Creating a CCE Turbo Cluster Using VPC Sharing

VPC Sharing Overview

VPC sharing allows you to share your VPC resources with other accounts through Resource Access Manager (RAM). For example, tenant A can share its VPCs and subnets with tenant B. After tenant B accepted the sharing, tenant B can view the shared subnets and VPCs to which the shared subnets belong. Tenant B can use the shared subnets and VPC to create resources, such as CCE Turbo clusters. For details, see VPC Sharing Overview.

Application Scenarios

An enterprise organizes accounts in an orderly and centralized manner based on its organization structure or service form. Resources are managed in a unified manner and shared with other members to avoid repeated configurations. Unified security and O&M management makes it easy to configure and audit security policies.

For example, an enterprise IT account, the resource owner, creates a VPC and subnets and shares multiple subnets with other accounts.

• Account A is an enterprise service account and uses the shared subnet 1 to create resources.
• Account B is an enterprise service account and uses the shared subnet 2 to create resources.

Notes and Constraints

• Only CCE Turbo clusters support VPC sharing.
• Clusters created using VPC sharing do not support shared load balancers and NAT gateways.
• Clusters created using VPC sharing do not support file storage.
• If a CCE Turbo cluster has been created using VPC sharing, the owner of the shared VPC should not turn off the VPC sharing. Otherwise, the CCE Turbo cluster will malfunction.

Procedure

After account A shares a VPC with account B, account B can select the shared VPC and subnets when creating a CCE Turbo cluster.

1. (For account A) Use RAM to create a VPC share and specify account B as the resource user. For details, see Creating a Resource Share.

   After the resource share is created, RAM sends an invitation to account B. Account B can access and use the shared resources only after accepting the invitation.

2. (For account B) Log in to the CCE console and create a CCE Turbo cluster.

   Select the VPC shared by account A when configuring network for the cluster. For details about other configurations, see Buying a CCE Standard/Turbo Cluster.

   Figure 1 Selecting a shared VPC