Docs

Volcengine Kubernetes Engine

Getting started

VCI preparations

This topic describes the necessary preparations before using Volcengine Container Instance (VCI).

Step 1: Register a Volcano Engine account

tip

If you have already registered a Volcano Engine account, skip this step.

Go to the Volcano Engine console and click Sign up now.

Set your account information as prompted. For more information, refer to Sign up and verify Volcano Engine account.

Complete enterprise real-name authentication for your account. For more information, refer to Real-name authentication.

warning

Currently, only users who have completed enterprise real-name authentication can use Volcengine Kubernetes Engine (VKE) and VCI.

Step 2: Add funds to your account

Ensure that the balance of your Volcano Engine account is greater than or equal to CNY 0 after deducting coupons.

Step 3: Apply for VKE permissions

Apply for VKE console permissions as prompted.

(Optional) Step 4: Create and authorize IAM users

By default, the main Volcano Engine account has all VKE permissions. If you want multiple users to collaboratively manage the resources within your account, you must create Identity and Access Management (IAM) users and grant them appropriate roles and permissions.

Refer to Creating and authorizing an IAM user to create IAM users and attach the following policies to the users.

For more information on policies and their configurations, refer to Authorization management.

Policy	Description
VKEFullAccess	This policy grants full read and write permissions on VKE, including full read and write access to ECS, Load Balancer, VPC, and NAT Gateway.
VKEInnerFullAccess	This policy grants full read and write permissions on the internal resources of VKE.
VKEReadOnlyAccess	This policy grants read-only permissions on VKE.
VKEInnerReadOnlyAccess	This policy grants read-only permissions on the internal resources of VKE.

(Optional) Step 5: Configure RBAC permissions for IAM users

VKE offers the role-based access control (RBAC) authorization feature to meet the fine-grained resource access control needs of enterprise users. After granting permissions to IAM users, you can configure RBAC permissions for them.

In the left navigation bar, click Authorizations > User authorization. Find the IAM user for which you want to configure RBAC permissions. Click Add authorization in the Actions column.

On the Create user authorization page, grant the appropriate permissions to the user. Click Create.

Step 6: Create a VPC

A virtual private cloud (VPC) offers an isolated, self-configured, and managed virtual network environment for clusters.

In the top menu bar, select the region closest to your application.

In the left navigation bar, click VPC, and click Create VPC.

Configure the VPC and subnet parameters as prompted. For more information on the parameters, refer to Creating a VPC.

Step 7: Upload images

VKE allows you to use container images in Volcano Engine Container Registry (CR) or third-party image registries. Before using VKE, ensure that images have been uploaded to the image registry.

Warning

In this example, an Nginx application is deployed. You need to upload the Nginx image to CR and set the image type to Public in advance. For more information, refer to Pushing and pulling images.

Last updated: 2026.03.16 14:55:25