Ubiquitous Cloud Native Service
Ubiquitous Cloud Native Service
All results for "
" in this service
All results for "
" in this service
What's New
Product Bulletin
Vulnerability Notices
Notice on HTTP/2 Rapid Reset Attack Vulnerability (CVE-2023-4487)
Impact of the runC Vulnerability on UCS (CVE-2024-21626)
Notice of the NVIDIA Container Toolkit Container Escape Vulnerabilities (CVE-2025-23266 and CVE-2025-23267)
Product Release History
Cluster Federation Versions
Component Versions
proxy-agent Versions
Service Overview
Infographic for Huawei Cloud UCS
What Is Huawei Cloud UCS?
Advantages
Application Scenarios
Live Commerce
Finance
Automobile
Billing
Security
Shared Responsibilities
Authentication and Access
Audit and Logging
Risk Monitoring
Permissions Management
Notes and Constraints
Related Services
Billing
Billing Overview
Billing Items
Billing Modes
Overview
Yearly/Monthly Billing
Pay-per-Use Billing
Billing Examples
Pay-per-Use Billing
Yearly/Monthly Billing
Complex Scenarios
Renewal
Overview
Manually Renewing a UCS Package
Automatically Renewing a UCS Package
Bills
Arrears
Billing Termination
Billing FAQ
Getting Started
Introduction
Preparations
Quickly Connecting an Attached Cluster
Managing Distributed Clusters
Creating a Traffic Policy
User Guide
UCS Clusters
Overview
Huawei Cloud Clusters
On-Premises Clusters
Overview
Service Planning for On-Premises Cluster Installation
Basic Software Planning
HCE Container OS
Deployment Models
Resource Configurations (BMSs)
Resource Configurations (VMs)
Registering an On-Premises Cluster
Installing an On-Premises Cluster
Pre-Installation Check
Preparing for Installation (Private Network Access)
Installation and Verification
Managing an On-Premises Cluster
kubeconfig of an On-Premises Cluster
On-Premises Cluster Configuration File
Managing Nodes in an On-Premises Cluster
Managing On-Premises Cluster Networks
Cilium Overview
MetalLB for Layer 4 Load Balancing
Ingress-NGINX for Layer 7 Load Balancing
Upgrading an On-Premises Cluster
Unregistering an On-Premises Cluster
Using ucs-ctl to Manage On-Premises Clusters
Container Storage Management
Storage Overview
Using SFS Turbo
Hybrid Management of VMs and Containers
Overview
Enabling VM Runtime
Getting Started with VM Runtime
Creating a VM
Managing VMs
Connecting to a VM
More Management and Configuration Information
GPU Scheduling
Overview
Preparing GPU Resources
Creating a GPU-accelerated Application
Monitoring GPU Resources
NPU Scheduling
Overview
NPU Node Label
Creating an NPU-accelerated Application
Backup and Restoration
Attached Clusters
Overview
Registering an Attached Cluster (Public Network Access)
Registering an Attached Cluster (Private Network Access)
Single-Cluster Management
Overview
Nodes
Viewing Nodes in a Cluster
Adding Labels/Taints to Nodes
Workload Management
Deployments
StatefulSets
DaemonSets
Jobs and Cron Jobs
Pod
Setting Container Specifications
Setting Container Lifecycle Parameters
Setting Health Check for a Container
Setting Environment Variables
Configuring a Workload Upgrade Policy
Scheduling Policy (Affinity/Anti-affinity)
Tolerance Policies
Logging In to a Container
Networking
Services
Ingresses
Container Storage
ConfigMaps and Secrets
Creating a ConfigMap
Creating a Secret
kubeconfig
Obtaining a kubeconfig File
Updating a kubeconfig File
Custom Resource Definitions
Namespaces
Workload Auto Scaling (HPA)
Add-ons
kube-prometheus-stack
log-agent
metrics-server
Volcano
huawei-npu
gpu-device-plugin
e-backup
Component Management
Upgrading the proxy-agent Component in a Cluster
Fleets
Overview
Managing Fleets
Managing Clusters Not in the Fleet
Cluster Federation
Overview
Enabling Cluster Federation
Using kubectl to Connect to a Federation
Upgrading a Federation
Workloads
Workload Creation
Deployments
StatefulSets
DaemonSets
Container Settings
Setting Basic Container Information
