Authenticate with a password or key pair to access your self-managed master nodes.
Configure SSH access and connect to master nodes with password or key pair authentication.
Prerequisites
-
An ACK dedicated cluster with its API server exposed to the internet.
Before you begin
The required steps depend on whether you enabled SSH at cluster creation.
If you enabled SSH logon at cluster creation: ACK generated a public IP for SSH access. Find it on the Basic Information tab under Master Node IP Address for SSH Logon. Skip to Connect to the master nodes.
If you did not enable SSH logon at cluster creation: Master nodes are not directly SSH-accessible because traffic routes through a Server Load Balancer (SLB) instance. Add a TCP listener on port 22 to enable access. Complete both sections below.
Add an SSH listener to the SLB instance
Skip if you enabled SSH logon at cluster creation.
-
Log on to the ACK console. In the left-side navigation pane, click Clusters.
-
On the Clusters page, click your cluster name. In the left-side pane, click Cluster Information.
-
On the Basic Information tab, find API server SLB and click the instance ID.
-
Click Create Listener.
-
Configure the listener:
-
Select TCP as the listener protocol, set Listener Port to 22, and click Next.
-
Select Default Server Group. In the Selected Servers section, enter 22 in the Port column for all master nodes. Set the weights as needed and click Next. See Add a TCP listener.
-
In the Health Check step, click Next.
-
In the Confirm step, click Submit.
The Listener tab shows the tcp_22 listener.
-
-
Click the Instance Details tab. The Endpoint in the Billing Information section is the SLB public IP address. Use this IP to connect.
Connect to the master nodes
SSH authentication uses the method you selected at cluster creation: password or key pair.
Password logon
Connect as root with the password set at cluster creation:
ssh root@<master-node-IP>
Replace <master-node-IP> with the SLB public IP address (or the Master Node IP Address for SSH Logon value if SSH was enabled at creation).