Questions tagged [calico]
The calico tag has no usage guidance.
39
questions with no upvoted or accepted answers
4
votes
0
answers
398
views
Kubernetes setup with different networks for intra and inter-cluster communication
I have this use case: Setup multiple k8s clusters that can communicate with each other. I also have one network per cluster for intra-cluster communication and another network for inter-cluster ...
3
votes
0
answers
510
views
Kubernetes: route traffic to a subnet via a pod (accesing management VPN clients from pods)
Given two pods deployed on different nodes:
myapp pod deployed on apps node
wireguard pod deployed on vpn node, using a subnet like 172.16.30.0/16
I need myapp to be able to be able to route traffic ...
2
votes
0
answers
640
views
iptables REDIRECT to Kubernetes NodePort causes request to hang
I am attempting to direct client traffic to a kubernetes cluster NodePort listening on 192.168.1.100.30000 (https port).
Client's needs to make a request to 192.168.1.100.8000 so I added the following ...
2
votes
0
answers
2k
views
Calico node remains not ready when a new node with a 192.168.178.x IP joins a K8s cluster
kube-system pod/calico-node-9czgm 0/1 Running 3 42d
kube-system pod/calico-node-msfjk 0/1 Running 0 ...
2
votes
0
answers
669
views
Kubernetes and iptables not mixing: connection content dropped?
I'm playing around with a bare-metal Kubernetes cluster (using the calico CNI plugin) and having troubles redirecting external traffic into the node. I've set up the nginx kubernetes ingress ...
2
votes
0
answers
1k
views
Connects to OpenVPN but no access to local network or internet in Kubernetes GKE with Calico
I've been using VPN (openvpn in helm) to access internal services in my cluster for development.
I enabled network policy in nodes in GKE to manage access of services, that enabled Calico network in ...
1
vote
1
answer
511
views
failed to create cluster: failed to join node with kubeadm
I've been told my k8ssandra people that the following errors are related to kubernetes
What do I have to do to detect, and solve, the issue?
kind seems working fine:
root@k8s-eu-1-master:~# kind ...
1
vote
1
answer
880
views
kubeadm based kubelet 1.24.2 calico CNI issues
I have installed a kubeadm based kubernetes cluster (v1.24.2) on Centos7.
I have attempted to install calico CNI as per the instructions at "https://projectcalico.docs.tigera.io/getting-started/...
1
vote
0
answers
1k
views
Calico HA cluster - not-ready:NoSchedule
Installed Calico on a K8s HA cluster
Note: same installation worked on single node installation, removing taint. But in a HA Cluster it does only have taint: node.kubernetes.io/not-ready:NoSchedule
...
1
vote
0
answers
567
views
Why is access to Kubernetes lost if I turn on the IPVS mode?
The problem is that after enabling the IPVS mode in the kube-proxy, everything works fine for me. But as soon as I install Traefik, I immediately lose connection with Kubernetes.
OS: CentOS 7.9
$ ...
1
vote
1
answer
1k
views
Changing the name of a single Kubernetes master with a temporary master
I have a lab environment for studying Kubernetes.
It has Calico CNI installed.
Kuberentes version: 1.20.
I would like to rename the single master node in the cluster.
Preferably, without recreating ...
1
vote
0
answers
2k
views
How to enable ipv6 for ingress-controller services when installing using Helm nginx-ingress chart?
I have a baremetal K8 cluster setup using Kubespray (Calico as CNI) and have dual stack enabled. I can see that all the pods that get deployed get both IPv4 and IPv6 addresses but when I try to ...
1
vote
1
answer
987
views
Kubernetes: migrate from flannel to canal or install calico network policy alongside flannel
I installed flannel as a CNI for my Kubernetes cluster. Now I want to add a network policy to my cluster. After searching I find Canal (Calico for policy and flannel for networking).
How I can migrate ...
