Questions tagged [azure-kubernetes-service]
Azure Kubernetes Service is Microsoft Azure's fully-managed Kubernetes service in the public cloud.
35
questions
0
votes
0
answers
26
views
Resize node pool instance/node type on aks with basic sku
I have a kubernetes cluster on aks (Azure kubernetes) with a basic load balancer (hence I cannot have multiple node pools).
The normal procedure to resize node pools in Kubernetes is well documented ...
0
votes
0
answers
52
views
Configure Azure Container Insights so that metrics are not sent to Log Analytics Workspace?
I want to configure my Container Insights monitoring on my AKS cluster so that only Container Insights logs and not metrics are sent to my log analytics workspace. I still want metrics to be collected ...
0
votes
0
answers
17
views
Using AKS WorkloadIdentity with a "shared" ServiceAccount?
I'm in the process of migrating our aks and the application from aad-pod-identity to the new workload-identity. And I've hit a roadblock.
In the current setup, I use this helm chart to install aad-pod-...
0
votes
0
answers
8
views
How to specify startup priorities in Kubernetes on Azure?
I have a Kubernetes cluster running on Azure, it has two Deployment pods a database and a Tomcat application server. Problem is that when I start the cluster, sometimes the application starts before ...
0
votes
0
answers
45
views
How to retrieve required values from a kubeconfig file from AKS and give as values in a terraform script?
I'm trying to automate the creation of infrastructure - azurerm_container_registry, azurerm_kubernetes_cluster, azurerm_role_assignment (to pull the image from ACR) using one terraform script and in ...
0
votes
0
answers
70
views
Is there a way to automate service principal connections for ACR and AKS (in azure portal) from Azure Devops ? or can we acheive this with a pipeline?
Here, I'm trying to create ACR and AKS (in azure portal) with terraform tasks in azure devops pipeline and right after creating these resources I'm trying to add "deploy into AKS" task in ...
0
votes
0
answers
162
views
What is the best option for uploading files to Azure storage in Azure pipeline to use them in persistent volumes for AKS pods?
I want to upload files to Azure storage in Azure pipeline to use them in persistent volumes for AKS pods.
What I did:
Created a storage account with NFS enabled and created a container in the storage ...
0
votes
0
answers
32
views
Naming individual nodes of AKS node pool
First, I understand the notion of a node pool is cloud-specific - I come from the Azure Kubernetes Services (AKS) world, where I've started to learn Kubernetes world, not too long ago. So, I'm using ...
0
votes
1
answer
13
views
Best approach to toggle app availability in azure?
I have an azure webapp based on a docker image that implements an image processing API and is expensive to leave active 24/7. I'm wondering if there's an easy-to-manage way to auto-scale from 0 to 1 ...
0
votes
0
answers
29
views
Azure AKS Ingress Routing
In my Azure AKS cluster I was defined namespace dev with some services.My idea is connect to them from React static app under SSL.For this reason I maded Ingress controller with certificate manager. ...
2
votes
0
answers
1k
views
How to configure ArgoCD access to the Azure Repos from a deployment pipeline?
Right now I have several ideas in theory, but they all have problems. My setup is:
Azure DevOps Services
Azure Cloud
A powerful service principal connection with which I run the pipeline
Idea #1
...
0
votes
0
answers
14
views
Why are Auzre inbound rules in security group ignoring public access to public IP on resource?
I need some explanation on this setup, if someone can read this please:
I got virtual network with 1 security group - A
Security group is configured where default values are VNetInboundRoules all to ...
0
votes
0
answers
17
views
AKS health probes, GetHealthReport threw an exception
I have configured both startup and readiness probes and corresponding endpoints where /startup checks if the host app started and after it succeeds the readiness probe takes over and keeps checking ...
0
votes
1
answer
1k
views
How can I use rewrite-target on the root path with Azure Kubernetes Service?
I want to have an API service that I want to reach under /api, and other requests to fall back to a frontend service.
Peculiar is that this worked locally with minikube, but now that I deployed on ...
1
vote
0
answers
7
views
Kubernetes AAD system managed identity?
I've looked all over Google, and everything seems to point to usee-assigned managed identity, which is great, but a hassle to maintain.
Does anything support system-assigned Identity, at a pod level? ...
0
votes
1
answer
127
views
connect to kind cluster from inside and outside
Consider this:
There's a linux machine running on azure.
It has apache installed and browing to mymachine.com works, webpage is displayed. All ports are opened in the azure portal "networking ...
0
votes
1
answer
33
views
AKS Network Policy - cannot deny traffic to namespace
I am trying to implement Network Policies in my test Azure Kubernetes cluster, but I cannot get them to work. I have two namespaces - default and nginx (and others as well, but they shouldn't be ...