Setting Container Specifications
Setting Container Lifecycle Parameters
Setting Health Check for a Container
Setting Environment Variables
Configuring a Workload Upgrade Policy
Configuring a Scheduling Policy (Affinity/Anti-affinity)
Configuring Scheduling and Differentiation
Managing a Workload
ConfigMaps and Secrets
ConfigMaps
Secrets
Services and Ingresses
Overview
Services
ClusterIP
NodePort
LoadBalancer
Ingresses
MCI
Overview
Using MCI
Creating an MCI Object
Configuring Automatic Traffic Switchover
Overview
Configuring Unconditional Automatic Traffic Switchover
Configuring Conditional Automatic Traffic Switchover
MCS
Overview
Using MCS
Configuring the Multi-Cluster Networking
Creating an MCS Object
North-South MCS
Overview
Using North-South MCS
DNS Policies
Storage
Overview
Mounting a Local Volume
Mounting a PV
Creating a PVC
Namespaces
Multi-Cluster Workload Scaling
Overview
Using Scaling Policies
FederatedHPA
How FederatedHPA Works
Installing a Metric Collection Add-on
Creating a FederatedHPA to Scale Pods Based on Metric Changes
Configuring a FederatedHPA to Control the Scaling Rate
Managing a FederatedHPA
CronFederatedHPA
How CronFederatedHPA Works
Creating a CronFederatedHPA to Scale Pods at Regular Intervals
Managing a CronFederatedHPA
Adding Labels and Taints to a Cluster
RBAC Authorization for Cluster Federations
Image Repositories
Permissions
UCS Permissions
UCS Resource Permissions (IAM-based)
Kubernetes Resource Permissions in a Cluster (Kubernetes RBAC-based)
Kubernetes Resource Objects
Example: Designing and Configuring Permissions for Users in a Company
Policy Center
Overview
Basic Concepts
Enabling Policy Center
Creating and Managing Policy Instances
Example: Using Policy Center for Kubernetes Resource Compliance Governance
Policy Definition Library
Overview
k8spspvolumetypes
k8spspallowedusers
k8spspselinuxv2
k8spspseccomp
k8spspreadonlyrootfilesystem
k8spspprocmount
k8spspprivilegedcontainer
k8spsphostnetworkingports
k8spsphostnamespace
k8spsphostfilesystem
k8spspfsgroup
k8spspforbiddensysctls
k8spspflexvolumes
k8spspcapabilities
k8spspapparmor
k8spspallowprivilegeescalationcontainer
k8srequiredprobes
k8srequiredlabels
k8srequiredannotations
k8sreplicalimits
noupdateserviceaccount
k8simagedigests
k8sexternalips
k8sdisallowedtags
k8sdisallowanonymous
k8srequiredresources
k8scontainerratios
k8scontainerrequests
k8scontainerlimits
k8sblockwildcardingress
k8sblocknodeport
k8sblockloadbalancer
k8sblockendpointeditdefaultrole
k8spspautomountserviceaccounttokenpod
k8sallowedrepos
Configuration Management
GitOps
Creating a Configuration Set
Modifying the Service Access Type of a Cluster
Security Hardening
Service Mesh
Service Mesh Management
Overview
Enabling a Service Mesh
Adding a Cluster to a Service Mesh
Service Mesh Proxies
Version Features
Features in 1.18
Service Management
Namespaces
Services
Service Versions
Service Health
Associated Services
Grayscale Release
Overview
Creating a Grayscale Release
Updating a Grayscale Release
Condition-based Traffic Distribution
Weight-based Traffic Distribution
Traffic Distribution Based on Combined Rules
Traffic Management
Overview
Service Route
Overview
Creating a Service Route
Updating a Service Route
Service Route Protocols
Redirection
Retry
Rewriting
Timeout
Traffic Mirroring
CORS
Header Control
Fault Injection
Traffic Policies
Overview
Creating a Traffic Policy
Updating a Traffic Policy
Load Balancing
Connection Pool
Outlier Detection
TLS
Service Security
Overview
Peer Authentication
Request Authentication
Service Authorization
Service Gateways
Overview
Gateway Instances
Creating a Service Gateway
Updating a Service Gateway
Deleting a Service Gateway
Gateway Routes
HTTP Route
TCP Route
TLS Route
Gateway Certificates
Monitoring Center
Access Logs
Fields in Access Logs
Response Flags in Access Logs
Application Topology
Traffic Distribution
Overview
