Questions tagged [azure-kubernetes-service]

Azure Kubernetes Service is Microsoft Azure's fully-managed Kubernetes service in the public cloud.

Filter by
Sorted by
Tagged with
1 vote
0 answers
26 views

How to sync External Secrets on an AKS Cluster with an Azure Key Vault?

I'm trying to integrate AKS with Key Vault using the External Secrets operator. I've set up the operator itself using the Helm chart, and I've created a SecretStore resource pointed at a Vault (we'll ...
Ryan Draga's user avatar
0 votes
0 answers
17 views

K8s cluster has kube-system pod limits that are excessively high

Using AKS, the cluster has limits that are overcommitted due to kube-system pods having excessively high CPU/memory limits. kube-system pods like coredns or have a combined CPU limit of 300+% This is ...
John Doe's user avatar
  • 101
0 votes
0 answers
7 views

Containers in AKS cannot access Azure resources (Failed to resolve URL)

I have an API server (Python Flask) hosted on AKS. When the service starts, it: Access Azure key-vault to get storage account connection string use the connection string to perform CRUD jobs on Azure ...
han shih's user avatar
  • 101
0 votes
0 answers
124 views

Resize node pool instance/node type on aks with basic sku

I have a kubernetes cluster on aks (Azure kubernetes) with a basic load balancer (hence I cannot have multiple node pools). The normal procedure to resize node pools in Kubernetes is well documented ...
Eirik H's user avatar
  • 101
0 votes
0 answers
162 views

Configure Azure Container Insights so that metrics are not sent to Log Analytics Workspace?

I want to configure my Container Insights monitoring on my AKS cluster so that only Container Insights logs and not metrics are sent to my log analytics workspace. I still want metrics to be collected ...
floaty39's user avatar
1 vote
0 answers
80 views

Using AKS WorkloadIdentity with a "shared" ServiceAccount?

I'm in the process of migrating our aks and the application from aad-pod-identity to the new workload-identity. And I've hit a roadblock. In the current setup, I use this helm chart to install aad-pod-...
floge07's user avatar
  • 11
0 votes
0 answers
11 views

How to specify startup priorities in Kubernetes on Azure?

I have a Kubernetes cluster running on Azure, it has two Deployment pods a database and a Tomcat application server. Problem is that when I start the cluster, sometimes the application starts before ...
ps0604's user avatar
  • 101
0 votes
0 answers
54 views

How to retrieve required values from a kubeconfig file from AKS and give as values in a terraform script?

I'm trying to automate the creation of infrastructure - azurerm_container_registry, azurerm_kubernetes_cluster, azurerm_role_assignment (to pull the image from ACR) using one terraform script and in ...
prashanth_apolloyon's user avatar
0 votes
0 answers
84 views

Is there a way to automate service principal connections for ACR and AKS (in azure portal) from Azure Devops ? or can we acheive this with a pipeline?

Here, I'm trying to create ACR and AKS (in azure portal) with terraform tasks in azure devops pipeline and right after creating these resources I'm trying to add "deploy into AKS" task in ...
user39842's user avatar
0 votes
0 answers
257 views

What is the best option for uploading files to Azure storage in Azure pipeline to use them in persistent volumes for AKS pods?

I want to upload files to Azure storage in Azure pipeline to use them in persistent volumes for AKS pods. What I did: Created a storage account with NFS enabled and created a container in the storage ...
alcohol is evil's user avatar
0 votes
1 answer
13 views

Best approach to toggle app availability in azure?

I have an azure webapp based on a docker image that implements an image processing API and is expensive to leave active 24/7. I'm wondering if there's an easy-to-manage way to auto-scale from 0 to 1 ...
Robert Sim's user avatar
2 votes
0 answers
2k views

How to configure ArgoCD access to the Azure Repos from a deployment pipeline?

Right now I have several ideas in theory, but they all have problems. My setup is: Azure DevOps Services Azure Cloud A powerful service principal connection with which I run the pipeline Idea #1 ...
mark's user avatar
  • 191
0 votes
1 answer
1k views

How can I use rewrite-target on the root path with Azure Kubernetes Service?

I want to have an API service that I want to reach under /api, and other requests to fall back to a frontend service. Peculiar is that this worked locally with minikube, but now that I deployed on ...
Raphael Schmitz's user avatar
1 vote
0 answers
7 views

Kubernetes AAD system managed identity?

I've looked all over Google, and everything seems to point to usee-assigned managed identity, which is great, but a hassle to maintain. Does anything support system-assigned Identity, at a pod level? ...
Stuart.Sklinar's user avatar
0 votes
1 answer
164 views

connect to kind cluster from inside and outside

Consider this: There's a linux machine running on azure. It has apache installed and browing to mymachine.com works, webpage is displayed. All ports are opened in the azure portal "networking ...
Serve Laurijssen's user avatar
0 votes
1 answer
46 views

AKS Network Policy - cannot deny traffic to namespace

I am trying to implement Network Policies in my test Azure Kubernetes cluster, but I cannot get them to work. I have two namespaces - default and nginx (and others as well, but they shouldn't be ...
Lubomir Krustev's user avatar
3 votes
1 answer
252 views

how to specify the dependency in the deployment?

