Migrating Clusters¶
Create Hybrid clusters on the CCE 2.0 console. These new Hybrid clusters should have the same specifications with those created on CCE 1.0.
To create clusters using APIs, see Cloud Container Engine API Reference 2.0.
Procedure¶
Log in to the CCE console. In the navigation pane, choose Resource Management > Clusters. Click Create Hybrid cluster.
Set cluster parameters. Parameters with * are mandatory.
Figure 1 Cluster specifications in CCE 1.0¶
Table 1 Parameters for creating a cluster¶ Parameter in CCE 2.0
Parameter in CCE 1.0
Configuration
* Cluster Name
Name
Name of the cluster to be created.
*Version
This parameter does not exist in CCE 1.0. Retain the default value.
Cluster version, namely, corresponding Kubernetes baseline version.
*Management Scale
This parameter does not exist in CCE 1.0. Set this parameter based on your requirements.
Maximum number of nodes that can be managed by the cluster.
* High Availability
Cluster Type
Yes: The cluster has three master nodes. The cluster is still available even when two master nodes are down.
No: The cluster has only one master node. If the master node is down, the whole cluster becomes unavailable, but existing applications are not affected.
*VPC
VPCs created in CCE 1.0 can be used in CCE 2.0.
VPC where the new cluster is located.
If no VPCs are available, click Create a VPC.
*Subnet
Subnets created in CCE 1.0 can be used in CCE 2.0.
Subnet in which the cluster will run.
*Network Model
This parameter does not exist in CCE 1.0. Set this parameter based on your requirements.
Tunnel network: An independent container network constructed using VXLAN tunnels based on the underlying VPC network. This model is appropriate for typical scenarios.
VPC network: The VPC routing mode is used to deeply integrate with the underlying network. This mode applies to high-performance scenarios where the number of nodes is limited by the VPC routing quota. Only one cluster using the VPC network model can be created in a single VPC.
Container Network Segment
This parameter does not exist in CCE 1.0. Set this parameter based on your requirements.
Select a container network segment based on service requirements. Container instances will be assigned with IP addresses within the planned network segment.
If Automatically select is deselected, enter a CIDR block manually. If the selected CIDR block conflicts with a subnet CIDR block, the system prompts you to select another CIDR block. The recommended CIDR blocks are 10.0.0.0/12-19, 172.16.0.0/16-19, and 192.168.0.0/16-19.
If different clusters share a container network segment, an IP address conflict will occur and access to the applications in the clusters may fail.
If Automatically select is selected, the system automatically assigns a CIDR block that does not conflict with any subnet CIDR block.
The mask of the container CIDR block must be appropriate. It determines the number of available nodes in a cluster. A too small mask value will cause the cluster to soon fall short of nodes. After the mask is set, the estimated maximum number of containers supported by the current CIDR block will be displayed.
Service Network Segment
This parameter does not exist in CCE 1.0. Set this parameter based on your requirements.
This parameter is left unspecified, by default. This parameter applies only to clusters of v1.11.7 and later versions.
This parameter indicates a CIDR block of Kubernetes services. The mask of the service CIDR block must be appropriate. It determines the number of available nodes in a cluster.
Open EIP
This parameter does not exist in CCE 1.0. Set this parameter based on your requirements.
A public IP address that is reachable from public networks. Select an EIP that has not been bound to any node. A cluster's EIP is preset in the cluster's certificate. Do no delete the EIP after the cluster has been created. Otherwise, two-way authentication will fail.
Do no configure: No EIP will be preset in the cluster certificate.
Configure now: If no EIP is available for selection, create a new EIP.
Authorization Mode
This parameter does not exist in CCE 1.0. Set this parameter based on your requirements.
By default, RBAC is selected. Read Namespace Permissions (Kubernetes RBAC-based) and select I am aware of the above limitations and read the CCE Role Management Instructions.
After RBAC is enabled, users access resources in the cluster according to fine-grained permissions policies.
Authentication Mode
This parameter does not exist in CCE 1.0. Set this parameter based on your requirements.
The authentication mechanism performs permission control on resources in a cluster. For example, you can grant user A to read and write applications in a namespace, while granting user B to only read resources in a cluster. For details about role-based permission control, see Namespace Permissions (Kubernetes RBAC-based).
By default, X.509 authentication instead of Enhanced authentication is enabled. X.509 is a standard defining the format of public key certificates. X.509 certificates are used in many Internet protocols.
If permission control on a cluster is required, select Enhanced authentication and then Authenticating Proxy.
Click Upload next to CA Root Certificate to upload a valid certificate. Select the check box to confirm that the uploaded certificate is valid.
If the certificate is invalid, the cluster cannot be created. The uploaded certificate file must be smaller than 1 MB and in .crt or .cer format.
Cluster Description
Description
Description of the cluster.
After the configuration is complete, click Next to add a node.
Continue to add a node.
Set the parameters based on Table 2.
Table 2 Parameters for adding a node¶ Parameter in CCE 2.0
Parameter in CCE 1.0
Configuration
Region
Current Region
Region
Physical location of the node.
AZ
An AZ is an isolated area in which physical resources use independent power supplies and networks. AZs are interconnected through internal networks. To enhance application availability, create nodes in different AZs.
Specifications
Node Name
Specifications
Name of the node.
Specifications
General-purpose: provides general computing, storage, and network configurations that can meet a majority of scenarios. General-purpose nodes can be used for web servers, workload development, workload testing, and small databases.
Memory-optimized: provides higher memory capacity than general-purpose nodes and is suitable for relational databases, NoSQL, and other workloads that are both memory-intensive and data-intensive.
GPU-accelerated: provides powerful floating-point computing and is suitable for real-time, highly concurrent massive computing. Graphical processing units (GPUs) of P series are suitable for deep learning, scientific computing, and CAE. GPUs of G series are suitable for 3D animation rendering and CAD.
