Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [kubernetes]

Kubernetes is an open source orchestration system for Docker containers. It handles scheduling onto nodes in a compute cluster and actively manages workloads to ensure that their state matches the users declared intentions. Using the concepts of "labels" and "pods", it groups the containers which ...

1
vote
0answers
10 views

Openshift: Get process namespace by process ID

Currently we have a situation where some applications running on our OpenShift cluster request very high resource load, and thus making the worker node they are running on unresponsive. However, we ...
0
votes
1answer
35 views

kubernetes - version issues when adding new node to existing cluster

I have a pre-existing k8 cluster that I want to add a node to. It appears that there's a version issue and Im not sure how to resolve it. When I attempt to join the new node (using kubeadm join): ......
0
votes
1answer
7 views

google cluster giving authentication scope error

I have a free tier account but whenever i try to create a container cluster i am getting below error from one of the script (gcloud.container.clusters.create) ResponseError: code=403, message=Request ...
0
votes
0answers
12 views

Openshift find pod from UUID

My disk space is a bit high. I used ncdu to analyze what is taking all this space. After running it I came to this: ncdu 1.13 ~ Use the arrow keys to navigate, press ? for help --- /var/lib/origin/...
-1
votes
1answer
34 views

Kubernates assing multiple endpoints

i have the following configurations on kubernates: apiVersion: apps/v1beta2 kind: Deployment metadata: name: {{ include "e-lucene-eva.fullname" . }} labels: app.kubernetes.io/name: {{ include ...
0
votes
0answers
23 views

Mounting NFS servers with Docker/Kubernetes containers, without using insecure mode on the server

I'm trying to containerize an web application. As part of its operation, it requires access to four separate NFS mount located on different hardware. Two of the mounts live on a regular Linux box, but ...
0
votes
1answer
48 views

Kubernetes don't start after change in kube-apiserver --authentication-mode=token

Installation: ubuntu server 16.04, EC2 instance that I install kubeadm. I try to connect to the Web UI, and change this parameter to --authorization-mode=token I restart the server and change to ...
1
vote
1answer
18 views

Kubernetes nginx-ingress load balancer external IP pending

In my Kubernetes cluster I want to bind a nginx load balancer to the external IP of a node. However, the external IP is always shown as "pending". The cluster runs on two root-servers using weave. ...
1
vote
0answers
21 views

GKE - Kube-DNS stubDomain resolution to VPN network not working

New to GCloud and GKE and having a frustrating time with DNS. We have a VPN between our office and GCloud running a Shared VPC. Existing firewall rules seem to work fine. We can ping both ways, we ...
0
votes
0answers
39 views

Configuring Kubernetes Service as a UPnP Device

Problem I have set up a two-node bare-metal kubernetes cluster configured with weavenet and metallb. I would like services hosted on this cluster to discover and interact with UPnP devices on my home ...
0
votes
2answers
106 views

Node-to-Node communication doesn't work with Kubernetes with Calico

I'm quite new to Kubernetes, event if it doesn't feel like after I spent dozens of hours trying to setup a working Kubernetes. The edge parameters: 1 master and 3 nodes set up using kubeadm ...
0
votes
2answers
76 views

In Kubernetes, how can a container created from a CronJob find out when it was scheduled?

We have a Kubernetes CronJob resource that runs a Job every minute. I need the container that results from the Job to know when it was scheduled to run. Is this possible? Background info just in case ...
0
votes
1answer
30 views

Is creating firewall rule for nodeport a security concen?

This question is regarding firewall rule on GCP. I run my development and production server on the same cluster and separating them by namespace only. For development, I expose a nodeport (e.g. ...
0
votes
0answers
47 views

Migrating from Kubernetes deployment to Helm

We have recently moved from a pure kubernetes deployment to a helm chart deployment for one of our apps. I'm trying to find a way to migrate a cluster that is currently running the old deployment ...
0
votes
1answer
45 views

Kubernetes in production. Problems with a working pod

I have a question with kubernetes when deploying a new version. My yaml configuration of Kubernetes has the RollingUpdate strategy. The problem comes when it comes to changing versions this way. If I ...
0
votes
1answer
25 views

Certificate validation ignoring common name and only checking alternates?

