Ubiquitous Cloud Native Service
Ubiquitous Cloud Native Service
All results for "
" in this service
All results for "
" in this service
What's New
Product Bulletin
Vulnerability Notices
Notice on HTTP/2 Rapid Reset Attack Vulnerability (CVE-2023-4487)
Impact of the runC Vulnerability on UCS (CVE-2024-21626)
Notice of the NVIDIA Container Toolkit Container Escape Vulnerabilities (CVE-2025-23266 and CVE-2025-23267)
Product Release History
Cluster Federation Versions
Component Versions
proxy-agent Versions
Service Overview
Infographic for Huawei Cloud UCS
What Is Huawei Cloud UCS?
Advantages
Application Scenarios
Live Commerce
Finance
Automobile
Functions
Billing
Security
Shared Responsibilities
Authentication and Access
Audit and Logging
Risk Monitoring
Permissions Management
Notes and Constraints
Related Services
Billing
Billing Overview
Billing Items
Billing Modes
Overview
Yearly/Monthly Billing
Pay-per-Use Billing
Billing Examples
Pay-per-Use Billing
Yearly/Monthly Billing
Complex Scenarios
Renewal
Overview
Manually Renewing a UCS Package
Automatically Renewing a UCS Package
Bills
Arrears
Billing Termination
Billing FAQ
Getting Started
Creating and Managing a Fleet
Introduction
Step 1: Make Preparations
Step 2: Create a Fleet
Step 3: Add Clusters to the Fleet
Step 4: Manage the Lifecycles of Clusters
Creating a Workload for Multiple Clusters
Managing Traffic of Multiple Clusters
Enabling Multi-Cluster Monitoring
User Guide
UCS Clusters
Overview
Huawei Cloud Clusters
On-Premises Clusters
Overview
Service Planning for On-Premises Cluster Installation
Basic Software Planning
HCE Container OS
Deployment Models
Resource Configurations (BMSs)
Resource Configurations (VMs)
Registering an On-Premises Cluster
Installing an On-Premises Cluster
Pre-Installation Check
Preparing for Installation (Private Network Access)
Installation and Verification
Managing an On-Premises Cluster
kubeconfig of an On-Premises Cluster
On-Premises Cluster Configuration File
Managing Nodes in an On-Premises Cluster
Managing On-Premises Cluster Networks
Cilium Overview
MetalLB for Layer 4 Load Balancing
Ingress-NGINX for Layer 7 Load Balancing
Upgrading an On-Premises Cluster
Unregistering an On-Premises Cluster
Using ucs-ctl to Manage On-Premises Clusters
Container Storage Management
Storage Overview
Using SFS Turbo
Hybrid Management of VMs and Containers
Overview
Enabling VM Runtime
Getting Started with VM Runtime
Creating a VM
Managing VMs
Connecting to a VM
More Management and Configuration Information
GPU Scheduling
Overview
Preparing GPU Resources
Creating a GPU-accelerated Application
Monitoring GPU Resources
NPU Scheduling
Overview
NPU Node Label
Creating an NPU-accelerated Application
Backup and Restoration
Attached Clusters
Overview
Registering an Attached Cluster (Public Network Access)
Registering an Attached Cluster (Private Network Access)
Single-Cluster Management
Overview
Nodes
Viewing Nodes in a Cluster
Adding Labels/Taints to Nodes
Workload Management
Deployments
StatefulSets
DaemonSets
Jobs and Cron Jobs
Pod
Setting Container Specifications
Setting Container Lifecycle Parameters
Setting Health Check for a Container
Setting Environment Variables
Configuring a Workload Upgrade Policy
Scheduling Policy (Affinity/Anti-affinity)
Tolerance Policies
Logging In to a Container
Networking
Services
Ingresses
Container Storage
ConfigMaps and Secrets
Creating a ConfigMap
Creating a Secret
kubeconfig
Obtaining a kubeconfig File
Updating a kubeconfig File
Custom Resource Definitions
Namespaces
Workload Auto Scaling (HPA)
Add-ons
kube-prometheus-stack
log-agent
metrics-server
Volcano
huawei-npu
gpu-device-plugin
e-backup
Component Management
Upgrading the proxy-agent Component in a Cluster
Fleets
Overview
Managing Fleets
Managing Clusters Not in the Fleet
Cluster Federation
Overview
Enabling Cluster Federation
Using kubectl to Connect to a Federation
Upgrading a Federation
Workloads
Workload Creation
Deployments
StatefulSets
DaemonSets
Container Settings
Setting Basic Container Information
Setting Container Specifications