3
votes
1
answer
192
views
how to specify the dependency in the deployment?
This is a design question. I am not sure this is the right place. We have multiple microservices deployed using a blue/green pattern in Azure DevOps pipelines.
What I am trying to achieve is I want to ...
0
votes
1
answer
346
views
evenly distribute pods over nodes
I've got an on-premise cluster with 1 master and 3 workers.
Now there's a deployment with 3 replica's and they MUST be evenly distributed over all the nodes.
Now we can use "...
0
votes
0
answers
138
views
how good are azure containers as jenkins agents? [time of execution/stability/price]
I am migrating on-premise Jenkins to Azure Cloud. I use Jenkins to build software,
build takes usually about 8 GB of RAM and uses both Windows and Linux VMs as nodes.
What is better solution in Azure ...
0
votes
1
answer
382
views
Read disk of distroless container in Kubernetes for debugging
I am using a helm chart, which deploys containers based on Distroless.
This means, I cannot open a shell on these containers, like I normally would for debugging, since Distroless containers seem to ...
1
vote
0
answers
69
views
What causes cold start in serverless
I have not found a clear explanation on what causes the cold start in serverless. Could you try to explain it from both commercial and open-source platform's points of view?
Commercial platforms such ...
0
votes
1
answer
113
views
Nginx-Ingress Controller are compatible with Network Security Policy or not?
I have created one application where I use Nginx-Ingress Controller version 3.29.0. Without using network security policy I'm able to access my application. But, after applying network security policy,...
2
votes
1
answer
2k
views
Enable TLSv1 TLSv1.1 for specific Ingress with Nginx Ingress
I try to enable TLSv1 and TLSv1.1 for one specific ingress on a AKS cluster.
By default, only TLSv1.2 is enabled.
I don't want to apply this configuration on my all cluster, just on a specific ...
2
votes
1
answer
946
views
How do I delete a default AKS node pool when I get an error saying it's the "backend address pool of the basic load balancer"
I'm attempting to replace a node pool in Azure Kubernetes Service with a new pool (that has a larger VM size). The current pool was deployed using an ARM template that uses version 2019-06-01 of the ...
1
vote
1
answer
2k
views
Nginx ingress controller redirects the url to /login
I am trying to access a url example.com/service/test1 but it redircts me to example.com/login.
Below is my YAMl file:
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: test-ing
...
1
vote
2
answers
1k
views
az aks browse doesn't open browser automatically on WSL and only showing JSON instead of the dashboard
az aks browse works fine on my Mac Mini, but I'm trying to work with it in WSL2 Ubuntu 18.04 with Azure CLI on a Windows 10 machine.
$ az version
This command is in preview. It ...
3
votes
2
answers
2k
views
How do I expire users credentials for Kubernetes in Azure?
I am looking for information on how to forcefully expire users credentials in Azure Kubernetes Service (AKS). The reason is to better understand Security models and protecting Kubernetes deployments ...
1
vote
4
answers
2k
views
Why will my container run in Docker, but will not run in Kubernetes?
Background
I have a container that I have defined with an CMD and an ENTRYPOINT in Docker. When I run the following command my container runs with no issues whatsoever.
docker run --rm -ti custom-...
1
vote
1
answer
6k
views
Can't get either Postgres permissions or PVC working in AKS
These are pretty much the steps I have followed in order. Basically what is outlined in the documentation:
https://docs.microsoft.com/en-us/azure/aks/azure-files-dynamic-pv
azure-storage-claim.yaml
...
0
votes
1
answer
716
views
Applying manifests in Azure DevOps pipeline
Basically, I want the pipeline to apply some manifests before deploying images from ACR. No images need to be made. It would just be things like applying the issuer.yaml, ingress.yaml, and maybe a few ...
1
vote
1
answer
118
views
Error while using AzureFile storage with CockroachDB
I'm getting an error trying to run CockroachDB (v19.2.1) on AKS. I'm able to spin up cluster using the default storage class. However, when I attempt to specify AzureFile storage, I get errors.
...
3
votes
0
answers
251
views
Keeping Pods Balanced Across Nodes in AKS [closed]
We had a fun issue yesterday and today where after a restart of some nodes, we ended up with more or less every pod on one server. After some research, it seems like most of the solutions for this ...
0
votes
2
answers
386
views
Ingress or LoadBalancer on AKS
I'm wondering whether to use an Ingress or LoadBalancer to expose services on Azure AKS.
I have successfully used both, but I cannot really choose. On one side, an Ingress allows us to have a single ...
1
vote
2
answers
470
views
nodes in a kubernetes cluster in azure unable to communicate with one another
I'll start off by saying I'm not really an infrastructure person, but am being required to maintain it until we hire someone more suited to it, so apologies if I have any terminology wrong.
We have a ...