- What's New
- Product Bulletin
- Service Overview
- Billing
- Getting Started
-
User Guide
-
UCS Clusters
- Overview
- Huawei Cloud Clusters
-
On-Premises Clusters
- Overview
- Service Planning for On-Premises Cluster Installation
- Registering an On-Premises Cluster
- Installing an On-Premises Cluster
- Managing an On-Premises Cluster
- Attached Clusters
- Multi-Cloud Clusters
- Single-Cluster Management
- Fleets
-
Cluster Federation
- Overview
- Enabling Cluster Federation
- Using kubectl to Connect to a Federation
- Upgrading a Federation
-
Workloads
- Workload Creation
-
Container Settings
- Setting Basic Container Information
- Setting Container Specifications
- Setting Container Lifecycle Parameters
- Setting Health Check for a Container
- Setting Environment Variables
- Configuring a Workload Upgrade Policy
- Configuring a Scheduling Policy (Affinity/Anti-affinity)
- Configuring Scheduling and Differentiation
- Managing a Workload
- ConfigMaps and Secrets
- Services and Ingresses
- MCI
- MCS
- DNS Policies
- Storage
- Namespaces
- Multi-Cluster Workload Scaling
- Adding Labels and Taints to a Cluster
- RBAC Authorization for Cluster Federations
- Image Repositories
- Permissions
-
Policy Center
- Overview
- Basic Concepts
- Enabling Policy Center
- Creating and Managing Policy Instances
- Example: Using Policy Center for Kubernetes Resource Compliance Governance
-
Policy Definition Library
- Overview
- k8spspvolumetypes
- k8spspallowedusers
- k8spspselinuxv2
- k8spspseccomp
- k8spspreadonlyrootfilesystem
- k8spspprocmount
- k8spspprivilegedcontainer
- k8spsphostnetworkingports
- k8spsphostnamespace
- k8spsphostfilesystem
- k8spspfsgroup
- k8spspforbiddensysctls
- k8spspflexvolumes
- k8spspcapabilities
- k8spspapparmor
- k8spspallowprivilegeescalationcontainer
- k8srequiredprobes
- k8srequiredlabels
- k8srequiredannotations
- k8sreplicalimits
- noupdateserviceaccount
- k8simagedigests
- k8sexternalips
- k8sdisallowedtags
- k8sdisallowanonymous
- k8srequiredresources
- k8scontainerratios
- k8scontainerrequests
- k8scontainerlimits
- k8sblockwildcardingress
- k8sblocknodeport
- k8sblockloadbalancer
- k8sblockendpointeditdefaultrole
- k8spspautomountserviceaccounttokenpod
- k8sallowedrepos
- Configuration Management
- Traffic Distribution
- Observability
- Container Migration
- Pipeline
- Error Codes
-
UCS Clusters
- Best Practices
-
API Reference
- Before You Start
- Calling APIs
-
API
- UCS Cluster
-
Fleet
- Adding a Cluster to a Fleet
- Removing a Cluster from a Fleet
- Registering a Fleet
- Deleting a Fleet
- Querying a Fleet
- Adding Clusters to a Fleet
- Updating Fleet Description
- Updating Permission Policies Associated with a Fleet
- Updating the Zone Associated with the Federation of a Fleet
- Obtaining the Fleet List
- Enabling Fleet Federation
- Disabling Cluster Federation
- Querying Federation Enabling Progress
- Creating a Federation Connection and Downloading kubeconfig
- Creating a Federation Connection
- Downloading Federation kubeconfig
- Permissions Management
- Using the Karmada API
- Appendix
-
FAQs
- About UCS
-
Billing
- How Is UCS Billed?
- What Status of a Cluster Will Incur UCS Charges?
- Why Am I Still Being Billed After I Purchase a Resource Package?
- How Do I Change the Billing Mode of a Cluster from Pay-per-Use to Yearly/Monthly?
- What Types of Invoices Are There?
- Can I Unsubscribe from or Modify a Resource Package?
-
Permissions
- How Do I Configure Access Permissions for Each Function of the UCS Console?
- What Can I Do If an IAM User Cannot Obtain Cluster or Fleet Information After Logging In to UCS?
- How Do I Restore ucs_admin_trust I Deleted or Modified?
- What Can I Do If I Cannot Associate the Permission Policy with a Fleet or Cluster?
- How Do I Clear RBAC Resources After a Cluster Is Unregistered?
- Policy Center
-
Fleets
- What Can I Do If Cluster Federation Verification Fails to Be Enabled for a Fleet?
- What Can I Do If an Abnormal, Federated Cluster Fails to Be Removed from the Fleet?
- What Can I Do If an Nginx Ingress Is in the Unready State After Being Deployed?
- What Can I Do If "Error from server (Forbidden)" Is Displayed When I Run the kubectl Command?
- Huawei Cloud Clusters
- Attached Clusters
-
On-Premises Clusters
- What Can I Do If an On-Premises Cluster Fails to Be Connected?
- How Do I Manually Clear Nodes of an On-Premises Cluster?
- How Do I Downgrade a cgroup?
- What Can I Do If the VM SSH Connection Times Out?
- How Do I Expand the Disk Capacity of the CIA Add-on in an On-Premises Cluster?
