A sandboxed container runtime runs applications and their dependencies in a lightweight virtual machine. It provides application pods with an independent kernel layer and fine-grained isolation. This prevents malicious attacks or vulnerabilities in a container from affecting the host or other containers. ACK uses node pools to manage nodes. This topic describes how to create a sandboxed container node pool and scale out sandboxed container nodes.
Limits
Cluster version: Only ACK managed clusters and ACK dedicated clusters of versions 1.16 to 1.34 are supported. To upgrade a cluster, see Manually upgrade the cluster.
Operating system: Sandboxed container node pools do not support custom images.
For clusters that run a version earlier than 1.30, only Alibaba Cloud Linux 3 and Alibaba Cloud Linux 2 (maintenance has stopped) are supported.
For clusters that run version 1.30 or later, only Alibaba Cloud Linux 3 is supported.
Instance types: Only ECS Bare Metal Instance types are supported.
Network plug-ins: Sandboxed container node pools support only the Flannel network plug-in and the Terway network plug-in in some modes. When you use the Terway network plug-in, the dedicated ENI mode is not supported and the DataPath v2 feature cannot be enabled.
Create sandboxed container node pools
When you create a node pool, set the container runtime to sandboxed container. For more information, see Create and manage node pools.
Scale out sandboxed container node pools
Log on to the Container Service console. In the navigation pane on the left, click Clusters.
On the Clusters page, click the name of your cluster. In the navigation pane on the left, click .
In the Actions column of the target node pool, click Scale. Select Manual mode and set Expected Nodes. Follow the on-screen instructions to submit the changes.
After the scale-out operation is complete, the number of nodes in the node pool is updated to the number of desired nodes.
References
To create a sandboxed container application, see Create stateless workloads (Deployment).
To create resources using OpenAPI, see CreateCluster – Create a cluster and CreateClusterNodePool – Create a node pool.