New answers tagged

0 votes

How to enable read permission on Kubernetes mount path

use securityContext in your deployment yaml file. securityContext: runAsUser: 0
user avatar
0 votes

How does Azure Loadbalancer work with Azure AKS

Potentially, this adds unnessesary hops and wastes bandwidth due to the forwarding. Is my understanding here correct? That's one way to look at it, the other way is that if the load balancer were ...
user avatar
  • 2,328
0 votes

Accessing internal GKE resources from external IP

Yes, you can create GKE ingress for each service(page1.com and page2.com) and then create one cloud armor policy which allows only from your home IP. The public service doesn't need cloud armor policy....
user avatar
  • 9,031
0 votes

the cluster operator machine-config is degraded after fresh install of OKD 4.10

try this : oc delete mc 99-master-okd-extensions 99-okd-master-disable-mitigations
user avatar
0 votes

How to send a file from Google Cloud Platform Kubernetes Pod to external FTP?

An FTP server probably is configured correctly, but the problem is with authorizing users at login or you are behind a firewall that isn't allowing the incoming reverse connection from the ftp server ...
user avatar
0 votes

How to fix ContainerCreating errors while deploying metallb?

I install metallb before I install ingress-nginx I just ignore that error. After I install ingress-nginx, the error dissapear. -bino-
user avatar
0 votes

How to create a container-disk image for VMs provisioned using KubeVirt

I have the same question. I did find some explanation for the default (test) container disk you are referring to in https://github.com/kubevirt/kubevirt/blob/main/containerimages/container-disk-images....
user avatar
0 votes

Cannot open Kubernetes dashboard page

This has been answered here. Posting the solution here for the benefit of community members. The URL you're querying (http://192.168.1.133:8001/api/v1/namespaces/default/services/https:kubernetes-...
2 votes
Accepted

What are the usecases and benefits of using KubeVirt

What is the benefit of running a VM inside a Kubernetes Cluster Offering a unified API managing regular Kubernetes workloads, and virtual machines. Kubernetes clients would be able to manage virtual ...
user avatar
  • 1,721
0 votes

How do I add certificates to Kubernetes to allow images to be pulled from a custom Harbor repository?

If you're in a situation where you may not want to install the CA cert on every node, you can also run a DaemonSet which configures the ca-certificate. Note, this will only work if Kubernetes is ...
user avatar
1 vote
Accepted

Cannot properly edit and save worker node specs in Kubernetes

Kubevirt requires virtualization to be enabled. Those "allocatable" / "capacity" is not something that you can/should not change yourself. They just reflect the state of your node: ...
user avatar
  • 1,721
0 votes

Kubernetes dashboard ingress HTTP error 400

Adding --enable-insecure-login made it to work on HTTPS via ingress, its kinda insecure but do the trick whole config : ingress: enabled: true paths: - / hosts: - kubedash.labs.example....
user avatar
0 votes
Accepted

Cloudflare Origin Issuer not getting ready

So as it turned out. The pod got OOMKilled for an unknown reason (still figuring this OOMKill out). But atleast the pod is running now.
user avatar
0 votes

"context deadline exceeded" error on pod in Kubernetes while pulling a public image of ms sql server

I fixed it by running docker pull mcr.microsoft.com/mssql/server:2017-latest, deleting and re-applying the deployment.
user avatar
  • 1
0 votes

ALB Ingress fails to start due to 'no certificate for host *'

Alb only supports ACM certificates. You need to upload certificate to ACM or you can create certs with AWS
user avatar
0 votes
Accepted

kubernetes pod with a socket connection not firing 'close' event

In the dev environment I was simulating a severed connection by closing the client application. This was actually initiating the FIN packet sequence/ firing the 'end' event from the client. The ...
user avatar
0 votes

How to re-trigger failed flannel to calico migration?