- What Can I Do If the Cluster Console Is Unavailable After the Master Node Is Shut Down?
- What Can I Do If a Node Is Not Ready After Its Scale-Out?
- How Do I Update the CA/TLS Certificate of an On-Premises Cluster?
- What Can I Do If an On-Premises Cluster Fails to Be Installed?
- Multi-Cloud Clusters
-
Cluster Federation
- What Can I Do If the Pre-upgrade Check of the Cluster Federation Fails?
- What Can I Do If a Cluster Fails to Be Added to a Federation?
- What Can I Do If Status Verification Fails When Clusters Are Added to a Federation?
- What Can I Do If an HPA Created on the Cluster Federation Management Plane Fails to Be Distributed to Member Clusters?
- What Can I Do If an MCI Object Fails to Be Created?
- What Can I Do If I Fail to Access a Service Through MCI?
- What Can I Do If an MCS Object Fails to Be Created?
- What Can I Do If an MCS or MCI Instance Fails to Be Deleted?
- Traffic Distribution
- Container Intelligent Analysis
- General Reference
Copied.
Collecting Control Plane Component Logs
Billing
LTS does not charge you for creating log groups and offers a free quota for log collection every month. You pay only for log volume that exceeds the quota.
Constraints
- Huawei Cloud clusters must be of v1.21.7-r0 or later, v1.23.5-r0 or later, or v1.25.
- There is required LTS resource quota. For details about the default LTS quota, see Basic Resources.
Control Plane Components
There are three types of control plane logs. Each log stream corresponds to a component of the Kubernetes control plane. To learn more about these components, see Kubernetes Components.
Log Type |
Component |
Log Stream |
Description |
---|---|---|---|
Control plane component logs |
kube-apiserver |
kube-apiserver-{{clusterID}} |
It exposes Kubernetes APIs. For more information, see kube-apiserver. |
kube-controller-manager |
kube-controller-manager-{{clusterID}} |
It manages controllers and embeds the core control loops shipped with Kubernetes. For more information, see kube-controller-manager. |
|
kube-scheduler |
kube-scheduler-{{clusterID}} |
It manages when and where to run Pods in your cluster. For more information, see kube-scheduler. |
Enabling Log Collection for an On-Premises Cluster
The Cloud Native Log Collection add-on is not installed in a cluster.
When installing the Cloud Native Log Collection add-on, you can select control plane component logs to create a default log collection policy, so that this add-on collects component logs and reports them to LTS. For details about the add-on installation, see Log Collection.
The Cloud Native Log Collection add-on has been installed in a cluster.
- Access the fleet console. In the navigation pane, choose Container Clusters. Then, click the cluster name to access the cluster console. In the navigation pane, choose Logging.
- In the upper right corner, click View Log Collection Policies. All log collection policies in the current cluster are displayed.
- Click Create Log Policy and configure parameters as required.
Policy Template: If no log collection policy is enabled during add-on installation or the log collection policy is deleted, you can use this option to create a default log collection policy.
Figure 1 Creating a log collection policy - On the Logging page, click the Control Plane Logs tab. Select the log stream configured in the log policy to view the logs reported to LTS.
Figure 2 Viewing logs
Enabling Log Collection for a Huawei Cloud Cluster
Enabling log collection during cluster creation
- Log in to the CCE console.
- Click Buy Cluster from the top menu.
- On the Select Add-on page, select Cloud Native Log Collection.
- On the Add-on Configuration page, select Custom Installation for Cloud Native Log Collection and then select control plane logs.
- Stdout logs: If this option is enabled, a log collection policy named default-stdout will be created, which will report stdout logs from all namespaces to LTS.
- Kubernetes events: If this option is enabled, a log collection policy named default-event will be created, which will report Kubernetes events from all namespaces to LTS.
- Click Next: Confirm configuration. On the displayed page, click Submit.
Enabling log collection for an existing cluster
- Access the fleet console. In the navigation pane, choose Container Clusters. Then, click the cluster name to access the cluster console. In the navigation pane, choose Logging.
- Click the Control Plane Logs tab, select the control plane components whose logs need to be collected, and click Enable.
Viewing Control Plane Component Logs
Viewing control plane component logs on the UCS console
- Access the fleet console. In the navigation pane, choose Container Clusters. Then, click the cluster name to access the cluster console. In the navigation pane, choose Logging.
- Click the Control Plane Logs tab and select the component whose logs to be viewed. For details about available control plane log types, see Control Plane Components. For details about operations on LTS, see LTS User Guide.
Viewing control plane component logs on the LTS console
- Log in to the LTS console and choose Log Management.
- Query the log group by cluster ID and click the log group name to view the log stream. For details, see LTS User Guide.
Disabling Log Collection of a Huawei Cloud Cluster
- Access the fleet console. In the navigation pane, choose Container Clusters. Then, click the cluster name to access the cluster console. In the navigation pane, choose Logging.
- Click the Control Plane Logs tab, click Configure Control Plane Component Logs in the upper right corner, and modify the log settings.
- Determine whether to enable logging for each component and click OK.
NOTE:
After you disable control plane component logging, logs are no longer written to the original log stream, but existing logs will not be deleted and expenditures may be incurred for this.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot