Container Service for Kubernetes:Cluster check items and fix solutions

Category

Check item

Description

Cluster resources

APIServer SLB

Checks if the SLB instance exists.

Checks if the SLB instance status is Normal.

Checks if the SLB listener configuration, including port and protocol, is valid.

Checks if the SLB instance backend server group configuration is valid.

Checks if the SLB access control configuration is correct. If no access control is configured, the check passes.

VPC

Checks if the VPC-connected instance exists.

Checks if the VPC-connected instance is Normal.

vSwitch

Checks if the vSwitch exists.

Checks if the vSwitch is Normal.

Checks if the vSwitch has at least two available IP addresses.

Cluster components

Kube Proxy Master

Checks if the component exists.

Kube Proxy Worker

Checks if the component exists.

API Service

Checks if any unavailable API Services exist.

Cluster components

Checks if the Terway component version meets requirements.

Checks if the CoreDNS component version meets requirements.

Checks if the cloud-controller-manager (CCM) component version meets requirements.

Checks if the Nginx Ingress Controller component version meets requirements.

Checks if the Metric Server component version meets requirements.

Deprecated API

Checks if the cluster uses deprecated APIs.

Cluster configuration

iptables configuration

Checks if the iptables configuration is valid.

Operating system

Checks if the operating system supports the upgrade.

yum

Checks if yum is working correctly.

Kubelet

Checks if the Kubelet configuration meets expectations.

Container runtime

Checks if the Docker or containerd runtime is Normal.

Manifest configuration

Checks if the manifest file meets expectations.

Category

Check item

Description

Cluster resources

APIServer SLB

Checks if the SLB instance exists.

Checks if the SLB instance status is Normal.

Checks if the SLB listener configuration, including port and protocol, is valid.

Checks if the SLB instance backend server group configuration is valid.

Checks if the SLB access control configuration is correct. If no access control is configured, the check passes.

VPC

Checks if the VPC-connected instance exists.

Checks if the VPC-connected instance is Normal.

vSwitch

Checks if the vSwitch exists.

Checks if the vSwitch is Normal.

Checks if the vSwitch has at least two available IP addresses.

Cluster components

Kube Proxy Master

Checks if the component exists.

Kube Proxy Worker

Checks if the component exists.

API Service

Checks if any unavailable API Services exist.

Category

Check item

Description

cloud-controller-manager

Addon_CCM

Checks if upgrading the component causes SLB changes.

Component_Block_Version

Checks if the CCM version can be upgraded.

csi-plugin

DaemonSet_Annotation

Checks if the DaemonSet annotations meet expectations.

Csi_Driver_Attributes

Checks if the Container Storage Interface (CSI) Driver properties meet requirements.

csi-provisioner

Stateful_Set_Exist

Checks if the resource is a StatefulSet.

Deployment_Annotation

Checks if the deployment annotations meet expectations.

Storage_Class_Attributes

Checks if the StorageClass properties meet requirements.

nginx-ingress-controller

Deployment_Healthy

Checks if the Nginx Ingress deployment is healthy.

Deployment_Not_Under_HPA

Checks if a Horizontal Pod Autoscaler (HPA) is configured for the deployment.

Deployment_Not_Modified

Checks if the deployment was modified.

Nginx_Ingress_Pod_Error_Log

Checks if Nginx has error logs.

LoadBalancer_Service_Healthy

Checks if the Nginx service is healthy.

Nginx_Ingress_Configuration

Checks if the Ingress has incompatible configurations.

aliyun-acr-credential-helper

RamRole_Exist

Checks if the component is granted the AliyunCSManagedAcrRole authorization.

ack-cost-exporter

RamRole_Exist

Checks if the component is granted the AliyunCSManagedCostRole authorization.