Questions tagged [calico]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
132 views

Pods on a k8s node are unaccessible, kube-proxy or CNI failed

I have add a new node to my k8s cluster, but I found some allocated to this node cannot show logs like this: $ kubectl logs -n xxxx xxxxx-6d5bdd7d6f-5ps6k Unable to connect to the server: EOF Using ...
0 votes
0 answers
63 views

Calico CNI calio-apiserver issues, on-premises kubeadm based kubernetes v1.24.2 cluster

I am unable to get calico CNI fully functional on a on-premises kubeadm based kubernetes v1.24.2 cluster. The calio-apiserver pods (in the calio-apiserver namespace) have the status "...
  • 111
0 votes
0 answers
481 views

kubeadm based kubernetes (v1.24.2) worker nodes are still in "NotReady" status even after installing calico CNI ("Error querying BIRD")

kubeadm based kubernetes (v1.24.2) worker nodes are still in "NotReady" status even after installing calico CNI ("dial unix /var/run/bird/bird.ctl: connect: no such file or directory&...
  • 111
0 votes
1 answer
142 views

kubeadm based kubelet 1.24.2 calico CNI issues

I have installed a kubeadm based kubernetes cluster (v1.24.2) on Centos7. I have attempted to install calico CNI as per the instructions at "https://projectcalico.docs.tigera.io/getting-started/...
  • 111
0 votes
0 answers
173 views

kubeadm based kubernetes Get "https://10.96.0.1:443/api?timeout=32s": dial tcp 10.96.0.1:443: connect: no route to host

I have deployed a kubeadm based kubernetes cluster v1.24.3 which consists of one control-plane node and 3 worker nodes (all Centos 7 VMs). These are all "on premises" on a single physical ...
  • 111
0 votes
0 answers
378 views

Calico HA cluster - not-ready:NoSchedule

Installed Calico on a K8s HA cluster Note: same installation worked on single node installation, removing taint. But in a HA Cluster it does only have taint: node.kubernetes.io/not-ready:NoSchedule ...
  • 167
1 vote
0 answers
162 views

Why is access to Kubernetes lost if I turn on the IPVS mode?

The problem is that after enabling the IPVS mode in the kube-proxy, everything works fine for me. But as soon as I install Traefik, I immediately lose connection with Kubernetes. OS: CentOS 7.9 $ ...
  • 11
0 votes
1 answer
460 views

Calico Kubernetes Network Policy is denying all traffic and not working as expected

I am trying to implement some Calico based Kubernetes Network Policies. I have already setup Calico in my cluster and all the Calico based pods are running fine. In my cluster, There are two pods. 1. ...
0 votes
0 answers
143 views

Calico deployment not saving tolerance for master node

I was trying to setup a Kubernetes Cluster using Amazon EC2 and Kubeadm. I created a 't2.large' EC2 instance based on Ubuntu 18.04 AMI. Setup kubeadm, kubelet, kubectl and docker as the container ...
0 votes
1 answer
67 views

How to re-trigger failed flannel to calico migration?

I have a 3 node kubernetes cluster with k8s 1.22 version with flannel setup and running fine. I did run live migration steps from flannel to calico as describes in here. Cluster migrated to calico ...
0 votes
0 answers
86 views

Kubernetes: route traffic to a subnet via a pod (accesing management VPN clients from pods)

Given two pods deployed on different nodes: myapp pod deployed on apps node wireguard pod deployed on vpn node, using a subnet like 172.16.30.0/16 I need myapp to be able to be able to route traffic ...
0 votes
1 answer
2k views

Kubernetes Cluster on CentOS 7 with kubeadm 1.24 - calico => coredns stuck in ContainerCreating

In order to install a master kubernetes node on centos7 with containerd and calico : I followed this steps : https://computingforgeeks.com/install-kubernetes-cluster-on-centos-with-kubeadm/ After the ...
  • 41
0 votes
0 answers
317 views

Trying to use a CNI configuration with Calico in Minikube with Helm

I am trying to configure a network configuration in our Kubernetes cluster via Helm with Calico, we are running minikube with calico like this: minikube start --network-plugin=cni --cni=calico And we ...
1 vote
0 answers
314 views

iptables REDIRECT to Kubernetes NodePort causes request to hang

I am attempting to direct client traffic to a kubernetes cluster NodePort listening on 192.168.1.100.30000 (https port). Client's needs to make a request to 192.168.1.100.8000 so I added the following ...
0 votes
1 answer
89 views

Maximum throughput between Kubernetes pods with LACP bonding

We currently have a kubernetes cluster (using calico) where all worker nodes are connected together with lacp bonds (2x10GB links with LACP Mode 4 - 802.3ad). However, the maximum throughput we manage ...
  • 283
0 votes
1 answer
412 views

K8s nodeLocalDns pod times out connecting to coreDns after upgrading base os to ubuntu20.04 ConnectX-4 card

Team, I have Mellanox Nic ConnectX-4 on a k8s worker node and it hosts a nodeLocal dns pod on it. The nodeLocalDns pod is timing out when trying to connect to coreDns service on k8s cluster. Same ...
  • 109
0 votes
1 answer
394 views

Changing the name of a single Kubernetes master with a temporary master

I have a lab environment for studying Kubernetes. It has Calico CNI installed. Kuberentes version: 1.20. I would like to rename the single master node in the cluster. Preferably, without recreating ...
  • 98
1 vote
2 answers
352 views

How to do live migration from flannel to calico on single node kubernetes cluster?

