Questions tagged [kubernetes]

Kubernetes is an open source orchestration system for Docker containers. It handles scheduling onto nodes in a compute cluster and actively manages workloads to ensure that their state matches the users declared intentions. Using the concepts of "labels" and "pods", it groups the containers which make up an application into logical units for easy management and discovery.

Filter by
Sorted by
Tagged with
0 votes
0 answers
15 views

Kubernetes monitoring with Prometheus

I need a little bit of help here. I have a Kubernetes cluster up and running and I have a dedicated machine for monitoring with Prometheus running on it. I already have node exporters running and ...
skylar's user avatar
  • 1
0 votes
0 answers
9 views

How to monitor multiple Kubernetes clusters using single Grafana?

I would like to use a single Grafana instance to monitor multiple Kubernetes cluster (pods resources consumption, rabbitmq queues info) provided by Prometheus. I have two Kubernetes cluster - one used ...
FN_'s user avatar
  • 261
0 votes
1 answer
20 views

Kubernetes API returns 403 Forbidden from inside a pod with seemingly correct ClusterRole bound to pod Service Account

I have a Python script that runs inside a k8s pod (Google Kubernetes Engine 1.25) and queries K8S API to create VaultStaticSecret's resources. I'll paste Helm Chart templates for brevity: apiVersion: ...
Dima Medvedev's user avatar
0 votes
1 answer
80 views

Kubernetes namespaces vs Docker namespaces

Linux kernel offers a feature called namespaces. Docker containers are isolated with this feature. There is also a "namespace" feature on kubernetes. Does it rely on Linux kernel namespaces ...
Bob5421's user avatar
  • 361
0 votes
0 answers
12 views

Velero Web UI for kubernetes

Does Velero supports Web UI or is it just CLI, I have seen couple of Github repos with the SC. https://github.com/winnieoursbrun/velero-ui https://github.com/hsmade/velero-ui
Uday Sriramadas's user avatar
0 votes
0 answers
27 views

how to grant network access to mongo atlas to a EKS deployment

problem: I have an app running on a EKS cluster that needs to connect with a mongodb atlas database. I must grant the app running on the EKS cluster network access by entering its IP address. I do not ...
Bear Bile Farming is Torture's user avatar
0 votes
0 answers
45 views

installed metrics server in kubernetes cluster but getting 'ServiceUnavailable' error for ''kubectl top nodes"

I have a 3 master kubernetes cluster with kubernetes version v1.25.0 NAME STATUS ROLES AGE VERSION master21.server Ready control-plane 77d v1.25.0 master22.server ...
kaushal47's user avatar
0 votes
0 answers
24 views

Kubernetes pods Can't connect to local MySQL server through socket

I have a problem with MariaDB (mysqld.sock) I have the next architecture: Deployment for APP1 Deployment for MariaDB1 PV11 and PVC11 (/var/lib/mysql/), PV12 and PVC12 (/run/mysql/) NFS1 server. ...
Bob's user avatar
  • 1
0 votes
0 answers
23 views

All cluster resources were brought up, but: 1 nodes out of 1 are unhealthy

Unable to create a gke autopilot cluster using shared vpc . The same shared vpc works fine with standard private cluster . Repeated this multiple times with the same error. Followed google ...
Mujeeb Sayed's user avatar
1 vote
0 answers
111 views

In a multi-container Pod, how does the restart of a single container (caused by liveness probe failure) affect the whole Pod

Consider a multi-container Pod where some of the containers have only the 'liveness probe' configured, some have "liveness and readiness" both probes configured, some have only "...
P Gupta's user avatar
  • 11
0 votes
2 answers
36 views

How to use wget with headers in liveness probe in a yaml file in kubernetes?

