Questions tagged [kubernetes]

Kubernetes is an open source orchestration system for Docker containers. It handles scheduling onto nodes in a compute cluster and actively manages workloads to ensure that their state matches the users declared intentions. Using the concepts of "labels" and "pods", it groups the containers which make up an application into logical units for easy management and discovery.

Filter by
Sorted by
Tagged with
0 votes
0 answers
4 views

AKS Isolate Service in namespace

We deploy a service to our existing AKS cluster that needs to be isolated as much as possible so it can't access other services or resources in our cluster. I created a new kubernetes namespace and ...
  • 101
0 votes
0 answers
3 views

kubectl timeout after Ubuntu VM (hyper-v) reboot

I'm setting up single node K8s cluster following this guide using kubeadm. The cluster is working fine (=I can deploy the test app), but after VM reboot the kubectl cannot connect to the server, I get ...
0 votes
1 answer
17 views

Kubernetes external DNS in split horizon and Service

I have multiple external-dns services doing a split horizon dns. i have 2 instances of external-dns managing the same domain name but one is a public zone and one is a private zone. how do I tell a ...
  • 111
1 vote
1 answer
17 views

Why does argocd keep re-syncing my Job?

I'm deploying an application using ArgoCD. The deployment manifests include a Job that performs some one-time initialization for the application. The Job resource looks like this: apiVersion: batch/v1 ...
  • 41.4k
0 votes
0 answers
9 views

Prometheus: Add insecure_skip_verify via annotation or scrape config adaption for kubernetes pods

I`ve running a kubernetes cluster with a deployment of some pods. One pod provides metrics on a https secured endpoint. The problem is, that this pod create and use his own self-signed certificate and ...
0 votes
0 answers
16 views

Installing Kubernetes 1.25 Offline

We are trying to setup a basic kubernetes (v1.25) cluster in a set of VMs (centos 7) which are offline (internet blocked). We have downloaded the images of the kubernetes server components (i.e. ...
0 votes
0 answers
21 views

Authentication Uses NTLM instead of Kerberos

We have transfered our site (httpd+nginx+php) from simple host with 3 containers to kuber cluster. And after that for some reason SSO has stopped working. Kerberos and samba configs are the same, AD ...
0 votes
0 answers
25 views

kubernetes - Running dovecot with serveral replicas

I am in the process of setting up an email server through kubernetes. I managed to get postfix up and running and now am trying to setup dovecot. As I am expecting a bit of traffic for dovecot I want ...
1 vote
2 answers
39 views

Serving ArgoCD behind Traefik in Kubernetes

I would like to run ArgoCD behind Traefik such that I can both access the ArgoCD web ui and interact with the API using the argocd command line tool. I have deployed ArgoCD into a Kubernetes cluster ...
  • 41.4k
0 votes
0 answers
14 views

nginx readonly container complains about /var/lib/nginx/off

I am trying to run a nginx container in readonly rootfs but when nginx tries to start it complains about : [emerg] 10#10: open() "/var/lib/nginx/off" failed (30: Read-only file system) nginx:...
  • 11
0 votes
0 answers
15 views

Linux Auditd monitoring of file operations in mounted folder

I have multi node kubernetes cluster and I would like to monitor file operations that are made by containers in mounted persistent volume. I found the all PV data are located at nodes in /var/lib/...
0 votes
2 answers
24 views

How do I redirect "old.foo.com/foo" to "new.foo.com/foo" with a NGINX K8S ingress, without breaking cert-manager?

In my K8S ingress config, I'm trying to redirect from (for example) old.mywebsite.com to new.mywebsite.com. I can do this with the nginx.ingress.kubernetes.io/permanent-redirect annotation, but ...
  • 1,098
0 votes
0 answers
10 views

Fix Systemd cgroups error when using kubelet

My error seems to have something to do with how cgroups is configured, however I have no idea beyond that. Sep 20 19:20:11 kubernetes-master kubelet[657]: W0920 19:20:11.380956 657 watcher.go:93] ...
0 votes
0 answers
35 views

GKE metrics about CPU usage of `kube-apiserver`

I'm trying to benchmark the load on the Kubernetes API that two different deployments cause. I have tried the two following ways of accomplishing this: Evaluate the Prometheus metric ...
0 votes
0 answers
15 views

Dedicated Network connection for CEPH or aggregated general purpose network connection?

We are building a Kubernetes Cluster on bare metal. As the cluster is getting physically installed, I was asked to weigh in on the following question: Each node has two network connections of 25Gbps. ...
0 votes
0 answers
19 views

What is the csi driver for google cloud?

