Create a sandboxed container node pool and scale it out. Sandboxed containers run each application pod in a lightweight virtual machine with a dedicated kernel and fine-grained isolation, preventing malicious activity or vulnerabilities inside a container from reaching the host or neighboring containers.
Limitations
Constraint | Details |
Cluster type | ACK managed clusters and ACK dedicated clusters only |
Cluster version | 1.16–1.34. Upgrade the cluster if your version is outside this range. |
Operating system | Custom images are not supported. See the OS support matrix. |
Instance types | |
Network plugins | Flannel and Terway (limited modes). Terway does not support exclusive ENI mode or Datapath V2. |
OS support matrix
Cluster version | Supported OS |
Earlier than 1.30 | Alibaba Cloud Linux 3 and Alibaba Cloud Linux 2 (no longer maintained) |
1.30 and later |
Create a sandboxed container node pool
Set the container runtime to Sandboxed Container when you create a node pool. See Create and manage node pools for the full procedure.
Scale out a sandboxed container node pool
Log on to the Container Service console and click Clusters in the left navigation pane.
Open your cluster. In the left navigation pane, choose Nodes > Node Pools.
In the Actions column of the target node pool, click Scale. Select Manual mode, set Expected Nodes, and submit the changes.
After scale-out completes, the node count matches the expected value you set.
Next steps
See Create stateless workloads (Deployment) to deploy a workload on your sandboxed container node pool.
Use the CreateCluster and CreateClusterNodePool APIs to create a cluster or node pool.