In order to follow the guide, you will need a Kubernetes cluster version 1.20+ as control-plane cluster, and the cluster's APIServer has an external IP.

Store the AK/AS of Alibaba Cloud to the Secret.

export ALICLOUD_ACCESS_KEY=xxx; export ALICLOUD_SECRET_KEY=yyy

# If you'd like to use Alicloud Security Token Service, also export `ALICLOUD_SECURITY_TOKEN`.
export ALICLOUD_SECURITY_TOKEN=zzz

sh hack/prepare-alibaba-credentials.sh

$ kubectl get secret -n vela-system
NAME                                         TYPE                                  DATA   AGE
alibaba-account-creds                        Opaque                                1      11s

Install Definitions
```
kubectl apply -f definitions
```

Create Initializer terraform-alibaba

Initializer terraform-alibaba will create an environment which allows users use terraform to create cloud resource on aliyun.

kubectl apply -f initializers/init-terraform-alibaba.yaml

It will take few minutes to wait the PHASE of Initializer terraform-alibaba to be success.

$ kubectl get initializers.core.oam.dev -n vela-system
NAMESPACE     NAME                  PHASE     AGE
vela-system   terraform-alibaba     success   94s

Create Initializer managed-cluster

Initializer managed-cluster can create an ack cluster and use OCM to manage the cluster.

You should set the hubAPIServer to the public network address in init-managed-cluster.yaml

# init-managed-cluster.yaml
- name: register-ack
   type: register-cluster
   inputs:
    ...
   properties:
     # user should set public network address of your control-plane cluster APIServer
     hubAPIServer: {{ public network address of APIServer }}

Apply the Initializer managed-cluster

kubectl apply -f initializers/init-managed-cluster.yaml

It will take 15 to 20 minutes to create an ack cluster, please wait until the status of managed-cluster to be success.

$ kubectl get initializers.core.oam.dev -n vela-system
NAMESPACE     NAME                  PHASE     AGE
vela-system   managed-cluster       success   45m

Check the new ack cluster has been registered

$ kubectl get managedclusters.cluster.open-cluster-management.io
NAME     HUB ACCEPTED   MANAGED CLUSTER URLS         JOINED   AVAILABLE   AGE
poc-01   true          {{ APIServer address }}       True     True        30s

Deploy the resource to ack cluster

install trait expose from default capability center.

vela cap install default-cap-center/expose

kubectl apply -f app.yaml

check the app workflow-demo was created successfully

$ kubectl get app workflow-demo
NAME            COMPONENT         TYPE         PHASE     HEALTHY   STATUS   AGE
workflow-demo   podinfo-server    webservice   running   true               7s

use kubectl connect to the managed-cluster poc-01 and check the resources in the app are successfully deployed to the cluster poc-01.

$ kubectl get deployments
NAME             READY   UP-TO-DATE   AVAILABLE   AGE
podinfo-server   1/1     1            1           40s