Manage ACS clusters

Use the bundled OpenAPI client for the ACS cluster lifecycle. Use $aliyun-vpc-manage first when the VPC and VSwitches do not exist, and use $alicloud-acs-agent-sandbox after the cluster is ready.

Workflow

1. Read references/cluster-lifecycle.md before creating or deleting a cluster.

2. Set ALIBABACLOUD_ACCESS_KEY_ID, ALIBABACLOUD_ACCESS_KEY_SECRET, and optionally ALIBABACLOUD_SECURITY_TOKEN. Set ALIBABACLOUD_REGION_ID=cn-hangzhou for Hangzhou.

3. Before creating the network, confirm that the Alibaba Cloud account has already authorized both CSI service roles:

   • AliyunCSManagedCsiPluginRole with AliyunCSManagedCsiPluginRolePolicy
   • AliyunCSManagedCsiProvisionerRole with AliyunCSManagedCsiProvisionerRolePolicy

   These are account-level, one-time authorizations. If the execution identity cannot call ram:GetRole, have the Alibaba Cloud account owner or a RAM administrator complete the official authorization pages. Container Service permissions alone cannot create these roles.

4. Install the official SDK:

python3 -m pip install "alibabacloud-cs20151215==7.0.4" "alibabacloud-tea-openapi"