I have a certificate, that has CN=*.some.domain and then alternate names DNS:*.sub1.some.domain, DNS:*.sub2.some.domain (2 more like this). I provided the certificate to an nginx-ingress in ...
0
votes
0answers
27 views

Kube ingress and elb

I am running my (kops) kube cluster on AWS. The cluster is in the private subnet. I am not able to create an external (internet facing) load balancer because my cluster is in private space. Is there ...
0
votes
1answer
38 views

Manually completing certificate chain for server

I have a certificate, signed by Active Domain Certificate Services. The certificate itself looks fine, I successfully converted it from DER to PEM. However, it says X509v3 CRL Distribution Points: ...
0
votes
1answer
27 views

pv and pvc - kube- efs

I am using PV with EFS. I have created a PV and PVC. My PV goes back to released status after I delete my StatefulSets. When I delete and re-apply my StatefulSets, it does not get attached to the same ...
0
votes
1answer
81 views

kubernetes flannel daemonset not starting (Clean Ubuntu 16 and 18)

I just installed kubernetes on a clean ubuntu machine following this steps (from linux academy): As root: apt install -y docker.io cat << EOF >/etc/docker/daemon.json { "exec-opts": ["...
0
votes
1answer
51 views

keeping terraform state file in S3\\bucket when deploying kube using kops / terraform

I am deploying a kube cluster using kops/terraform. My Kube's state store in in S3. However I also want to save my the terraform state file to be in S3:\bucket\something.tf instead of a local ...
0
votes
1answer
34 views

how to isolate kubernetes namespaces but allow access from outside

I have a Kubernetes cluster setup using kubeadm I'm trying to define a network policy which restricts access from outside the namespace but doesn't block access from outside (external IP) to elaborate ...
0
votes
1answer
85 views

minikube - Error starting cluster: kubeadm init error

My environment: $ cat /etc/redhat-release CentOS Linux release 7.5.1804 (Core) $ uname -a Linux X.X.X 3.10.0-862.11.6.el7.x86_64 #1 SMP Tue Aug 14 21:49:04 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux $ ...
0
votes
1answer
53 views

Which non-root user should I use on Google Kubernetes Engine?

When configuring a container process to run as a non-root user on Kubernetes, does the user need to exist on the host? If yes, which user id is appropriate to use when the host node is managed by ...
0
votes
0answers
21 views

kube-state-metrics - Failed to list *v1.Pod: serializer for text/html; charset=utf-8 doesn't exist

I'm trying to setup a monitoring of our Kubernetes cluster but it's not that easy. In the first time I tried on a dedicated VM to scrap all metrics following configs I can find on Internet and ...
0
votes
1answer
32 views

Install and Set Up kubectl - Kubernetes

I'm trying to follow Install and Set Up kubectl - Kubernetes, yet keep getting an error: # yum --quiet install kubectl https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64/repodata/...
0
votes
2answers
34 views

How to log backend latency in Google Http Load Balancer and Stack Driver

We have a running kubernetes cluster on GKE and we Google HTTP Load Balancer in front of it. HTTP Load Balancer logs all requests and we can access them in stack driver logging. But latency is not ...
0
votes
1answer
42 views

“The requested address is not valid in its context” when running kubeproxy usermode in Windows

I'm trying to connect a Windows node to a Kubernetes cluster, but when running the kube-proxy in usermode I keep getting the error The requested address is not valid in its context. How can I fix this?...
0
votes
1answer
22 views

GlusterFS memory leak

I am using glusterfs on Kubernetes for about 7GB of storage. I have 4 nodes, two of which are holding the replica sets. One of the nodes has a constant memory leak. Starts out at about 100MB then ...
0
votes
0answers
81 views

Using kubernetes ingress to expose multiple services, without exposing the services with NodePort

I'm trying to set up a cluster like this: +--------------+ +---------------+ | | | | | Express API | | Front End | | | | Static Assets | | ...
0
votes
1answer
19 views

Kubernetes, partitioning around clusters and namespaces

Let's say we have 2 subsystems: A & B. And we have 2 env: QA & Prod. What would be a better way to organize it around cluster & namespace?. Is it: One cluster for subsystem A, another ...
0
votes
1answer
51 views

Amazon EKS: how to configure S3 access for worker nodes?

How can I configure an EKS cluster to automatically allow S3 access from worker nodes? I've set up an EKS cluster following the Getting Started guide and have run the example Guest Book app. Now I ...
0
votes
1answer
48 views

Kubernetes: detect and auto-update deployment on image update

We're running multiple, globally distributed Kubernetes clusters that need to run the same software. When we release an update to this software (as a Docker image uploaded to a private Docker repo), ...
0
votes
1answer
28 views

Inheritance in Kubernetes Ingress Rule Path

I have the following ingress in my .yaml file: apiVersion: extensions/v1beta1 kind: Ingress metadata: name: my-ingress annotations: kubernetes.io/ingress.global-static-ip-name: my-ip-1 spec: ...
1
vote
0answers
29 views

Better way to use Perf on a Program in Kubernetes/Docker?

