Alauda Container Platform

Alauda Container Platform
Security
Platform Security Configurations

Kubernetes Support Matrix

Prepare for Installation

Node Preprocessing

Global Cluster Disaster Recovery

Pre-Upgrade Preparation

Upgrade the global cluster

Upgrade Workload Clusters

Accessing the Web Console

Customizing the Web Console

Customizing the Left Navigation

Getting Started with ACP CLI

Configuring ACP CLI

Usage of ac and kubectl Commands

Managing CLI Profiles

Extending ACP CLI with Plugins

AC CLI Developer Command Reference

AC CLI Administrator Command Reference

Upgrading Clusters

Immutable Infrastructure

Node Management

Add Nodes to On-Premises Clusters

Node Monitoring

Managed Clusters

Import Clusters

Import Standard Kubernetes Cluster

Import OpenShift Cluster

Import Amazon EKS Cluster

Import GKE Cluster

Import Huawei Cloud CCE Cluster (Public Cloud)

Import Azure AKS Cluster

Import Alibaba Cloud ACK Cluster

Import Tencent Cloud TKE Cluster

Register Cluster

Public Cloud Cluster Initialization

Network Initialization

AWS EKS Cluster Network Initialization Configuration

AWS EKS Supplementary Information

Huawei Cloud CCE Cluster Network Initialization Configuration

Azure AKS Cluster Network Initialization Configuration

Google GKE Cluster Network Initialization Configuration

Storage Initialization

AWS EKS Cluster Storage Initialization Configuration

Huawei Cloud CCE Cluster Storage Initialization Configuration

Azure AKS Cluster Storage Initialization Configuration

Google GKE Cluster Storage Initialization Configuration

Network Configuration for Import Clusters

Fetch import cluster information

Trust an insecure image registry

Collect Network Data from Custom Named Network Cards

Configure audit collection for imported standard Kubernetes clusters

Creating an On-Premise Cluster

Hosted Control Plane

Cluster Node Planning

etcd Encryption

Add External Address for Built-in Registry

Optimize Pod Performance with Manager Policies

Updating Public Repository Credentials

Backup and Recovery

etcd Backup and Restore

Application Backup and Restore

Backup repository

Create an application backup schedule

Run an Application Restore Task

Image Registry Replacement

Configure Domain

Creating Certificates

Configure Services

Configure Ingresses

Configure Subnets

Configure MetalLB

Configure GatewayAPI Gateway

Configure GatewayAPI Policy

Configure GatewayAPI Route

Configure NodeLocal DNSCache

Configure CoreDNS

Tasks for Ingress-Nginx

Tasks for Envoy Gateway

Soft Data Center LB Solution (Alpha)

Understanding Kube-OVN CNI

Preparing Kube-OVN Underlay Physical Network

Kube-OVN Underlay + MetalLB LoadBalancer Service Configuration

Cluster Interconnection (Alpha)

Configure Egress Gateway

Configuring Kube-OVN Network to Support Pod Multi-Network Interfaces (Alpha)

Configure Centralized Gateway

Configure IPPool

Automatic Interconnection of Underlay and Overlay Subnets

Configure Endpoint Health Checker

alb

Task: Migrate from OCP Route to GatewayAPI Route

Trouble Shooting

How to Solve Inter-node Communication Issues in ARM Environments?

Find Who Cause the Error

Persistent Volume

Access Modes and Volume Modes

Creating CephFS File Storage Type Storage Class

Creating CephRBD Block Storage Class

Create TopoLVM Local Storage Class

Creating an NFS Shared Storage Class

Deploy Volume Snapshot Component

Using Volume Snapshots

Generic ephemeral volumes

Using an emptyDir

Configuring Persistent Storage Using Local volumes

Configuring Persistent Storage Using NFS

Configuring Disaster Recovery For Persistent Volume Claims

Third‑Party Storage Capability Annotation Guide

Troubleshooting

Recover From PVC Expansion Failure

Creating a BucketClass for Ceph RGW

Creating a BucketClass for MinIO

Create a Bucket Request

Control Access & Quotas for COSI Buckets with CephObjectStoreUser (Ceph Driver)

Cluster Notification

Machine Configuration

Scalability and Performance

Evaluating Resources for Workload Cluster

Disk Configuration

Evaluating Resources for Global Cluster

Improving Kubernetes Stability for Large-Scale Clusters

Ceph Distributed Storage

Planning Your Deployment

Create Standard Type Cluster

Create Stretch Type Cluster

Accessing Storage Services

Managing Storage Pools

Node-specific Component Deployment

Adding Devices/Device Classes

Monitoring and Alerts

Replacing or Removing Devices

Replacing or Removing Storage Nodes

Configure a Dedicated Cluster for Distributed Storage

Cleanup Distributed Storage

Disaster Recovery

File Storage Disaster Recovery

Block Storage Disaster Recovery

Object Storage Disaster Recovery

Update the optimization parameters

Create Ceph Object Store User

Setting Storage Pool Quotas

Enabling D3N Cache for Ceph RGW

Configure in-transit encryption

MinIO Object Storage

Adding a Storage Pool

Monitoring & Alerts

Data Disaster Recovery

MinIO to Rook Ceph RGW Data Migration Guide

TopoLVM Local Storage

Device Management

Monitoring and Alerting

Backup and Restore TopoLVM Filesystem PVCs with Velero

Remove Disks, Device-Class Volume Groups, or Nodes from ACP TopoLVM Local Storage

