Elastic Container Instance:ECI pod annotations

Preemptible instances

Use preemptible instances to reduce compute costs. Two bid policies are available: SpotAsPriceGo uses the market price at purchase time; SpotWithPriceLimit lets you set a maximum hourly price.

metadata:
  annotations:
    # Bid policy. Valid values:
    #   SpotAsPriceGo      – market price at purchase time (recommended for simplicity)
    #   SpotWithPriceLimit – your specified maximum hourly price; requires eci-spot-price-limit
    k8s.aliyun.com/eci-spot-strategy: "SpotAsPriceGo"

    # Maximum hourly price, accurate to 3 decimal places.
    # Required when eci-spot-strategy is SpotWithPriceLimit; ignored otherwise.
    k8s.aliyun.com/eci-spot-price-limit: "0.500"

    # Protection period in hours. Default: 1. Set to 0 to disable protection.
    k8s.aliyun.com/eci-spot-duration: "1"

    # Fall back to a pay-as-you-go instance if preemptible inventory is insufficient.
    # Default: false
    k8s.aliyun.com/eci-spot-fallback: "true"

For more information, see Create a preemptible elastic container instance.

Pulling images from Container Registry

To pull images from a Container Registry Enterprise Edition instance without configuring a secret, specify the instance ID and the required RAM role ARNs.

metadata:
  annotations:
    # Container Registry Enterprise Edition instance ID.
    # For cross-region pulls, prefix the region ID: "cn-beijing:cri-j36zhodptmyq****"
    k8s.aliyun.com/acr-instance-ids: "cri-j36zhodptmyq****"

    # ARN of the RAM role in the account that owns the ECI resources.
    # Required when creating resources with a RAM role.
    k8s.aliyun.com/acr-service-arns: "acs:ram::1609982529******:role/role-assume"

    # ARN of the RAM role in the account that owns the Container Registry instance.
    # Required only when the Container Registry instance belongs to a different Alibaba Cloud account.
    k8s.aliyun.com/acr-user-arns: "acs:ram::1298452580******:role/role-acr"

For more information, see Pull images from a Container Registry instance without using a secret.

Pulling images from a self-managed repository

For images hosted in a self-managed repository, configure the registry address based on how it handles connections.

metadata:
  annotations:
    # HTTP registry: ECI pulls over HTTP instead of the default HTTPS.
    # Prevents pull failures caused by protocol mismatch.
    k8s.aliyun.com/plain-http-registry: "harbor***.pre.com,192.168.XX.XX:5000,reg***.test.com:80"

    # Self-signed certificate registry: ECI skips certificate verification.
    # Prevents pull failures caused by certificate validation errors.
    k8s.aliyun.com/insecure-registry: "harbor***.pre.com,192.168.XX.XX:5000,reg***.test.com:80"

For more information, see Pull an image from a self-managed image repository.

Security groups

metadata:
  annotations:
    # One or more security group IDs, separated by commas.
    # Limits: max 5 groups; all groups must belong to the same VPC and be the same type.
    k8s.aliyun.com/eci-security-group: "sg-bp1dktddjsg5nktv****"

For more information, see Assign security groups.

Elastic IP addresses

Assign a static public IP address to a pod using an existing Elastic IP Address (EIP) or let ECI create one automatically.

metadata:
  annotations:
    # Option 1: Use an existing EIP by ID.
    k8s.aliyun.com/eci-eip-instanceid: "eip-bp1q5n8cq4p7f6dzu****"

    # Option 2: Let ECI create and associate an EIP automatically.
    k8s.aliyun.com/eci-with-eip: "true"

    # EIP bandwidth cap in Mbit/s. Default: 5.
    k8s.aliyun.com/eip-bandwidth: "5"

    # Associate the EIP with an existing EIP bandwidth plan.
    k8s.aliyun.com/eip-common-bandwidth-package-id: "cbwp-2zeukbj916scmj51m****"

    # EIP line type. Valid values: BGP (BGP Multi-ISP), BGP_PRO (BGP Multi-ISP Pro)
    # Applies only to pay-as-you-go EIPs.
    k8s.aliyun.com/eip-isp: "BGP"

    # EIP metering method. Valid values: PayByBandwidth, PayByTraffic
    k8s.aliyun.com/eip-internet-charge-type: "PayByBandwidth"

    # Allocate the EIP from a specific IP address pool.
    k8s.aliyun.com/eip-public-ip-address-pool-id: "pippool-bp187arfugi543y1s****"

For more information, see Associate an EIP with an elastic container instance.

IPv6

metadata:
  annotations:
    # Assign an IPv6 address to the pod.
    k8s.aliyun.com/eci-enable-ipv6: "true"

    # Enable Internet access over the IPv6 address.
    k8s.aliyun.com/eci-ipv6-bandwidth-enable: "true"

    # Peak public bandwidth for the IPv6 address (e.g., "100M").
    k8s.aliyun.com/eci-ipv6-bandwidth: "100M"

For more information, see Assign an IPv6 address to an Elastic Container Instance-based pod.

Bandwidth limits

Limit inbound and outbound bandwidth at the pod level.

metadata:
  annotations:
    kubernetes.io/ingress-bandwidth: "40M"
    kubernetes.io/egress-bandwidth: "20M"

For more information, see Limit the inbound and outbound bandwidth of pods.

NTP server

metadata:
  annotations:
    # IP address of the Network Time Protocol (NTP) server.
    k8s.aliyun.com/eci-ntp-server: "100.100.*.*"

For more information, see Configure the NTP service.