Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [google-kubernetes-engine]

Google Container Engine is a powerful cluster manager and orchestration system for running your Docker containers. Container Engine schedules your containers into the cluster and manages them automatically based on requirements you define (such as CPU and memory). It's built on the open source ...

0
votes
0answers
10 views

Kubernetes and MCU, is it possible?

I'm new to Kubernetes and amazed by the potential, but I'm having quite a hard time to set my mind and think a solution to this: I'm trying to set a WebRTC MCU (Multipoint Conferencing Unit), all ...
0
votes
0answers
13 views

How to deploy workload to GCP Kubernetes Programatically?

I have achieved vast amount of automation in terms of creating projects, creating kubernetes engine and other IaaS elements, by using GCP APIs from Python GCP Client. But I am not very positive on ...
0
votes
0answers
51 views

Creating a NAT gateway with Terraform fails with an error

I'm running a private GKE cluster and want to add a NAT Gateway so I can create firewall rules from requests coming from the cluster (by default, the public IP's for all nodes are ephemeral, thus hard ...
0
votes
1answer
30 views

Pods unable to talk to each other after upgrade

I have a GKE cluster running on 1.11.2-gke.15 and my pods are unable to talk to each other. It seems DNS resolution is working from inside the containers # nslookup myapp.testns.svc.cluster.local ...
0
votes
0answers
22 views

GKE lost node tag and static ip after auto-upgrade

I have 4 nodes in 2 node pools on GKE. One of them has static ip(to access aws service though whitelist), so I tagged this node by hand using kubectl label. I found when enabling auto-upgrade, after ...
0
votes
1answer
17 views

Google Cloud GCP Load Balancer standard tier pricing

I want to reduce my k8s GCP load balancing costs for CI/CD purposes, so looking for an explanation of pricing for a Load Balancer in the standard tier. I have read through https://cloud.google.com/...
1
vote
0answers
101 views

IP space is exhausted

I have an issue about GKE/GCE. I'm using GKE under shared VPC(alias ip) and I have 4 machines of 2 node pools. When I try to add more node pools(because I want to have more type of machines), it ...
0
votes
0answers
33 views

Loadbalancer targetPort not forwarding to daemonset hostPort if port not same as hostPort

I have the following setup: A loadbalancer points to an ingress controller as daemonset, running in a gcp-kubernetes-cluster, as seen in the example below: apiVersion: v1 kind: Service metadata: ...
0
votes
1answer
28 views

Connecting k8s services in GKE cross-region clusters

We are using GKE with Cloud VPN and have the following architecture: GKE example In the VPC there are two k8s clusters in different regions and one Cloud VPN. We’re trying to use internal services (...
0
votes
1answer
29 views

Stackdriver missing GKE Logs

I brought up a new Vault cluster using Terraform (https://github.com/sethvargo/vault-on-gke) and everything is working fine with Vault. However I can't seem to see any Container, Node or Pod logs in ...
2
votes
2answers
49 views

How do I obtain kernel headers on GKE ContainerOS image?

I need the kernel headers but there is no /lib/modules/[kernel version]/build or /usr/src/[kernel version]. I'm assuming they ripped those out to trim down the image. My use case: I am using bpftrace ...
0
votes
1answer
52 views

Issue Connecting to Cloud SQL Postgres using Private IP from GKE

Steps I have followed: 1. Create VPC network gcloud compute networks create stg-vpc \ --subnet-mode custom 2. Create IP range for VPC Peering for this network gcloud beta compute addresses ...
0
votes
0answers
15 views

GCP Kubernetes Engine: `NODE_ENV` is always `gcp`

node 8.12.0 configmap -> data -> NODE_ENV: 'production', TESTVALUE: 'updated' trigger deployment console.log(process.env.NODE_ENV); gcp console.log(process.env.TESTVALUE); updated I'm pretty much ...
0
votes
2answers
69 views

GKE lost nodes and Google Console shows different number of nodes

Some of the nodes in my cluster disappeared just now according to Kubernetes Dashboard and kubectl. In the Google Console, it shows the old amount. This results in many pods not being schedulable due ...
0
votes
1answer
18 views

google cluster giving authentication scope error

I have a free tier account but whenever i try to create a container cluster i am getting below error from one of the script (gcloud.container.clusters.create) ResponseError: code=403, message=Request ...
0
votes
1answer
22 views

All pods restarted while Automatic node upgrades disabled

"Automatic node upgrades" are disabled in the k8s cluster. While on 2018-10-10 11:12:03.828 PDT, all my pods are restarted by them self and the log showing the create activities as done by me. Is ...
1
vote
1answer
60 views