For aws eks service there is helm chart for csi driver to handle volumes. aws-ebs-csi-driver What is the alternative for gke, google kubernetes engine? Please suggest.
  • 56
0 votes
0 answers
8 views

I want to use same terraform code for both kubernetes clusters Oracle (OKE) and AWS (EKS)

I want to use same terraform code for both kubernetes clusters oracle (OKE) and AWS (EKS) and install the argocd helm chart on it, I given my code below for your reference, now the problem I am facing ...
  • 1
0 votes
0 answers
23 views

How vps instance like aws, google cloud,... scale with containers?

As I understand. K8s will use the blueprint to create multiple containers on the same machine. But how this gonna help the scalability. For example, my laptop got 2 pods of backend servers and they ...
0 votes
0 answers
94 views

the gcp auth plugin is deprecated, how to skip this error?

I have install gke on a test account and configured the cli. kuebctl get pods is giving below warning. W0916 17:23:58.063534 67381 gcp.go:119] WARNING: the gcp auth plugin is deprecated in v1.22+, ...
  • 56
0 votes
1 answer
177 views

OpenVPN on Google Kubernetes Engine: expose private IPs to clients

Our scenario: We've got an OpenVPN server installed on a GKE pod with VPN clients that want to connect to our VPN. We need to expose to clients a service on another pod in our GKE cluster (an MQTT ...
0 votes
0 answers
13 views

Apache Spark Web UI on kubernetes not working as expected

hi im having a problem i'am deploying Apache spark helm chart on kubernetes bitnami chart : helm repo add bitnami https://charts.bitnami.com/bitnami normally the apache spark webui is on port 8080 ...
0 votes
0 answers
66 views

kuberntes oauth2-proxy with github provider return 500 Internal Server Error

I'am trying to add an authentication from Kubernetes ingerss with oauth2-proxy github provider i have set everything according to the official documentaion the url works and it redirects me to use my ...
0 votes
1 answer
34 views

What are Groups in Kubernetes certificate signing requests?

In a Certificate signing request API object for a user, you have to specify a group. apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: name: myname spec: groups: ...
0 votes
0 answers
15 views

servicemonitor doesnot add to prometheus-operator targets

I have deployed a Prometheus-operator on the k8s cluster. Everything works well, but I want to monitor MySQL pods in another namespace. I create mysqld-exporter pod and svc for it in MariaDB namespace ...
0 votes
0 answers
14 views

Restore batch job from checkpoints on NFS mount

I'm running long batch jobs on Kubernetes cluster, that operate on NFS directory to save artifacts and checkpoints. Every job has its own directory that it cd into and run a script to restore its ...
  • 101
0 votes
0 answers
16 views

kubernets csi smb driver: smb server not found

I want to try out the csi smb driver in a local kind cluster, but I receive an error, where the local smb server cannot be found. I followed the tutorial at the GitHub repository for installing the ...
  • 111
2 votes
0 answers
47 views

What are the consequences of Kubernetes Deployment labels not being unique?

The documentation for .spec.selector says: The .spec.selector field defines how the Deployment finds which Pods to manage. In this case, you select a label that is defined in the Pod template (app: ...
  • 41.4k
0 votes
0 answers
12 views

How to convert terrraform to kubernetes helm chart?

Our current project is created using terraform templates. Both the infrastructure and the application deployment is on terraform yaml files. Is there anyway to convert the application part to helm ...
1 vote
1 answer
93 views

Kubernetes v1.24.3 upgrade broke ingress-nginx

After upgrading our AKS kubernetes cluster to from v1.23.8 to v1.24.3 our ingress stopped working properly. No errors logged in events and the ingress-nginx pod does not report any errors on the ...
  • 111
0 votes
1 answer
36 views

Fix the KubeletHasDiskPressure in Kubernetes on a very limited server

I have a question regarding our local Kubernetes installation (Kubelet version == 1.24.4). We're having a Kubernetes installation installed using Kubespray. I'm aware of a few related questions/...
0 votes
1 answer
117 views

All kube-system pods keep crashing, etcd receives sigterm

I'm trying to set up an on-premises Kubernetes cluster. For starters I used kubeadm to initialize my control plane on one node. But all kube-system pods constantly crash. I took a deep look into the ...
  • 103
0 votes
0 answers
34 views

Why does uwsgi listen queue fill up when I increase the replicas to 2?

So, I have a very basic Python Flask app with uWSGI where upon application load, a background job reads data into memory and requests just serve this data (no updates). This data is probably ...1200kB ...
  • 111
0 votes
0 answers
13 views

How to delete Kubernetes Deployment that are not used so often

We have limited amount of resources in our cluster, so we want to implement a service/feature to manage cleaning up Deployments that are not used recently. We use nginx ingress, and want to know if ...
0 votes
2 answers
218 views

Grafana pod is not running, how to fix that?

