Questions tagged [kubernetes]

Kubernetes is an open source orchestration system for Docker containers. It handles scheduling onto nodes in a compute cluster and actively manages workloads to ensure that their state matches the users declared intentions. Using the concepts of "labels" and "pods", it groups the containers which make up an application into logical units for easy management and discovery.

Filter by
Sorted by
Tagged with
0
votes
0answers
13 views

Jenkins: Unable to connect to the server. executable aws not found

I run Jenkins on OS X and at one step, I receive the following error, Constructing AWS CredentialsSetting AWS region us-east-1a [Pipeline] { [Pipeline] sh + echo 'Deploy blue container...' Deploy ...
0
votes
0answers
23 views

Can't pull images from gcr.io using kubeadm

I cannot pull images from gcr.io using kubeadm. I do not understand the problem, as it seems to have correct internet access to get the latest version info correctly. This is running on a ubuntu 20.04 ...
1
vote
0answers
12 views

Pods on two different nodes communicate very slow, any idea why?

I am learning k8s and I have 3 nodes k8s cluster. I have just recently deployed k8s with kubeadmin and so far it is working great. everything working perfectly but the only problem that I am facing is ...
0
votes
0answers
9 views

How to Install cilium as network plugin for K8s

ITNOA I install K8s control plane node with kubeadm init with custom IP for control plane endpoint address and custom IP for API server address I try to install cilium as network plugin for K8s I run ...
0
votes
0answers
12 views

SNAT port of Kubernetes outgoing traffic

I am currently running Kubernetes with Calico v3.20.2 as the CNI. I have a very unique case where I need to send UDP traffic from a specific DaemonSet Pod to an external server which will read the ...
0
votes
0answers
16 views

MinIO operator on minikube is not working

I'm trying to use the MinIO operator on a minikube (1 node) deployed in an EC2 machine. The operator is deployed correctly and the same is for the tenant creation and it seems all good until I try to ...
0
votes
0answers
8 views

K8s ( on eks ) access pod with hostNetwork: true from another pod

I'm installing metricbeat ( deployed using this manifest file ) on my eks cluster. In order to monitor also some other metrics ( such as traefik and HPA ) i added Prometheus with remote_write enabled,...
0
votes
0answers
15 views

Minio console OIDC login using helm chart

I am attempting to setup the minio operator in Kubernetes using the helm chart https://github.com/minio/operator/tree/master/helm/minio-operator It all launches ok, however I'm trying to set it up so ...
0
votes
0answers
27 views

Kubernetes failing to start: failed to build map of initial containers

Starting today, k3s is failing to start with the following error: "Failed to start ContainerManager" err="failed to build map of initial containers from runtime: no PodsandBox found ...
0
votes
0answers
15 views

Connection timeout when hitting port-forwarded endpoint; works fine with local IP

In pfSense, I have this rule: https://i.imgur.com/10jE1Gs.png Where 192.168.1.203 is my target machine and I have a rancher app hosted at port 8081. If I hit https://MY_DOMAIN_NAME:8081--...
0
votes
1answer
15 views

Get resources across all namespaces by name - clusterrole vs all other resources

May be the wrong forum for such a question, but I am wondering why: k get daemonsets.apps sysdig-agent -A returns: error: a resource cannot be retrieved by name across all namespaces while k get ...
0
votes
0answers
31 views

Kubernetes cluster - node creating its own ca

So I manually deployed my cluster and my api config is as follows: [Unit] Description=Kubernetes API Server Documentation=https://github.com/kubernetes/kubernetes [Service] ExecStart=/usr/local/bin/...
0
votes
0answers
12 views

Feature Microsoft.ContainerService/AutoUpgradePreview is not enabled in AKS

I am trying to create Azure k8s cluster via terraform using Azure Devops. terraform apply is failing with below error, i have tired using the below parameter referring https://registry.terraform.io/...
0
votes
1answer
22 views

How do I view a docker image's console trace, in Kubernetes Dashboard?

I'm working through a tutorial that uses Kubernetes: .NET Microservices – Full Course The instruction is aimed at MS Windows 10, but I'm working through it in both Windows and Linux, just because. The ...
0
votes
0answers
14 views

MetalLB on a host with multiple NIC

I need help with some deeper networking stuff. Hopefully somebody can help me or at least push me to the right direction. At the moment I have a two node bare metal (VPS) kubernetes cluster setup with ...
0
votes
0answers
33 views

enable ephemeral containers AWS EKS

I'm trying to debug a distroless POD by trying kubectl debug which uses ephemeral containers that are disabled by default in aws eks. I'm using aws eks 1.21 ✗ kubectl debug -it opentelemetry-...
0
votes
0answers
25 views

Can EFS claims live longer than the Kubernetes cluster?

