To access a Service in an ACK cluster via an MSE ingress, you must grant the MSE Ingress Controller the required permissions to access MSE before deploying the Service. This topic describes how to grant permissions to the MSE Ingress Controller for an ACK managed cluster and an ACK dedicated cluster.
Grant permissions for ACK managed or Serverless clusters
You can grant permissions to the MSE Ingress Controller in an ACK managed cluster or an ACK Serverless cluster in one of two ways.
-
To use an MSE ingress in an existing ACK managed cluster or ACK Serverless cluster, see Method 1.
-
To use an MSE ingress when creating a new ACK managed cluster or ACK Serverless cluster, see Method 2.
Method 1: Grant permissions in add-ons
When you install the MSE Ingress Controller from the Add-ons page, a permission check is automatically performed. If the Pre-check Failed message appears, follow these steps.
-
Hover over the Pre-check Failed message and click View Check Report.
-
On the Check Report page, click the red box under Exception, and then click the link in the panel that appears.
-
On the Quick Authorization for Access Control page, click Confirm Authorization.
-
Reinstall the add-on.
Method 2: During cluster creation
-
When you install the MSE Ingress Controller during cluster creation, navigate to the Component Configurations step. In the Dependency Check section, find the MSE Ingress Role Authorization Check. If its Status is Not Passed, click Go to Authorize.
-
On the Quick Authorization for Access Control page, click Confirm Authorization.
-
After the authorization is complete, return to the Component Configurations page and click Recheck. After the check passes, click Create Cluster.
Method 1: Grant permissions when creating a cluster
-
During cluster creation, go to the Confirm Order step. In the Dependency Check section, check the status of MSE Ingress Authorization Check. If Failed is displayed, click Authorize Now.
-
On the RAM Quick Authorization page, click Authorize.
-
Return to the Confirm Order step and click Re-check. If the check passes, click Create Cluster.
Related documents
-
After authorization is successful, you can use the MSE Ingress Controller to access Container Service. For details, see Access Container Service by using an MSE ingress.
-
To upgrade or uninstall the MSE Ingress Controller component, see Manage the MSE Ingress Controller component.