Using “Let's Encrypt” TLS with a Google Load Balancer? (Kubernetes/GKE)

I've been trying to test out Kubernetes on Google Cloud, but would need HTTPS/TLS (only) exposed on the deployed application. To start, I just followed this tutorial, which worked fine for plain HTTP ...
1
vote
0answers
34 views

GKE - Kube-DNS stubDomain resolution to VPN network not working

New to GCloud and GKE and having a frustrating time with DNS. We have a VPN between our office and GCloud running a Shared VPC. Existing firewall rules seem to work fine. We can ping both ways, we ...
0
votes
1answer
37 views

Is creating firewall rule for nodeport a security concen?

This question is regarding firewall rule on GCP. I run my development and production server on the same cluster and separating them by namespace only. For development, I expose a nodeport (e.g. ...
0
votes
1answer
48 views

Kubernetes in production. Problems with a working pod

I have a question with kubernetes when deploying a new version. My yaml configuration of Kubernetes has the RollingUpdate strategy. The problem comes when it comes to changing versions this way. If I ...
0
votes
0answers
25 views

How to attach physical SSD disk in gce using KOPS?

I want to setup a cluster using GCE instance using kops. I am unable to find the parameter corresponding to add local disk number in kops. In AWS, we can choose machine type which has pre-defined no....
0
votes
1answer
55 views

Which non-root user should I use on Google Kubernetes Engine?

When configuring a container process to run as a non-root user on Kubernetes, does the user need to exist on the host? If yes, which user id is appropriate to use when the host node is managed by ...
0
votes
2answers
42 views

How to log backend latency in Google Http Load Balancer and Stack Driver

We have a running kubernetes cluster on GKE and we Google HTTP Load Balancer in front of it. HTTP Load Balancer logs all requests and we can access them in stack driver logging. But latency is not ...
0
votes
1answer
29 views

Inheritance in Kubernetes Ingress Rule Path

I have the following ingress in my .yaml file: apiVersion: extensions/v1beta1 kind: Ingress metadata: name: my-ingress annotations: kubernetes.io/ingress.global-static-ip-name: my-ip-1 spec: ...
1
vote
1answer
49 views

What makes a kubernetes node unhealthy?

We've experienced 4 AUTO_REPAIR_NODES events(revealed by the command gcloud container operations list) on our GKE cluster during the past 1 month. The consequence of node-auto-repair is that the node ...
0
votes
1answer
50 views

Why would GCE instance group manager recreate a VM?

The recreated VM instance got assigned a new external IP and caused other issues(e.g. couldn't connect to remote servers because the new IP was not being whitelisted...) Why would the instance group ...
1
vote
1answer
49 views

How to deploy microservices in GCP?

What I have currently.. ... is an application with a microservices architecture, where the different services communicate with a gateway through GRPC, with the gateway serving REST endpoints. I'm ...
0
votes
1answer
132 views

Missing logs in Stackdriver from Kubernetes deployments using GKE

Currently running 28+ deployments under GKE logging to Stackdriver using the automatic fluentd collection. Master K8s Version: 1.10.6-gke.2 Node Version: 1.10.6-gke.2 Logging approximately 200 JSON ...
0
votes
0answers
39 views

Define loadBalancerIP via its GCP URI

I am configuring my GKE service to work with internal load balancer as described in the GCP docs: apiVersion: v1 kind: Service metadata: name: [NAME] annotations: cloud.google.com/load-...
-1
votes
1answer
34 views

Kubernetes what proxy-mode is NodePort type uses?

When I am using NodePort type to expose service in kubernetes, what proxy-mode it uses?
1
vote
0answers
232 views

Enable VPC-native (alias IP) on an existing GKE cluster

Is there a way to enable Alias IP on existing GKE cluster (with disabled Alias IP)? (Besides using https://github.com/bowei/k8s-custom-iptables to create NATs on each node)
0
votes
1answer
39 views

Can you use SSL termination in conjunction with a Layer 4 load balancer?