General computing-plus: provides stable performance and exclusive resources to enterprise-level workloads with high and stable computing performance.
OS
Select an operating system for the node.
Reinstalling OSs or modifying OS configurations could make nodes unavailable. Exercise caution when performing these operations. For more information, see High-Risk Operations and Solutions.
VPC
This parameter does not exist in CCE 1.0. Set this parameter based on your requirements.
The value cannot be changed. This parameter is supported only in v1.13.10-r0 and later versions of clusters. It is not displayed in versions earlier than v1.13.10-r0.
Subnet
This parameter does not exist in CCE 1.0. Set this parameter based on your requirements.
A subnet improves network security by providing exclusive network resources that are isolated from other networks.
You can select any subnet in the cluster VPC. Cluster nodes can belong to different subnets. This parameter is supported only in v1.13.10-r0 and later versions of clusters. It is not displayed in versions earlier than v1.13.10-r0.
Nodes
Quantity
Number of nodes to be created.
Network
Note
If the nodes to be created require Internet access, select Automatically assign or Use existing for EIP. If an EIP is not bound to a node, applications running on the node cannot be accessed by the external network.
EIP
EIP
A public IP address that is reachable from public networks.
Do not use: A node without an EIP cannot access the Internet. It can be used only as an elastic cloud server (ECS) for deploying services or clusters on a private network.
Automatically assign: An EIP with exclusive bandwidth is automatically assigned to each ECS. When creating an ECS, ensure that the elastic IP address quota is sufficient. Set the specifications, required quantity, billing mode, and bandwidth as required.
Use existing: Existing EIPs are assigned to the nodes to be created.
Disk
Storage
Disk type, which can be System Disk or Data Disk.
The system disk capacity ranges from 40 to 1024 GB. The default value is 40 GB.
The data disk capacity ranges from 100 to 32678 GB. The default value is 100 GB.
Data disks deliver three levels of I/O performance:
Common I/O: uses SATA drives to store data. EVS disks of this level provide reliable block storage and a maximum IOPS of 1,000 per disk. They are suitable for key applications.
High I/O: uses SAS drives to store data. EVS disks of this level provide a maximum IOPS of 3,000 and a minimum read/write latency of 1 ms. They are suitable for RDS, NoSQL, data warehouse, and file system applications.
Ultra-high I/O: uses SSD drives to store data. EVS disks of this level provide a maximum IOPS of 20,000 and a minimum read/write latency of 1 ms. They are suitable for RDS, NoSQL, and data warehouse applications.
Login information
Key Pair
Key Pair
A key pair is used for identity authentication when you remotely log in to a node. If no key pair is available, click Create a key pair and create one.
Advanced ECS Settings
ECS Group
This parameter does not exist in CCE 1.0. Set this parameter based on your requirements.
Select an existing ECS group, or click Create ECS Group to create a new one. After the ECS group is created, click the refresh icon.
An ECS group allows you to create ECSs on different hosts, thereby improving service reliability.
Resource Tags
By adding tags to resources, you can classify resources.
You can create predefined tags in Tag Management Service (TMS). Predefined tags are visible to all service resources that support the tagging function. You can use predefined tags to improve tag creation and migration efficiency.
CCE will automatically create the "CCE-Dynamic-Provisioning-Node=node id" tag. A maximum of 20 tags can be added.
Agency
The agency is created by the account administrator on the IAM console. By creating an agency, you can share your resources with another account, or delegate a more professional person or team to manage your resources. When creating an agency, set the agency type to Cloud service. Click Select, and select ECS BMS in the dialog box displayed, which allows ECS or BMS to call cloud services.
Pre-installation Script
Script commands. Enter 0 to 1000 characters.
The script will be executed before Kubernetes software is installed. Note that if the script is incorrect, Kubernetes software may not be installed successfully. The script is usually used to format data disks.
Post-installation Script
Script commands. Enter 0 to 1000 characters.
The script will be executed after Kubernetes software is installed and will not affect the installation. The script is usually used to modify Docker parameters.
Add Data Disk
Click Add Data Disk to add a data disk and set the capacity of the data disk.
Subnet IP Address
Select Automatically assign IP address (recommended) or Manually assigning IP addresses.
Advanced Kubernetes Settings
Max Pods
This parameter does not exist in CCE 1.0. Set this parameter based on your requirements.
The maximum number of pods that can be created on a node, including the system's default pods. Value range: 16 to 250.
This maximum limit prevents the node from being overloaded by managing too many instances.
insecure-registries
Click Add insecure-registry and enter a repository address.
Add the address of the custom image repository with no valid SSL certificate to the docker startup option to avoid unsuccessful image pulling from the personal image repository. The address is in the format of IP address:Port number (or domain name). Post-installation script and insecure-registries cannot be used together.
Maximum Data Space per Container
This parameter does not exist in CCE 1.0. Set this parameter based on your requirements.
The maximum data space that can be used by a container. Value range: 10 GB to 80 GB. If the value of this field is larger than the data disk space allocated to Docker, the latter will override the value specified here. Typically, 90% of the data disk space is allocated to Docker. This parameter is supported only in v1.13.10-r0 and later versions of clusters. It is not displayed in versions earlier than v1.13.10-r0.
Click Next to install add-ons.
System resource add-ons must be installed. Advanced functional add-ons are optional.
You can also install optional add-ons after the cluster is created. To do so, choose Add-ons in the navigation pane of the CCE console and select the add-on you will install. For details, see Add-ons.
Click Create Now. Check all the configurations, and click Submit.
It takes 6 to 10 minutes to create a cluster. Information indicating the progress of the creation process will be displayed.