I am trying to use wget in my liveness probe in Kubernetes. Here is the code: apiVersion: v1 kind: Pod metadata: namespace: test labels: test: liveness name: liveness-exec spec: containers:...
Edgar Peixoto's user avatar
0 votes
0 answers
59 views

Created an ingress, not getting address from Metallb address range

I'm trying to set up a bare-metal kubernetes (RKE2) cluster. I installed metallb following the instructions in the documentation using helm by creating an IP address pool and l2 advertisement. ...
Saksham's user avatar
1 vote
0 answers
26 views

How to initialize kubeadm in a non-default network interface?

I have been trying to set-up Kubernetes in my university server which has two network interface. The default interface (10...*) is connected to my university network and there is another interface (...
Sadman Amin's user avatar
0 votes
0 answers
19 views

Access to Metallb IPs is not possible

I have a k8s cluster with 3 masters and 7 workers. I have many services on it and I want to expose some of them. I used Metallb for this task and with layer 2 configuration I can get IPs from IP pool ...
sunrise's user avatar
  • 21
0 votes
0 answers
29 views

unable to delete kubeflow - stuck namespaces "terminating"

I am trying to deploy the kubeflow cluster on premise (using virtual machines). A bit of background information first: I followed the official guideline, with one exception - I piped the kubectl ...
user3002166's user avatar
0 votes
0 answers
20 views

Kasten k10 dashboard 504 error

I Have installed the Kasten k10 on AWS k8, trying to access the dashboard from service port forward. Dashboard has an network error with error logs on dashboard-svc pod and Gateway pod. Below are the ...
Uday Sriramadas's user avatar
1 vote
0 answers
47 views

Why NodePort service is not accessible on Kubernetes Master node?

I have Kubernetes (1.28.2) cluster installed on baremetal VMs. One master and 2 worker nodes. I am using Calico pod network. I have deployed a Traefik ingress with NodePort accessibility. Also ...
bkk's user avatar
  • 111
2 votes
1 answer
43 views

The pod's /etc/resolv.conf does not reflect the changes on the host

When my pod's dnsPolicy is set to Default it picks up the DNS servers from the host's /run/systemd/resolve/resolv.conf (as configured by the resolvConf flag in Kubernetes) and stores them in /etc/...
Sam's user avatar
  • 121
0 votes
1 answer
34 views

How to Install Istio CRDs in Remote Kubernetes Cluster

To avoid any XY problem, I'm sharing the full story. I'd like to deploy a multi-cluster setup of Istio; specifically Primary-Remote (single mesh, single network) setup. Following this guide after a ...
Rad's user avatar
  • 195
0 votes
0 answers
53 views

Why can't I schedule more pods even with Ipv4Prefix enabled in my EKS cluster

I am using cilium as my CNI. I have successfully run the cilium connectivity test and all tests pass. My nodegroup schedules a t3.small nodes (3 of them), which allows me to run 11 pods without ...
eagercoder's user avatar
0 votes
0 answers
68 views

The "count" value depends on resource attributes that cannot be determined until apply, Terraform cannot predict how many instances will be created

I am trying to create EKS cluster with manages nodegroup and I want to execute shell script that hardens worker nodes and sets proxy settings before cluster bootstrapp. here is my "main.tf" ...
user3736754's user avatar
-1 votes
0 answers
9 views

AdGuard Home on home lab K8s with MetalLB - Android cellphones lose connection? [migrated]

I have a K3s based Kubernetes cluster running with MetalLB as load balancer. Assigning IPs to services works like a charm. I can also access the IPs from the MetalLB IP range through a keepalived VIP ...
Hendrik Wiese's user avatar
2 votes
2 answers
64 views

Setting up a cluster with workload distribution

I want to setup a server cluster which can keep by servers as busy as possible while still giving fair compute time to everyone. I have setup a basic Kubernetes setup but the issue is that if some ...
starhawk's user avatar
0 votes
1 answer
34 views

How can i get cilium to pass the failing connectivity test

I am trying to deploy cilium to my eks cluster, for context, this cluster is a private cluster running behind a private subnet, and routed to the internet through a NAT gateway and then an internet ...
eagercoder's user avatar
1 vote
1 answer
133 views

