All Products
Search

This Product

    Container Service for Kubernetes:Access AI Dashboard

    Document Center

    Container Service for Kubernetes:Access AI Dashboard

    Last Updated:Apr 09, 2025

    The cloud-native AI component consists of AI Dashboard and AI Developer Console. You can access AI Dashboard and AI Developer Console over the Internet or through a private network. This topic describes how to access AI Dashboard.

    Prerequisites

    • A Container Service for Kubernetes (ACK) Pro cluster is created. Make sure that Monitoring Agents and Log Service are enabled on the Component Configurations wizard page when you create the cluster. For more information, see Create an ACK Pro cluster.

    • The Kubernetes version of the ACK Pro cluster is 1.18 or later.

    • The cloud-native AI suite is installed.

    Method 1: Access over a private network

    You can access AI Dashboard by using a private domain name or a private IP address. Before you access AI Dashboard through a private network, make sure that the cluster network is connected to your office network.

    Private domain name

    1. When you install the cloud-native AI suite, set Select one of the following methods to access AI Dashboard to Internal Domain and enter a private domain name.

      • After an ACK cluster is created, an NGINX Ingress controller that has two pod replicas is automatically deployed. An Internet-facing SLB instance is also created as the frontend load balancing Service.

      • For more information about how to deploy another independent NGINX Ingress controller, see Deploy multiple Ingress controllers in a cluster.私网域名

    2. After the cloud-native AI component set is installed, you can use the private domain name to access AI Dashboard.

    Private IP address

    1. When you install the cloud-native AI suite, set Select one of the following methods to access AI Dashboard: to Private IP.私网IP

    2. After the cloud-native AI component set is installed, you can use SSL-VPN or sshuttle to access AI Dashboard.

      SSL-VPN

      SSL-VPN allows remote clients to connect to a virtual private cloud (VPC) and access the applications or services deployed in the VPC in a secure manner. You can configure SSL-VPN on a VPN gateway to access AI Dashboard from a remote client. For more information, see Connect a client to a VPC by using SSL-VPN.

      sshuttle

      Use sshuttle to access AI Dashboard. sshuttle is the most cost-effective VPN over SSH solution.

      1. Prepare a jump server that has Internet access and runs Python 3.6 or later.

      2. Enable Internet access for the cluster.

      3. We recommend that you configure an IP whitelist in the security group of the cluster to limit IP addresses. For more information, see Configuration guide for ECS security groups.

      4. Install sshuttle. macOS is used in the sample code and sshuttle 1.0.5 is installed. For more information about how to install sshuttle in other operating systems, see sshuttle. 

        brew install sshuttle@1.0.5

      5. Enable the proxy feature of sshuttle. Specify the IP addresses of the SSH jump server and cluster node that you want to access. In the sample code, the public IP address of the jump server is 39.96.XX.XX and the IP address of the cluster node is 192.168.100.0. 

        sudo sshuttle -r jack@39.96.XX.XX 192.168.100.0/24 -vv

      6. Run the following command to query all Services in the kube-ai namespace: 

        kubectl get service -n kube-ai

        Expected output:

        image.png

        • The IP address of AI Dashboard follows ack-ai-dashboard-admin-ui.

        • The IP address of AI Developer Console follows ack-ai-dev-console.

      7. Access the IP address of AI Dashboard from a web browser.

    Method 2: Access over the Internet (not recommended for production environments)

    Important

    This method does not use TLS. To access AI Dashboard, you must prepare a domain name and configure a security certificate. For more information, see Access control.

    1. When you install the cloud-native AI suite, if you set Select one of the following methods to access AI Dashboard to Public Domain, you can access AI Dashboard over the Internet. To access AI Dashboard through a public domain name, make sure that an NGINX Ingress is installed in the ACK cluster.

      • After an ACK cluster is created, an NGINX Ingress controller that has two pod replicas is automatically deployed. An Internet-facing SLB instance is also created as the frontend load balancing Service.

      • For more information about how to deploy another independent NGINX Ingress controller, see Deploy multiple Ingress controllers in a cluster.

        通过公网访问

    2. After the cloud-native AI suite is installed, the cluster creates an Ingress domain name for AI Dashboard.

      1. Log on to the ACK console. In the left-side navigation pane, click Clusters.

      2. On the Clusters page, find the cluster that you want to manage and click its name. In the left-side navigation pane, choose Applications > Cloud-native AI Suite.

      3. View the status of AI Dashboard and AI Developer Console. When the status of AI Dashboard is Ready, you can directly click AI Dashboard to access it.

        运维控制台