Service Overview
- What Is CCE?
- Product Advantages
- Application Scenarios
- Permissions
- Notes and Constraints
- Related Services
- Regions and AZs
Getting Started
- Introduction
- Preparations
- Creating a Kubernetes Cluster
- Deploying a Deployment (Nginx)
- Deploying WordPress and MySQL That Depend on Each Other
Product Bulletin
- Risky Operations on Cluster Nodes
- EOM of CentOS
High-Risk Operations
Clusters
- Cluster Overview
- Cluster Version Release Notes
  - Kubernetes Version Release Notes
  - Patch Version Release Notes
- Buying a Cluster
- Connecting to a Cluster
- Managing a Cluster
  - Modifying Cluster Configurations
  - Enabling Overload Control for a Cluster
  - Changing a Cluster Scale
  - Changing the Default Security Group of a Node
  - Deleting a Cluster
  - Preventing Cluster Deletion
  - Hibernating or Waking Up a Cluster
- Upgrading a Cluster
Nodes
- Node Overview
- Container Engines
- Node OSs
- Creating a Node
- Accepting Nodes for Management
- Logging In to a Node
- Management Nodes
- Node O&M
  - Node Resource Reservation Policy
  - Space Allocation of a Data Disk
  - Maximum Number of Pods That Can Be Created on a Node
  - Differences in kubelet and Runtime Component Configurations Between CCE and the Native Community
  - Migrating Nodes from Docker to containerd
  - Configuring Node Fault Detection Policies
  - Executing the Pre- or Post-installation Commands During Node Creation
Node Pools
- Node Pool Overview
- Creating a Node Pool
- Scaling a Node Pool
- Managing a Node Pool
Workloads
- Overview
- Creating a Workload
- Configuring a Workload
- Scheduling a Workload
- Logging In to a Container
- Managing Workloads
- Managing Custom Resources
- Pod Security
  - Configuring a Pod Security Policy
  - Configuring Pod Security Admission
Scheduling
- Overview
- CPU Scheduling
  - CPU Policy
  - Enhanced CPU Policy
- GPU Scheduling
  - Default GPU Scheduling in Kubernetes
  - Monitoring GPU Metrics
  - Configuring Workload Scaling Based on GPU Monitoring Metrics
  - GPU Metrics
- Volcano Scheduling
- Cloud Native Hybrid Deployment
  - Dynamic Resource Oversubscription
Network
- Overview
- Container Network
- Service
- Ingresses
- DNS
- Cluster Network Settings
  - Adding a Secondary VPC CIDR Block for a Cluster
- Configuring Intra-VPC Access
- Accessing the Internet from a Container
Storage
- Overview
- Storage Basics
- Elastic Volume Service
- Scalable File Service
- SFS Turbo
- Object Storage Service
- Local PVs
- Ephemeral Volumes
- hostPath
- StorageClass
Auto Scaling
- Overview
- Scaling a Workload
- Scaling a Node
- Using HPA and CA for Auto Scaling of Workloads and Nodes
O&M
- Logging
- Log Auditing
  - CCE Operations Supported by Cloud Trace Service
  - Viewing CTS Traces in the Trace List
- O&M FAQ
  - Logging FAQ
- O&M Best Practices
Namespaces
- Creating a Namespace
- Managing Namespaces
- Configuring Resource Quotas
ConfigMaps and Secrets
- Creating a ConfigMap
- Using a ConfigMap
- Creating a Secret
- Using a Secret
- Cluster Secrets
Add-ons
- Overview
- Scheduling and Elasticity Add-ons
- Cloud Native Observability Add-ons
- Cloud Native Heterogeneous Computing Add-ons
  - CCE AI Suite (NVIDIA GPU)
- Container Network Add-ons
- Container Storage Add-ons
  - CCE Container Storage (Everest)
  - FlexVolume (Discarded)
- Container Security Add-ons
  - CCE Secrets Manager for DEW
- Other Add-ons
Helm Chart
- Overview of a Chart
- Deploying an Application from a Chart
- Differences Between Helm v2 and Helm v3 and Adaptation Solutions
- Deploying an Application Through the Helm v2 Client
- Deploying an Application Through the Helm v3 Client
- Converting a Release from Helm v2 to v3
Permissions
- Permissions Overview
- Granting Cluster Permissions to an IAM User
- Namespace Permissions (Kubernetes RBAC-based)
- Using the AccessPolicy API to Manage Namespace Permissions (Kubernetes RBAC-based)
- Example: Designing and Configuring Permissions for Users in a Department
- Permission Dependency of the CCE Console
- Service Account Token Security Improvement
- System Agencies
Settings
- Dashboard
- Cluster Access
- Network
- Scheduling
- Auto Scaling
- Monitoring
- Kubernetes
- Heterogeneous Resources
Best Practices
- Checklist for Deploying Containerized Applications in the Cloud
- Containerization
  - Containerizing an Enterprise Application (ERP)
    - Solution Overview
    - Procedure
- Disaster Recovery
- Security
- Auto Scaling
  - Using HPA and CA for Auto Scaling of Workloads and Nodes
- Monitoring
  - Monitoring Multiple Clusters Using Prometheus
  - Reporting Prometheus Monitoring Data to a Third-Party Monitoring Platform
- Cluster
- Networking
- Storage
- Container
- Permission
  - Configuring kubeconfig for Fine-Grained Management on Cluster Resources
- Release
FAQs
- Common FAQ
- Billing
  - How Is CCE Billed?
- Cluster
- Node
- Node Pool
- Workload
- Networking
- Storage
- Namespace
  - What Should I Do If a Namespace Fails to Be Deleted Due to an APIService Object Access Failure?
- Chart and Add-on
- API & kubectl FAQs
- DNS FAQs
- Image Repository FAQs
  - How Do I Upload My Images to CCE?
- Permissions
Change History

Pod Security