Copying Kubernetes Secret Between Namespace

I attempted to replicate the dd-es-remote-ca secret from the default namespace into the kube-system namespace. Despite encountering no errors during the process, the secret did not successfully copy ...
alexus's user avatar
  • 13.3k
0 votes
1 answer
32 views

Zero-downtime pod eviction for single replica deployment

My app runs as a deployment with 1 replica. When I'm executing kubectl rollout restart deployment my-app, it starts new pod first, waits for it to become ready and then deletes old pod. That provides ...
vbezhenar's user avatar
  • 273
0 votes
0 answers
37 views

Microk8s Cluster - Pods cannot reach nameserver/CoreDNS pod - No route to host

Disclaimer: This is my first question in ServerFault and I'm a complete noob. I have the following set up: remote VM, running CentOS 7, running MicroK8s (v1.28.3). It's a single-node cluster so I have ...
okariotis's user avatar
0 votes
1 answer
190 views

How to add a domain to k3s certificate

When trying to access a k3s Kubernetes cluster that's running on another machine, I get the following error message: E0204 19:13:27.185678 8066 proxy_server.go:147] Error while proxying request: ...
James's user avatar
  • 101
0 votes
0 answers
75 views

Mapping external to internal IP ranges

I have many namespaces on Kubernetes. Each namespace has it own IP range. For example n1 has 10.0.1.0/24 range, n2 has 10.0.2.0/24 and so on. Each pod in each namespace get ip base on the namespace ip ...
sunrise's user avatar
  • 21
0 votes
1 answer
59 views

Kubernetes OOM killer

I have some questions regarding OOM killer, for pods crossing their memory limit does kubernetes allow graceful shutdown before firing sigkill. Second question is that does kubernetes immediately ...
prashant's user avatar
  • 101
0 votes
0 answers
29 views

Monitor RabbitMQ with Prometheus outside kubernetes cluster

I'm trying to monitor a RabbitMQ set up in a kubernetes cluster by the bitnami helm chart with 3 pods from an Prometheus outside the cluster and I don't understand how that should be possible. On the ...
BMaehr's user avatar
  • 1
1 vote
1 answer
99 views

Create and assign separate subnet to each namespace

I have one master and one worker and 10 namespaces in k8s. I want to create and assign subnet to each namespace using by pods. for example I want to create and assign 10.0.0.0/24 to namespace 1, ...
sunrise's user avatar
  • 21
1 vote
0 answers
61 views

After migrating to Kubernetes, PHP kernel response times increased

There is an application written in PHP Symphony. The application is stateless, all code and statics are inside the application container. We moved it from docker to kubernetes, but after testing ...
Alex Tokarev's user avatar
0 votes
0 answers
59 views

My Kubernetes Pods keep crashing with a CrashLoopBackOff error on my worker nodes

I'm new to Kubernetes so this may be a dumb problem. Any pods I try to deploy on my worker nodes crash with a CrashLoopBackOff error. This only happens to pods running on my worker nodes and not my ...
JamesyBoy2394's user avatar
0 votes
0 answers
22 views

Cilium installation on cluster created using kubeadm

I am trying to install Cilium (1.14) on a very vanilla k8s (1.27) cluster (1 controller + 3 workers). I used kubeadm to create the cluster on EC2 arm64 machines on AWS. The cluster works fine if I use ...
YAK's user avatar
  • 1
0 votes
0 answers
36 views

nerdctl sees that a lot of k8s mirrors produce a lot of empty tags

BUG REPORT Versions kubeadm version (use kubeadm version): v1.28.6 Environment: Kubernetes version (use kubectl version): v1.28.6 Cloud provider or hardware configuration: vsphere OS (e.g. from /...
zccharts's user avatar
0 votes
1 answer
126 views

kubectl failed to ensure lease exists error

I'm trying to deploy an at home k8s node to learn on and deploy some actual services I rely on to. I have taken the following steps: Install Fedora Server 39 Follow the directions at https://docs....
Kirkland's user avatar
  • 133
0 votes
0 answers
37 views

why rook cephfs storage class store pv data in 2 places?