I am running Kubernetes on CentOS 7, and it doesn't seem that the version of perf is namespace aware. If run perf on the PID on the host node (host node found with kubectl describe pods --namespace) ...
0
votes
1answer
64 views

Google Cloud VPC Alias IP Routing Across Zones

I have a multi-cluster/multi-zone k8s platform running on Google Kubernetes Engine. The underlying GCP VPC network is running in global routing mode. The k8s services are assigned internal IP (...
-2
votes
0answers
36 views

kubectl giving certificate error on mac os but working fine on centos 7

hey so somehow my kubectl start rejecting ssl certificate its giving error on my mac: kubectl version Client Version: version.Info{Major:"1", Minor:"11", GitVersion:"v1.11.3", GitCommit:"...
-1
votes
0answers
17 views

Why application is in container creation state using rancher/rke on Centos and OpenEBS?

The application is in container creation state. Also, I have followed the pre-requisites that iSCSI has to be installed on the host node. I have a setup using rancher/rke with bare-metal hosts running ...
-1
votes
0answers
10 views

How to ensure that data written from application is synced to disk with ext4 in OpenEBS?

The data is not visible after the restart. I am guessing that data is passed for replica to write, which in turn puts into ext4. But before ext4 can sync the data to disk, node reboots and data is not ...
0
votes
0answers
15 views

How does the jiva volume folder structure look like? What are the files present inside

I have deployed one OpenEBS volume and seeing some default files like volume-head.img, volume-snap.img etc. I need to understand the folder structure of Jiva volume. I am assuming volume-snap.img is ...
0
votes
0answers
16 views

Why OpenEBS mount path is still available on host machine even after deletion of PVC?

I have deleted PVC, but it shows that OpenEBS mount folder is still present with the PVC folder name and data. This is not releasing space on my host machine. Why it is so?
0
votes
0answers
13 views

Where can i find the volumes/files on my hosts in OpenEBS?

I have installed OpenEBS with replica count 3 in a 3 node k8s cluster. I need to know where will be the files are getting stored?
-1
votes
1answer
30 views

Does OpenEBS support shared storage?

Does OpenEBS provide any kind of storage class that enables shared storage among containers? let's say I have 5 containers that need to access the exact same data. I have several containers doing AI ...
0
votes
0answers
9 views

How do I can expand the Jiva Storage Volumes?

I have created OpenEBS volume with 55GB initially which is mounted on my host. Now I need to expand it to 75GB. Is it possible to expand the same? If possible,Is there any impact for my application ...
0
votes
0answers
16 views

Does OpenEBS support ReadOnlyMany option for Jiva Volumes?

Regarding OpenEBS iscsi provisioner: How to use ReadOnlyMany with iscsi? When I apply it on kubernetes pod it gives the following error: (x12 over ) openebs.io/provisioner-iscsi openebs-provisioner-...
1
vote
1answer
91 views

Helm i/o timeout kubernetes

Trying to use helm on my kubernetes cluster. helm init went fine but trying to install or just helm list gives this error. $ helm list Error: Get https://10.96.0.1:443/api/v1/namespaces/kube-system/...
1
vote
1answer
29 views

What makes a kubernetes node unhealthy?

We've experienced 4 AUTO_REPAIR_NODES events(revealed by the command gcloud container operations list) on our GKE cluster during the past 1 month. The consequence of node-auto-repair is that the node ...
0
votes
0answers
19 views

Error when creating a Docker image using Google Cloud Platform

I've created a react app and try to deploy the app at kubernetes using the google cloud platform. I’ve followed this steps: Create a react app: $ dotnet react new Run the app: $ dotnet run ...
0
votes
0answers
59 views

Ingress returns 'default backend - 404' on Minikube

I'm trying to set up a very simple Kubernetes cluster with frontend, backend and db services. Here is part of the Frontend service definition file: apiVersion: v1 kind: Service metadata: name: ...
0
votes
0answers
41 views

Which service account is associated with a given kubelet?

I have a kubernetes cluster deployed via Rancher. I would like to check which service accounts are used for which part. In particular, I would like to find out which service account the kubelet not ...