I am trying to migrate from flannel to calico in k8s cluster. I am able to do it successfully in 3 node cluster. Live migration from flannel to calico is working as described in the documentation. But ...
0 votes
0 answers
258 views

iBGP with recursive next-hop (FRR)

I'm trying to set up k8s cluster on Hetzner and export pods routes to server (172.20.0.5 in topology below) with FRR(Quagga) running on it. I use calico with BIRD as cni plugin. The problem is that ...
2 votes
2 answers
2k views

How can I get Egress Static IP per namespace within a EKS cluster

My current setup involves an EKS Cluster with multiple namespaces (multi-tenant) across many different EKS nodes in private subnets. I would like the egress traffic from the pods to have a dedicated ...
1 vote
1 answer
439 views

Pods on two different nodes communicate very slow, any idea why?

I am learning k8s and I have 3 nodes k8s cluster. I have just recently deployed k8s with kubeadmin and so far it is working great. everything working perfectly but the only problem that I am facing is ...
0 votes
2 answers
807 views

Calicoctl rejecting certificate on fresh k3s install

I have a fresh install of Ubuntu, a fresh install of k3s, and a fresh download of calicoctl. I have installed it the following way. curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE="644"\ ...
1 vote
1 answer
209 views

Why does bgp OPEN message get Connect Socket: Connection reset by peer when node is on a different subnet/gateway

My network setup: Kubernetes network setup With this setup, only nodes on same subnet can establish bgp connection. Other nodes (that do a full 3 way tcp handshake), responds to hte OPEN message with [...
  • 11
1 vote
1 answer
315 views

How to fix "Failed to apply 'Node' resource: [update conflict: Node(...)]" while trying to apply Calico node config?

I'm playing with Kubernetes and got two VirtualBox machines - master and worker. Every one has two network interfaces - one for Internet and other for communication between each other VM and host ...
3 votes
0 answers
173 views

Kubernetes setup with different networks for intra and inter-cluster communication

I have this use case: Setup multiple k8s clusters that can communicate with each other. I also have one network per cluster for intra-cluster communication and another network for inter-cluster ...
1 vote
0 answers
649 views

How to enable ipv6 for ingress-controller services when installing using Helm nginx-ingress chart?

I have a baremetal K8 cluster setup using Kubespray (Calico as CNI) and have dual stack enabled. I can see that all the pods that get deployed get both IPv4 and IPv6 addresses but when I try to ...
  • 11
1 vote
1 answer
225 views

Only have connectivity to nginx pod from the node its running on

I've installed kubernetes master and one node v 1.20. I deployed nginx with kubectl run nginxpod --image=nginx $ kubectl get pods -o wide NAME READY STATUS RESTARTS AGE IP ...
0 votes
1 answer
405 views

apply calico manifest through ansible kubernetes core module

I am trying to install calico on an existing single-node kubernetes cluster (installed through kubeadm). The two manifests are tigera-operator and custom-resources. This works fine if I manually ...
  • 396
0 votes
0 answers
83 views

Cannot reach pod from pod in some machines but tunnel in node is reached

I have a pod with a cluster IP of 10.233.70.35 in a bare metal Kubernetes 1.19 cluster with Calico 3.16.9 as CNI. Let's call this Pod A. In most nodes (which is different from the node of Pod A), a ...
2 votes
2 answers
574 views

What's necessary for a bare metal dual stack kubernetes setup?

We are about to start setting up a new kubernetes cluster on bare metal at our own datacenter. The documentation for the k8s moduls and services is great, however I was not able to find any ...
2 votes
2 answers
3k views

How can I delete manually calicoctl and iptables created by calico from my k3s setup

I have a K3s setup with calico pods [calico-node- & calico-kube-controllers-] running. On uninstalling K3s, calico pods get deleted but I see that calicoctl and iptables -S commands still running ...
  • 265
0 votes
0 answers
79 views

Assign pod an IP address which the same as the IP range of the k8s node

Is that possible to assign pod an IP address which the same as the IP range of my K8s node? For example: I have an on-premise K8s cluster that includes 3 work nodes. All nodes are using the 10.138.1.0/...
  • 161
0 votes
1 answer
554 views

Calico pod with CrashLoopBackOff caused by service account

I have Calico installed on my cluster but a few days ago pod routing stopped working. I noticed the calico pods went offline and from the logs I got this: 2021-07-12 08:36:43.524 [INFO][1] main.go 92: ...
2 votes
0 answers
1k views

