Cloud Credential

A cloud credential is a user with specific permissions, and it is also the credential used to start nodes in a cloud provider. The advantages of using cloud credentials are:

• Security and Reliability: Credentials are stored as more secure Kubernetes secrets, and you do not need to enter the credentials each time to update the node pool.

• Reusability: Once you create a cloud credential, you can reuse it to create other node pools.

• Convenient Management: If your key is compromised or expires, you can update the cloud credential in one place, thereby updating all node pools that use that credential at once.

Update Public Image Repository Cloud Credential

The platform has already built-in a cloud credential of type PublicRegistry for you. This credential is used to provide access to public network repositories. When creating a cluster, you can select the Public Repository option to use repository services located on the public network. Before using this credential, you need to perform the following steps:

1. Log in to the Customer Portal and navigate to the “User Information” section in the top right corner of the page. Find “Enterprise Management” and download the authentication file for your organization.

2. On the left navigation bar of Platform management, click Clusters > Cloud Credential.

3. Find the cloud credential named public-registry-credential, click on the right side > Update.

4. In the Upload Public Repository Address parameter area, upload the file downloaded from the Customer Portal.

5. Click Update.

Create AWS Cloud Credential

AWS Identity and Access Management (IAM) is an AWS service that helps administrators securely control access to AWS resources. IAM administrators control who can access AWS EKS resources through authentication (login) and authorization (permissions).

1. On the left navigation bar, click Clusters > Cloud Credential.

2. Click Create Cloud Credential and select the type of credential. Refer to the following instructions to configure the relevant parameters.

   Parameter	Description
   Access Key/Secret Key	The access key and secret key for IAM users. Refer to the official documentation .
   Default Region	The default region used for credential verification and will also be the default value for the region when creating a public cloud cluster. Refer to the official documentation .

3. Click Create.

Create CCE Cloud Credential

1. On the left navigation bar, click Clusters > Cloud Credential.

2. Click on Create Cloud Credential and select the type of credential. Refer to the following instructions to configure the relevant parameters.

   Parameter	Description
   Access Key/Secret Key	User’s access key, please refer to the official documentation for more information.

3. Click Create.

Create AKS Cloud Credential

1. On the left navigation bar, click Clusters > Cloud Credential.

2. Click Create Cloud Credential and select the type of credential. Refer to the following instructions to configure the relevant parameters.

   Azure Active Directory (AD) is used to dynamically create and manage other Azure resources, providing credentials for communication with AKS. For more information about service principals, please refer to the official documentation .

   Parameter	Description
   Tenant ID	Go to the Azure portal, click on Azure Active Directory > Properties, and find the Tenant ID field.
   Subscription ID	You can obtain the subscription ID from the All services > Subscriptions section of the portal website.
   Client ID	Go to the Azure portal, click on Azure Active Directory > Enterprise applications, click on All applications and select your application, click on Properties, and copy the Application ID.
   Client Secret	If you did not copy the client secret when creating the service principal, you can obtain a new secret on the application registration details page by clicking on Certificates & secrets > New client secret.

3. Click on Create.

Create GKE Cloud Credential

1. In the left navigation pane, click Clusters > Cloud Credential.

2. Click Create Cloud Credential and select the type of credential.

3. You need to add roles to the created service account to authenticate with the Google Cloud API and grant access to resources. Please refer to the official documentation and save the key in JSON format.

4. Upload the service account key JSON file.

5. Click Create.