This is a design question. I am not sure this is the right place. We have multiple microservices deployed using a blue/green pattern in Azure DevOps pipelines. What I am trying to achieve is I want to ...
prakashrajansakthivel's user avatar
0 votes
1 answer
433 views

evenly distribute pods over nodes

I've got an on-premise cluster with 1 master and 3 workers. Now there's a deployment with 3 replica's and they MUST be evenly distributed over all the nodes. Now we can use "...
Serve Laurijssen's user avatar
0 votes
0 answers
149 views

how good are azure containers as jenkins agents? [time of execution/stability/price]

I am migrating on-premise Jenkins to Azure Cloud. I use Jenkins to build software, build takes usually about 8 GB of RAM and uses both Windows and Linux VMs as nodes. What is better solution in Azure ...
Wojtas.Zet's user avatar
0 votes
1 answer
438 views

Read disk of distroless container in Kubernetes for debugging

I am using a helm chart, which deploys containers based on Distroless. This means, I cannot open a shell on these containers, like I normally would for debugging, since Distroless containers seem to ...
Peter Zeller's user avatar
1 vote
0 answers
74 views

What causes cold start in serverless

I have not found a clear explanation on what causes the cold start in serverless. Could you try to explain it from both commercial and open-source platform's points of view? Commercial platforms such ...
yeehaw's user avatar
  • 11
0 votes
1 answer
117 views

Nginx-Ingress Controller are compatible with Network Security Policy or not?

I have created one application where I use Nginx-Ingress Controller version 3.29.0. Without using network security policy I'm able to access my application. But, after applying network security policy,...
Kaivalya Dambalkar's user avatar
2 votes
1 answer
2k views

Enable TLSv1 TLSv1.1 for specific Ingress with Nginx Ingress

I try to enable TLSv1 and TLSv1.1 for one specific ingress on a AKS cluster. By default, only TLSv1.2 is enabled. I don't want to apply this configuration on my all cluster, just on a specific ...
benCat's user avatar
  • 71
2 votes
1 answer
991 views

How do I delete a default AKS node pool when I get an error saying it's the "backend address pool of the basic load balancer"

I'm attempting to replace a node pool in Azure Kubernetes Service with a new pool (that has a larger VM size). The current pool was deployed using an ARM template that uses version 2019-06-01 of the ...
Nick Graham's user avatar
2 votes
1 answer
2k views

Nginx ingress controller redirects the url to /login

I am trying to access a url example.com/service/test1 but it redircts me to example.com/login. Below is my YAMl file: apiVersion: extensions/v1beta1 kind: Ingress metadata: name: test-ing ...
Pradeep Upadhyay's user avatar
1 vote
2 answers
1k views

az aks browse doesn't open browser automatically on WSL and only showing JSON instead of the dashboard

az aks browse works fine on my Mac Mini, but I'm trying to work with it in WSL2 Ubuntu 18.04 with Azure CLI on a Windows 10 machine. $ az version This command is in preview. It ...
cjones's user avatar
  • 155
3 votes
2 answers
2k views

How do I expire users credentials for Kubernetes in Azure?

I am looking for information on how to forcefully expire users credentials in Azure Kubernetes Service (AKS). The reason is to better understand Security models and protecting Kubernetes deployments ...
Steven K7FAQ's user avatar
1 vote
4 answers
2k views

Why will my container run in Docker, but will not run in Kubernetes?

Background I have a container that I have defined with an CMD and an ENTRYPOINT in Docker. When I run the following command my container runs with no issues whatsoever. docker run --rm -ti custom-...
Dodzi Dzakuma's user avatar
1 vote
1 answer
7k views

Can't get either Postgres permissions or PVC working in AKS

These are pretty much the steps I have followed in order. Basically what is outlined in the documentation: https://docs.microsoft.com/en-us/azure/aks/azure-files-dynamic-pv azure-storage-claim.yaml ...
cjones's user avatar
  • 155
0 votes
1 answer
808 views

Applying manifests in Azure DevOps pipeline

Basically, I want the pipeline to apply some manifests before deploying images from ACR. No images need to be made. It would just be things like applying the issuer.yaml, ingress.yaml, and maybe a few ...
cjones's user avatar
  • 155
1 vote
1 answer
119 views

Error while using AzureFile storage with CockroachDB

I'm getting an error trying to run CockroachDB (v19.2.1) on AKS. I'm able to spin up cluster using the default storage class. However, when I attempt to specify AzureFile storage, I get errors. ...
RQDQ's user avatar
  • 121
3 votes
0 answers
302 views

Keeping Pods Balanced Across Nodes in AKS [closed]

We had a fun issue yesterday and today where after a restart of some nodes, we ended up with more or less every pod on one server. After some research, it seems like most of the solutions for this ...
Marshall Tigerus's user avatar
0 votes
2 answers
412 views

Ingress or LoadBalancer on AKS

I'm wondering whether to use an Ingress or LoadBalancer to expose services on Azure AKS. I have successfully used both, but I cannot really choose. On one side, an Ingress allows us to have a single ...
Arnaud Weil's user avatar
1 vote
2 answers
537 views

nodes in a kubernetes cluster in azure unable to communicate with one another

I'll start off by saying I'm not really an infrastructure person, but am being required to maintain it until we hire someone more suited to it, so apologies if I have any terminology wrong. We have a ...
Marshall Tigerus's user avatar