Setting Container Lifecycle Parameters
Setting Health Check for a Container
Setting Environment Variables
Configuring a Workload Upgrade Policy
Configuring a Scheduling Policy (Affinity/Anti-affinity)
Configuring Scheduling and Differentiation
Managing a Workload
ConfigMaps and Secrets
ConfigMaps
Secrets
Services and Ingresses
Overview
Services
ClusterIP
NodePort
LoadBalancer
Ingresses
MCI
Overview
Using MCI
Creating an MCI Object
Configuring Automatic Traffic Switchover
Overview
Configuring Unconditional Automatic Traffic Switchover
Configuring Conditional Automatic Traffic Switchover
MCS
Overview
Using MCS
Configuring the Multi-Cluster Networking
Creating an MCS Object
North-South MCS
Overview
Using North-South MCS
DNS Policies
Storage
Overview
Mounting a Local Volume
Mounting a PV
Creating a PVC
Namespaces
Multi-Cluster Workload Scaling
Overview
Using Scaling Policies
FederatedHPA
How FederatedHPA Works
Installing a Metric Collection Add-on
Creating a FederatedHPA to Scale Pods Based on Metric Changes
Configuring a FederatedHPA to Control the Scaling Rate
Managing a FederatedHPA
CronFederatedHPA
How CronFederatedHPA Works
Creating a CronFederatedHPA to Scale Pods at Regular Intervals
Managing a CronFederatedHPA
Adding Labels and Taints to a Cluster
RBAC Authorization for Cluster Federations
Image Repositories
Permissions
UCS Permissions
UCS Resource Permissions (IAM-based)
Kubernetes Resource Permissions in a Cluster (Kubernetes RBAC-based)
Kubernetes Resource Objects
Example: Designing and Configuring Permissions for Users in a Company
Policy Center
Overview
Basic Concepts
Enabling Policy Center
Creating and Managing Policy Instances
Example: Using Policy Center for Kubernetes Resource Compliance Governance
Policy Definition Library
Overview
k8spspvolumetypes
k8spspallowedusers
k8spspselinuxv2
k8spspseccomp
k8spspreadonlyrootfilesystem
k8spspprocmount
k8spspprivilegedcontainer
k8spsphostnetworkingports
k8spsphostnamespace
k8spsphostfilesystem
k8spspfsgroup
k8spspforbiddensysctls
k8spspflexvolumes
k8spspcapabilities
k8spspapparmor
k8spspallowprivilegeescalationcontainer
k8srequiredprobes
k8srequiredlabels
k8srequiredannotations
k8sreplicalimits
noupdateserviceaccount
k8simagedigests
k8sexternalips
k8sdisallowedtags
k8sdisallowanonymous
k8srequiredresources
k8scontainerratios
k8scontainerrequests
k8scontainerlimits
k8sblockwildcardingress
k8sblocknodeport
k8sblockloadbalancer
k8sblockendpointeditdefaultrole
k8spspautomountserviceaccounttokenpod
k8sallowedrepos
Configuration Management
GitOps
Creating a Configuration Set
Modifying the Service Access Type of a Cluster
Security Hardening
Traffic Distribution
Overview
Creating a Traffic Policy
Managing Traffic Policies
O&M
Container Intelligent Analysis
Overview
Enabling Cluster Monitoring
Overview
Enabling Monitoring for Huawei Cloud Clusters
Enabling Monitoring for On-Premises Clusters
Enabling Monitoring for Attached Clusters
Enabling Monitoring for a Partner Cloud Cluster
Modifying Monitoring Settings
Disabling Monitoring
Container Insights
Overview
Viewing Fleet Information
Viewing Cluster Information
Viewing Node Information
Viewing Workload Information
Viewing Pod Information
Viewing Event Information
Health Diagnosis
Dashboard
Logging
Overview
Enabling Logging
Collecting Data Plane Logs
Collecting Control Plane Component Logs
Collecting Kubernetes Audit Logs
Collecting Kubernetes Events
Cloud Native Log Collection
Using Direct Connect or VPN to Report Logs of On-Premises Clusters or Attached Clusters
Container Migration
Overview
Preparations
Migration from Clusters in an On-Premises Data Center to the Cloud
Migration Process
Cluster Evaluation
Image Migration
Dependent Service Migration
Application Backup
Application Migration
Migration from Clusters on a Third-Party Cloud
Migration Process
Cluster Evaluation
Image Migration
Dependent Service Migration
Application Backup
Application Migration
Migration Across Huawei Cloud Clusters of UCS in Different Regions
Migration Process
Cluster Evaluation
Data Migration