Configuring Striped Logical Volumes

Networking Operators

MetalLB Operator

Ingress Nginx Operator

Envoy Gateway Operator

Understanding ALB

Deploy High Available VIP for ALB

Bind NIC in ALB

Decision‑Making for ALB Performance Selection

Load Balancing Session Affinity Policy in ALB

Header Modification

TCP/HTTP Keepalive

ALB with Ingress-NGINX Annotation Compatibility

Network Security

Understanding Network Policy APIs

Admin Network Policy

Ingress and Load Balancing

Ingress and Load Balancing with Envoy Gateway

Network Observability

Deploy with the Operator

Alauda Container Security

Alauda Cluster Authentication

Security and Compliance

Install Alauda Container Platform Compliance with Kyverno

Private Registry Access Configuration

Image Signature Verification Policy

Image Signature Verification Policy with Secrets

Image Registry Validation Policy

Container Escape Prevention Policy

Security Context Enforcement Policy

Network Security Policy

Volume Security Policy

Install Alauda Container Platform API Refiner

About Alauda Container Platform Compliance Service

Platform Security Configurations

Changing the Platform OIDC Client Secret

Disabling the PKCE Plain Method

Users and Roles

Manage User Roles

User Management

Manage User Group Roles

Create Local User Group

Manage Local User Group Membership

Create Kubernetes Roles

How to Create Custom Platform Role

LDAP Management

OIDC Management

Troubleshooting

Multitenancy(Project)

Manage Project Quotas

Manage Project Cluster

Manage Project Members

Automated Kubernetes Certificate Rotation

OLM Certificates

Certificate Monitoring

Rotate TLS Certs of Platform Access Addresses

Adding Virtual Machine Images

Update/Delete Virtual Machine Images

Update/Delete Image Credentials

Creating Windows Images Based on ISO using KubeVirt

Creating Linux Images Based on ISO Using KubeVirt

Exporting Virtual Machine Images

Virtual Machine

Creating Virtual Machines/Virtual Machine Groups

Batch Operations on Virtual Machines

Logging into the Virtual Machine using VNC

Managing Key Pairs

Managing Virtual Machines

Monitoring and Alerts

Quick Location of Virtual Machines

Configuring USB host passthrough

Virtual Machine Hot Migration

Virtual Machine Recovery

Clone Virtual Machines on KubeVirt

Physical GPU Passthrough Environment Preparation

Configuring High Availability for Virtual Machines

Create a VM Template from an Existing Virtual Machine

Troubleshooting

Pod Migration and Recovery from Abnormal Shutdown of Virtual Machine Nodes

Hot Migration Error Messages and Solutions

Configure Network

Control Virtual Machine Network Requests Through Network Policy

Configuring SR-IOV

Configuring Virtual Machines to Use Network Binding Mode for IPv6 Support

Configuring Multi-NIC Virtual Machine

Managing Virtual Disks

Backup and Recovery

Using Snapshots

Creating a simple application via image

Building Applications

Build application architecture

Application Types

Custom Applications

Understanding Parameters

Understanding Environment Variables

Understanding Startup Commands

Resource Unit Description

Creating Namespaces

Importing Namespaces

Pod Security Policies

UID/GID Assignment

Overcommit Ratio

Managing Namespace Members

Updating Namespaces

Deleting/Removing Namespaces

Creating Applications

Creating applications from Image

Creating applications from Chart

Creating applications from YAML

Creating applications from Code

Creating applications from Operator Backed

Creating applications by using CLI

Operation and Maintaining Applications

Application Rollout

Installing Alauda Container Platform Argo Rollouts

Application Blue Green Deployment

Application Canary Deployment

Status Description

Configuring HPA

Starting and Stopping Applications

Configuring VerticalPodAutoscaler (VPA)

