ConfigMap
Using a ConfigMap
Creating a Secret
Using a Secret
Cluster Secrets
Auto Scaling
Overview
Scaling a Workload
Workload Scaling Mechanisms
HPA
Managing Workload Scaling Policies
Scaling a Node
Node Scaling Mechanisms
Creating a Node Scaling Policy
Managing Node Scaling Policies
Using HPA and CA for Auto Scaling of Workloads and Nodes
Add-ons
Overview
CoreDNS
CCE Container Storage (Everest)
npd
CCE Cluster Autoscaler
NGNIX Ingress Controller
Kubernetes Metrics Server
gpu-device-plugin
Volcano Scheduler
CCE Container Storage (FlexVolume)
Helm Chart
Overview
Deploying an Application from a Chart
Differences Between Helm v2 and Helm v3 and Adaptation Solutions
Deploying an Application Through the Helm v2 Client
Deploying an Application Through the Helm v3 Client
Converting a Release from Helm v2 to v3
Permissions
Permissions Overview
Cluster Permissions (IAM-based)
Namespace Permissions (Kubernetes RBAC-based)
Example: Designing and Configuring Permissions for Users in a Department
Permission Dependency of the CCE Console
Pod Security
Configuring a Pod Security Policy
Configuring Pod Security Admission
Service Account Token Security Improvement
FAQs
Common Questions
Billing
How Is CCE Billed/Charged?
Will I Be Notified When My Balance Is Insufficient?
Will I Be Notified When My Account Balance Changes?
Cluster
Cluster Creation
Why Can't I Create a CCE Cluster?
Is Management Scale of a Cluster Related to the Number of Master Nodes?
Which Resource Quotas Should I Pay Attention To When Using CCE?
Cluster Running
How Do I Rectify the Fault When the Cluster Status Is Unavailable?
How Do I Retrieve Data After a Cluster Is Deleted?
Cluster Deletion
Failed to Delete a Cluster: Residual ENIs
How Do I Clear Residual Resources After a Non-Running Cluster Is Deleted?
Cluster Upgrade
What Do I Do If a Cluster Add-On Fails to be Upgraded During the CCE Cluster Upgrade?
Node
Node Creation
How Do I Troubleshoot Problems Occurred When Adding Nodes to a CCE Cluster?
Node Running
What Should I Do If a Cluster Is Available But Some Nodes Are Unavailable?
How Do I Log In to a Node Using a Password and Reset the Password?
How Do I Collect Logs of Nodes in a CCE Cluster?
What Should I Do If the vdb Disk of a Node Is Damaged and the Node Cannot Be Recovered After Reset?
What Should I Do If I/O Suspension Occasionally Occurs When SCSI EVS Disks Are Used?
How Do I Fix an Abnormal Container or Node Due to No Thin Pool Disk Space?
How Do I Rectify Failures When the NVIDIA Driver Is Used to Start Containers on GPU Nodes?
Specification Change
How Do I Change the Node Specifications in a CCE Cluster?
What Should I Do If I Fail to Restart or Create Workloads on a Node After Modifying the Node Specifications?
Node Pool
What Should I Do If No Node Creation Record Is Displayed When the Node Pool Is Being Expanding?
Workload
Workload Abnormalities
How Do I Use Events to Fix Abnormal Workloads?
What Should I Do If Pod Scheduling Fails?
What Should I Do If a Pod Fails to Pull the Image?
What Should I Do If Container Startup Fails?
What Should I Do If a Pod Fails to Be Evicted?
What Should I Do If a Storage Volume Cannot Be Mounted or the Mounting Times Out?
What Should I Do If a Workload Remains in the Creating State?
What Should I Do If Pods in the Terminating State Cannot Be Deleted?
What Should I Do If a Workload Is Stopped Caused by Pod Deletion?
What Should I Do If an Error Occurs When Deploying a Service on the GPU Node?
What Should I Do If Sandbox-Related Errors Are Reported When the Pod Remains in the Creating State?
Container Configuration
When Is Pre-stop Processing Used?
How Do I Set an FQDN for Accessing a Specified Container in the Same Namespace?
What Should I Do If Health Check Probes Occasionally Fail?
How Do I Set the umask Value for a Container?
What Can I Do If an Error Is Reported When a Deployed Container Is Started After the JVM Startup Heap Memory Parameter Is Specified for ENTRYPOINT in Dockerfile?