I have an internal load balancer to balance internal traffic to my Kubernetes cluster (hosted in GKE). According to the Internal Load Balancer documentation, it only balances L3/L4 traffic. I need to ...
0
votes
1answer
59 views

Managing group memberships in kubernetes (GKE)

I'm administering a k8s cluster (on Google Kubernetes Engine if it matters) and would like to apply a fairly fine-grained RBAC role to all of our users that aren't service accounts. From reading ...
0
votes
1answer
198 views

vm.max_map_count problems on GKE ElasticSearch StatefulSet

A problem appeared on working ElasticSearch cluster on GKE. Nodes with "data" roles began to crash unexpectedly with an error: max virtual memory areas vm.max_map_count [65530] is too low, increase ...
0
votes
1answer
70 views

Increasing the size of a PersistentVolumeClaim on GKE

I've heard that in later versions of Kubernetes (1.9 onwards if I'm not mistaken; I have 1.10), it's possible to expand a PersistentVolume as long as allowVolumeExpansion: true is set in the ...
0
votes
2answers
21 views

what is service mesh in container Load Balancing?

When i read about Load Balancers & containers.Looking for clear understanding of service mesh in Load balancer and how it is useful in containers.
1
vote
1answer
94 views

How to connect to a third party VPN from Google Cloud Platform?

Requirements I am trying to connect to a third party VPN from my back end on Google Cloud Platform. Since my IP has to be whitelisted by the third party, the source IP for all requests must be a ...
0
votes
0answers
55 views

Kubernetes Influx DB - Backend Unhealthy

I am trying to deploy Influx DB on Kubernetes. Using the official Influx DB Helm chart. I am deploying this Helm chart with the following values file: persistence: enabled: true size: 5Gi ...
1
vote
1answer
200 views

Kubernetes GCE Ingress cannot find services

My yaml files for various deployments, services and ingresses have created a working setup before. I tried fixing a small issue with an ingress and can't get back to a working state. My pods start ...
0
votes
1answer
64 views

404s for service endpoints when using ingress with Gcloud

I'm working with k8s and gcloud to deploy a multi-service application with Ingress being responsible for routing requests to a specific service. K8s and generally infrastructure is a new area of ...
0
votes
0answers
49 views

LoadBalancer on GKE reports unhealthy for 2/3 nodes, but they are healthy

I created a cluster in europe-west2 with: REGION=europe-west2 ZONE=$(gcloud compute zones list \ --filter "region:($REGION)" \ | awk '{print $1}' \ | tail -n 1) ZONES=$(gcloud compute ...
0
votes
0answers
52 views

Error when trying to get kubernetes cluster credentials using gcloud

Something weird is happening when I try to get the credentials of my GKE cluster to create the .kube/config file. This is the error: alancota@COTAL01MBP-5:~|⇒ gcloud --verbosity=debug container ...
0
votes
1answer
195 views

Kubernetes Ingress: How can I expose two ports on one path?

I have a gce ingress configured and working with SSL on port 443. I'm trying to get port 28080 pointing to my standalone actioncable server: http://guides.rubyonrails.org/action_cable_overview.html#...
0
votes
2answers
46 views

Clusters become unavailable with ERROR status

I've created two GKE clusters with auto-upgrade feature. Suddenly lost all access to these clusters and see two REPAIR_CLUSTER operations for each one which are considered DONE (gcloud beta container ...
0
votes
1answer
257 views

GCP f1-micro instances only last a few hours before being replaced

I have a 3-6 f1-micro instance GKE (k8) cluster that is plagued by the f1-micro instances constantly re-creating. Looking at the cluster now it is currently scaled to 3 instances with the following ...
0
votes
1answer
117 views

Changing GKE cluster subnet

I need to change the IP range of the subnet used for a GKE cluster. Ideally, I would like to just change the subnet and have the everything just work, but that obviously does not work, as my new ...
1
vote
2answers
307 views

Why a pod can't connect to another network? (In the new version of Kubernetes)

I have two projects in GCP: With Kubernetes Nodes v1.8.8-gke.0. and a database outside of Kubernetes but in the default network. All pods can connect to this server and all ports With Kubernetes ...
1
vote
1answer
341 views

GKE ingress unable to connect to healthy service

I've been following the tutorial here: https://medium.com/@nithinmallya4/deploying-a-rails-application-to-google-container-engine-with-kubernetes-b08b2de353fc With their code base: https://github.com/...
1
vote
1answer
131 views

Google Cloud Ingress returning 404 for externalName

trying to setup my GC Kubernetes. Using the Ingress controller for the load balancing. While it works perfect for services connected to containers running on my kubernetes, I struggle to get it ...
0
votes
1answer
20 views

Encrypted config kubernetes on Google Cloud

I recently saw this page on the ability to encrypt secrets at rest. I am currently running kubernetes on Google Cloud, but I can't figure out how to set it up with the kube-apiserver. Any help is ...