Limits and constraints¶
Limits that apply in the console, Maya, and scripts alike. Commercial terms that are not listed here: contact your Door account team.
Who can do this: read this page before create and scale.
Names and tags¶
Pattern (RFC 1123 DNS label), unless noted:
| Field | Min | Max | Notes |
|---|---|---|---|
| Cluster name | 1 | 63 | Immutable after create. Unique per organization. |
| Organization slug | 1 | 63 | Same pattern. |
| Node pool name | 1 | 63 | Unique on the cluster. Default pool name on create is default if you omit it. |
| Cluster tags | 1 | 63 each | Max 64 tags. Each entry is a DNS label (not free-form key=value). |
| Elastic IP name | 1 | 63 | Optional. Unique among addresses on the cluster. |
| Firewall rule name | 1 | 63 | Optional. Unique among rules on the cluster. |
| Firewall description | — | 255 | Optional. |
| Cluster description | — | 16384 | Optional. |
Node-pool labels and tags are stored with the pool.
Worker names match kubectl get nodes.
Cluster and pool shape¶
| Constraint | Value |
|---|---|
| Pools per cluster | 1–20 |
| Nodes per pool | 0–200. 0 only when autoscaling is on. Without autoscaling, at least 1. |
| Catalog min / max nodes per pool | 1 / 200 (the wizard; 0 is allowed only with autoscaling) |
| Autoscaling | Requires a maximum. The minimum defaults to 1 if omitted. Minimum ≤ maximum. The replica count must sit between them. Maximum ≥ 1; minimum ≥ 0. |
| Pool machine type | The type you pick at create. Immutable. To change type, delete the pool and add another. You cannot delete the last pool. |
| Control plane | The wizard has no control-plane option. Door applies the one assigned to your organization. |
Kubeconfig¶
- Available from Control plane ready.
- Download again after an exposure change.
Exposure¶
- Values: Public, Private.
- Create default: Public.
- Switchable only when the cluster is Ready.
- Public hostname suffix:
clusters.dks.door.africa. Public exposure is enabled in Abidjan.
Network mode and Elastic IPs¶
- Create default: Private (VPN).
- Immutable after create.
- Private (VPN) → private addresses only.
- Internet → Internet-routed addresses only. Public also needs the zone public pool (Abidjan: enabled).
- Address statuses: Pending, Provisioning, Ready, Failed, Deleting, Deleted.
- Release only while the row is ready or failed.
- Attach workloads with Service annotation
dks.door.africa/elastic-ip(see Elastic IPs). - If the zone has no addresses left, adding one is refused. Contact your Door account team for capacity.
Firewall rules¶
- Ingress only;
tcp/udp/icmp. - ≤ 16 IPv4 CIDRs per rule.
- Cluster must be Ready.
- No firewall editor in the Door console Networking tab (automation only). Maya can list Elastic IPs but cannot allocate, release, or change firewall rules.
Zones and Kubernetes versions¶
From the Abidjan catalog:
| Item | Value |
|---|---|
| Zone id | abidjan |
| Display name | Abidjan |
| Region label | Côte d'Ivoire |
| Kubernetes version | v1.32.4 (label 1.32.4, recommended, channel stable) |
Unknown zone: the wizard only offers catalog zones.
Do not expect extra options beyond the form. The wizard has no control-plane option. Door applies the option assigned to your organization.
The Door console create form includes Where can your applications be reached? (Private (VPN) or Internet). That choice cannot be changed after create.
Machine tiers (Abidjan)¶
Use these ids:
| Id | Display | vCPU | Memory (GiB) | Disk (GiB) | Recommended |
|---|---|---|---|---|---|
dks.c5.large | c5.large | 2 | 4 | 50 | no |
dks.m5.large | m5.large | 2 | 8 | 60 | no |
dks.c5.xlarge | c5.xlarge | 4 | 8 | 80 | yes |
dks.m5.xlarge | m5.xlarge | 4 | 16 | 120 | no |
dks.c5.2xlarge | c5.2xlarge | 8 | 16 | 160 | no |
Disk size follows the catalog.
Organization quotas¶
There is no general “N clusters per org” cap published here.
What does exist:
- Prepaid credit — a create or scale can be refused when credit is insufficient. Contact your Door account team.
- Door hub — the console may show whether the cluster is registered with the Door hub, including reasons such as organization quota exceeded, a name or address conflict, registration rejected, waiting for Door platform installation, or Door platform installation failed. Contact your account team.
- Zone pool / capacity — adding an address or creating a cluster can be refused. Contact your account team.
Anything else (seat counts, contract caps) → contact your Door account team. Do not assume a number that is not in this table.
Related