My thought is that maybe the node got halfway migrated and is giving some wonky error as a result. When in doubt, revert and redo. To determine which nodes were migrated to Calico: kubectl get nodes -...
user avatar
0 votes
Accepted

Running NFS server on Kube StatefulSet pod

That two-hop situation that you are describing could be definitely an issue when you are running multiple nodes and a request comes into one where the NFS Pod is not living because of the load ...
user avatar
0 votes

Calico Kubernetes Network Policy is denying all traffic and not working as expected

You need to mention the destination pod in the selector label at destination as below : apiVersion: projectcalico.org/v3 kind: NetworkPolicy metadata: name: deny-egress-external namespace: nginx ...
user avatar
1 vote

Check if config map or secret is used?

They can appear in (at least) 3 locations that I know of: as volumes in env: via valueFrom: in envFrom: then, they can appear in both currently running pods, as well as "future pod" ...
0 votes
Accepted

kubelet error, status stuck on 'Active: activating (auto-restart)'

The issue was that I was using Docker as the container runtime prior to Kubernetes v1.24. Docker as container runtime has became deprecated starting from v1.24. Everything is working after I switched ...
user avatar
  • 1
0 votes

K3S can't pull public docker hub images

I was having this issue too. My problem was I had multiple default routes. I had a whole write up about this over here, https://devops.stackexchange.com/a/16244/18965 If you can check this and ...
user avatar
  • 2,245
1 vote
Accepted

Kubernetes pull from image private network / fails to respect /etc/hosts of server

After going through many different solutions and lots of research and testing. The answer was actually very simple. Solution in my case The /etc/hosts file MUST contain the host for the registry (and ...
user avatar
0 votes

kubernetes coredns is in CrashLoopBackOff status with "no nameservers found" error

I changed the following section in coredns configmap : forward . /etc/resolv.conf { max_concurrent 1000 } to this: forward . 8.8.8.8 { max_concurrent 1000 } And it works.
user avatar
0 votes

How do I schedule Pods so that every cluster Node has the same set of services?

As suggested in comments: for Nodes to run the same set of Pods, you're looking for a DaemonSet. While the Deployment lets you control how many replicas you want, the DaemonSets relies on its ...
user avatar
  • 1,721
0 votes

Pods on two different nodes communicate very slow, any idea why?

tl;dr The issue occured on 10Gbps cards, by using 1Gbps cards the issue disappeared Details I am encountering the same issues inside a 2 VM setup serving as Kubernetes nodes (based on microk8s, using ...
user avatar
0 votes

How to choose the external IP address of a Kubernetes load balancer in Google Kubernetes Engine

If you're trying to use Helm to install ingress-nginx with a static external IP, here is the command that worked for me: helm upgrade --install ingress-nginx ingress-nginx \ --repo https://...
user avatar
1 vote

ingress-nginx: static IP-address for the backend

Note: You cannot edit an existing ingress-nginx load balancer service, but you can pass the external IP you want it to use when installing it. Keep in mind, you need to have that external IP set up ...
user avatar
0 votes

Install and Set Up kubectl - Kubernetes

Solved! You can also bypass this in the kubernetes.repo file by changing repo_gpgcheck to: repo_gpgcheck=0
user avatar
0 votes

Kubernetes Pods Getting in Pending State Forever

This is a Kubelet Bug. PR : https://github.com/kubernetes/kubernetes/pull/110973 which will be release under 1.25 release
user avatar
0 votes
Accepted

Login to HashiCorp Vault with Kubernetes Auth from Pod with Vault CLI

While looking through other tutorials I saw, that there is the parameter -field=<FIELD NAME>, that can be used to filter the output of vault write for specific fields. So the login now looks ...
user avatar
  • 101
0 votes
Accepted

Nginx proxy large file download fails instantly sometimes

In our case it was the AWS classic load balancer that caused the problem with large downloads. Please see this link for a statement by Amazon. Since switching to a network load balancer the problem is ...
user avatar
  • 1
0 votes

Remove unused docker images

You can actually do this with a for loop. Until someone else tells you how to do it with Docker, you can use this; for image in $(docker image ls --filter reference=<image_name> | awk '{if (NR&...
user avatar

Top 50 recent answers are included