Container Service for Kubernetes:Use kubectl to deploy a magic cube game

Procedure

Step 1: Activate and grant permissions to ACK

If this is the first time you use ACK, you must activate ACK and grant ACK the permissions to access cloud resources.

1. Go to the Container Service for Kubernetes page.

2. Read and select Container Service for Kubernetes Terms of Service, and then click Activate Now.

3. Log on to the ACK console.

4. On the Container service needs to create default roles page, click Go to RAM console. On the Cloud Resource Access Authorization page, click Confirm Authorization Policy.

   After you assign the Resource Access Management (RAM) roles to ACK, log on to the ACK console again to get started with ACK. If you have other problems during the authorization process, see FAQ about authorization management

Step 2: Create an ACK Pro cluster

This step shows how to create an ACK Pro cluster. Default settings are used for most cluster parameters. For more information about the cluster parameters, see Create an ACK Pro cluster.

1. Log on to the ACK console. In the left-side navigation pane, click Clusters.

2. In the upper-right corner of the Clusters page, click Create Kubernetes Cluster.

3. On the Managed Kubernetes tab, set cluster parameters as described in the following table. Use default settings for the parameters that are not included in the table.

   Parameter	Description	Example
   Cluster Name	Enter a name for the cluster.	ACK-Demo
   Cluster Specification	Select a cluster type. You can select Professional or Basic. We recommend that you use ACK Pro clusters in the production environment and test environment. ACK Basic clusters can meet the learning and testing needs of individual users. For more information about ACK Pro clusters, see Overview of ACK Pro clusters.	Professional
   Region	Select a region to deploy the cluster.	China (Beijing)
   VPC	ACK clusters can be deployed only in virtual private clouds (VPCs). You must specify a VPC in the same region as the cluster. In this example, click Create VPC and create a VPC named vpc-ack-demo in the China (Beijing) region. For more information, see Create and manage a VPC.	vpc-ack-demo
   vSwitch	Select vSwitches for nodes in the cluster to communicate with each other. In this example, click Create vSwitch and create a vSwitch named vswitch-ack-demo in the vpc-ack-demo VPC. Then, select vswitch-ack-demo in the vSwitch list. For more information, see Create and manage a vSwitch.	vswitch-ack-demo
   Access to API Server	Specify whether to expose the Kubernetes API server of the cluster to the Internet. If you want to manage the cluster over the Internet, you must expose the Kubernetes API server with an elastic IP address (EIP).	In this example, Expose API Server with EIP is selected.

4. Click Next:Node Pool Configurations. Configure the following parameters as described. Use default settings for the parameters that are not included in the table.

   Parameter	Description	Example
   Instance Type	Select instance types that are used to deploy nodes. You can specify the number of vCores and the amount of memory to filter the instance types. You can also specify an instance type in the search box to search for the instance type. To ensure the stability of the cluster, we recommend that you select instance types with at least 4 vCores and 8 GiB of memory. For more information about Elastic Compute Service (ECS) instance types and how to select instance types, see Suggestions on choosing ECS specifications for ACK clusters and Overview of instance families.	Instance types with at least 4 vCores and 8 GiB of memory
   Quantity	Specify the number of worker nodes.	2
   System Disk	Set the system disk for nodes.	In this example, enhanced SSD (ESSD) is selected as the disk type and the disk size is set to 40 GiB.
   Logon Type	Select the logon type for nodes.	In this example, password logon is selected as the logon type and a password is specified.

5. Click Next:Component Configurations. Use default settings for all component parameters.

6. Click Next:Confirm Order, read and select the ACK terms of service, and then click Create Cluster.

   Note

   It requires approximately 10 minutes to create a cluster. After the cluster is created, you can view the cluster on the Clusters page.

Step 3: Connect to the cluster

This step shows how to connect to the ACK cluster by using a kubectl client or Cloud Shell. For more information, see Obtain the kubeconfig file of a cluster and use kubectl to connect to the cluster and Use kubectl on Cloud Shell to manage ACK clusters.

Method 1: Connect to the cluster by using a kubectl client

1. Log on to the ACK console.

2. In the left-side navigation pane of the ACK console, click Clusters.

3. On the Clusters page, click the name of the ACK-Demo cluster.

4. On the Cluster Information page, click the Connection Information tab. Click Copy on the Public Access tab. This way, the credential used to access the cluster over the Internet is copied.

5. Paste the credentials to the config file in the $HOME/.kube directory, save the file, and then exit.

   Note

   If the .kube folder and the config file do not exist in the $HOME/ directory, you must manually create the folder and file.

6. Run a kubectl command to verify the connectivity of the cluster.

   Run the following command to query the namespaces of the cluster:

   kubectl get namespace

   Expected output:

   NAME              STATUS   AGE
   arms-prom         Active   4h39m
   default           Active   4h39m
   kube-node-lease   Active   4h39m
   kube-public       Active   4h39m
   kube-system       Active   4h39m

Method 2: Connect to the cluster by using Cloud Shell

1. Log on to the ACK console.

2. In the left-side navigation pane of the ACK console, click Clusters.

3. On the Clusters page, find the cluster that you want to manage and choose More > Open Cloud Shell in the Actions column.