Calico node remains not ready when a new node with a 192.168.178.x IP joins a K8s cluster

kube-system pod/calico-node-9czgm 0/1 Running 3 42d kube-system pod/calico-node-msfjk 0/1 Running 0 ...
  • 131
1 vote
1 answer
376 views

Kubernetes: migrate from flannel to canal or install calico network policy alongside flannel

I installed flannel as a CNI for my Kubernetes cluster. Now I want to add a network policy to my cluster. After searching I find Canal (Calico for policy and flannel for networking). How I can migrate ...
  • 33
1 vote
1 answer
2k views

Calico network policy in Kubernetes based on Domain name & Wildcard char

I have an application running with kubernetes orchestrator. I want to implement calico network policy based on domain name or wildcard characters so that domain names (FQDN/DNS) can be used to allow ...
  • 265
2 votes
1 answer
180 views

Calico network policy in Kubernetes based on Domain name Regex Matching

I have a application running with kubernetes orchestrator. I want to implement calico network policy based on domain name Regex matching. I am seeing in calico doc that they are using ip range(CIDR) ...
  • 265
0 votes
1 answer
423 views

k8s loadbalancer service with externalTrafficPolicy=local passes through client ip on IPv4, hides it on IPv6

I'm having trouble getting a kubernetes IPv6 SingleStack LoadBalancer service passing through the correct source IP address to pods. It works fine on a sister IPv4 SingleStack LoadBalancer that passes ...
  • 7,840
1 vote
0 answers
1k views

CoreDNS pod unable to reach the primary DNS server

We are seeing the COREDNS pod is unable to lookup for primary DNS server which is resulting in readtimeout. Connectivity to primary DNS server work fine. Tried deploying Flannel/Calico/CANAL CNI but ...
  • 11
1 vote
2 answers
2k views

Kubernetes trouble - /var/lib/calico/nodename: no such file or directory

I'm following guide from Linux Foundation "Kubernetes Administrator" course and stuck on deploying simple app. I think trouble is even earlier than with app deployment. I've created master ...
1 vote
0 answers
24 views

Network performance with Kubernetes

I am running a small real time bidder application in Docker Swarm using host mode for networking. I found that other networking modes were giving much higher latency. Soon I plan to switch from Docker ...
1 vote
1 answer
2k views

VPN to a Kubernetes-cluster from a remote network

I need to build a VPN connection between a network and a Kubernetes-cluster, so the applications hosted in this in this network could address to K8S-services via a secured tunnel. So, I have a bunch ...
2 votes
0 answers
287 views

Kubernetes and iptables not mixing: connection content dropped?

I'm playing around with a bare-metal Kubernetes cluster (using the calico CNI plugin) and having troubles redirecting external traffic into the node. I've set up the nginx kubernetes ingress ...
  • 163
1 vote
1 answer
998 views

the PREROUTING rules set by the calico is anywhere

I'm confused. This is my iptables nat table config [root@k8s-51 woniu.zhang]# iptables -t nat -L -v --line-numbers Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes) num pkts bytes target ...
  • 11
0 votes
1 answer
317 views

Kuberenetes Node to Node Communication Not working as expected

Hello to All I do Have problem on My Kubernete Cluster Specification Cluster NAME STATUS ROLES AGE VERSION INTERNAL-IP EXTERNAL-IP OS-IMAGE KERNEL-VERSION ...
  • 1
3 votes
1 answer
8k views

New Kubernetes cluster setup Calico: "Failed to stat() nodename file: stat /var/lib/calico/nodename: no such file or directory"

i have trouble to add a CNI to a kubernetes master node, the CNI plugin does not have access to certain files or folders. The logs from Calico and Flannel say that certain files or folders are not ...
1 vote
1 answer
2k views

Kubernetes Calico networking: calicoctl reports "reset by peer" and "bird: BGP: Unexpected connect from unknown address"

This is a new cluster built using Kubespray on bare metal. The issue that calicoctl reports not Established status, StatefulSet members cannot communicate between each other and majority of Ingress ...
  • 549
1 vote
0 answers
727 views

Trying to Install Kubernetes with Vagrant and Ansible on Ubuntu 16.04 lab

So I am trying to install Kubernetes on a lab with Vagrant and Ansible. I am using the following documentation on Ubuntu 16.04: https://kubernetes.io/blog/2019/03/15/kubernetes-setup-using-ansible-and-...
0 votes
2 answers
5k views

Stopping IPTables is the only way to make Kubernetes cluster work

We have an inhouse 1.17.5 K8s cluster - 5 nodes. I cannot deploy, collect logs, anything on the cluster when IPTables is enabled. [root@lpdkubpoc01a ~]# kubectl run --generator=run-pod/v1 --rm utils -...
1 vote
0 answers
68 views

Kubernetes 1.18.6 : inter pod communication on google cloud custom vm nodes not working

[Problem statement] Ping from pod {busybox-minion1} running on worker1 {named as : minion1} to the pod {busybox-minion2} on worker2 {named as : minion2} is not working. It is a three-node cluster ...
  • 11