Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

Questions tagged [kubernetes]

Kubernetes is an open source orchestration system for Docker containers. It handles scheduling onto nodes in a compute cluster and actively manages workloads to ensure that their state matches the users declared intentions. Using the concepts of "labels" and "pods", it groups the containers which ...

0
votes
0answers
6 views

Rancher 2.0 Node Scheduling Priority Settings

Does anyone have experience with Rancher 2.0 priority scheduling? I would like to make sure certain containers are running over others. If I add scheduler, priority and priority class name, nothing ...
0
votes
0answers
13 views

Fail2Ban with Kubernetes? or any other alternative? [on hold]

-1 down vote favorite I am looking for some tools can auto detect brute-forcing user, and block / make log file itself to notice Sysadmin. I know Fail2Ban can do this kinda job on legacy environment, ...
0
votes
0answers
12 views

Kubernetes network not stable in GCE

Why Kuberentes cluster network not stable in google cloud platform. Sometimes I get response too long time from my pod. How to fix it? Detail Kubernetes 1.11.1 Network Plugin: Flannel : Cannot ...
1
vote
1answer
37 views

How to connect to a third party VPN from Google Cloud Platform?

Requirements I am trying to connect to a third party VPN from my back end on Google Cloud Platform. Since my IP has to be whitelisted by the third party, the source IP for all requests must be a ...
0
votes
1answer
26 views

Can we install a Kubernetes cluster on RHEL atomic hosts?

We want to install an on premise Kubernetes cluster. We have a license for RHEL and RHEL atomic. I know Red Hat has its own Kubernetes based platform called OpenShift. OpenShift can be installed on ...
0
votes
0answers
17 views

Kubernetes Influx DB - Backend Unhealthy

I am trying to deploy Influx DB on Kubernetes. Using the official Influx DB Helm chart. I am deploying this Helm chart with the following values file: persistence: enabled: true size: 5Gi ...
0
votes
1answer
31 views

Executing a script in a Docker container in K8s

I am experiencing some odd behaviors when executing a script in a k8s/Argo workflow step. To start with, where I start the Metamap Tagger servers (see code snippet below), instead of waiting till ...
0
votes
1answer
39 views

kubectl patch: add port to deployment's pod template

I have a deployment running one pod consisting of an unique container. The deployment is currently up & running, and I want to modify its pod template to add a port to the container. Here are the ...
0
votes
1answer
38 views

php memory_limit vs kubernetes resource memory limit

I'm new to Kubernetes and I'm trying to figure out what resource limits I should set for my php webapp. My first guess is that if I have configured php fpm to use a maximum of 256M of memory then ...
0
votes
1answer
45 views

Kubernetes custom routes

I started OpenVPN on my k8s cluster and now clients can directly connect to the ClusterIP services but i need masquerade for it because pods (except OpenVPN pod) do not know route to clients. Is ...
0
votes
0answers
10 views

Google Cloud Bucket connection from Kubernetes deployment using Storage API

We have a java application running in Kubernetes cluster deployment. We're using Google Cloud Bucket as storage. We were using Java Files.move method to move files from our Persistent Volume Claim (...
1
vote
1answer
57 views

Kubernetes GCE Ingress cannot find services

My yaml files for various deployments, services and ingresses have created a working setup before. I tried fixing a small issue with an ingress and can't get back to a working state. My pods start ...
0
votes
0answers
31 views

404s for service endpoints when using ingress with Gcloud

I'm working with k8s and gcloud to deploy a multi-service application with Ingress being responsible for routing requests to a specific service. K8s and generally infrastructure is a new area of ...
0
votes
1answer
91 views

Back-off restarting failed container - Error syncing pod in Minikube

I'm facing this error when trying to create pods. It is occurring with even very common images like Ubuntu,Alpine also. I'm fairly new to Kubernetes and using a Minikube Node ( version v0.24.1 ) ...
2
votes
1answer
39 views

Current status of HorizontalPodAutoscaling on Amazon EKS

Previously asked question I am also using EKS and wanted to know if yet they have solved this or is there a way around without using kops. Unable to comment on the same question because of low ...
1
vote
1answer
38 views

Accessing kubernetes service using hostname/IP address

My end goal is to be able to access exposed Kubernetes services running on on my host from another host. I am doing development in minikube and have tried using an Ingress controller. I am able to ...
0
votes
0answers
20 views

Error Adding S3 Log Annotations to K8s Service

We're running k8s 1.10 in AWS EKS. We're trying to put our load balancer logs into an S3 bucket by adding the required annotations to a service yaml file as described here. Here's a snippet from ...
0
votes
1answer
25 views

Traefik doesn't pick TLS certificates secrets from the ingress definition in Kubernetes

I have raised this exact query at stackoverflow as well, as, interestingly, "Traefik" and "Kubernetes-Ingress" tags are absent on ServerFault, but present on StackoVerflow. When I only add the TLS ...
0
votes
1answer
79 views

Kubernetes Ingress: How can I expose two ports on one path?

