All Products
Search
Document Center

Container Service for Kubernetes:Authorize the MSE Ingress controller to access MSE

Last Updated:Jan 24, 2025

To use the Microservices Engine (MSE) Ingress to expose your services in a Container Service for Kubernetes (ACK) Serverless cluster, you must first authorize the MSE Ingress controller to access MSE. This topic describes how to authorize the MSE Ingress controller in an ACK Serverless cluster to access MSE.

Step 1: Install the MSE Ingress controller

Method 1: Install the MSE Ingress controller when you create a cluster

On the Component Configurations wizard page, select MSE Ingress in the Ingress section. For more information about ACK Serverless cluster parameters, see Create an ACK Serverless cluster.

image

Method 2: Install the MSE Ingress controller for an existing cluster on the Add-ons page

  1. Log on to the ACK console. In the left-side navigation pane, click Clusters.

  2. On the Clusters page, find the cluster that you want to manage and click the name of the cluster or click Details in the Actions column. The details page of the cluster appears.

  3. In the left-side navigation pane of the details page, choose Operations > Add-ons.

  4. On the Add-ons page, click the Networking tab. In the lower-right corner of the MSE Ingress Controller component card, click Install.

  5. In the Install ALB Ingress Controller message, click OK.

Step 2: Authorize the MSE Ingress controller to access MSE

  1. On the Cloud Resource Access Authorization page, click Confirm Authorization Policy.

    After the authorization is completed, the MSE Ingress controller can assume the Resource Access Management (RAM) role AliyunMSEForECIRole to access MSE.

  2. Log on to the ACK console. In the left-side navigation pane, click Clusters.

  3. On the Clusters page, find the cluster that you want to manage and click its name. In the left-side pane, choose Workloads > Deployments.

  4. In the upper part of the Deployments page, select All Namespaces from the Namespace drop-down list. Enter ack-mse-ingress-controller in the search box and click the search icon. After ack-mse-ingress-controller appears on the page, choose More > Redpoloy in the Actions column. In the message that appears, click Confirm.

    After you redeploy ack-mse-ingress-controller, click ack-mse-ingress-controller on the Deployments page. Then, verify that the pod displayed on the Pods tab is in the Running state.