The sandboxed container runtime isolates applications and their dependencies in a lightweight virtual machine. This provides each pod with its own kernel, preventing malicious attacks or vulnerabilities in a container from affecting the host or other containers. In Container Service for Kubernetes (ACK), you manage nodes by using node pools. This topic explains how to create a sandboxed container node pool and scale its nodes.
Limitations
-
Cluster version: This feature is available only on an ACK managed cluster or ACK dedicated cluster that runs Kubernetes 1.16 to 1.34. To upgrade a cluster, see Manually upgrade a cluster.
-
Operating system: Sandboxed container node pools do not support custom images or Alibaba Cloud Marketplace images.
-
For clusters running a Kubernetes version earlier than 1.30, only Alibaba Cloud Linux 3 and Alibaba Cloud Linux 2 (End of Life) are supported.
-
For clusters running Kubernetes 1.30 or later, only Alibaba Cloud Linux 3 is supported.
-
-
Instance type: Only Elastic Bare Metal Instance types are supported.
-
Network plugin: A sandboxed container node pool supports only the Flannel network plugin and the Terway network plugin in specific modes. If you use the Terway network plugin, you cannot use the exclusive ENI mode or the DataPath v2 feature.
Create a sandboxed container node pool
When you create a node pool, set the container runtime to sandboxed container. For more information, see Create and manage node pools.
Scale a sandboxed container node pool
-
Log on to the ACK console and choose Clusters in the navigation pane on the left.
On the Clusters page, click the name of your cluster. In the left navigation pane, click .
-
In the Actions column of the target node pool, click Scale. Select Manual mode, set the Expected Nodes parameter, and then follow the on-screen instructions.
Once scaling is complete, the node pool contains the specified number of nodes.
Related documents
-
To create an application that runs in a sandboxed container, see Create a stateless workload (Deployment).
-
To create a cluster or a node pool by using the API, see CreateCluster and CreateClusterNodePool.