Questions tagged [calico]

The tag has no usage guidance.

39 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4 votes
0 answers
398 views

Kubernetes setup with different networks for intra and inter-cluster communication

I have this use case: Setup multiple k8s clusters that can communicate with each other. I also have one network per cluster for intra-cluster communication and another network for inter-cluster ...
Laurentiu Soica's user avatar
3 votes
0 answers
510 views

Kubernetes: route traffic to a subnet via a pod (accesing management VPN clients from pods)

Given two pods deployed on different nodes: myapp pod deployed on apps node wireguard pod deployed on vpn node, using a subnet like 172.16.30.0/16 I need myapp to be able to be able to route traffic ...
nemesisdesign's user avatar
2 votes
0 answers
640 views

iptables REDIRECT to Kubernetes NodePort causes request to hang

I am attempting to direct client traffic to a kubernetes cluster NodePort listening on 192.168.1.100.30000 (https port). Client's needs to make a request to 192.168.1.100.8000 so I added the following ...
tiger_groove's user avatar
2 votes
0 answers
2k views

Calico node remains not ready when a new node with a 192.168.178.x IP joins a K8s cluster

kube-system pod/calico-node-9czgm 0/1 Running 3 42d kube-system pod/calico-node-msfjk 0/1 Running 0 ...
Alex's user avatar
  • 131
2 votes
0 answers
669 views

Kubernetes and iptables not mixing: connection content dropped?

I'm playing around with a bare-metal Kubernetes cluster (using the calico CNI plugin) and having troubles redirecting external traffic into the node. I've set up the nginx kubernetes ingress ...
kestrel's user avatar
  • 163
2 votes
0 answers
1k views

Connects to OpenVPN but no access to local network or internet in Kubernetes GKE with Calico

I've been using VPN (openvpn in helm) to access internal services in my cluster for development. I enabled network policy in nodes in GKE to manage access of services, that enabled Calico network in ...
animekun's user avatar
  • 121
1 vote
1 answer
511 views

failed to create cluster: failed to join node with kubeadm

I've been told my k8ssandra people that the following errors are related to kubernetes What do I have to do to detect, and solve, the issue? kind seems working fine: root@k8s-eu-1-master:~# kind ...
Raphael10's user avatar
  • 157
1 vote
1 answer
880 views

kubeadm based kubelet 1.24.2 calico CNI issues

I have installed a kubeadm based kubernetes cluster (v1.24.2) on Centos7. I have attempted to install calico CNI as per the instructions at "https://projectcalico.docs.tigera.io/getting-started/...
Allan K's user avatar
  • 151
1 vote
0 answers
1k views

Calico HA cluster - not-ready:NoSchedule

Installed Calico on a K8s HA cluster Note: same installation worked on single node installation, removing taint. But in a HA Cluster it does only have taint: node.kubernetes.io/not-ready:NoSchedule ...
Chris G.'s user avatar
  • 227
1 vote
0 answers
567 views

Why is access to Kubernetes lost if I turn on the IPVS mode?

The problem is that after enabling the IPVS mode in the kube-proxy, everything works fine for me. But as soon as I install Traefik, I immediately lose connection with Kubernetes. OS: CentOS 7.9 $ ...
Maksim's user avatar
  • 111
1 vote
1 answer
1k views

Changing the name of a single Kubernetes master with a temporary master

I have a lab environment for studying Kubernetes. It has Calico CNI installed. Kuberentes version: 1.20. I would like to rename the single master node in the cluster. Preferably, without recreating ...
jwalker's user avatar
  • 108
1 vote
0 answers
2k views

How to enable ipv6 for ingress-controller services when installing using Helm nginx-ingress chart?