Application Backup
Application Migration
Migration Across Huawei Cloud Clusters of UCS in the Same Region
Migration Process
Cluster Evaluation
Storage Migration
Application Backup
Application Migration
Pipeline
Overview
Creating a Project and Service Endpoint
Creating a Release Environment
Configuring a Release Policy
Configuring the Pipeline and Parameters
Releasing a Fleet Application
Error Codes
Best Practices
Reliability
Improving UCS Dual-Cluster Reliability
Disaster Recovery
Using Cluster Federation to Implement Multi-Active DR for Applications
Using Traffic Distribution to Implement Traffic Switchover
Traffic
Using MCI to Distribute Traffic Across Clusters
Permissions
Granting UCS Permissions to IAM Users
Clusters
Creating VPC Endpoints for Connecting to On-Premises Clusters over Private Networks
Workloads
Using Workload Identities to Securely Access Cloud Services
Using Multi-Cluster Workload Scaling to Scale Workloads
Federation
Using a VPC Peering Connection to Connect CCE Clusters
API Reference
Before You Start
Overview
Concepts
Calling APIs
Making an API Request
Authentication
Response
API
UCS Cluster
Querying the Cluster List
Enabling the Policy Center for a Cluster
Querying a Cluster
Disabling the Policy Center of a Cluster
Registering a Cluster
Updating a Cluster
Obtaining the Configuration Required for Cluster Installation
Deregistering a Cluster
Querying Cluster Access Information
Creating a Cluster Policy Instance
Activating a Cluster
Obtaining the kubeconfig of a Cluster
Associating a Cluster with Permission Policies
Querying the CCE Cluster List
Enabling the GitOps Add-on
Obtaining the Progress of Enabling GitOps
Uninstalling the GitOps add-on from a Cluster
Querying the Cluster Version List
Fleet
Adding a Cluster to a Fleet
Removing a Cluster from a Fleet
Registering a Fleet
Enabling the Policy Center for a Fleet
Disabling the Policy Center of a Fleet
Deleting a Fleet
Creating a Fleet Policy Instance
Querying a Fleet
Adding Clusters to a Fleet
Updating Fleet Description
Upgrading the Federation
Updating Permission Policies Associated with a Fleet
Updating the Zone Associated with the Federation of a Fleet
Obtaining the Fleet List
Enabling Fleet Federation
Disabling Cluster Federation
Querying Federation Enabling Progress
Creating a Federation Connection and Downloading kubeconfig
Creating a Federation Connection
Downloading Federation kubeconfig
Querying a Federated Workload
Creating a Federated Workload
Deleting a Federated Workload
Updating a Federated Workload
Permissions Management
Creating a Permission Policy
Querying the Permission Policy List
Deleting a Permission Policy
Updating a Permission Policy
Add-on Management
Obtaining the Add-on Instance List
Installing an Add-on Instance
Updating an Add-on Instance
Obtaining an Add-on Instance
Uninstalling an Add-on Instance
Obtaining the Add-on Template List
Configuration Management
Creating a Configuration Set
Obtaining Information About All Configuration Sets
Obtaining Details About a Configuration Set
Deleting a Configuration Set
Updating a Configuration Set
Collecting Statistics on the Statuses of All Configuration Sets of a User
Obtaining the Repository Source List
Creating a Repository Source
Updating a Repository Source
Deleting a Repository Source
Querying Service Configuration
Policy Management
Obtaining the Policy Definition List
Updating a Policy Definition
Obtaining a Policy Definition
Obtaining the Policy Instance List
Deleting a Specific Policy Instance
Obtaining a Specific Policy Instance
Updating a Specific Policy Instance
Obtaining the Job Related to a Specific Policy Instance
Obtaining the Policy Instance Job List
Traffic Management
Creating a Record Set
Querying the Record Set List
Quota Management
Obtaining Quota Information
Using Karmada APIs
PropagationPolicy
OverridePolicy
Permissions and Supported Actions
Appendix
Status Codes
Error Codes
Obtaining a Project ID
Obtaining an Account ID
Country Codes
City Codes
Cluster Categories and Types
FAQs
About UCS
What Are the Quota Limits of UCS?
