Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [google-kubernetes-engine]

Google Container Engine is a powerful cluster manager and orchestration system for running your Docker containers. Container Engine schedules your containers into the cluster and manages them automatically based on requirements you define (such as CPU and memory). It's built on the open source Kubernetes system, giving you the flexibility to take advantage of on-premises, hybrid, or public cloud infrastructure.

0
votes
1answer
54 views

GKE nodes fail to upgrade

I hope this is the right place to ask, I've followed all the support links from the GCP console which have led me here! In the past I would frequently keep my GKE k8s master and nodes up to date ...
0
votes
0answers
30 views

How to accept HTTPS and Websockets on a new Google Kubernetes Engine deployment?

I set up a simple 1-node GKE deployment with the default (beta) ingress, created via the GCP console. I would like to set up a Google-managed SSL certificate and HTTPS proxy to the a single GKE node &...
0
votes
1answer
23 views

How to automate stackdriver monitoring? Why stackdriver apis are used for?

How can I create new stack driver chart for any VM or cluster or pods created in Stackdriver automatically? Is there any way to achieve stackdriver charts as soon as any resource mentioned above is ...
3
votes
1answer
41 views

Achieving stickiness on kubernetes cluster with ingress-gce

I'm trying to achieve stickiness on kubernetes cluster but I am redirected to a different pod every time I access the load balancer. I have session affinity set to 'ClientIP' and also tried with '...
-1
votes
0answers
40 views

Multiple SSL Certificates Kubernetes

I am running a web service that can be accessed from my company's domain name. I have setup automatic SSL certificates with Lets Encrypt as seen below. apiVersion: extensions/v1beta1 kind: Ingress ...
0
votes
1answer
97 views

How to make GKE Services visible to another GKE cluster running in a different VPC

I am struggling to make Services become visible though peered VPC. I have two GKE clusters (cluster-A and cluster-B) each of then in a different VPC. I've created a VPC network peering connecting ...
0
votes
2answers
209 views

Google Compute Instance not reachable from Kubernetes pod

I have been trying to reach my google compute instance on compute engine from a pod in a kubernetes cluster. Using curl http://{INTERNAL_IP}:{PORT}/ I get: curl: (7) Failed to connect to 10.0.0.7 ...
1
vote
1answer
110 views

Google cloud platform: k8s master cannot ssh to nodes

I have a very strange issue on google cloud platform with one of my K8S clusters. Two days ago, everything worked like a charm. But yesterday every helm commands used to deploy on this cluster ...
0
votes
1answer
54 views

How do I update the loadbalancer IP?

I had cluster A with a static IP on a load balancer, but needed to move a deployment to service B whilst maintaining the same static IP address. I did the following: Removed the loadbalancer from ...
0
votes
1answer
56 views

How to make an internal load balancer in a google cloud kubernetes instance be accessible from another kubernetes instance in different regions?

I am trying to expose a service inside of a Kubernetes cluster in one Google Cloud Region (us-east) and have it accessible to another Kubernetes cluster in a different region (us-central). I would ...
0
votes
1answer
48 views

Forward from VPN to non-VPN network

I want to connect an existing Kubernetes cluster to remote VPN that uses only a specific subnet IP range. I could create a custom-mode VPC network within my project that only has the appropriate ...
0
votes
1answer
56 views

Expose GKE k8s external loadbalancer port 22 without exposing cluster

We have a pod which acts as an SFTP server and needs to be exposed on port 22. It must be port 22 to give a seamless transition from our old infrastructure. This pod must be exposed externally, ...
0
votes
1answer
76 views

Google Cloud Kubernetes pod / job history

I'm looking for a way to see the events that happened in my GCK. Is there a page on Google cloud to see all the pod / job launched today with theirs names and ids ?
0
votes
1answer
41 views

How to deploy workload to GCP Kubernetes Programatically?

