Help Center/ Cloud Container Engine_Autopilot/ FAQs/ Permissions/ Can I Use APIs If the Cluster Management Permissions Are Not Configured?
Updated on 2025-05-09 GMT+08:00

Can I Use APIs If the Cluster Management Permissions Are Not Configured?

CCE Autopilot has cloud service APIs and cluster APIs.

  • Cloud service APIs: You can perform operations on the infrastructure (for example, creating nodes) and allow you to perform operations on cluster-level resources (such as creating workloads).

    When using cloud service APIs, the cluster management (IAM) permission must be configured.

  • Cluster APIs: You can perform operations on cluster-level resources (such as creating workloads) using the native API Server of Kubernetes. You cannot perform operations on the basic infrastructure (such as creating nodes).

    When using cluster APIs, you only need to add the cluster certificate. Only the users with the cluster management (IAM) permission can download the cluster certificate. Note that information leakage may occur during certificate transmission.