We have been writing scripts for setting up an application on AWS via Pulumi, trying to automate everything from scratch to a running application (but via different intermediate stages). The idea was ...
0
votes
1answer
25 views

Can't use images from k8s.gcr.io registry in my kubernetes cluster

I've setup a k8s cluster on a bare metal ubuntu machine using RKE. There is no problem creating deployments with images from docker.io. But I can't create deployments which are based on gcr.io: ...
0
votes
1answer
21 views

Which host of redis in config, if running in the same k8 cluster?

I am running a redis cluster helm install -n redis staging bitnami/redis-cluster in my k8s cluster and want to use this with a self hosted gitlab. In the docs I see I have to set redis: install: ...
1
vote
1answer
28 views

How to know what roles are missing in RBAC

How can I figure out what role is missing in a service account? Like I have the following: kubectl auth can-i create taskrun --all-namespaces --as=system:serviceaccount:default:default no Ok, but ...
0
votes
1answer
26 views

kubernetes ingress replace path

I have two backend api-services: api-service-v1 api-service-v2 Both respond on "/api/" path I have this configuration running fine as a docker-compose setup where nginx service serves as a ...
0
votes
1answer
31 views

Java large heap in container environment

I'm trying to run a Jetty webserver on kubernetes, it needs an extremely huge amount of heap ~ 250 GB in our production environment, ~ 50 GB in our test environment. I'm using jetty:9.4-jdk11, I'm ...
0
votes
0answers
33 views

Debugging Reconcile triggers in Kubernetes Operator

I am using a custom resource in my kubernetes cluster and have built an operator (using Operator-SDK). In my operator reconcile function, I create a secret owned by the CR and apply it on the same ...
0
votes
0answers
35 views

How can i route pods in a EKS cluster to a specific NAT Gateway within the same subnet

Am running an EKS cluster deployed on a node (in public subnet) with two namespaces, one pod running in each of the namespaces. I have created two NAT gateways on the same subnet. I would like to ...
0
votes
1answer
18 views

Custom root cert for kubeconfig files

Running kubeadm init phase certs apiserver --config kubeadm.yaml Is it possible to have multiple/custom root certificate to be used for group of users/kubectl/config files? I am asking because, I ...
0
votes
0answers
8 views

kube-proxy seems to be unable to resolve service IP on windows

Running a hybrid cluster on 3 VMs, master node a linux, one worker is linux the other one is windows. the linux node is working correctly (at least, it can run Jenkins job and a grafana). The Windows ...
0
votes
0answers
39 views

How to forward all trafice from microk8s cluster through firewalld?

I have a microk8s cluster on a Centos8 host. The host uses iptables-legacy and firewalld. I have troubles getting the cluster to talk with the internet, and recently found that these two tools are ...
3
votes
1answer
112 views

Malicious requests from private network (Kubernetes)

Recently I'm having many malicious requests to my nginx-ingress pod but I don't understand how's possible they're from a private network. Some examples: 10.114.0.3 - - [11/Oct/2021:09:07:09 +0000] &...
0
votes
0answers
33 views

K3S can't pull public docker hub images

K3S cluster is failling to pull public docker hub images. in this instance i will user linuxserver/webtop which presents the error Failed to pull image "linuxserver/webtop": rpc error: code =...
0
votes
0answers
24 views

ACR geo replication setup for AKS cluster in another region

In our environment we have Primary AKS cluster running in West Europe and we have ACR in the same region. But now we are setting up a DR instance of AKS cluster in the North region. Only AKS cluster ...
0
votes
0answers
23 views

Installing kubespray with containerd

I can not install the containerd in kubespray Parameters: ##docker for docker, crio for cri-o and containerd for containerd. container_manager: containerd etcd_deployment_type: host When installing : ...
0
votes
0answers
16 views

Unable to scrape kublet api from prometheus

I am setting up prometheus to scrape kubernetes cluster. I am trying to use "role: node" with kubernetes_sd_config to monitor one of the K8s cluster. I created certificate ashishcert.pem for ...
0
votes
0answers
23 views

502 gateway error on Kubernetes Ingress (K3S - Bare Metal)

I have a k3s cluster with a master on a cloud VPS but with 2 remote worker nodes, both on the same network. They're connected via a VPN to the cloud provider. The worker nodes were able to join just ...
0
votes
0answers
114 views

Postgres and redis pods are failing from time to time

I've setup a kubernetes cluster (1.19) using RKE on a bare betal ubuntu (20.04) machine. I'm running a self hosted gitlab instance (installed by helm chart) on that cluster. From time to time (every 1-...
0
votes
1answer
203 views

Calicoctl rejecting certificate on fresh k3s install

I have a fresh install of Ubuntu, a fresh install of k3s, and a fresh download of calicoctl. I have installed it the following way. curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE="644"\ ...
2
votes
1answer
72 views

How to load configmap from a properties file using kustomize?