I have achieved vast amount of automation in terms of creating projects, creating kubernetes engine and other IaaS elements, by using GCP APIs from Python GCP Client. But I am not very positive on ...
1
vote
1answer
108 views

Creating a NAT gateway with Terraform fails with an error

I'm running a private GKE cluster and want to add a NAT Gateway so I can create firewall rules from requests coming from the cluster (by default, the public IP's for all nodes are ephemeral, thus hard ...
0
votes
1answer
55 views

Pods unable to talk to each other after upgrade

I have a GKE cluster running on 1.11.2-gke.15 and my pods are unable to talk to each other. It seems DNS resolution is working from inside the containers # nslookup myapp.testns.svc.cluster.local ...
0
votes
1answer
132 views

GKE lost node tag and static ip after auto-upgrade

I have 4 nodes in 2 node pools on GKE. One of them has static ip(to access aws service though whitelist), so I tagged this node by hand using kubectl label. I found when enabling auto-upgrade, after ...
0
votes
1answer
51 views

Google Cloud GCP Load Balancer standard tier pricing

I want to reduce my k8s GCP load balancing costs for CI/CD purposes, so looking for an explanation of pricing for a Load Balancer in the standard tier. I have read through https://cloud.google.com/...
0
votes
0answers
18 views

Disable gcloud notification

Is there any way to disable this notification: * - There is an upgrade available for your cluster(s). To upgrade nodes to the latest available version, run $ gcloud container clusters upgrade NAME ...
1
vote
0answers
168 views

IP space is exhausted

I have an issue about GKE/GCE. I'm using GKE under shared VPC(alias ip) and I have 4 machines of 2 node pools. When I try to add more node pools(because I want to have more type of machines), it ...
0
votes
0answers
48 views

Loadbalancer targetPort not forwarding to daemonset hostPort if port not same as hostPort

I have the following setup: A loadbalancer points to an ingress controller as daemonset, running in a gcp-kubernetes-cluster, as seen in the example below: apiVersion: v1 kind: Service metadata: ...
0
votes
1answer
41 views

Connecting k8s services in GKE cross-region clusters

We are using GKE with Cloud VPN and have the following architecture: GKE example In the VPC there are two k8s clusters in different regions and one Cloud VPN. We’re trying to use internal services (...
1
vote
2answers
62 views

Stackdriver missing GKE Logs

I brought up a new Vault cluster using Terraform (https://github.com/sethvargo/vault-on-gke) and everything is working fine with Vault. However I can't seem to see any Container, Node or Pod logs in ...
2
votes
2answers
65 views

How do I obtain kernel headers on GKE ContainerOS image?

I need the kernel headers but there is no /lib/modules/[kernel version]/build or /usr/src/[kernel version]. I'm assuming they ripped those out to trim down the image. My use case: I am using bpftrace ...
0
votes
1answer
235 views

Issue Connecting to Cloud SQL Postgres using Private IP from GKE

Steps I have followed: 1. Create VPC network gcloud compute networks create stg-vpc \ --subnet-mode custom 2. Create IP range for VPC Peering for this network gcloud beta compute addresses ...
0
votes
2answers
90 views

GKE lost nodes and Google Console shows different number of nodes

Some of the nodes in my cluster disappeared just now according to Kubernetes Dashboard and kubectl. In the Google Console, it shows the old amount. This results in many pods not being schedulable due ...
0
votes
1answer
39 views

google cluster giving authentication scope error

I have a free tier account but whenever i try to create a container cluster i am getting below error from one of the script (gcloud.container.clusters.create) ResponseError: code=403, message=Request ...
0
votes
1answer
23 views

All pods restarted while Automatic node upgrades disabled

"Automatic node upgrades" are disabled in the k8s cluster. While on 2018-10-10 11:12:03.828 PDT, all my pods are restarted by them self and the log showing the create activities as done by me. Is ...
1
vote
1answer
165 views

Using “Let's Encrypt” TLS with a Google Load Balancer? (Kubernetes/GKE)

I've been trying to test out Kubernetes on Google Cloud, but would need HTTPS/TLS (only) exposed on the deployed application. To start, I just followed this tutorial, which worked fine for plain HTTP ...
1
vote
0answers
78 views

GKE - Kube-DNS stubDomain resolution to VPN network not working

New to GCloud and GKE and having a frustrating time with DNS. We have a VPN between our office and GCloud running a Shared VPC. Existing firewall rules seem to work fine. We can ping both ways, we ...
0
votes
1answer
41 views

Is creating firewall rule for nodeport a security concen?

This question is regarding firewall rule on GCP. I run my development and production server on the same cluster and separating them by namespace only. For development, I expose a nodeport (e.g. ...
0
votes
1answer
52 views

Kubernetes in production. Problems with a working pod

I have a question with kubernetes when deploying a new version. My yaml configuration of Kubernetes has the RollingUpdate strategy. The problem comes when it comes to changing versions this way. If I ...
0
votes
0answers
26 views

How to attach physical SSD disk in gce using KOPS?