What Is the Retry Mechanism When CCE Fails to Start a Pod?
Scheduling Policies
How Do I Evenly Distribute Multiple Pods to Each Node?
How Do I Prevent a Container on a Node from Being Evicted?
Why Are Pods Not Evenly Distributed to Nodes?
How Do I Evict All Pods on a Node?
Others
What Should I Do If a Scheduled Task Cannot Be Restarted After Being Stopped for a Period of Time?
What Is a Headless Service When I Create a StatefulSet?
What Should I Do If Error Message "Auth is empty" Is Displayed When a Private Image Is Pulled?
Why Cannot a Pod Be Scheduled to a Node?
What Is the Image Pull Policy for Containers in a CCE Cluster?
What Can I Do If a Layer Is Missing During Image Pull?
Networking
Network Planning
What Is the Relationship Between Clusters, VPCs, and Subnets?
Configuring Cluster Security Group Rules
Network Fault
How Do I Locate a Workload Networking Fault?
Why Does the Browser Return Error Code 404 When I Access a Deployed Application?
What Should I Do If a Container Fails to Access the Internet?
What Should I Do If a Node Fails to Connect to the Internet (Public Network)?
What Should I Do If an Nginx Ingress Access in the Cluster Is Abnormal After the Add-on Is Upgraded?
Storage
What Are the Differences Among CCE Storage Classes in Terms of Persistent Storage and Multi-node Mounting?
Can I Add a Node Without a Data Disk?
What Should I Do If the Host Cannot Be Found When Files Need to Be Uploaded to OBS During the Access to the CCE Service from a Public Network?
How Can I Achieve Compatibility Between ExtendPathMode and Kubernetes client-go?
Can CCE PVCs Detect Underlying Storage Faults?
Namespace
Why Cannot I Delete a Namespace Due to an APIService Object Access Failure?
Chart and Add-on
Why Does Add-on Installation Fail and Prompt "The release name is already exist"?
API & kubectl FAQs
How Can I Access a Cluster API Server?
Can the Resources Created Using APIs or kubectl Be Displayed on the CCE Console?
How Do I Download kubeconfig for Connecting to a Cluster Using kubectl?
How Do I Rectify the Error Reported When Running the kubectl top node Command?
Why Is "Error from server (Forbidden)" Displayed When I Use kubectl?
DNS FAQs
What Should I Do If Domain Name Resolution Fails?
Why Does a Container in a CCE Cluster Fail to Perform DNS Resolution?
How Do I Optimize the Configuration If the External Domain Name Resolution Is Slow or Times Out?
How Do I Configure a DNS Policy for a Container?
Image Repository FAQs
How Do I Upload My Images to CCE?
Permissions
Can I Configure Only Namespace Permissions Without Cluster Management Permissions?
Can I Use CCE APIs If the Cluster Management Permissions Are Not Configured?
Can I Use kubectl If the Cluster Management Permissions Are Not Configured?
Reference
How Do I Expand the Storage Capacity of a Container?
How Can Container IP Addresses Survive a Container Restart?
Best Practices
Checklist for Deploying Containerized Applications in the Cloud
Containerization
Containerizing an Enterprise Application (ERP)
Solution Overview
Procedure
Containerizing an Entire Application
Containerization Process
Analyzing the Application
Preparing the Application Runtime
Compiling a Startup Script
Compiling the Dockerfile
Building and Uploading an Image
Creating a Container Workload
Disaster Recovery
Implementing High Availability for Applications in CCE
Security
Cluster Security
Node Security
Container Security
Secret Security
Auto Scaling
Using HPA and CA for Auto Scaling of Workloads and Nodes
Monitoring
Using Prometheus for Multi-cluster Monitoring
Cluster
Connecting to Multiple Clusters Using kubectl
Selecting a Data Disk for the Node
Networking
Planning CIDR Blocks for a Cluster
Selecting a Network Model
Implementing Sticky Session Through Load Balancing
Obtaining the Client Source IP Address for a Container
Storage
Expanding the Storage Space
Mounting an Object Storage Bucket of a Third-Party Tenant
Dynamically Creating and Mounting Subdirectories of an SFS Turbo File System
How Do I Change the Storage Class Used by a Cluster of v1.15 from FlexVolume to CSI Everest?
