- What's New
- Product Bulletin
- Service Overview
- Billing
- Getting Started
-
User Guide
-
UCS Clusters
- Overview
- Huawei Cloud Clusters
-
On-Premises Clusters
- Overview
- Service Planning for On-Premises Cluster Installation
- Registering an On-Premises Cluster
- Installing an On-Premises Cluster
- Managing an On-Premises Cluster
- Attached Clusters
- Multi-Cloud Clusters
- Single-Cluster Management
- Fleets
-
Cluster Federation
- Overview
- Enabling Cluster Federation
- Using kubectl to Connect to a Federation
- Upgrading a Federation
-
Workloads
- Workload Creation
-
Container Settings
- Setting Basic Container Information
- Setting Container Specifications
- Setting Container Lifecycle Parameters
- Setting Health Check for a Container
- Setting Environment Variables
- Configuring a Workload Upgrade Policy
- Configuring a Scheduling Policy (Affinity/Anti-affinity)
- Configuring Scheduling and Differentiation
- Managing a Workload
- ConfigMaps and Secrets
- Services and Ingresses
- MCI
- MCS
- DNS Policies
- Storage
- Namespaces
- Multi-Cluster Workload Scaling
- Adding Labels and Taints to a Cluster
- RBAC Authorization for Cluster Federations
- Image Repositories
- Permissions
-
Policy Center
- Overview
- Basic Concepts
- Enabling Policy Center
- Creating and Managing Policy Instances
- Example: Using Policy Center for Kubernetes Resource Compliance Governance
-
Policy Definition Library
- Overview
- k8spspvolumetypes
- k8spspallowedusers
- k8spspselinuxv2
- k8spspseccomp
- k8spspreadonlyrootfilesystem
- k8spspprocmount
- k8spspprivilegedcontainer
- k8spsphostnetworkingports
- k8spsphostnamespace
- k8spsphostfilesystem
- k8spspfsgroup
- k8spspforbiddensysctls
- k8spspflexvolumes
- k8spspcapabilities
- k8spspapparmor
- k8spspallowprivilegeescalationcontainer
- k8srequiredprobes
- k8srequiredlabels
- k8srequiredannotations
- k8sreplicalimits
- noupdateserviceaccount
- k8simagedigests
- k8sexternalips
- k8sdisallowedtags
- k8sdisallowanonymous
- k8srequiredresources
- k8scontainerratios
- k8scontainerrequests
- k8scontainerlimits
- k8sblockwildcardingress
- k8sblocknodeport
- k8sblockloadbalancer
- k8sblockendpointeditdefaultrole
- k8spspautomountserviceaccounttokenpod
- k8sallowedrepos
- Configuration Management
- Traffic Distribution
- Observability
- Container Migration
- Pipeline
- Error Codes
-
UCS Clusters
- Best Practices
-
API Reference
- Before You Start
- Calling APIs
-
API
- UCS Cluster
-
Fleet
- Adding a Cluster to a Fleet
- Removing a Cluster from a Fleet
- Registering a Fleet
- Deleting a Fleet
- Querying a Fleet
- Adding Clusters to a Fleet
- Updating Fleet Description
- Updating Permission Policies Associated with a Fleet
- Updating the Zone Associated with the Federation of a Fleet
- Obtaining the Fleet List
- Enabling Fleet Federation
- Disabling Cluster Federation
- Querying Federation Enabling Progress
- Creating a Federation Connection and Downloading kubeconfig
- Creating a Federation Connection
- Downloading Federation kubeconfig
- Permissions Management
- Using the Karmada API
- Appendix
-
FAQs
- About UCS
-
Billing
- How Is UCS Billed?
- What Status of a Cluster Will Incur UCS Charges?
- Why Am I Still Being Billed After I Purchase a Resource Package?
- How Do I Change the Billing Mode of a Cluster from Pay-per-Use to Yearly/Monthly?
- What Types of Invoices Are There?
- Can I Unsubscribe from or Modify a Resource Package?
-
Permissions
- How Do I Configure Access Permissions for Each Function of the UCS Console?
- What Can I Do If an IAM User Cannot Obtain Cluster or Fleet Information After Logging In to UCS?
- How Do I Restore ucs_admin_trust I Deleted or Modified?
- What Can I Do If I Cannot Associate the Permission Policy with a Fleet or Cluster?
- How Do I Clear RBAC Resources After a Cluster Is Unregistered?
- Policy Center
-
Fleets
- What Can I Do If Cluster Federation Verification Fails to Be Enabled for a Fleet?
- What Can I Do If an Abnormal, Federated Cluster Fails to Be Removed from the Fleet?
- What Can I Do If an Nginx Ingress Is in the Unready State After Being Deployed?
- What Can I Do If "Error from server (Forbidden)" Is Displayed When I Run the kubectl Command?
- Huawei Cloud Clusters
- Attached Clusters
-
On-Premises Clusters
- What Can I Do If an On-Premises Cluster Fails to Be Connected?
- How Do I Manually Clear Nodes of an On-Premises Cluster?
- How Do I Downgrade a cgroup?
- What Can I Do If the VM SSH Connection Times Out?
- How Do I Expand the Disk Capacity of the CIA Add-on in an On-Premises Cluster?
- What Can I Do If the Cluster Console Is Unavailable After the Master Node Is Shut Down?
