Function Overview

Cloud Container Engine (CCE) is a hosted Kubernetes product or service that simplifies the deployment and management of containerized applications. With CCE, you can easily create Kubernetes clusters, deploy containerized applications, and manage and maintain them.
CCE allows you to buy, scale, upgrade, delete, and monitor clusters. After a cluster is created, it can be hibernating and awakened, and you can access it using kubectl and manage cluster permissions.

A container cluster consists of a set of worker machines, called nodes, that run containerized applications. A node can be a virtual machine (VM) or a physical machine (PM), depending on your service requirements. The components on a node include kubelet, container runtime, and kube-proxy.
CCE uses high-performance ECSs or bare metal servers (BMSs) as nodes to build high-availability Kubernetes clusters.
CCE allows you to buy, monitor, reset, shut down, and delete nodes. You can also accept existing nodes into a cluster, log in to nodes, manage node labels, and synchronize node information.

CCE allows you to create custom node pools. With node pools, you can quickly create, manage, and destroy nodes without affecting the entire cluster. All nodes in a custom node pool have identical parameters and node type. You cannot configure a single node in a node pool; any configuration changes affect all nodes in the node pool.
CCE allows you to create, edit, clone, and delete node pools. You can also view node pool details and migrate nodes to another node pool.

A workload is an abstract model of a group of pods in Kubernetes. Workloads classified in Kubernetes include Deployments, StatefulSets, DaemonSets, jobs, and cron jobs.
CCE supports Kubernetes-native container deployment and management. You can manage the lifecycle of container workloads, including creation, configuration, monitoring, auto scaling, upgrade, uninstall, service discovery, and load balancing.

You can constrain which AZs and nodes your workloads are eligible or forbidden to be scheduled on. You can also define rules to describe which workloads will or will not be co-located with your workloads. Affinity scheduling allows workloads to be physically closer to user location and makes routing paths between containers as short as possible, which in turn reduces network overhead. Anti-affinity scheduling prevents a single point of failure by banning co-location of instances belonging to the same workload. It also prevents interfering workloads from affecting each other by not allowing them to run on the same node or AZ.

By deeply integrating the Kubernetes networking capabilities with HUAWEI CLOUD VPC, CCE provides a stable and high-performance container network for mutual access of workloads in complex scenarios.
CCE supports ClusterIP, NodePort, LoadBalancer, and DNAT Services, as well as Layer-7 load balancing (ingress), network policies.

Container storage provides storage for container workloads. It supports multiple storage classes. A pod can use any amount of storage.
CCE supports the following container storage classes: local disk storage, EVS disks, SFS file systems, OBS buckets, SFS Turbo file systems, snapshots, and backups.

CCE provides multiple types of system add-ons to extend cluster functions and meet feature requirements. You can install add-ons as required.

Helm is a Kubernetes package manager that makes it simple to deploy and manage packages (also called charts). A chart is a collection of files that describe a related set of Kubernetes resources. The use of charts handles all the complexity in Kubernetes resource installation and management, making it possible to achieve unified resource scheduling and management. 

CCE supports workload scaling and node scaling. For workloads, you can create HPA or CustomedHPA policies for scaling.

• HPA: a policy that implements horizontal scaling of pods in Kubernetes. This policy adds the HPA-level cooldown time window and scaling threshold functions based on the HPA function provided by the Kubernetes community.
• CustomedHPA: a policy that scales Deployments based on metrics (such as CPU usage and memory usage) or at a periodic interval (every day/week/month or a specific time point). This type of policy is an enhanced auto scaling capability developed by HUAWEI CLOUD.

CCE permissions management allows you to grant permissions to IAM users and user groups under your HUAWEI CLOUD account. It combines the advantages of Identity and Access Management (IAM) and Kubernetes Role-based Access Control (RBAC) authorization to provide a variety of authorization methods, including IAM fine-grained authorization, IAM token authorization, cluster-scoped authorization, and namespace-wide authorization.