Custom Storage Classes
Enabling Automatic Topology for EVS Disks When Nodes Are Deployed in Different AZs (csi-disk-topology)
Container
Properly Allocating Container Computing Resources
Modifying Kernel Parameters Using a Privileged Container
Using Init Containers to Initialize an Application
Using hostAliases to Configure /etc/hosts in a Pod
Configuring Core Dumps
Permission
Configuring kubeconfig for Fine-Grained Management on Cluster Resources
Release
Overview
Using Services to Implement Simple Grayscale Release and Blue-Green Deployment
Migrating Data from CCE 1.0 to CCE 2.0
Differences Between CCE 1.0 and CCE 2.0
Migrating Images
Migrating Clusters
Migrating Applications
Applications Created Through APIs or kubectl
Applications Created Through Component Templates
Applications Created Through App Designer
API Reference (Paris Regions)
Before You Start
Overview
API Calling
Endpoints
Constraints
Concepts
API Overview
Calling APIs
Making an API Request
Authentication
Response
APIs
API URL
Cluster Management
Creating a Cluster
Reading a Specified Cluster
Listing Clusters in a Specified Project
Updating a Specified Cluster
Deleting a Cluster
Hibernating a Cluster
Waking Up a Cluster
Obtaining a Cluster Certificate
Querying a Job
Binding/Unbinding Public API Server Address
Obtaining Cluster Access Address
Node Management
Creating a Node
Reading a Specified Node
Listing All Nodes in a Cluster
Updating a Specified Node
Deleting a Node
Accepting a Node
Resetting a Node
Removing a Node
Migrating a Node
Node Pool Management
Creating a Node Pool
Reading a Specified Node Pool
Listing All Node Pools in a Specified Cluster
Updating a Specified Node Pool
Deleting a Node Pool
Add-on Management
Installing an Add-on Instance
Listing Add-on Templates
Updating an Add-on Instance
Deleting an Add-on Instance
Querying an Add-on Instance
Listing Add-on Instances
Quota Management
Querying Resource Quotas
API Versions
Listing API Versions
Kubernetes APIs
Permissions Policies and Supported Actions
Appendix
Status Code
Error Codes
Obtaining a Project ID
Obtaining the Account ID
Specifying Add-ons to Be Installed During Cluster Creation
How to Obtain Parameters in the API URI
Creating a VPC and Subnet
Creating a Key Pair
Node Flavor Description
Adding a Salt in the password Field When Creating a Node
Maximum Number of Pods That Can Be Created on a Node
Node OS
Data Disk Space Allocation
Attaching Disks to a Node
Change History
User Guide (Kuala Lumpur Region)
Service Overview
What Is Cloud Container Engine?
Product Advantages
Application Scenarios
Infrastructure and Containerized Application Management
Auto Scaling in Seconds
DevOps and CI/CD
Hybrid Cloud Architecture
Notes and Constraints
Permissions
Basic Concepts
Basic Concepts
Mappings Between CCE and Kubernetes Terms
Regions and AZs
Related Services
Getting Started
Introduction
Preparations
Creating a Kubernetes Cluster
Creating a Deployment (Nginx) from an Image
Deploying WordPress and MySQL That Depend on Each Other
Overview
Step 1: Create a MySQL Workload
Step 2: Create a WordPress Workload
High-Risk Operations and Solutions
Clusters
Cluster Overview
Basic Cluster Information
Kubernetes Release Notes
Kubernetes 1.25 Release Notes
Kubernetes 1.23 Release Notes
Kubernetes 1.21 Release Notes
Kubernetes 1.19 Release Notes
Kubernetes 1.17 (EOM) Release Notes
Release Notes for CCE Cluster Versions
Buying a Cluster
Buying a Cluster
Comparing iptables and IPVS
Connecting to a Cluster
Connecting to a Cluster Using kubectl
Connecting to a Cluster Using an X.509 Certificate
Accessing a Cluster Using a Custom Domain Name
Upgrading a Cluster
Upgrade Overview
Before You Start
Performing In-place Upgrade
Performing Post-Upgrade Verification
Service Verification
Pod Check
Node and Container Network Check
Node Label and Taint Check
New Node Check
New Pod Check
Node Skipping Check
Migrating Services Across Clusters of Different Versions
Troubleshooting for Pre-upgrade Check Exceptions
Pre-upgrade Check
Node Restrictions
Upgrade Management
Add-ons
Helm Charts
SSH Connectivity of Master Nodes
Node Pools
Security Groups
Arm Node Restrictions
To-Be-Migrated Nodes
Discarded Kubernetes Resources