- What Can I Do If a Node Is Not Ready After Its Scale-Out?
- How Do I Update the CA/TLS Certificate of an On-Premises Cluster?
- What Can I Do If an On-Premises Cluster Fails to Be Installed?
- Multi-Cloud Clusters
-
Cluster Federation
- What Can I Do If the Pre-upgrade Check of the Cluster Federation Fails?
- What Can I Do If a Cluster Fails to Be Added to a Federation?
- What Can I Do If Status Verification Fails When Clusters Are Added to a Federation?
- What Can I Do If an HPA Created on the Cluster Federation Management Plane Fails to Be Distributed to Member Clusters?
- What Can I Do If an MCI Object Fails to Be Created?
- What Can I Do If I Fail to Access a Service Through MCI?
- What Can I Do If an MCS Object Fails to Be Created?
- What Can I Do If an MCS or MCI Instance Fails to Be Deleted?
- Traffic Distribution
- Container Intelligent Analysis
- General Reference
Copied.
Advantages
Huawei Cloud UCS Advantages
Huawei Cloud UCS helps you manage cloud native services across clouds and regions while providing consistent experience. It extends cloud native to wherever your services run, which eases your journey to digital upgrade.
- Consistent experience
Distributed Kubernetes clusters that can be connected to Huawei Cloud UCS include those running on Huawei Cloud (central region, IEC, and CloudPond), on-premises infrastructure, and third-party clouds. You can centrally manage the configuration policies of these clusters for the permissions management of tenants in enterprise projects and the refined management of IAM users' permissions for accessing Kubernetes resources. You can audit the service compliance of your clouds and clusters, as UCS centrally manages security policies and resource access restrictions of each cluster.
- Collaborative compute scheduling
Huawei Cloud UCS runs on Karmada, a multi-cloud container orchestration project contributed by Huawei Cloud to CNCF. With multi-cloud capabilities, UCS can connect to thousands of Kubernetes clusters across clouds and regions and schedule applications by coordinating millions of nodes. Your applications can scale across clouds and clusters, migrate upon failures, and run in the best condition based on global resource distribution, service characteristics, geographical locations, network QoS, and resource balancing. With UCS, compute is at your fingertips anytime, anywhere.
- Intelligent traffic distribution
There are container network orchestration and service discovery for flattened interconnection across clouds and clusters. This brings consistent service experience and makes communications secure and reliable. Huawei Cloud UCS distributes requests to the nearest, best-fit cluster to reduce the latency based on different policies such as visitor's CIDR blocks, regions, and carriers. It works with service meshes for unified service governance. Scheduling can be implemented based on network QoS. Geographical affinity, automated grayscale release, visualized service topology, and service tracing are also available. All these allow you to manage access traffic globally in real time and on demand.
- Data migration with applications
UCS automates cross-cloud data replication for the storage infrastructure, container clusters, and middleware. Data goes wherever your applications run. You can scale your applications on the distributed infrastructure with ease. During scaling, data scanning and rebuild are automated and application-centric. Integrated migration, scaling, and disaster recovery are completed for the entire service.
Huawei Cloud UCS vs. Traditional Cloud Native Products
Item |
Traditional Cloud Native Products |
Huawei Cloud UCS |
---|---|---|
Experience |
There are vendor lock-ins due to customizations on cloud native technologies. You may have inconsistent experience when managing clusters in different regions, and you need to spend some time mastering related skills. |
Consistent experience Huawei Cloud UCS connects your clusters running on different clouds across central areas, hotspot areas, on-premises data centers, and business locations, providing consistent cloud native experience. |
Scalability |
Compute resources cannot be scheduled across clouds. |
Collaborative compute scheduling Running on Karmada, Huawei Cloud UCS centrally schedules multi-cloud resources and bursts on-premises applications to Huawei Cloud. UCS also provides multiple types of distributed deployment policies, so your applications can run in the best condition based on global resource distribution, service characteristics, geographical locations, network QoS, and resource balancing. |
Application management |
In most cases, traditional cloud native products manage applications in a single region, demanding little on application migration. When scaling applications across clouds, O&M personnel need to clone and migrate application data manually, which is inefficient and requires heavy workload. |
Data migration with applications Huawei Cloud UCS supports synchronous data replication across clouds for you to scale your applications on the distributed infrastructure. Application disaster recovery, scaling, and migration become much easier. |
Traffic management |
Traffic management is decoupled from services. Requests are not distributed on demand. Access latency is high if requests are from a different region or carrier network. |
Global traffic management Huawei Cloud UCS distributes requests to the nearest, best-fit cluster to reduce the latency based on different policies such as visitor's CIDR blocks, regions, and carriers. |
Efficiency |
Applications need to be manually deployed in each cluster across clouds, a labor-intensive process. |
Ready-to-use services Huawei Cloud UCS allows you to batch deliver service configurations to each cluster in different regions through edge-cloud synergy. Service deployment becomes much faster, and there are no repetitive configurations. |
O&M |
Services scattered in the central region, in the on-premises data center, and at the edge need to be monitored separately, which results in a heavy O&M burden. |
Multi-dimensional monitoring Huawei Cloud UCS supports multi-dimensional monitoring on your resources in all regions and is compatible with open source Prometheus and OpenTelemetry ecosystems. |
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot