All Products
Search
Document Center

Container Service for Kubernetes:Connect to ACK dedicated cluster master nodes with SSH

Last Updated:Jun 16, 2026

Authenticate with a password or key pair to access your self-managed master nodes.

Configure SSH access and connect to master nodes with password or key pair authentication.

Prerequisites

Before you begin

The required steps depend on whether you enabled SSH at cluster creation.

If you enabled SSH logon at cluster creation: ACK generated a public IP for SSH access. Find it on the Basic Information tab under Master Node IP Address for SSH Logon. Skip to Connect to the master nodes.

If you did not enable SSH logon at cluster creation: Master nodes are not directly SSH-accessible because traffic routes through a Server Load Balancer (SLB) instance. Add a TCP listener on port 22 to enable access. Complete both sections below.

Add an SSH listener to the SLB instance

Skip if you enabled SSH logon at cluster creation.
  1. Log on to the ACK console. In the left-side navigation pane, click Clusters.

  2. On the Clusters page, click your cluster name. In the left-side pane, click Cluster Information.

  3. On the Basic Information tab, find API server SLB and click the instance ID.

  4. Click Create Listener.

  5. Configure the listener:

    1. Select TCP as the listener protocol, set Listener Port to 22, and click Next.

    2. Select Default Server Group. In the Selected Servers section, enter 22 in the Port column for all master nodes. Set the weights as needed and click Next. See Add a TCP listener.

    3. In the Health Check step, click Next.

    4. In the Confirm step, click Submit.

    The Listener tab shows the tcp_22 listener.

  6. Click the Instance Details tab. The Endpoint in the Billing Information section is the SLB public IP address. Use this IP to connect.

Connect to the master nodes

SSH authentication uses the method you selected at cluster creation: password or key pair.

Password logon

Connect as root with the password set at cluster creation:

ssh root@<master-node-IP>

Replace <master-node-IP> with the SLB public IP address (or the Master Node IP Address for SSH Logon value if SSH was enabled at creation).

Key pair logon

See Connect to a Linux instance with an SSH key pair.