Compatibility Risks
Node CCE Agent Versions
Node CPU Usage
CRDs
Node Disks
Node DNS
Node Key Directory File Permissions
Kubelet
Node Memory
Node Clock Synchronization Server
Node OS
Node CPUs
Node Python Commands
ASM Version
Node Readiness
Node journald
containerd.sock
Internal Errors
Node Mount Points
Kubernetes Node Taints
everest Restrictions
cce-hpa-controller Restrictions
Enhanced CPU Policies
Health of Worker Node Components
Health of Master Node Components
Memory Resource Limit of Kubernetes Components
Discarded Kubernetes APIs
Node NetworkManager
Node ID File
Node Configuration Consistency
Node Configuration File
CoreDNS Configuration Consistency
Managing a Cluster
Cluster Configuration Management
Cluster Overload Control
Changing Cluster Scale
Changing the Default Security Group of a Node
Deleting a Cluster
Hibernating and Waking Up a Cluster
Nodes
Node Overview
Container Engine
Creating a Node
Adding Nodes for Management
Logging In to a Node
Management Nodes
Managing Node Labels
Managing Node Taints
Resetting a Node
Removing a Node
Synchronizing Data with Cloud Servers
Draining a Node
Deleting a Node
Stopping a Node
Performing Rolling Upgrade for Nodes
Node O&M
Node Resource Reservation Policy
Data Disk Space Allocation
Maximum Number of Pods That Can Be Created on a Node
Migrating Nodes from Docker to containerd
Node Fault Detection Policy
Node Pools
Node Pool Overview
Creating a Node Pool
Managing a Node Pool
Updating a Node Pool
Updating an AS Configuration
Configuring a Node Pool
Copying a Node Pool
Synchronizing Node Pools
Migrating a Node
Deleting a Node Pool
Workloads
Overview
Creating a Workload
Creating a Deployment
Creating a StatefulSet
Creating a DaemonSet
Creating a Job
Creating a Cron Job
Configuring a Container
Configuring Time Zone Synchronization
Configuring an Image Pull Policy
Using Third-Party Images
Setting Container Specifications
Setting Container Lifecycle Parameters
Setting Health Check for a Container
Setting an Environment Variable
Configuring the Workload Upgrade Policy
Scheduling Policy (Affinity/Anti-affinity)
Taints and Tolerations
Labels and Annotations
Accessing a Container
Managing Workloads and Jobs
Scheduling
Overview
CPU Scheduling
CPU Policy
GPU Scheduling
Default GPU Scheduling in Kubernetes
NPU Scheduling
Volcano Scheduling
NUMA Affinity Scheduling
Cloud Native Hybrid Deployment
Dynamic Resource Oversubscription
Network
Overview
Container Network Models
Overview
Container Tunnel Network
VPC Network
Service
Overview
ClusterIP
NodePort
LoadBalancer
Creating a LoadBalancer Service
Using Annotations to Configure Load Balancing
Service Using HTTP
Configuring Health Check for Multiple Ports
Enabling ICMP Security Group Rules
DNAT
Headless Service
Ingresses
Overview
ELB Ingresses
Creating an ELB Ingress on the Console
Using kubectl to Create an ELB Ingress
Configuring ELB Ingresses Using Annotations
Configuring HTTPS Certificates for ELB Ingresses
Configuring the Server Name Indication (SNI) for ELB Ingresses
ELB Ingresses Routing to Multiple Services
ELB Ingresses Using HTTP/2
Interconnecting ELB Ingresses with HTTPS Backend Services
Nginx Ingresses
Creating Nginx Ingresses on the Console
Using kubectl to Create an Nginx Ingress
Configuring HTTPS Certificates for Nginx Ingresses
Configuring URL Rewriting Rules for Nginx Ingresses
Interconnecting Nginx Ingresses with HTTPS Backend Services
Nginx Ingresses Using Consistent Hashing for Load Balancing
Configuring Nginx Ingresses Using Annotations
DNS
Overview
DNS Configuration
Using CoreDNS for Custom Domain Name Resolution
Using NodeLocal DNSCache to Improve DNS Performance
Container Network Settings
Host Network
Configuring QoS Rate Limiting for Inter-Pod Access
Container Tunnel Network Settings
Network Policies
Cluster Network Settings
Switching a Node Subnet
Adding a Container CIDR Block for a Cluster
Configuring Intra-VPC Access
Accessing Public Networks from a Container
Storage
Overview
Storage Basics
Elastic Volume Service (EVS)
Overview
Using an Existing EVS Disk Through a Static PV
Using an EVS Disk Through a Dynamic PV
Dynamically Mounting an EVS Disk to a StatefulSet
Snapshots and Backups
SFS Turbo File Systems