1
vote
0
answers
1k
views
CoreDNS pod unable to reach the primary DNS server
We are seeing the COREDNS pod is unable to lookup for primary DNS server which is resulting in readtimeout. Connectivity to primary DNS server work fine. Tried deploying Flannel/Calico/CANAL CNI but ...
1
vote
0
answers
42
views
Network performance with Kubernetes
I am running a small real time bidder application in Docker Swarm using host mode for networking. I found that other networking modes were giving much higher latency.
Soon I plan to switch from Docker ...
1
vote
1
answer
2k
views
the PREROUTING rules set by the calico is anywhere
I'm confused. This is my iptables nat table config
[root@k8s-51 woniu.zhang]# iptables -t nat -L -v --line-numbers
Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
num pkts bytes target ...
1
vote
0
answers
850
views
Trying to Install Kubernetes with Vagrant and Ansible on Ubuntu 16.04 lab
So I am trying to install Kubernetes on a lab with Vagrant and Ansible.
I am using the following documentation on Ubuntu 16.04:
https://kubernetes.io/blog/2019/03/15/kubernetes-setup-using-ansible-and-...
1
vote
0
answers
84
views
Kubernetes 1.18.6 : inter pod communication on google cloud custom vm nodes not working
[Problem statement]
Ping from pod {busybox-minion1} running on worker1 {named as : minion1} to the pod {busybox-minion2} on worker2 {named as : minion2} is not working.
It is a three-node cluster ...
1
vote
1
answer
859
views
Disable Source NAT for Calico
The default settings that kubeadm + calico use is to NAT any incoming connection that is not from a pod_ip.
I have calico publishing the service network to my outside LAN, and would rather the ...
0
votes
0
answers
19
views
Tigera Calico cause coredns timeout
I have problem, when i install tigera-calico from helm
https://docs.tigera.io/calico/charts:tigera-operator
When i launch
kubectl -n kube-system rollout restart Deployment coredns;
i got this ...
0
votes
0
answers
119
views
Microk8s Cluster - Pods cannot reach nameserver/CoreDNS pod - No route to host
Disclaimer:
This is my first question in ServerFault and I'm a complete noob.
I have the following set up:
remote VM, running CentOS 7, running MicroK8s (v1.28.3).
It's a single-node cluster so I have ...
0
votes
0
answers
125
views
My Kubernetes Pods keep crashing with a CrashLoopBackOff error on my worker nodes
I'm new to Kubernetes so this may be a dumb problem. Any pods I try to deploy on my worker nodes crash with a CrashLoopBackOff error. This only happens to pods running on my worker nodes and not my ...
0
votes
1
answer
421
views
How to debug cannot access services from outside Kubernetes cluster (onpremise) with load balancer IP
I have an on-premise Kubernetes (v1.24) cluster setup with cri-o as container runtime, calico as cni and metallb for load balancer IPs.
Masters and workers OS runs on rockylinux9, selinux enabled but ...
0
votes
0
answers
270
views
Calico-node doesn't works
I deployed the cluster with kubeadm. CRI is containerd and CNI is Calico.
I made 3 node cluster. While deploying Calico, two nodes are deployed well, but one is not.
For node which has problem, it ...
0
votes
2
answers
104
views
Windows Node HNS Network Restart Error 0xc0000005
I have a Kubernetes cluster with 2 Linux nodes and 2 Windows Server 2019 running Kubernetes v1.26.0 and Containerd v1.6.20 also Vmware tools version 10.3.2
The Linux nodes are running just fine, but ...
0
votes
2
answers
751
views
cannot download calico on kubernetes cluster
I am trying to set up a kubernetes cluster on centos, and installing calico is one of the steps.
My control plane is ready, but coredns are still pending.
From the internet, i got the below command to ...
0
votes
0
answers
988
views
Calico : Virtual Network Interfaces not created by calico
I had been using calico-policy-only (v 3.22) mode with kubernetes 1.24.1 in my worker nodes. Recently worker nodes were upgraded to 1.25.4 , so for compatibility we had to upgrade calico as well to ...