   It requires a few seconds to start Cloud Shell. After Cloud Shell is started, you can run kubectl commands on the Cloud Shell interface to manage the cluster and applications deployed in the cluster.

Step 4: Deploy and expose an application

This step shows how to use kubectl to deploy a stateless application by creating a Deployment and use a LoadBalancer Service to expose the application. For more information about how to expose an application, see Use an automatically created SLB instance to expose an application.

1. Use the following YAML template to create an ack-cube.yaml file:

   apiVersion: apps/v1 # for versions before 1.8.0 use apps/v1beta1
   kind: Deployment
   metadata:
     name: ack-cube # The name of the application. 
     labels:
       app: ack-cube
   spec:
     replicas: 2 # The number of replicated pods. 
     selector:
       matchLabels:
         app: ack-cube  # You must specify the same value for the selector of the Service that is used to expose the application. 
     template:
       metadata:
         labels:
           app: ack-cube
       spec:
         containers:
         - name: ack-cube
           image: registry.cn-hangzhou.aliyuncs.com/acr-toolkit/ack-cube:1.0 # Replace with the address of the image that you want to use in the format of <image_name:tags>. 
           ports:
           - containerPort: 80 # The container port that you want to expose. 
           resources:
             limits: # The resource limits. 
               cpu: '1'
               memory: 1Gi
             requests: # The resource requests.
               cpu: 500m
               memory: 512Mi        

2. Run the following command to deploy the ack-cube application:

   kubectl apply -f ack-cube.yaml

3. Run the following command to query the status of the application:

   kubectl get deployment ack-cube

   Expected output:

   NAME       READY   UP-TO-DATE   AVAILABLE   AGE
   ack-cube   2/2     2            2           96s

4. Use the following YAML template to create an ack-cube-svc.yaml file. Set selector to the value of matchLabels in the ack-cube.yaml file. In this example, the value is app: ack-cube. This adds the application to the backend of the Service.

   apiVersion: v1
   kind: Service
   metadata:
     labels:
       app: ack-cube
     name: ack-cube-svc
     namespace: default
   spec:
     ports:
     - port: 80
       protocol: TCP
       targetPort: 80
     selector:
       app: ack-cube # You must specify the value of the matchLabels parameter in the YAML file that is used to create the Deployment. 
     type: LoadBalancer

5. Run the following command to create a Service named ack-cube-svc and use the Service to expose the application.

   ACK automatically creates an Internet-facing Server Load Balancer (SLB) instance and associates the instance with the Service.

   kubectl apply -f ack-cube-svc.yaml

6. Run the following command to verify that the LoadBalancer Service is created:

   The application that you created is exposed by using the IP address in the EXTERNAL-IP column in the output.

   kubectl get svc ack-cube-svc

   Expected output:

   NAME           TYPE           CLUSTER-IP      EXTERNAL-IP     PORT(S)        AGE
   ack-cube-svc   LoadBalancer   172.16.72.161   47.94.xx.xx   80:31547/TCP   32s

Step 5: Test the application

Enter the IP address (EXTERNAL-IP) in the address bar of your browser and press Enter to start the magic cube game.

Release resources

You are charged a cluster management fee and a cloud service fee for the ACK Pro cluster that you use. The cluster management fee is charged by ACK. The cloud service fee is charged by the cloud services used by the ACK Pro cluster. Take note of the following items after you create an ACK Pro cluster.

• If you no longer need to use the cluster, go to the Clusters page in the ACK console, find the cluster, and then choose More > Delete in the Actions column. In the Delete Cluster page, select Delete ALB Instances Created by the Cluster, Delete Alibaba Cloud DNS PrivateZone instances Created by the Cluster, Delete Associated Log Service Project, and I understand the above information and want to delete the specified cluster. Then, click OK. For more information about how to delete an ACK Pro cluster, see Delete ACK clusters.

• If you need to keep the cluster, top up your account once your account balance is less than CNY 100. For more information about the billing rules of Alibaba Cloud services, see Cloud service fee.

References

• To enable auto scaling for application pods, you can configure the Horizontal Pod Autoscaler (HPA), Cron Horizontal Pod Autoscaler (CronHPA), and Vertical Pod Autoscaler (VPA). For more information, see Auto scaling overview.

• In addition to exposing applications through Services, you can use Ingresses to enable application traffic routing at Layer 7. For more information, see Create an NGINX Ingress.

• In addition to monitoring container performance, you can monitor the cluster infrastructure, application performance, and operations on your workloads. For more information, see Observability overview.

• If you want to view monitoring information about applications, go to the cluster details page and choose Operations > Prometheus Monitoring in the left-side navigation pane. On the Prometheus Monitoring page, you can view monitoring information such as CPU utilization, memory utilization, and network I/O.