Overview
Using an Existing SFS Turbo File System Through a Static PV
Configuring SFS Turbo Mount Options
Dynamically Creating and Mounting Subdirectories of an SFS Turbo File System
Object Storage Service (OBS)
Overview
Using an Existing OBS Bucket Through a Static PV
Using an OBS Bucket Through a Dynamic PV
Configuring OBS Mount Options
Using a Custom Access Key (AK/SK) to Mount an OBS Volume
Local Persistent Volumes (Local PVs)
Overview
Importing a PV to a Storage Pool
Using a Local PV Through a Dynamic PV
Dynamically Mounting a Local PV to a StatefulSet
Ephemeral Volumes (emptyDir)
Overview
Importing an EV to a Storage Pool
Using a Local EV
Using a Temporary Path
hostPath
StorageClass
Observability
Logging
Overview
Using ICAgent to Collect Container Logs
Monitoring
Monitoring Overview
Monitoring Custom Metrics on AOM
Monitoring Custom Metrics Using Prometheus
Monitoring Metrics of the Master Node Components
CTS Logs
CCE Operations Supported by CTS
Querying Real-Time Traces
Namespaces
Creating a Namespace
Managing Namespaces
Setting a Resource Quota
ConfigMaps and Secrets
Creating a ConfigMap
Using a ConfigMap
Creating a Secret
Using a Secret
Cluster Secrets
Auto Scaling
Overview
Scaling a Workload
Workload Scaling Mechanisms
HPA
CustomedHPA
Managing Workload Scaling Policies
Scaling a Node
Node Scaling Mechanisms
Creating a Node Scaling Policy
Managing Node Scaling Policies
Using HPA and CA for Auto Scaling of Workloads and Nodes
Add-ons
Overview
coredns (System Resource Add-on, Mandatory)
everest (System Resource Add-on, Mandatory)
npd
Dashboard
autoscaler
nginx-ingress
metrics-server
cce-hpa-controller
gpu-beta
huawei-npu
volcano
dew-provider
dolphin
node-local-dns
kube-prometheus-stack
web-terminal (End of Maintenance)
prometheus
Helm Chart
Overview
Deploying an Application from a Chart
Differences Between Helm v2 and Helm v3 and Adaptation Solutions
Deploying an Application Through the Helm v2 Client
Deploying an Application Through the Helm v3 Client
Converting a Release from Helm v2 to v3
Permissions
Permissions Overview
Cluster Permissions (IAM-based)
Namespace Permissions (Kubernetes RBAC-based)
Example: Designing and Configuring Permissions for Users in a Department
Permission Dependency of the CCE Console
Pod Security
Configuring a Pod Security Policy
Configuring Pod Security Admission
Service Account Token Security Improvement
Best Practices
Checklist for Deploying Containerized Applications in the Cloud
Containerization
Containerizing an Enterprise Application (ERP)
Solution Overview
Procedure
Containerizing an Entire Application
Containerization Process
Analyzing the Application
Preparing the Application Runtime
Compiling a Startup Script
Compiling the Dockerfile
Building and Uploading an Image
Creating a Container Workload
Disaster Recovery
Implementing High Availability for Applications in CCE
Security
Cluster Security
Node Security
Container Security
Secret Security
Auto Scaling
Using HPA and CA for Auto Scaling of Workloads and Nodes
Monitoring
Using Prometheus for Multi-cluster Monitoring
Cluster
Connecting to Multiple Clusters Using kubectl
Networking
Planning CIDR Blocks for a Cluster
Selecting a Network Model
Implementing Sticky Session Through Load Balancing
Obtaining the Client Source IP Address for a Container
Storage
Expanding the Storage Space
Mounting an Object Storage Bucket of a Third-Party Tenant
Dynamically Creating and Mounting Subdirectories of an SFS Turbo File System
Custom Storage Classes
Enabling Automatic Topology for EVS Disks When Nodes Are Deployed in Different AZs (csi-disk-topology)
Container
Properly Allocating Container Computing Resources
Modifying Kernel Parameters Using a Privileged Container
Using Init Containers to Initialize an Application
Using hostAliases to Configure /etc/hosts in a Pod
Configuring Core Dumps
Permission
Configuring kubeconfig for Fine-Grained Management on Cluster Resources
Release
Overview
Using Services to Implement Simple Grayscale Release and Blue-Green Deployment
Using Nginx Ingress to Implement Grayscale Release and Blue-Green Deployment
FAQs
Common Questions
Cluster
Cluster Creation
Why Can't I Create a CCE Cluster?