I have a gce ingress configured and working with SSL on port 443. I'm trying to get port 28080 pointing to my standalone actioncable server: http://guides.rubyonrails.org/action_cable_overview.html#...
0
votes
0answers
12 views

Datadog Agent Docker images seems to add tags, how to prevent that?

I am using datadog statsd for my project and it seems that a lot of tags are added automatically. How can I prevent that (having the agent to add tags) or how can I configure the agent not to add ...
1
vote
1answer
58 views

Kubernetes PV with Block storage over internet - Secure?

I'm trying to create Persistent Volume on my k8s cluster with DigitalOcean Block storage, Using CSI driver. It works fine, but I also wants to know that this is secure even for production. I'm still ...
0
votes
1answer
58 views

Changing GKE cluster subnet

I need to change the IP range of the subnet used for a GKE cluster. Ideally, I would like to just change the subnet and have the everything just work, but that obviously does not work, as my new ...
1
vote
1answer
53 views

GKE ingress unable to connect to healthy service

I've been following the tutorial here: https://medium.com/@nithinmallya4/deploying-a-rails-application-to-google-container-engine-with-kubernetes-b08b2de353fc With their code base: https://github.com/...
0
votes
1answer
133 views

In AWS EKS, what security group allows access to master node from kubernetes client?

When I create a EKS cluster, I can access the master node from anywhere. Even though, the control plane security group only allows the worker to control plane connectivity (default configuration). ...
0
votes
2answers
34 views

How can I guarantee/reserve resources for kube-system?

Ok so at work we were planning to scale down the number of nodes in Azure Kubernetes service. Before doing this I wanted to see what would happen if I overloaded the nodes on a test cluster. On a ...
0
votes
1answer
19 views

Encrypted config kubernetes on Google Cloud

I recently saw this page on the ability to encrypt secrets at rest. I am currently running kubernetes on Google Cloud, but I can't figure out how to set it up with the kube-apiserver. Any help is ...
0
votes
0answers
40 views

Kubernetes on Windows with NAT - ports mapping doesn't work

I am trying to setup a kubernetes node based on Windows Server 1709, and so far the containers are deployed as expected and I can see them running. I created a docker "nat" network called "host" ...
0
votes
0answers
37 views

Kubernetes Networking Behind NAT

I posted this in StackOverflow but got redirected here, so I'm asking it again. I'm currently working on a use case where multiple machines behind NAT routers need to be able to act as nodes in a ...
1
vote
1answer
17 views

Rancher 2.0.4 multiple ip on worker

I setup multiple IPs on host with working node for rancher 2 Host is pingable from outside world on each of this IP. But not doesn't see this IP and if I configure hostport to IP:port format, I get ...
0
votes
0answers
70 views

504 Gateway Time-out Nginx -> PHP-FPM kubernetes

I've been trying to get my nginx connection to work with php-fpm for several days now. The problem is, he always gives me a 504 and gives me the next error log: 2018/07/09 10:57:25 [error] 5#5: *10 ...
0
votes
1answer
48 views

Tcp port forwarding in Google cloud to gke cluster

I am fairly experienced with kuberenetes but very new to Google cloud. I have an haproxy-ingress controller running with nodeports of 30080 30443. I need to have a static IP that can forward port 80 ...
0
votes
1answer
120 views

Azure AKS Pods stuck in “ContainerCreating”or “Terminating” state

I'm learning to create AKS pods, and seem to have broken something. kubectl get pods NAME READY STATUS RESTARTS AGE mysql-6977c54cf5-z6xtw 0/1 ...
0
votes
1answer
98 views

Using private docker registry with Helm in Kubernetes error

this is probably fairly simple, but I'm kind of lost here so any help would be appreciated. I followed the instructions to set up a private docker registry over here: https://kubernetes.io/docs/tasks/...
0
votes
3answers
68 views

Blue / Green deployment using one or more k8s clusters?