Creating a Traffic Policy
Managing Traffic Policies
O&M
Container Intelligent Analysis
Overview
Enabling Cluster Monitoring
Overview
Enabling Monitoring for Huawei Cloud Clusters
Enabling Monitoring for On-Premises Clusters
Enabling Monitoring for Attached Clusters
Enabling Monitoring for a Partner Cloud Cluster
Modifying Monitoring Settings
Disabling Monitoring
Container Insights
Overview
Viewing Fleet Information
Viewing Cluster Information
Viewing Node Information
Viewing Workload Information
Viewing Pod Information
Viewing Event Information
Health Diagnosis
Dashboard
Logging
Overview
Enabling Logging
Collecting Data Plane Logs
Collecting Control Plane Component Logs
Collecting Kubernetes Audit Logs
Collecting Kubernetes Events
Cloud Native Log Collection
Using Direct Connect or VPN to Report Logs of On-Premises Clusters or Attached Clusters
Container Migration
Overview
Preparations
Migration from Clusters in an On-Premises Data Center to the Cloud
Migration Process
Cluster Evaluation
Image Migration
Dependent Service Migration
Application Backup
Application Migration
Migration from Clusters on a Third-Party Cloud
Migration Process
Cluster Evaluation
Image Migration
Dependent Service Migration
Application Backup
Application Migration
Migration Across Huawei Cloud Clusters of UCS in Different Regions
Migration Process
Cluster Evaluation
Data Migration
Application Backup
Application Migration
Migration Across Huawei Cloud Clusters of UCS in the Same Region
Migration Process
Cluster Evaluation
Storage Migration
Application Backup
Application Migration
Pipeline
Overview
Creating a Project and Service Endpoint
Creating a Release Environment
Configuring a Release Policy
Configuring the Pipeline and Parameters
Releasing a Fleet Application
Error Codes
Best Practices
Reliability
Improving UCS Dual-Cluster Reliability
Disaster Recovery
Using Cluster Federation to Implement Multi-Active DR for Applications
Using Traffic Distribution to Implement Traffic Switchover
Traffic
Using MCI to Distribute Traffic Across Clusters
Permissions
Granting UCS Permissions to IAM Users
Clusters
Creating VPC Endpoints for Connecting to On-Premises Clusters over Private Networks
Workloads
Using Workload Identities to Securely Access Cloud Services
Using Multi-Cluster Workload Scaling to Scale Workloads
Federation
Using a VPC Peering Connection to Connect CCE Clusters
Service Meshes
Connecting a Third-Party Registration Center to a Service Mesh
Connecting Clusters to UCS Service Meshes
Connecting Clusters in the Same Region
Connecting Clusters Across Regions
Checking Cluster Connectivity
API Reference
Before You Start
Overview
Concepts
Calling APIs
Making an API Request
Authentication
Response
API
UCS Clusters
Obtaining the Cluster List
Obtaining a Cluster
Registering a Cluster
Updating a Cluster
Unregistering a Cluster
Obtaining Cluster Access Information
Activating a Cluster
Associating a Cluster with Permission Policies
Obtaining the CCE Cluster List of a Tenant
Querying the Cluster Version List
Fleets
Adding a Cluster to a Fleet
Removing a Cluster from a Fleet
Creating a Fleet
Deleting a Fleet
Obtaining a Fleet
Adding Clusters to a Fleet
Updating Fleet Description
Updating Permission Policies Associated with a Fleet
Updating the Zone Associated with the Federation of a Fleet
Obtaining the Fleet List
Enabling Cluster Federation
Disabling Cluster Federation
Querying Federation Enabling Progress
Creating a Federation Connection and Downloading kubeconfig
Creating a Federation Connection
Downloading Federation kubeconfig
Permissions
Creating a Permission Policy
Obtaining the Permission Policy List
Deleting a Permission Policy
Updating a Permission Policy
Using the Karmada API
Appendix
Status Codes
Error Codes
Obtaining a Project ID
Obtaining an Account ID
City Codes
Cluster Categories and Types
FAQs
About UCS
Are There Quota Restrictions in UCS?