Is Management Scale of a Cluster Related to the Number of Master Nodes?
Which Resource Quotas Should I Pay Attention To When Using CCE?
Cluster Running
How Do I Rectify the Fault When the Cluster Status Is Unavailable?
How Do I Retrieve Data After a Cluster Is Deleted?
Cluster Deletion
Failed to Delete a Cluster: Residual ENIs
How Do I Clear Residual Resources After a Non-Running Cluster Is Deleted?
Cluster Upgrade
What Do I Do If a Cluster Add-On Fails to be Upgraded During the CCE Cluster Upgrade?
Node
Node Creation
How Do I Troubleshoot Problems Occurred When Adding Nodes to a CCE Cluster?
Node Running
What Should I Do If a Cluster Is Available But Some Nodes Are Unavailable?
How Do I Log In to a Node Using a Password and Reset the Password?
How Do I Collect Logs of Nodes in a CCE Cluster?
What Should I Do If the vdb Disk of a Node Is Damaged and the Node Cannot Be Recovered After Reset?
What Should I Do If I/O Suspension Occasionally Occurs When SCSI EVS Disks Are Used?
How Do I Fix an Abnormal Container or Node Due to No Thin Pool Disk Space?
How Do I Rectify Failures When the NVIDIA Driver Is Used to Start Containers on GPU Nodes?
Specification Change
How Do I Change the Node Specifications in a CCE Cluster?
What Should I Do If I Fail to Restart or Create Workloads on a Node After Modifying the Node Specifications?
Node Pool
What Should I Do If No Node Creation Record Is Displayed When the Node Pool Is Being Expanding?
Workload
Workload Abnormalities
How Do I Use Events to Fix Abnormal Workloads?
What Should I Do If Pod Scheduling Fails?
What Should I Do If a Pod Fails to Pull the Image?
What Should I Do If Container Startup Fails?
What Should I Do If a Pod Fails to Be Evicted?
What Should I Do If a Storage Volume Cannot Be Mounted or the Mounting Times Out?
What Should I Do If a Workload Remains in the Creating State?
What Should I Do If Pods in the Terminating State Cannot Be Deleted?
What Should I Do If a Workload Is Stopped Caused by Pod Deletion?
What Should I Do If an Error Occurs When Deploying a Service on the GPU Node?
What Should I Do If Sandbox-Related Errors Are Reported When the Pod Remains in the Creating State?
Container Configuration
When Is Pre-stop Processing Used?
How Do I Set an FQDN for Accessing a Specified Container in the Same Namespace?
What Should I Do If Health Check Probes Occasionally Fail?
How Do I Set the umask Value for a Container?
What Can I Do If an Error Is Reported When a Deployed Container Is Started After the JVM Startup Heap Memory Parameter Is Specified for ENTRYPOINT in Dockerfile?
What Is the Retry Mechanism When CCE Fails to Start a Pod?
Scheduling Policies
How Do I Evenly Distribute Multiple Pods to Each Node?
How Do I Prevent a Container on a Node from Being Evicted?
Why Are Pods Not Evenly Distributed to Nodes?
How Do I Evict All Pods on a Node?
Others
What Should I Do If a Scheduled Task Cannot Be Restarted After Being Stopped for a Period of Time?
What Is a Headless Service When I Create a StatefulSet?
What Should I Do If Error Message "Auth is empty" Is Displayed When a Private Image Is Pulled?
Why Cannot a Pod Be Scheduled to a Node?