I am a newbie to ceph and run ceph using rook in bare metal environment.my question is : when you use rook cephfs provisioner as storage class and create a pvc to assign to a pod , when the pv is ...
Ali farahzadi's user avatar
0 votes
0 answers
38 views

Establishing mutual authentication over SSH using SPIFFE

For this learning purpose I have created a k8s cluster using 4 azure VMs (VM1, VM2, VM3 & VM4).I have followed the spiffe doc to deploy spire-server and spire-agent on a k8s infra. I have kept all ...
Yuvraj Singh's user avatar
-1 votes
2 answers
75 views

Windows: What could be the reason for a "paging file is too small" error even though there is plenty of physical memory available?

In one of our applications, we received an error message indicating "The paging file is too small for this operation to complete" while the application was trying to load a DLL (a .NET ...
Fabian Schmied's user avatar
0 votes
3 answers
52 views

error with connecting to an external kubernetes cluster

I installed the kubernetes cluster using kubeadm, everything is fine on the servers themselves, the master and worker node are visible --apiserver-cert-extra-sans=*.*.201.87 I make a connection from ...
Iceforest's user avatar
  • 101
0 votes
0 answers
126 views

Kubernetes v1.29.1 installation issue with kubeadm init

Cluster information: Kubernetes version: Installing on Virtual machine; Installation method: kubeadm Host OS: Ubuntu 22.04 LTS CNI and version: NA CRI and version: Docker Engine - Community Version: ...
Naresh A's user avatar
0 votes
0 answers
90 views

RKE2 All nodes NotReady post installation. Pending canal and cordns

I installed rke2-server and rke2-agent on the control plane machine and worker node machine respectively. (machine-0 is the control-plane, machine-1 and 2 are worker nodes). These machines are ...
Saksham's user avatar
0 votes
0 answers
28 views

How can I find TLS settings for Traefik running in Kubernetes containers, to stop allowing weak cipher suites?

I have some servers that have been flagged as allowing insecure TLS/SSL cypher suites, etc for HTTPS. I need to get it corrected. However, the web servers on them are running from Docker/Kubernetes ...
techsplosion's user avatar
0 votes
0 answers
22 views

Scheduling PaceMaker resources based on Kubernetes pods

I would like to have a PaceMaker cloned resource be scheduled on all cluster nodes that have at least one instance of a specific Kubernetes pod running. Background: I want to run a Kubernetes cluster ...
Jochen's user avatar
  • 203
0 votes
0 answers
49 views

Kubernetes flanneld VXLAN control plane

I want to build a kubernetes cluster, but it's unclear where or how I configure the flannel VXLAN control plane. I know that flanneld typically uses a UDP VXLAN data-plane encapsulation; however, does ...
aaronsharon1994's user avatar
0 votes
0 answers
20 views

Kubernetes/Helm - contributing configuration from one chart to a component in another

Our applications are organized as follows: A single "core" set of services deployed by a core Helm chart Several individual applications deployed by their own Helm charts Let's call these ...
David North's user avatar
0 votes
1 answer
45 views

Install kubernetes on ubuntu server 22.4 with virtualbox

I have installed virtualbox on my windows laptop. And then I have installed ubuntu server 22.4. https://phoenixnap.com/kb/install-kubernetes-on-ubuntu I have followed that link mentioned above. here ...
bizimunda's user avatar
  • 101
1 vote
1 answer
30 views

Terraform resources not getting destryoed from terminal

I wanted to destroy the DEV environment from my Kubernetes hosted on AWS EKS. There are two parts to the resources; the infrastructure part and the application part. I use Terraform/Terragrunt to ...
Summerborn Storm's user avatar
0 votes
1 answer
72 views

Azure kubernetes service private cluster

I have a private Kubernetes cluster that needs to be accessible by a client, but I still want to keep everything enclosed within a VPN. Unfortunately, the VPN I created requires an address space that ...
DevLookForHelp's user avatar

1
2 3 4 5
52