This topic describes how to create a managed Kubernetes cluster in the Container Service for Kubernetes (ACK) console.
The following example shows how to create a managed Kubernetes cluster. Default values and minimal configurations are used in certain settings.
For more information about the limits of ACK clusters, see Create a managed Kubernetes cluster.
- Log on to the ACK console.
- In the left-side navigation pane, click Clusters.
- In the upper-right corner of the Clusters page, click Create Kubernetes Cluster. In the Select Cluster Template dialog box, find Standard Managed Cluster and click Create.
- Set the cluster parameters.
Default values are used for most parameters in this example. The following table describes the parameters.
- Complete the Cluster Configurations step.
Parameter Description Cluster NameEnter a name for the ACK cluster.Note The name must be 1 to 63 characters in length. It can contain digits, letters, and hyphens (-). Cluster specifications
Select a cluster type. Standard edition and Professional are supported.
Select a region to deploy the ACK cluster.
Resource GroupMove the pointer over All Resources at the top of the page and select the resource group to which the ACK cluster belongs. The name of the selected resource group appears on the page.
All Resources is selected in this example.
Select a time zone for the ACK cluster By default, the time zone configured for your browser is selected.
Use the default setting.
By default, the Docker runtime is selected. Use the default setting. For more information about the differences between Docker and Sandboxed-Container, see How do I select between Docker and Sandboxed-Container?.
Set a virtual private cloud (VPC) to deploy the cluster.Select a virtual private cloud (VPC) to deploy the ACK cluster. Shared VPCs and standard VPCs are supported.
Note ACK clusters support only VPCs. You can select a VPC from the drop-down list. If no VPC is available, click Create VPC to create one. For more information, see Create a VPC.
- Shared VPC: The owner of a VPC (resource owner) can share vSwitches in the VPC under the account of the owner with other accounts in the same organization.
- Standard VPC: The owner of a VPC (resource owner) cannot share vSwitches in the VPC under the account of the owner with other accounts.
You can select up to three vSwitches that are deployed in different zones. If no vSwitch is available, click Create VSwitch to create one. For more information, see Create a VSwitch.
By default, Flannel is selected. For more information about Flannel and Terway, see Flannel and Terway.
Pod CIDR Block
If you select Flannel, you must set Pod CIDR Block.
The CIDR block specified by Pod CIDR Block cannot overlap with that of the VPC or existing ACK clusters in the VPC. The CIDR Block cannot be modified after it is specified. The Service CIDR block cannot overlap with the Pod CIDR block. For more information about subnetting for ACK clusters, see Assign CIDR blocks to resources in a Kubernetes cluster under a VPC.
Set Service CIDR. The CIDR block specified by Service CIDR cannot overlap with that of the VPC or existing ACK clusters in the VPC. The CIDR block cannot be modified after it is specified. The Service CIDR block cannot overlap with the pod CIDR block. For more information about subnetting for ACK clusters, see Assign CIDR blocks to resources in a Kubernetes cluster under a VPC.
IP Addresses per Node
The default value is 64. IP Addresses per Node specifies the maximum number of IP addresses that can be assigned to each node.
By default, Configure SNAT for VPC is selected.
By default, an ACK cluster cannot be accessed over the Internet. If the VPC that you select for the ACK cluster cannot access the Internet, you can select Configure SNAT for VPC. Then, ACK creates a Network Address Translation (NAT) gateway and configures Source Network Address Translation (SNAT) entries to enable Internet access for the VPC.
By default, Expose API Server with EIP is not selected.The ACK API server provides multiple HTTP-based RESTful APIs, which can be used to create, delete, modify, query, and monitor resources such as pods and Services.
- If you select this check box, an EIP is created and attached to a public-facing Server Load Balancer (SLB) instance. Port 6443 used by the API server is opened on master nodes. You can connect to and manage the ACK cluster by using kubeconfig over the Internet.
- If you clear this check box, no EIP is created. You can connect to and manage the ACK cluster only by using kubeconfig from within the VPC.
RDS WhitelistSet the Relational Database Service (RDS) whitelist. Add the IP addresses of nodes in the ACK cluster to the RDS whitelist.Note To enable an RDS instance to access the ACK cluster, you must deploy the RDS instance in the same VPC as the ACK cluster.
By default, Relational Database Service (RDS) whitelist is not configured.
You can select Create Basic Security Group, Create Advanced Security Group, or Select Existing Security Group. For more information, see Overview.
By default, Create Advanced Security Group is selected. The default setting is used in this example.
The advanced settings of the cluster are not configured in this example. For more information about the advanced settings of an ACK cluster, see Configure advanced settings for a cluster.
- Click Next:Worker Configurations to configure worker nodes in the Worker Configurations step.
Specify whether to use existing Elastic Compute Service (ECS) instances or purchase ECS instances. By default, Create Instance is selected.
By default, the pay-as-you-go billing method is selected. The pay-as-you-go and subscription billing methods are supported.
You can select multiple instance types. For more information, see Instance families.
The selected instance types are displayed.
Specify the number of worker nodes to be created.
System Disk By default, ultra disk is selected. The default storage capacity is 120 GiB. Mount Data Disk
By default, this option is not selected.
Enhanced SSDs, SSDs, and ultra disks are supported. You can enable disk encryption and backup when you mount data disks.
Operating System By default, Alibaba Cloud Linux 2.1903 is selected. Logon Type
- Set the key pair.
- Key Pair: Select an SSH key pair from the drop-down list.
- create a key pair: Create an SSH key pair if no SSH key pair is available. For more information about how to create an SSH key pair, see Create an SSH key pair. After the key pair is created, set it as the credential that is used to log on to the ACK cluster.
- Password: Enter the password that is used to log on to the nodes.
- Confirm Password: Enter the password again.
Advanced settings of worker nodes
The advanced settings of worker nodes are not configured in this example. For more information about the advanced settings of a cluster, see Configure advanced settings for a cluster.
- Set the key pair.
- Click Next:Component Configurations to configure components in the Component Configurations step.
Parameter Description Ingress
By default, Install Ingress Controllers is selected. Select Public Network for SLB Network Type.
By default, CSI is selected. For more information about the FlexVolume and CSI plug-ins, see Volume plug-ins.
Specify whether to install the Cloud Monitor agent. By default, Install CloudMonitor Agent on ECS Instance and Enable Prometheus Monitoring are selected. After the Cloud Monitor agent is installed on ECS nodes, you can view monitoring data about the nodes in the Cloud Monitor console.
The Cloud Monitor Agent is not installed in this example.
Specify whether to enable Log Service. You can select an existing Log Service project or create a new one.
By default, Enable Log Service is selected. When you create an application, you can perform a few steps to enable Log Service. For more information, see Use Log Service to collect container logs.
By default, Install node-problem-detector and Create Event Center is selected. You can also specify whether to create Ingress dashboard in the Log Service console.
Log Service is not set up in this example.
Workflow EngineSpecify whether to enable Alibaba Cloud Genomics Compute Service (AGS).
- If you select this check box, the system automatically installs the AGS workflow plug-in when the system creates the ACK cluster.
- If you clear this check box, you must manually install the AGS workflow plug-in. For more information, see Introduction to AGS CLI.
AGS is not selected in this example.
- Click Next:Confirm Order.
- Read the Terms of Service and select the check box, and click Create Cluster.Note It requires about 10 minutes to create an ACK cluster that contains multiple nodes.
- Complete the Cluster Configurations step.