Configuring CronHPA

Updating Applications

Exporting Applications

Updating and deleting Chart Applications

Version Management for Applications

Deleting Applications

Handling Out of Resource Errors

Working with Helm charts

Configuring ConfigMap

Configuring Secrets

Application Observability

Monitoring Dashboards

Setting Scheduled Task Trigger Rules

Add ImagePullSecrets to ServiceAccount

Service Serving Certificate

Overview of images

Creating images

Managing images

Install Via YAML

Install Via Web UI

Common CLI Command Operations

Using Alauda Container Platform Registry in Kubernetes Clusters

Alauda Container Platform Registry Data Backup and Recovery

Alauda Container Platform Registry Upgrade Guide

Source to Image

Lifecycle Policy

Installing Alauda Container Platform Builds

Upgrading Alauda Container Platform Builds

Managing applications created from Code

Creating an application from Code

Node Isolation Strategy

Create Node Isolation Strategy

Chart Repository

Download Packages

Upload Packages

Monitoring Module Architecture

Monitoring Component Selection Guide

Monitor Component Capacity Planning

Management of Metrics

Management of Alert

Management of Notification

Management of Monitoring Dashboards

Management of Probe

Backup and Restore of Prometheus Monitoring Data

VictoriaMetrics Backup and Recovery of Monitoring Data

Collect Network Data from Custom-Named Network Interfaces

Planning Infra Nodes for Monitoring

Distributed Tracing

Query Trace Logs

Non-Intrusive Integration of Tracing in Java Applications

Business Log Associated with the TraceID

Troubleshooting

Unable to Query the Required Tracing

Incomplete Tracing Data

About Logging Service

Component Health Status

Hardware accelerators

Alauda Build of NPU Operator

About Alauda Build of Hami

About Alauda Build of NVIDIA GPU Device Plugin

Alauda Service Mesh

Service Mesh 1.x

Service Mesh 2.x

About Alauda AI

About Alauda DevOps

Alauda Cost Management

About Alauda Cost Management

Alauda Application Services

Alauda Database Service for MySQL

About Alauda Database Service for MySQL-MGR

About Alauda Database Service for MySQL-PXC

Alauda Cache Service for Redis OSS

About Alauda Cache Service for Redis OSS

Alauda Streaming Service for Kafka

About Alauda Streaming Service for Kafka

Alauda Streaming Service for RabbitMQ

About Alauda Streaming Service for RabbitMQ

Alauda support for PostgreSQL

About Alauda support for PostgreSQL

Alauda Build of Keycloak

About Alauda Build of Keycloak

Operations Management

Parameter Template Management

Parameter Template Management

Backup Management

External S3 Storage

Backup Management

Inspection Management

Create Inspection Task

Exec Inspection Task

Update and Delete Inspection Tasks

How to set Inspection scheduling?

Inspection Optimization Recommendations

MySQL IO Load Optimization

MySQL Memory Usage Optimization

MySQL Storage Space Optimization

MySQL Active Thread Count Optimization

MySQL Row Lock Optimization

High CPU Usage in Redis

High Memory Usage in Redis

High CPU Utilization in Kafka

Kafka Rebalance Optimization

Kafka Memory Usage Optimization

Kafka Storage Space Optimization

RabbitMQ Mnesia Database Exception Handling

Alert Management

Relationship with Platform Capabilities

Upgrade Management

Instance Upgrade

Alauda Container Platform GitOps

About Alauda Container Platform GitOps

Alauda Hyperflux

About Alauda Hyperflux

Kubernetes API Usage Guide

AlertHistories [v1]

AlertHistoryMessages [v1]

AlertStatus [v2]

SilenceStatus [v2]

Monitoring APIs

Indicators [monitoring.alauda.io/v1beta1]

Metrics [monitoring.alauda.io/v1beta1]

Variables [monitoring.alauda.io/v1beta1]

Kubernetes APIs

AlertTemplate [alerttemplates.aiops.alauda.io/v1beta1]

PrometheusRule [prometheusrules.monitoring.coreos.com/v1]

AutoScaling APIs

HorizontalPodAutoscaler [autoscaling/v2]

Configuration APIs

Inspection APIs

Inspection [inspections.ait.alauda.io/v1alpha1]

MachineConfiguration APIs

MachineConfig [machineconfiguration.alauda.io/v1alpha1]

MachineConfigPool [machineconfiguration.alauda.io/v1alpha1]

MachineConfiguration [machineconfiguration.alauda.io/v1alpha1]

ModulePlugin APIs

ModuleConfig [moduleconfigs.cluster.alauda.io/v1alpha1]

ModuleInfo [moduleinfoes.cluster.alauda.io/v1alpha1]

ModulePlugin [moduleplugins.cluster.alauda.io/v1alpha1]

LimitRange [v1]

ResourceQuota [v1]

Networking APIs

HTTPRoute [httproutes.gateway.networking.k8s.io/v1]

VpcEgressGateway [vpc-egress-gateways.kubeovn.io/v1]

Vpc [vpcs.kubeovn.io/v1]

Notification APIs

Notification [notifications.ait.alauda.io/v1beta1]

NotificationGroup [notificationgroups.ait.alauda.io/v1beta1]

NotificationTemplate [notificationtemplates.ait.alauda.io/v1beta1]

Operator [operators.operators.coreos.com/v1]

PersistentVolumeClaim [v1]

PersistentVolume [v1]

StorageClass [storage.k8s.io/v1]

Ceph Storage APIs

CephCluster [cephclusters.ceph.rook.io/v1]

CephFilesystem [cephfilesystems.ceph.rook.io/v1]

CephBlockPool [cephblockpools.ceph.rook.io/v1]

CephObjectStore [cephobjectstores.ceph.rook.io/v1]

CephObjectStoreUser [cephobjectstoreusers.ceph.rook.io/v1]

CronJob [batch/v1]

DaemonSet [apps/v1]

Deployment [apps/v1]

Replicaset [apps/v1]

ReplicationController [v1]

StatefulSet [apps/v1]

Platform Security Configurations

Previous pageAbout Alauda Container Platform Compliance Service Next pageChanging the Platform OIDC Client Secret