Connect to Kubernetes clusters by using kubectl

Connect to an ACK cluster by using kubectl

1. Install and set up a kubectl client.
   For more information, see Install and set up kubectl.
2. Configure the credentials used to access the cluster.
   1. Log on to the ACK console.
   2. In the left-side navigation pane of the ACK console, click Clusters.
   3. On the Clusters page, find the cluster that you want to manage and click the name of the cluster or click Details in the Actions column. The details page of the cluster appears.
   4. In the left-side navigation pane of the details page, click Cluster Information.
   5. On the Cluster Information page, click the Connection Information tab.
      
   6. Configure the kubeconfig file used to access the cluster.
      • To connect to the cluster over the Internet, click the Public Access tab and copy the content in the code block to the $HOME/.kube/config file of your on-premises machine.
        Note By default, kubectl retrieves the config file in the $HOME/.kube/config directory. kubectl communicates with a Kubernetes cluster by using kubeconfig files.
      • To connect to the cluster over the internal network, click the Internal Access tab and copy the content in the code block to the $HOME/.kube/config file of your on-premises machine.

   Execution result

   • If you want to connect to a managed Kubernetes cluster, you can run kubectl commands to connect to the cluster from your on-premises machine after you configure the kubeconfig file.

   • If you want to connect to a dedicated Kubernetes cluster, you can obtain the IP address for SSH connection to a master node from the Basic Information tab and run kubectl commands to connect to the cluster from your on-premises machine.
     Note To use SSH to log on to a dedicated Kubernetes cluster, you must enable SSH logon when you create the cluster. For more information, see Create a dedicated Kubernetes cluster.

Generate a temporary kubeconfig file

To ensure cluster security, you can generate a temporary kubeconfig file with a validity period. You can use this kubeconfig file to enable temporary access to ACK clusters.

1. Log on to the ACK console.
2. In the left-side navigation pane of the ACK console, click Clusters.
3. On the Clusters page, find the cluster that you want to manage and click the name of the cluster or click Details in the Actions column. The details page of the cluster appears.
4. On the Cluster Information page, click the Connection Information tab, and then click Generate Temporary kubeconfig.
5. In the Temporary kubeconfig dialog box, set the validity period of the kubeconfig file and select the access mode (public access or internal access).
   

   • If you want to connect to the cluster over the Internet, select Public Access and click Generate Temporary kubeconfig. Then, click Copy to copy the code block to the $HOME/.kube/config file of your on-premises machine. kubectl retrieves the credentials from this file.
   • If you want to connect to the cluster over the internal network, select Internal Access and click Generate Temporary kubeconfig. Then, click Copy to copy the code block into the $HOME/.kube/config file of your on-premises machine. kubectl retrieves the credentials from this file.

Revoke a kubeconfig file

To revoke a kubeconfig file, perform the following steps:

1. Log on to the ACK console.
2. In the left-side navigation pane of the ACK console, click Clusters.
3. On the Clusters page, find the cluster that you want to manage and click the name of the cluster or click Details in the Actions column. The details page of the cluster appears.
4. On the Cluster Information page, click the Connection Information tab, and then click Revoke KubeConfig.
5. In the Revoke KubeConfig dialog box, click OK.