What Is the Image Pull Policy for Containers in a CCE Cluster?
What Can I Do If a Layer Is Missing During Image Pull?
Networking
Network Planning
What Is the Relationship Between Clusters, VPCs, and Subnets?
Configuring Cluster Security Group Rules
Network Fault
How Do I Locate a Workload Networking Fault?
Why Does the Browser Return Error Code 404 When I Access a Deployed Application?
What Should I Do If a Container Fails to Access the Internet?
What Should I Do If a Node Fails to Connect to the Internet (Public Network)?
Others
How Do I Change the Security Group of Nodes in a Cluster in Batches?
Storage
What Are the Differences Among CCE Storage Classes in Terms of Persistent Storage and Multi-node Mounting?
Can I Add a Node Without a Data Disk?
What Should I Do If the Host Cannot Be Found When Files Need to Be Uploaded to OBS During the Access to the CCE Service from a Public Network?
How Can I Achieve Compatibility Between ExtendPathMode and Kubernetes client-go?
Can CCE PVCs Detect Underlying Storage Faults?
Namespace
Why Cannot I Delete a Namespace Due to an APIService Object Access Failure?
Chart and Add-on
Why Does Add-on Installation Fail and Prompt "The release name is already exist"?
API & kubectl FAQs
How Can I Access a Cluster API Server?
Can the Resources Created Using APIs or kubectl Be Displayed on the CCE Console?
How Do I Download kubeconfig for Connecting to a Cluster Using kubectl?
How Do I Rectify the Error Reported When Running the kubectl top node Command?
Why Is "Error from server (Forbidden)" Displayed When I Use kubectl?
DNS FAQs
What Should I Do If Domain Name Resolution Fails?
Why Does a Container in a CCE Cluster Fail to Perform DNS Resolution?
How Do I Optimize the Configuration If the External Domain Name Resolution Is Slow or Times Out?
How Do I Configure a DNS Policy for a Container?
Image Repository FAQs
How Do I Upload My Images to CCE?
Permissions
Can I Configure Only Namespace Permissions Without Cluster Management Permissions?
Can I Use CCE APIs If the Cluster Management Permissions Are Not Configured?
Can I Use kubectl If the Cluster Management Permissions Are Not Configured?
Reference
How Do I Expand the Storage Capacity of a Container?
How Can Container IP Addresses Survive a Container Restart?
API Reference (Kuala Lumpur Region)
Before You Start
Overview
API Calling
Endpoints
Constraints
Concepts
API Overview
Calling APIs
Making an API Request
Authentication
Response
APIs
API URL
Cluster Management
Creating a Cluster
Reading a Specified Cluster
Listing Clusters in a Specified Project
Updating a Specified Cluster
Deleting a Cluster
Hibernating a Cluster
Waking Up a Cluster
Obtaining a Cluster Certificate
Querying a Job
Binding/Unbinding Public API Server Address
Obtaining Cluster Access Address
Node Management
Creating a Node
Reading a Specified Node
Listing All Nodes in a Cluster
Updating a Specified Node
Deleting a Node
Accepting a Node
Resetting a Node
Removing a Node
Migrating a Node
Node Pool Management
Creating a Node Pool
Reading a Specified Node Pool
Listing All Node Pools in a Specified Cluster
Updating a Specified Node Pool
Deleting a Node Pool
Storage Management
Creating a PVC (to be discarded)
Deleting a PVC (to be discarded)
Add-on Management
Installing an Add-on Instance
Listing Add-on Templates
Updating an Add-on Instance
Deleting an Add-on Instance
Querying an Add-on Instance
Listing Add-on Instances
Quota Management
Querying Resource Quotas
API Versions
Listing API Versions
Kubernetes APIs
Permissions Policies and Supported Actions
Appendix
Status Code
Error Codes
Obtaining a Project ID
Obtaining the Account ID
Specifying Add-ons to Be Installed During Cluster Creation
How to Obtain Parameters in the API URI
Creating a VPC and Subnet
Creating a Key Pair
Node Flavor Description
Adding a Salt in the password Field When Creating a Node
Maximum Number of Pods That Can Be Created on a Node
Node OS
Data Disk Space Allocation
Attaching Disks to a Node
Change History
General Reference
Glossary
Service Level Agreement
White Papers
Endpoints
Permissions