I have a baremetal K8 cluster setup using Kubespray (Calico as CNI) and have dual stack enabled. I can see that all the pods that get deployed get both IPv4 and IPv6 addresses but when I try to ...
mickey9's user avatar
  • 11
1 vote
1 answer
987 views

Kubernetes: migrate from flannel to canal or install calico network policy alongside flannel

I installed flannel as a CNI for my Kubernetes cluster. Now I want to add a network policy to my cluster. After searching I find Canal (Calico for policy and flannel for networking). How I can migrate ...
Nader's user avatar
  • 163
1 vote
0 answers
1k views

CoreDNS pod unable to reach the primary DNS server

We are seeing the COREDNS pod is unable to lookup for primary DNS server which is resulting in readtimeout. Connectivity to primary DNS server work fine. Tried deploying Flannel/Calico/CANAL CNI but ...
cks cks's user avatar
  • 11
1 vote
0 answers
42 views

Network performance with Kubernetes

I am running a small real time bidder application in Docker Swarm using host mode for networking. I found that other networking modes were giving much higher latency. Soon I plan to switch from Docker ...
Radoslav Stefanov's user avatar
1 vote
1 answer
2k views

the PREROUTING rules set by the calico is anywhere

I'm confused. This is my iptables nat table config [root@k8s-51 woniu.zhang]# iptables -t nat -L -v --line-numbers Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes) num pkts bytes target ...
woniu's user avatar
  • 11
1 vote
0 answers
850 views

Trying to Install Kubernetes with Vagrant and Ansible on Ubuntu 16.04 lab

So I am trying to install Kubernetes on a lab with Vagrant and Ansible. I am using the following documentation on Ubuntu 16.04: https://kubernetes.io/blog/2019/03/15/kubernetes-setup-using-ansible-and-...
R. Barrett's user avatar
1 vote
0 answers
84 views

Kubernetes 1.18.6 : inter pod communication on google cloud custom vm nodes not working

[Problem statement] Ping from pod {busybox-minion1} running on worker1 {named as : minion1} to the pod {busybox-minion2} on worker2 {named as : minion2} is not working. It is a three-node cluster ...
Umesh's user avatar
  • 11
1 vote
1 answer
859 views

Disable Source NAT for Calico

The default settings that kubeadm + calico use is to NAT any incoming connection that is not from a pod_ip. I have calico publishing the service network to my outside LAN, and would rather the ...
Matt Ruge's user avatar
  • 111
0 votes
0 answers
19 views

Tigera Calico cause coredns timeout

I have problem, when i install tigera-calico from helm https://docs.tigera.io/calico/charts:tigera-operator When i launch kubectl -n kube-system rollout restart Deployment coredns; i got this ...
Manuel L.'s user avatar
0 votes
0 answers
119 views

Microk8s Cluster - Pods cannot reach nameserver/CoreDNS pod - No route to host

Disclaimer: This is my first question in ServerFault and I'm a complete noob. I have the following set up: remote VM, running CentOS 7, running MicroK8s (v1.28.3). It's a single-node cluster so I have ...
okariotis's user avatar
  • 101
0 votes
0 answers
125 views

My Kubernetes Pods keep crashing with a CrashLoopBackOff error on my worker nodes

I'm new to Kubernetes so this may be a dumb problem. Any pods I try to deploy on my worker nodes crash with a CrashLoopBackOff error. This only happens to pods running on my worker nodes and not my ...
JamesyBoy2394's user avatar
0 votes
1 answer
421 views

How to debug cannot access services from outside Kubernetes cluster (onpremise) with load balancer IP

I have an on-premise Kubernetes (v1.24) cluster setup with cri-o as container runtime, calico as cni and metallb for load balancer IPs. Masters and workers OS runs on rockylinux9, selinux enabled but ...
shadowlegend's user avatar
0 votes
0 answers
270 views

Calico-node doesn't works

I deployed the cluster with kubeadm. CRI is containerd and CNI is Calico. I made 3 node cluster. While deploying Calico, two nodes are deployed well, but one is not. For node which has problem, it ...
김민성's user avatar
0 votes
2 answers
104 views

Windows Node HNS Network Restart Error 0xc0000005

I have a Kubernetes cluster with 2 Linux nodes and 2 Windows Server 2019 running Kubernetes v1.26.0 and Containerd v1.6.20 also Vmware tools version 10.3.2 The Linux nodes are running just fine, but ...
Kafiti's user avatar
  • 1
0 votes
2 answers
751 views

cannot download calico on kubernetes cluster

I am trying to set up a kubernetes cluster on centos, and installing calico is one of the steps. My control plane is ready, but coredns are still pending. From the internet, i got the below command to ...
noob_coder's user avatar
0 votes
0 answers
988 views

Calico : Virtual Network Interfaces not created by calico

I had been using calico-policy-only (v 3.22) mode with kubernetes 1.24.1 in my worker nodes. Recently worker nodes were upgraded to 1.25.4 , so for compatibility we had to upgrade calico as well to ...
devcodes's user avatar
  • 101
0 votes
0 answers
901 views

