View cluster information

Tab

Description

Overview

View an overview of cluster resources and health status.

Security Overview

This feature is available only to allowlisted users of ACK Pro clusters. To apply for access, submit a ticket.

After a security scan of the cluster configuration, this section displays the results, including node vulnerabilities, container image risks, and container runtime risks. This helps you identify potential security issues in the configurations of your running applications.

The scan results are displayed in a report, which includes descriptions of the scanned items and recommendations for fixes. You can also configure periodic scans and write the results to a specified Log Service project. For more information, see Configure inspection to check cluster workloads.

Basic Information

• Basic Information: Basic details about the cluster, such as Cluster ID, region, cluster specifications, cluster time zone, Kubernetes version, and whether deletion protection is enabled.

  In ACK Pro clusters, you can enable the ACK Pro preset control plane feature to pre-allocate and pin control plane resources. This ensures predictable control plane performance.

• Network: Information about the cluster network, such as the container network plugin, vSwitches, API server endpoint, and Service CIDR block.

  Find the public egress IP address of an ACK cluster

  By default, when resources in an ACK cluster need to access the internet, they use a NAT gateway in the cluster's VPC as the public egress. When you create a managed ACK cluster, if you select the Configure SNAT for VPC option, a NAT gateway is automatically created in the VPC and SNAT rules are configured. You can view the details of the NAT gateway in the console.

  If you did not select this option during cluster creation, you can enable public network access for the cluster after it is created.

  On the Basic Information tab, click the link next to Public NAT Gateway to view the gateway details.

  Important

  If you associate an independent public EIP with a pod or bind an Elastic IP Address to a node's ECS instance, the pod or node may not use the NAT gateway for public access. The actual egress IP depends on your specific configuration.

• Security and Auditing: Security and audit information for the cluster, such as whether cluster audit logging is enabled.

• Cluster Resources: The Resource Orchestration Service (ROS) stack and Log Service project used by the cluster. You can click a resource ID to open it in the corresponding console.

  Important

  These resources are managed by ACK. To avoid cluster failures and disruptions to your applications, do not delete or modify them.

• Tag Group: The resource group and labels assigned to the cluster.

Connection Information

Provides the kubeconfig file for accessing the cluster from a kubectl client over the public internet or an internal network. For more information, see Connect to a cluster.

Cluster Monitoring

Integrates with Managed Service for Prometheus to monitor cluster resources. You can quickly view the utilization of CPU, memory, and network metrics for workloads. This service provides monitoring and alerting capabilities with metrics optimized for container scenarios. For more information, see Integrate and configure Managed Service for Prometheus.

Costs

After enabling the cost insights feature, you can view cost and resource usage by cluster, department, or application for a specified financial governance cycle. This capability helps with cost estimation, allocation, and accounting. For more information, see Cost insights.

Cluster Logs

Displays operational logs for the cluster.

Cluster Tasks

View cluster tasks, their statuses, involved resources, and change times. Failed tasks include error messages to help with troubleshooting and diagnosis.

O&M Plan

This feature applies only to managed node pools. To enable it and use its automated O&M capabilities, see Create and manage a node pool.

View the execution plans generated by automated O&M tasks in ACK, such as automatic responses to ECS system events, automatic kubelet upgrades for node pools, and automatic patching for CVE vulnerabilities. You can click a plan ID to view detailed information and event records for the O&M task. For more information about the automated O&M capabilities provided by ACK, see Automated O&M capabilities.