I want to setup a cluster using GCE instance using kops. I am unable to find the parameter corresponding to add local disk number in kops. In AWS, we can choose machine type which has pre-defined no....
0
votes
1answer
77 views

Which non-root user should I use on Google Kubernetes Engine?

When configuring a container process to run as a non-root user on Kubernetes, does the user need to exist on the host? If yes, which user id is appropriate to use when the host node is managed by ...
0
votes
2answers
90 views

How to log backend latency in Google Http Load Balancer and Stack Driver

We have a running kubernetes cluster on GKE and we Google HTTP Load Balancer in front of it. HTTP Load Balancer logs all requests and we can access them in stack driver logging. But latency is not ...
0
votes
1answer
42 views

Inheritance in Kubernetes Ingress Rule Path

I have the following ingress in my .yaml file: apiVersion: extensions/v1beta1 kind: Ingress metadata: name: my-ingress annotations: kubernetes.io/ingress.global-static-ip-name: my-ip-1 spec: ...
1
vote
1answer
84 views

What makes a kubernetes node unhealthy?

We've experienced 4 AUTO_REPAIR_NODES events(revealed by the command gcloud container operations list) on our GKE cluster during the past 1 month. The consequence of node-auto-repair is that the node ...
0
votes
1answer
98 views

Why would GCE instance group manager recreate a VM?

The recreated VM instance got assigned a new external IP and caused other issues(e.g. couldn't connect to remote servers because the new IP was not being whitelisted...) Why would the instance group ...
1
vote
1answer
53 views

How to deploy microservices in GCP?

What I have currently.. ... is an application with a microservices architecture, where the different services communicate with a gateway through GRPC, with the gateway serving REST endpoints. I'm ...
0
votes
1answer
203 views

Missing logs in Stackdriver from Kubernetes deployments using GKE

Currently running 28+ deployments under GKE logging to Stackdriver using the automatic fluentd collection. Master K8s Version: 1.10.6-gke.2 Node Version: 1.10.6-gke.2 Logging approximately 200 JSON ...
1
vote
0answers
48 views

Define loadBalancerIP via its GCP URI

I am configuring my GKE service to work with internal load balancer as described in the GCP docs: apiVersion: v1 kind: Service metadata: name: [NAME] annotations: cloud.google.com/load-...
0
votes
1answer
43 views

Kubernetes what proxy-mode is NodePort type uses?

When I am using NodePort type to expose service in kubernetes, what proxy-mode it uses?
3
votes
0answers
491 views

Enable VPC-native (alias IP) on an existing GKE cluster

Is there a way to enable Alias IP on existing GKE cluster (with disabled Alias IP)? (Besides using https://github.com/bowei/k8s-custom-iptables to create NATs on each node)
0
votes
1answer
52 views

Can you use SSL termination in conjunction with a Layer 4 load balancer?

I have an internal load balancer to balance internal traffic to my Kubernetes cluster (hosted in GKE). According to the Internal Load Balancer documentation, it only balances L3/L4 traffic. I need to ...
0
votes
1answer
75 views

Managing group memberships in kubernetes (GKE)

I'm administering a k8s cluster (on Google Kubernetes Engine if it matters) and would like to apply a fairly fine-grained RBAC role to all of our users that aren't service accounts. From reading ...
0
votes
1answer
409 views

vm.max_map_count problems on GKE ElasticSearch StatefulSet

A problem appeared on working ElasticSearch cluster on GKE. Nodes with "data" roles began to crash unexpectedly with an error: max virtual memory areas vm.max_map_count [65530] is too low, increase ...
0
votes
1answer
102 views

Increasing the size of a PersistentVolumeClaim on GKE

I've heard that in later versions of Kubernetes (1.9 onwards if I'm not mistaken; I have 1.10), it's possible to expand a PersistentVolume as long as allowVolumeExpansion: true is set in the ...
0
votes
2answers
24 views

what is service mesh in container Load Balancing?

When i read about Load Balancers & containers.Looking for clear understanding of service mesh in Load balancer and how it is useful in containers.
1
vote
1answer
132 views

How to connect to a third party VPN from Google Cloud Platform?

Requirements I am trying to connect to a third party VPN from my back end on Google Cloud Platform. Since my IP has to be whitelisted by the third party, the source IP for all requests must be a ...
0
votes
0answers
70 views

Kubernetes Influx DB - Backend Unhealthy

I am trying to deploy Influx DB on Kubernetes. Using the official Influx DB Helm chart. I am deploying this Helm chart with the following values file: persistence: enabled: true size: 5Gi ...