Error While installing Calico CNI

I have a Kubernetes cluster with 1+1 configuration . I used the following steps to install Calico curl https://docs.projectcalico.org/manifests/calico-typha.yaml -o calico.yaml kubectl apply -f calico....
Anvay's user avatar
  • 13
0 votes
0 answers
2k views

Calico CNI calio-apiserver issues, on-premises kubeadm based kubernetes v1.24.2 cluster

I am unable to get calico CNI fully functional on a on-premises kubeadm based kubernetes v1.24.2 cluster. The calio-apiserver pods (in the calio-apiserver namespace) have the status "...
Allan K's user avatar
  • 151
0 votes
0 answers
2k views

kubeadm based kubernetes (v1.24.2) worker nodes are still in "NotReady" status even after installing calico CNI ("Error querying BIRD")

kubeadm based kubernetes (v1.24.2) worker nodes are still in "NotReady" status even after installing calico CNI ("dial unix /var/run/bird/bird.ctl: connect: no such file or directory&...
Allan K's user avatar
  • 151
0 votes
0 answers
459 views

Calico deployment not saving tolerance for master node

I was trying to setup a Kubernetes Cluster using Amazon EC2 and Kubeadm. I created a 't2.large' EC2 instance based on Ubuntu 18.04 AMI. Setup kubeadm, kubelet, kubectl and docker as the container ...
arjunbnair's user avatar
0 votes
1 answer
173 views

How to re-trigger failed flannel to calico migration?

I have a 3 node kubernetes cluster with k8s 1.22 version with flannel setup and running fine. I did run live migration steps from flannel to calico as describes in here. Cluster migrated to calico ...
Siddharood's user avatar
0 votes
1 answer
1k views

K8s nodeLocalDns pod times out connecting to coreDns after upgrading base os to ubuntu20.04 ConnectX-4 card

Team, I have Mellanox Nic ConnectX-4 on a k8s worker node and it hosts a nodeLocal dns pod on it. The nodeLocalDns pod is timing out when trying to connect to coreDns service on k8s cluster. Same ...
AhmFM's user avatar
  • 119
0 votes
0 answers
112 views

Cannot reach pod from pod in some machines but tunnel in node is reached

I have a pod with a cluster IP of 10.233.70.35 in a bare metal Kubernetes 1.19 cluster with Calico 3.16.9 as CNI. Let's call this Pod A. In most nodes (which is different from the node of Pod A), a ...
Christian Alis's user avatar
0 votes
0 answers
315 views

Assign pod an IP address which the same as the IP range of the k8s node

Is that possible to assign pod an IP address which the same as the IP range of my K8s node? For example: I have an on-premise K8s cluster that includes 3 work nodes. All nodes are using the 10.138.1.0/...
ITnewbie's user avatar
  • 171
0 votes
1 answer
610 views

Kuberenetes Node to Node Communication Not working as expected

Hello to All I do Have problem on My Kubernete Cluster Specification Cluster NAME STATUS ROLES AGE VERSION INTERNAL-IP EXTERNAL-IP OS-IMAGE KERNEL-VERSION ...
Rehan's user avatar
  • 1
0 votes
1 answer
847 views

Istio & K8S - Ingress with IPv6 and IPv4

We are currently evaluating a K8S (version 1.17 using CRI-0 version 1.17 & Calico CNI) installation using Istio 1.5.0. All nodes have a valid and reachable IPv4 and IPv6 (ubuntu server 18.04 - on ...
chrstnwhlrt's user avatar
0 votes
1 answer
545 views

Kubernetes with Dual Stack on both Pod and Service level

I have 3 Ubuntu VMs where all of them have 2 interfaces. One interface with v4 address and other with both v4 and v6 address. 3 VMs are reachable from each other on all 3 (2 v4 and 1 v6) addresses. I'...
R Kaja Mohideen's user avatar
-1 votes
1 answer
1k views

Why does kubernetes readiness probe fail, when manually calling the exec command returns success code?

I used kubeadm to deploy a bare-metal cluster with one control plane node and one worker node on the same LAN. After initializing the cluster (kubeadm init on the cp and kubeadm join on the worker ...
zckl902's user avatar