All Products
Search
Document Center

Container Service for Kubernetes:Component overview

最終更新日:Sep 14, 2023

Container Service for Kubernetes (ACK) provides various types of components for ACK Lingjun managed clusters. You can install, upgrade, or uninstall components based on your business requirements. This topic lists the components that can be used by ACK Lingjun managed clusters and describes the features of the components.

Component types

The cluster components that can be used by ACK Lingjun managed clusters are classified into system components and optional components.

  • System components are automatically installed when you create ACK Lingjun managed clusters.

  • Optional components extend the features of clusters. You can install optional components when you create ACK Lingjun managed clusters.

Key components

Component

Type

Description

Cloud Controller Manager

System component

The cloud controller manager (CCM) creates Server Load Balancer (SLB) instances for your applications and manages the route entries of nodes.

Kube API Server

System component

The Kubernetes API server is the access gateway of a Kubernetes cluster.

Logging and monitoring components

Component

Type

Description

alicloud-monitor-controller

System component

This component monitors the lifecycles and status of containers.

metrics-server

System component

The metrics-server component collects resource usage data for the auto scaling feature.

ack-node-problem-detector

Optional component

This component detects node exceptions and reports them to the Kubernetes event center.

ack-arms-prometheus

Optional component

This component monitors clusters by using Managed Service for Prometheus.

logtail-ds

Optional component

This component collects container logs from Kubernetes clusters and delivers the logs to Log Service. Before you update this component, we recommend that you read the introduction to this component.

Storage components

Component

Type

Description

storage-operator

System component

This component manages the lifecycles of storage components. We recommend that you install this component.

Networking components

Component

Type

Description

CoreDNS

System component

This component serves as a Domain Name System (DNS) server for a Kubernetes cluster.

managed-kube-proxy

System component

This component serves as a containerized proxy for Services that run on nodes of ACK Lingjun managed clusters.

Terway

System component

An open source Container Network Interface (CNI) plug-in that is developed by Alibaba Cloud. This plug-in is used together with Virtual Private Cloud (VPC) and allows you to use standard Kubernetes network policies to regulate how containers communicate with each other. You can use Terway to set up network connectivity within a Kubernetes cluster.

Nginx Ingress Controller

Optional component

This component parses the traffic forwarding rules that are configured in NGINX Ingresses.

Security components

Component

Type

Description

gatekeeper

Optional component

This component facilitates the management and enforcement of policies that are executed by Open Policy Agent (OPA) in Kubernetes clusters.

policy-template-controller

Optional component

This component manages and applies pod security policies.

security-inspector

Optional component

This component performs security inspections on Kubernetes clusters.