What are the reason to consider using one k8s cluster for blue and one for green when doing B/G CD scenario ? Does the cost of having two clusters which already have cloud provider HA has reasoning ?
0
votes
1answer
41 views

Tomcat/TomEE creates lots of DEBUG logs on Google KubernetesEngine, but not on plain Docker

We deploy our application on TomEE 7.0.3 (Tomcat 8.5.11) in Docker images. The production platforms run on Google Kubernetes Engine clusters while development, staging and so on run as plain Docker ...
0
votes
1answer
46 views

Why GCP Kubernetes Node host location for europe-north1 seems to be in US?

I am new to both Google Cloud Platform and K8s. I have launched Kubernetes cluster in GCP and chosen europe-north1 as the region (europe-north1-a as the zone). When I try to run my application on ...
0
votes
1answer
41 views

Kubernetes (K8S): TCP clients waiting very long timeout on connection to a Service when there are no Pods serving its requests

My problem occured when using Redis on Kubernetes, but it seems that it is not a problem with Redis itself, but with network/infrastructure. My scenario: I have a Redis Service with single Redis Pod ...
0
votes
1answer
16 views

POD services in Kubernetes not opening from google cloud

I installed kubernetes 3 node cluster in google cloud virtual machines.All PODS are working fine inside the network but I am not able to expose the service url outside google cloud.
0
votes
1answer
41 views

Kops / Kubernetes: No context set in kubecfg, name is required

Someone else in my org did the initial setup Kubernetes setup with Kops on AWS, so we already have the S3 bucket config and the cluster running. My local env KOPS_STATE_STORE is pointing to the ...
6
votes
1answer
1k views

HorizontalPodAutoscaling on Amazon EKS

When trying to setup a HorizontalPodAutoscaler on Amazon EKS, the TARGETS column always displays <unknown>/50% and when describing the HPA, I see Warning FailedGetResourceMetric 17s (x50 ...
-1
votes
2answers
389 views

Can not find kubectl executable in PATH

Azure Kubernetes Service created and now to open Kubernetes dashboard, following the steps and getting error: az : ERROR: Can not find kubectl executable in PATH). PS C:\Program Files (x86)> az ...
2
votes
1answer
187 views

What is spec - selector - matchLabels used for while creating a deployment?

From Kubernetes documentation The selector field defines how the Deployment finds which Pods to manage. But, when creating deployment, I already specify the pod template as part of the ...
0
votes
0answers
40 views

Configure Google Cloud Storage plugin with Curator cronjob on GKE Elasticsearch cluster

I deployed an Elasticsearch cluster on GKE, using this project as a starting point: https://github.com/pires/kubernetes-elasticsearch-cluster I would like to configure two Curator jobs by using ...
0
votes
1answer
92 views

Can't see pod logs in Stackdriver UI for cluster deployed on GKE

I deployed an Elasticsearch cluster on Google Kubernetes Engine. I am able to view logs of specific pods with the 'kubectl logs' command from my PC. >kubectl logs es-data-0 ... [2018-06-18T07:35:...
0
votes
0answers
35 views

cloud-config unable to install kubernetes debian repository

I've got a basic cloud-config user-data script that simply installs the Kubernetes repositories on raspbian (hypriot), however, apt-get update seems to fail due to certificate issues. The thing that ...
0
votes
1answer
51 views

Why do GKE container optimized OS node external interfaces listen on pop/imap ports?

Using Google Container Engine (GKE) with Container Optimized Images the external interfaces (ephemeral IPs) seem to be listening on ports 110, 143, 993, 995, etc. as demonstrated via a port scan with ...
0
votes
1answer
251 views

Traefik + k8s + Let's Encrypt wildcard SSL + Cloudflare issue

I'm trying to set-up a reverse proxy with wildcard SSL using Traefik, with a DNS challenge against a Cloudflare zone. I have this config in k8s: kind: ConfigMap apiVersion: v1 metadata: name: ...
0
votes
0answers
141 views

make Kubernetes service available under multiple paths via Traefik ingress

I made my service available via this Traefik ingress configuration: apiVersion: extensions/v1beta1 kind: Ingress metadata: name: webapp annotations: kubernetes.io/ingress.class: traefik spec: ...
0
votes
1answer
113 views

How to expose and access MongoDb ports in Kubernetes?

I have mongoDB deployed on Kubernetes. The Database is setup properly and can be accessed using its internal dns name. I need to expose this to the outside world. I have used node port/ loadbalancer ...
1
vote
4answers
788 views

kubectl cannot authenticate with AWS EKS

I cannot get kubectl to authenticate with the EKS Kubernetes instance my coworker created. I've followed the documentation: the AWS CLI can run aws eks commands (I'm an AWS Full Administrator), and ...