Billing
How Is UCS Billed?
What Status of a Cluster Will Incur UCS Charges?
Why Am I Still Being Billed After I Purchase a Resource Package?
How Do I Change the Billing Mode of a Cluster from Pay-per-Use to Yearly/Monthly?
What Types of Invoices Are There?
Can I Unsubscribe from or Modify a Resource Package?
Huawei Cloud Clusters
What Can I Do If a Huawei Cloud Cluster Is Unavailable?
On-Premises Clusters
What Can I Do If an On-Premises Cluster Fails to Be Connected?
How Do I Manually Clear Nodes of an On-Premises Cluster?
How Do I Downgrade a cgroup?
What Can I Do If the VM SSH Connection Times Out?
How Do I Expand the Disk Capacity of the CIA Add-on in an On-Premises Cluster?
What Can I Do If the Cluster Console Is Unavailable After a Master Node Is Shut Down?
What Can I Do If a Node Is Not Ready After Being Scaled Up?
How Do I Update the CA/TLS Certificate of an On-Premises Cluster?
What Can I Do If an On-Premises Cluster Fails to Be Installed?
Attached Clusters
What Can I Do If an Attached Cluster Fails to Be Connected?
How Do I Restore a Deleted VPC Endpoint for a Cluster Connected Through a Private Network?
What Can I Do If proxy-agent Fails to Be Deployed?
Fleets
What Can I Do If an Abnormal Cluster Fails to Be Removed from a Federation-enabled Fleet?
What Can I Do If an Nginx Ingress Is in the Unready State After Being Deployed?
What Can I Do If "Error from server (Forbidden)" Is Displayed When I Run the kubectl Command?
Why Can't a Workload Be Distributed When the Scheduling Policy Is in Lazy Mode?
Cluster Federation
What Can I Do If the Pre-upgrade Check of the Cluster Federation Fails?
What Can I Do If Clusters Fail to Join a Federation?
What Can I Do If Status Verification Fails When Clusters Are Added to a Federation?
What Can I Do If an HPA Created on the Cluster Federation Management Plane Fails to Be Distributed to Member Clusters?
What Can I Do If an MCI Object Fails to Be Created?
What Can I Do If I Fail to Access a Service Through MCI?
What Can I Do If an MCS Object Fails to Be Created?
What Can I Do If an MCS or MCI Instance Fails to Be Deleted?
Permissions
How Do I Configure Access Permissions for Each Function of the UCS Console?
Why Can't an IAM User Obtain Cluster or Fleet Information After Logging In to UCS?
How Do I Restore ucs_admin_trust I Deleted or Modified?
What Can I Do If I Can't Add Permissions for a Fleet or Cluster?
How Do I Clear RBAC Resources After a Cluster Is Unregistered?
Policy Center
What Can I Do If Policy Center Fails to Be Enabled?
What Can I Do If Policy Center Cannot Run Normally?
How Do I Clear Policy Center Resources?
Traffic Distribution
How Do I Add a Third-Party Domain Name?
O&M
What Can I Do If Monitoring Fails to Be Enabled for a Cluster Due to Residual Add-on Resources?
What Can I Do If Monitoring Fails to Be Enabled for a Cluster Due to Policy Interception?
How Do I Modify the Collection Configuration of the kube-state-metrics Component?
How Do I Handle the Error Displayed When Monitoring Is Enabled for a Cluster?
Videos
General Reference
Glossary
Service Level Agreement
White Papers
Endpoints
Permissions