I have deployed grafana in eks using the steps provided in this link After deployment of grafana, the pod is not in running state. kubectl get po -n grafana NAME READY STATUS ...
1 vote
1 answer
73 views

What does this logs mean? (kubelet)

Today one worker node of kubernetes cluster was in freeze at around 5:30-5:40 and I try to find out what the reason of it stucking, in order to this I look in /var/log/syslog. There are tons of log, ...
  • 11
1 vote
1 answer
41 views

Pods are not communicating with each other after patching podcidr

I am trying to add new node to my K8s cluster, after adding it in cluster i started getting following error in canal pod- Error registering network: failed to acquire lease: node "e2e-98-15....
0 votes
0 answers
17 views

Calico CNI calio-apiserver issues, on-premises kubeadm based kubernetes v1.24.2 cluster

I am unable to get calico CNI fully functional on a on-premises kubeadm based kubernetes v1.24.2 cluster. The calio-apiserver pods (in the calio-apiserver namespace) have the status "...
  • 111
0 votes
0 answers
17 views

Is possible to use cert-manager with a private microsoft PKI?

I have a microsoft server with PKI Installed. I want to know if it possible to allow to cert-manager to talk to the microsoft server pki (microsoft CA) to get certificats ?. Any example of this case ?
  • 101
1 vote
0 answers
21 views

Handling a deployment in prod with in memory data with uwsgi & kubernetes

I'm in a bit of a bind here and I'm looking for pointers as to how to best manage my situation: So, I have a Flask app with uwsgi and I'm deploying this to Kubernetes with 2 pods. UWSGI configuration ...
  • 111
1 vote
1 answer
33 views

azure kubernetes service - not able to pull images from ACR - connection refused - inconsistent

the issue started out of nowhere without any apparent change that we did. All of a sudden, deployments to our AKS (Kubernetes Version 1.23.8) clusters would randomly fail with errors like the below. ...
0 votes
0 answers
19 views

kops "this cluster is not configured for dual-stack services"

Running kops version: 1.24.1, kubectl version 1.24.2 on AWS in a dual-stack enabled VPC I use the following command to create the cluster kops create cluster --cloud aws \ --vpc $...
  • 11
0 votes
0 answers
16 views

Ingress to Ingress?

I'm following these instructions https://kubernetes.github.io/ingress-nginx/examples/auth/basic/ to add basic auth to an NGINX Ingress. This is in EKS. I already have an ALB Ingress which does route ...
  • 101
2 votes
1 answer
174 views

Pod is stuck in PodInitializing status when an initContainer is OOMKilled

I have the following on-prem Kubernetes environment: OS: Red Hat Enterprise Linux release 8.6 (Ootpa) Kubernetes: 1.23.7 (single-node, build with kubeadm) NVIDIA driver: 515.65.01 nvidia-container-...
  • 278
1 vote
0 answers
11 views

kubeadm has a empty token list

I'm running a k8s cluster to study and when I run kubeadm token list on the master node doesn't do anything, just jump to another line. And there is no file /etc/kubernetes/pki/tokens.csv on the ...
0 votes
1 answer
38 views

How often managed kubernetes cluster should be upgraded?

We use managed Kubernetes cluster (GKE) and wonder how often the Kubernetes cluster should be upgraded. We use release channels: regular (dev/test), stable (staging), stable (production). Different ...
  • 101
1 vote
1 answer
29 views

kubernetes - limiting count and frequency of image pulls cluster wide

I am getting image pull outage due to reaching the image pull count limit from docker hub, see "Events" section of the output of pod describe below. It seems a pod in the kubernetes cluster ...
  • 111
0 votes
0 answers
20 views

How to create kubernetes DNS service without reinitializing k8s cluster

How to create Kubernetes DNS service without reinitializing the k8s cluster? I have accidentally deleted the K8S DNS service and now name resolution is not working between pods and services. Pods are ...
-2 votes
1 answer
266 views

modprobe: FATAL: Module nf_conntrack_ipv4 not found in directory

TASK [kubernetes/node : Modprobe nf_conntrack_ipv4] ************************************************************************************* fatal: [node1]: FAILED! => {"changed": false, &...
1 vote
0 answers
25 views

Long latency to reply a TCP ACK

k8s environment(4 nodes, rke 1.21.5) We noticed there is randomly significant latency in socket data transferring between different k8s pods. Latency could be as long as 15 seconds in some cases. By ...
  • 11
1 vote
1 answer
18 views

ETCD restore granularity

I'm studying some backup and restore solutions for Kubernetes and Openshift, typically with Velero. So, I'm not familiar with ETCD backups, but I would like to ask about the granularity level of etcd ...

1
2 3 4 5
42