Billing
How Is UCS Billed?
What Status of a Cluster Will Incur UCS Charges?
Why Am I Still Being Billed After I Purchase a Resource Package?
How Do I Change the Billing Mode of a Cluster from Pay-per-Use to Yearly/Monthly?
What Types of Invoices Are There?
Can I Unsubscribe from or Modify a Resource Package?
Permissions
How Do I Configure Access Permissions for Each Function of the UCS Console?
Why Can't an IAM User Obtain Cluster or Fleet Information After Logging In to UCS?
How Do I Restore ucs_admin_trust I Deleted or Modified?
What Can I Do If I Can't Add Permissions for a Fleet or Cluster?
How Do I Clear RBAC Resources After a Cluster Is Unregistered?
Policy Center
What Can I Do If Policy Center Fails to Be Enabled?
What Can I Do If Policy Center Cannot Run Normally?
How Do I Clear Policy Center Resources?
Fleets
What Can I Do If Verification Fails When Clusters Join a Federation?
What Can I Do If an Abnormal Cluster Fails to Be Removed from a Federation-enabled Fleet?
What Can I Do If an Nginx Ingress Is in the Unready State After Being Deployed?
What Can I Do If "Error from server (Forbidden)" Is Displayed When I Run the kubectl Command?
Why Can't a Workload Be Distributed When the Scheduling Policy Is in Lazy Mode?
Huawei Cloud Clusters
What Can I Do If a Huawei Cloud Cluster Is Unavailable?
Attached Clusters
What Can I Do If an Attached Cluster Fails to Be Connected?
How Do I Restore a Deleted VPC Endpoint for a Cluster Connected Through a Private Network?
What Can I Do If proxy-agent Fails to Be Deployed?
On-Premises Clusters
What Can I Do If an On-Premises Cluster Fails to Be Connected?
How Do I Manually Clear Nodes of an On-Premises Cluster?
How Do I Downgrade a cgroup?
What Can I Do If the VM SSH Connection Times Out?
How Do I Expand the Disk Capacity of the CIA Add-on in an On-Premises Cluster?
What Can I Do If the Cluster Console Is Unavailable After a Master Node Is Shut Down?
What Can I Do If a Node Is Not Ready After Its Scale-Out?
How Do I Update the CA/TLS Certificate of an On-Premises Cluster?
What Can I Do If an On-Premises Cluster Fails to Be Installed?
Cluster Federation
What Can I Do If the Pre-upgrade Check of the Cluster Federation Fails?
What Can I Do If a Cluster Fails to Be Added to a Federation?
What Can I Do If Status Verification Fails When Clusters Are Added to a Federation?
What Can I Do If an HPA Created on the Cluster Federation Management Plane Fails to Be Distributed to Member Clusters?
What Can I Do If an MCI Object Fails to Be Created?
What Can I Do If I Fail to Access a Service Through MCI?
What Can I Do If an MCS Object Fails to Be Created?
What Can I Do If an MCS or MCI Instance Fails to Be Deleted?
Traffic Distribution
How Do I Add a Third-Party Domain Name?
O&M
What Can I Do If Monitoring Fails to Be Enabled for a Cluster Due to Residual Add-on Resources?
What Can I Do If Monitoring Fails to Be Enabled for a Cluster Due to Policy Interception?
How Do I Modify the Collection Configuration of the kube-state-metrics Component?
How Do I Handle the Error Displayed When Monitoring Is Enabled for a Cluster?
General Reference
Glossary
Service Level Agreement
White Papers
Endpoints
Permissions