0
votes
0
answers
901
views
Error While installing Calico CNI
I have a Kubernetes cluster with 1+1 configuration .
I used the following steps to install Calico
curl https://docs.projectcalico.org/manifests/calico-typha.yaml -o calico.yaml
kubectl apply -f calico....
0
votes
0
answers
2k
views
Calico CNI calio-apiserver issues, on-premises kubeadm based kubernetes v1.24.2 cluster
I am unable to get calico CNI fully functional on a on-premises kubeadm based kubernetes v1.24.2 cluster.
The calio-apiserver pods (in the calio-apiserver namespace) have the status "...
0
votes
0
answers
2k
views
kubeadm based kubernetes (v1.24.2) worker nodes are still in "NotReady" status even after installing calico CNI ("Error querying BIRD")
kubeadm based kubernetes (v1.24.2) worker nodes are still in "NotReady" status even after installing calico CNI ("dial unix /var/run/bird/bird.ctl: connect: no such file or directory&...
0
votes
0
answers
459
views
Calico deployment not saving tolerance for master node
I was trying to setup a Kubernetes Cluster using Amazon EC2 and Kubeadm.
I created a 't2.large' EC2 instance based on Ubuntu 18.04 AMI. Setup kubeadm, kubelet, kubectl and docker as the container ...
0
votes
1
answer
173
views
How to re-trigger failed flannel to calico migration?
I have a 3 node kubernetes cluster with k8s 1.22 version with flannel setup and running fine. I did run live migration steps from flannel to calico as describes in here. Cluster migrated to calico ...
0
votes
1
answer
1k
views
K8s nodeLocalDns pod times out connecting to coreDns after upgrading base os to ubuntu20.04 ConnectX-4 card
Team,
I have Mellanox Nic ConnectX-4 on a k8s worker node and it hosts a nodeLocal dns pod on it. The nodeLocalDns pod is timing out when trying to connect to coreDns service on k8s cluster.
Same ...
0
votes
0
answers
112
views
Cannot reach pod from pod in some machines but tunnel in node is reached
I have a pod with a cluster IP of 10.233.70.35 in a bare metal Kubernetes 1.19 cluster with Calico 3.16.9 as CNI. Let's call this Pod A. In most nodes (which is different from the node of Pod A), a ...
0
votes
0
answers
315
views
Assign pod an IP address which the same as the IP range of the k8s node
Is that possible to assign pod an IP address which the same as the IP range of my K8s node?
For example:
I have an on-premise K8s cluster that includes 3 work nodes.
All nodes are using the 10.138.1.0/...
0
votes
1
answer
610
views
Kuberenetes Node to Node Communication Not working as expected
Hello to All
I do Have problem on My Kubernete Cluster
Specification
Cluster
NAME STATUS ROLES AGE VERSION INTERNAL-IP EXTERNAL-IP OS-IMAGE KERNEL-VERSION ...
0
votes
1
answer
847
views
Istio & K8S - Ingress with IPv6 and IPv4
We are currently evaluating a K8S (version 1.17 using CRI-0 version 1.17 & Calico CNI) installation using Istio 1.5.0. All nodes have a valid and reachable IPv4 and IPv6 (ubuntu server 18.04 - on ...
0
votes
1
answer
545
views
Kubernetes with Dual Stack on both Pod and Service level
I have 3 Ubuntu VMs where all of them have 2 interfaces. One interface with v4 address and other with both v4 and v6 address. 3 VMs are reachable from each other on all 3 (2 v4 and 1 v6) addresses.
I'...
-1
votes
1
answer
1k
views
Why does kubernetes readiness probe fail, when manually calling the exec command returns success code?
I used kubeadm to deploy a bare-metal cluster with one control plane node and one worker node on the same LAN. After initializing the cluster (kubeadm init on the cp and kubeadm join on the worker ...