I have tried using kustomize to load properties file as a configmap. For that, I created a sample set as in github link. With base files: #kustomize build base apiVersion: v1 data: config: |- ...
1
vote
1answer
45 views

How to load ConfigMap in Kustomize YAML file?

My original YAML base/deployment.yaml apiVersion: apps/v1 kind: Deployment metadata: labels: app: nginx name: nginx spec: replicas: 1 selector: matchLabels: app: nginx template:...
1
vote
1answer
68 views

How do I configure Kubernetes to use kubenet with kubeadm?

I deployed a Kubernetes cluster using kubeadm. $ kubectl get nodes NAME STATUS ROLES AGE VERSION ip-172-31-33-9.us-east-2.compute....
0
votes
1answer
46 views

Accessing Mosquitto MQTT from outside my kubernetes cluster

I have the following Mosquitto setup on my minikube: Deployment: apiVersion: apps/v1 kind: Deployment metadata: name: mosquitto namespace: mosquitto spec: replicas: 1 selector: matchLabels:...
0
votes
0answers
99 views

Rancher x509 Certificate Expired yet not

When running kubectl, I get the error Unable to connect to the server: x509: certificate has expired or is not yet valid: current time 2021-10-05T11:59:14-04:00 is after 2021-09-29T19:21:40Z So ...
0
votes
1answer
90 views

Rancher on k8s gives 404 page not found

I installed a kubernetes cluster with k3sup on a VM on my local hypervisor and the pods are up and running. Now I wanted to add a deployment with rancher in its latest version (2.6) to manage another ...
0
votes
0answers
19 views

Setting up logging of control-plane pods to a specific files

Log files for the control-plane pods don't exist in the /var/log directory. I tried to enable kube-apiserver logging to a specific file in Kubernetes (v1.20.2). I added the following keys to the kube-...
0
votes
0answers
42 views

No network connectivity between pods inside a fresh bare-metal kubernetes cluster

I noticed connectivity problems when trying to generate TLS certificates using cert-manager. I can successfully connect to different pods from the outside world (ingress works), but I can't reach the ...
0
votes
1answer
51 views

Kubeadm with containerd cannot use locally loaded images

I'm trying to build kubernetes with containerd in bare-metal server (RHEL8). There's no Internet connection so I manually downloaded needed images (e.g. k8s.gcr.io/kube-scheduler:v1.22.1) and loaded ...
1
vote
1answer
48 views

pods in kubernetes can not communicate with other pods and outside cluster hosts

I have 2 master and 3 worker node and one HA proxy for controlePlan, I have many java microservices that communicate together and communicate with DB or KAFKA outside of the kubernetes cluster. ...
0
votes
0answers
16 views

Clarification regarding server requirements for Linux and Kubernetes on LKE

I want to Dockerize my applications(stack: react, nginx, node, mongodb, redis etc) and deploy them on VPS/s on Linode, but I never done anything like that before and have some fundamental questions ...
-1
votes
0answers
68 views

[ERROR SystemVerification]: error verifying Docker info

I am trying to set up a Kubernetes cluster in Ubuntu 20.04. I have one master node and I want to assign two worker nodes. I assigned the master node successfully, and now I am trying to assign the ...
1
vote
1answer
46 views

Prevent UID 0 containers running Kubernetes

Traditionally I would have prevented root/UID 0 containers from running in kubernetes using pod security policies. However it seems that in 1.21 PSPs have been deprecated. Are there any other ...
0
votes
0answers
59 views

k3s pods not deployed on correct node

I have a k3s cluster with several nodes, let's say 3 nodes. On each node, I have several pods to deploy. It's a "static deployment", meaning that I want to deploy each pod on a specific node....
2
votes
1answer
64 views

Kubernetes ingress 502 bad gateway on DigitalOcean

I am trying to deploy a NestJS app with Kubernetes on DigitalOcean and I have followed this tutorial, but I am always getting a 502 Bad Gateway from the nginx-ingress-controller. That's my deployment....

1
2 3 4 5
35