Alibaba Cloud Container Compute Service (ACS) can collect control plane component logs and ship them as log streams to a Simple Log Service (SLS) project in your Alibaba Cloud account. This topic describes how to enable, view, and disable log collection for control plane components.
Prerequisites
Before you begin, make sure that:
Your Alibaba Cloud account has enough Logstore quota in Simple Log Service. The default quota is 50 Logstores per account. To increase it, submit a ticket to the Simple Log Service team.
How it works
Control plane component logs help you manage clusters in a secure and efficient manner.
Logs from each control plane component are shipped as log streams to a separate Logstore in the specified SLS project. The SLS project is billed on a pay-as-you-go basis. For billing details, see Pay-by-feature.
ACS collects logs for the following control plane components:
| Component | Logstore | Description |
|---|---|---|
| kube-apiserver | apiserver | Exposes the Kubernetes API. For more information, see kube-apiserver. |
| kube-controller-manager | kcm | Runs controller processes and acts as the control center of the Kubernetes cluster. For more information, see kube-controller-manager. |
| Cloud Controller Manager (CCM) | ccm | Integrates Kubernetes with Alibaba Cloud services such as Classic Load Balancer (CLB) and Virtual Private Cloud (VPC). The CCM manages features such as load balancing and cross-node communication. CLB was formerly known as Server Load Balancer (SLB). For more information, see Cloud Controller Manager. |
For the full list of Kubernetes components, see Kubernetes components.
Enable log collection for control plane components
Log on to the ACS console. In the left-side navigation pane, click Clusters.
On the Clusters page, click the ID of the cluster you want to manage. In the left-side navigation pane of the cluster details page, choose Operations > Log Center.
Click the Logs of Control Plane Components tab, then click Enable Component Log Collection.
View the logs of control plane components
After log collection is enabled, view the logs from either the SLS console or the ACS console. Each component's logs are stored in its dedicated Logstore (apiserver for kube-apiserver, kcm for kube-controller-manager, ccm for Cloud Controller Manager).
Use the Simple Log Service console
Log on to the Simple Log Service console.
In the Projects section, click the name of the project used by the cluster.
On the Log Storage page, select the Logstore for the component you want to inspect from the Logstores list:
kube-apiserver logs:
apiserverLogstorekube-controller-manager logs:
kcmLogstoreCloud Controller Manager logs:
ccmLogstore
Use the ACS console
The ACS console provides two navigation paths to the same log view.
From the Cluster Information page:
On the Cluster Information page, click the Basic Information tab. In the list, click View to the right of Log Collection for Control Plane Components.
On the project details page, select a Logstore from the Logstores list to view the logs for that component.
From the Operations menu:
On the Clusters page, click the ID of the cluster you want to manage. In the left-side navigation pane of the cluster details page, choose Operations > Log Center.
Click the Logs of Control Plane Components tab. Select a control plane component to view its logs.
Disable log collection for control plane components
On the Clusters page, click the ID of the cluster you want to manage. In the left-side navigation pane of the cluster details page, choose Operations > Log Center.
Click the Logs of Control Plane Components tab. Click Close in the upper-right corner.
In the confirmation dialog, click OK.
What's next
To search and query control plane component logs (kube-apiserver, kube-controller-manager, and Cloud Controller Manager), see Log search overview.