Questions tagged [calico]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
1answer
126 views

New Kubernetes cluster setup Calico: “Failed to stat() nodename file: stat /var/lib/calico/nodename: no such file or directory”

i have trouble to add a CNI to a kubernetes master node, the CNI plugin does not have access to certain files or folders. The logs from Calico and Flannel say that certain files or folders are not ...
0
votes
0answers
23 views

How to allow ClusterIP by selector in k8s?

I want to allow external access to ClusterIP of specific services. I tried as follows, but the Rule is created as Pod IP. policy: apiVersion: crd.projectcalico.org/v1 kind: GlobalNetworkPolicy ...
1
vote
1answer
245 views

Kubernetes Calico networking: calicoctl reports “reset by peer” and “bird: BGP: Unexpected connect from unknown address”

This is a new cluster built using Kubespray on bare metal. The issue that calicoctl reports not Established status, StatefulSet members cannot communicate between each other and majority of Ingress ...
1
vote
0answers
166 views

Trying to Install Kubernetes with Vagrant and Ansible on Ubuntu 16.04 lab

So I am trying to install Kubernetes on a lab with Vagrant and Ansible. I am using the following documentation on Ubuntu 16.04: https://kubernetes.io/blog/2019/03/15/kubernetes-setup-using-ansible-and-...
0
votes
1answer
269 views

Stopping IPTables is the only way to make Kubernetes cluster work

We have an inhouse 1.17.5 K8s cluster - 5 nodes. I cannot deploy, collect logs, anything on the cluster when IPTables is enabled. [root@lpdkubpoc01a ~]# kubectl run --generator=run-pod/v1 --rm utils -...
1
vote
0answers
27 views

Kubernetes 1.18.6 : inter pod communication on google cloud custom vm nodes not working

[Problem statement] Ping from pod {busybox-minion1} running on worker1 {named as : minion1} to the pod {busybox-minion2} on worker2 {named as : minion2} is not working. It is a three-node cluster ...
0
votes
1answer
184 views

Kubernetes-calico service accessible only from where the pod is deployed

I'm facing this issue for the last 3 days and still can't figure out why I can't access NodePort outside k8s cluster using NodePort service type. Basically I have set up a 3 node cluster in rhel8, I ...
1
vote
1answer
46 views

RedHat 7.6, reboot cause applications listen on tcp6 sockets only

We have some vmware virtual machines with RHEL 7.6 installed, recently all of them got a reboot due data center move location. The problem is, after reboot some applicaiton, such as Java, kube-proxy ...
0
votes
1answer
81 views

Calico-node pods not becoming READY until iptables is disabled - Kubernetes on RHEL 7

I have provisioned a Kubernetes cluster on RHEL 7 and deployed Calico to it. The calic-node pods running on the master and worker nodes do not become ready until I SSH into the master and temporarily ...
1
vote
1answer
206 views

How to change the k8s internal ip addresses?

I provisioned a kubernetes cluster on my own couple of virtual machines via kubespray. The VM's network is bridged adapter and kubespray uses calico as default network-plugin. Before sometime, I've ...
0
votes
1answer
489 views

Kubernetes kube-proxy NodePort with IPv6

I am trying to expose a service using NodePort on a on premise bare metal kubernetes (1.17) cluster (calico for CNI and CRI-O 1.17) All nodes (Ubuntu 18.04) have IPv4 and IPv6 adresses and are ...
0
votes
1answer
258 views

Istio & K8S - Ingress with IPv6 and IPv4

We are currently evaluating a K8S (version 1.17 using CRI-0 version 1.17 & Calico CNI) installation using Istio 1.5.0. All nodes have a valid and reachable IPv4 and IPv6 (ubuntu server 18.04 - on ...
0
votes
1answer
252 views

Installing kubernetes with external etcd - calico problems

I faced multiple problems during installation of k8s multimaster cluster with external etcd. I did it before twice, on other sites, successfully, but this time I need help. calico was installed from ...
0
votes
1answer
147 views

Disable Source NAT for Calico

The default settings that kubeadm + calico use is to NAT any incoming connection that is not from a pod_ip. I have calico publishing the service network to my outside LAN, and would rather the ...
2
votes
2answers
1k views

Does Amazon EKS support IPv6 networking?

I have been searching for hours, but can't find any direct information on this topic. Here is what I know: Calico can be deployed into EKS Configuring IPv6 networking is possible with Calico. ...
0
votes
1answer
232 views

For route command output, what does an asterisk under interface column mean?

For my Kubernetes nodes, I see following entry with a star under the interface column. I do not see this mentioned in "route" command's documentation. The only star mentioned there is for gateway. ...
0
votes
1answer
375 views

Kubernetes with Dual Stack on both Pod and Service level

I have 3 Ubuntu VMs where all of them have 2 interfaces. One interface with v4 address and other with both v4 and v6 address. 3 VMs are reachable from each other on all 3 (2 v4 and 1 v6) addresses. I'...
2
votes
0answers
599 views

Connects to OpenVPN but no access to local network or internet in Kubernetes GKE with Calico

I've been using VPN (openvpn in helm) to access internal services in my cluster for development. I enabled network policy in nodes in GKE to manage access of services, that enabled Calico network in ...
0
votes
2answers
2k views

Node-to-Node communication doesn't work with Kubernetes with Calico

I'm quite new to Kubernetes, event if it doesn't feel like after I spent dozens of hours trying to setup a working Kubernetes. The edge parameters: 1 master and 3 nodes set up using kubeadm ...