Questions tagged [azure-kubernetes-service]

Azure Kubernetes Service is Microsoft Azure's fully-managed Kubernetes service in the public cloud.

Filter by
Sorted by
Tagged with
0 votes
1 answer
16 views

connect to kind cluster from inside and outside

Consider this: There's a linux machine running on azure. It has apache installed and browing to mymachine.com works, webpage is displayed. All ports are opened in the azure portal "networking ...
user avatar
0 votes
0 answers
8 views

Do I need to use Azure Application Insights SDKs to make Application Insights collect data of an AKS cluster about network requests and responses?

I have an Azure Kubernetes Service (AKS) cluster and I already use Azure Container Insights to collect data about the health of the cluster. However, I'd like to integrate the cluster also with Azure ...
user avatar
  • 101
0 votes
1 answer
20 views

AKS Network Policy - cannot deny traffic to namespace

I am trying to implement Network Policies in my test Azure Kubernetes cluster, but I cannot get them to work. I have two namespaces - default and nginx (and others as well, but they shouldn't be ...
user avatar
0 votes
0 answers
6 views

How to resolve hostnames in Azure VNET by connecting to internal Hadoop On prem DNS Server?

I have an On prem DNS server (10.XX.XXX.XXX) and have an Azure Kubernetes cluster that needs to resolve hostnames in this DNS server? I believe below are the ways to do it? Create an Azure Private ...
user avatar
2 votes
1 answer
48 views

how to specify the dependency in the deployment?

This is a design question. I am not sure this is the right place. We have multiple microservices deployed using a blue/green pattern in Azure DevOps pipelines. What I am trying to achieve is I want to ...
user avatar
0 votes
0 answers
19 views

Azure Devops build and deployment process for .NET Core app - excessive disk space use on servers by Docker

My Azure Virtual Machine Scaleset instances, used for hosting of an application, are filling up due to excessive disk space usage by Docker. The deployment of the application is based on an Azure ...
user avatar
0 votes
0 answers
21 views

How to securely connect Azure Kubernetes to on premise services?

I have a couple of linux servers in different physical locations (countries) and all these servers host the same application. I want to be able to safely reach these servers from my kubernetes ...
user avatar
0 votes
1 answer
92 views

evenly distribute pods over nodes

I've got an on-premise cluster with 1 master and 3 workers. Now there's a deployment with 3 replica's and they MUST be evenly distributed over all the nodes. Now we can use "...
user avatar
0 votes
0 answers
52 views

how good are azure containers as jenkins agents? [time of execution/stability/price]

I am migrating on-premise Jenkins to Azure Cloud. I use Jenkins to build software, build takes usually about 8 GB of RAM and uses both Windows and Linux VMs as nodes. What is better solution in Azure ...
user avatar
0 votes
1 answer
185 views

Read disk of distroless container in Kubernetes for debugging

I am using a helm chart, which deploys containers based on Distroless. This means, I cannot open a shell on these containers, like I normally would for debugging, since Distroless containers seem to ...
user avatar
0 votes
0 answers
35 views

Several kubectl interfaces in AKS are not working when Calico-Wireguard is enabled (e.g. i/o timeout)

Azure Kubernetes Cluster (AKS) with Calico CNI has option for secure pod-to-pod communication without much added effort to k8s configuration. More details: Wireguard pod-to-pod encryption Problem is ...
user avatar
0 votes
0 answers
14 views

Curious about which kubernetes policy management is better (pros and cons)

I have a cluster in Azure Kubernetes services. I was looking various policy management in kubernetes want to know the pros and cons would be really helpful. Here are the options I came to know Open ...
user avatar
  • 267
1 vote
0 answers
54 views

What causes cold start in serverless

I have not found a clear explanation on what causes the cold start in serverless. Could you try to explain it from both commercial and open-source platform's points of view? Commercial platforms such ...
user avatar
  • 11
0 votes
1 answer
48 views

Nginx-Ingress Controller are compatible with Network Security Policy or not?

I have created one application where I use Nginx-Ingress Controller version 3.29.0. Without using network security policy I'm able to access my application. But, after applying network security policy,...
user avatar
1 vote
1 answer
501 views

Enable TLSv1 TLSv1.1 for specific Ingress with Nginx Ingress

I try to enable TLSv1 and TLSv1.1 for one specific ingress on a AKS cluster. By default, only TLSv1.2 is enabled. I don't want to apply this configuration on my all cluster, just on a specific ...
user avatar
  • 41
2 votes
1 answer
732 views

How do I delete a default AKS node pool when I get an error saying it's the "backend address pool of the basic load balancer"

I'm attempting to replace a node pool in Azure Kubernetes Service with a new pool (that has a larger VM size). The current pool was deployed using an ARM template that uses version 2019-06-01 of the ...
user avatar
1 vote
1 answer
1k views

Nginx ingress controller redirects the url to /login

I am trying to access a url example.com/service/test1 but it redircts me to example.com/login. Below is my YAMl file: apiVersion: extensions/v1beta1 kind: Ingress metadata: name: test-ing ...
user avatar
1 vote
2 answers
575 views

az aks browse doesn't open browser automatically on WSL and only showing JSON instead of the dashboard

az aks browse works fine on my Mac Mini, but I'm trying to work with it in WSL2 Ubuntu 18.04 with Azure CLI on a Windows 10 machine. $ az version This command is in preview. It ...
user avatar
  • 155
3 votes
2 answers
1k views

How do I expire users credentials for Kubernetes in Azure?

I am looking for information on how to forcefully expire users credentials in Azure Kubernetes Service (AKS). The reason is to better understand Security models and protecting Kubernetes deployments ...
user avatar
1 vote
4 answers
534 views

Why will my container run in Docker, but will not run in Kubernetes?

Background I have a container that I have defined with an CMD and an ENTRYPOINT in Docker. When I run the following command my container runs with no issues whatsoever. docker run --rm -ti custom-...
user avatar
1 vote
1 answer
4k views

Can't get either Postgres permissions or PVC working in AKS

These are pretty much the steps I have followed in order. Basically what is outlined in the documentation: https://docs.microsoft.com/en-us/azure/aks/azure-files-dynamic-pv azure-storage-claim.yaml ...
user avatar
  • 155
0 votes
1 answer
414 views

Applying manifests in Azure DevOps pipeline

Basically, I want the pipeline to apply some manifests before deploying images from ACR. No images need to be made. It would just be things like applying the issuer.yaml, ingress.yaml, and maybe a few ...
user avatar
  • 155
1 vote
1 answer
106 views

Error while using AzureFile storage with CockroachDB

I'm getting an error trying to run CockroachDB (v19.2.1) on AKS. I'm able to spin up cluster using the default storage class. However, when I attempt to specify AzureFile storage, I get errors. ...
user avatar
  • 121
3 votes
0 answers
134 views

Keeping Pods Balanced Across Nodes in AKS [closed]

We had a fun issue yesterday and today where after a restart of some nodes, we ended up with more or less every pod on one server. After some research, it seems like most of the solutions for this ...
user avatar
0 votes
2 answers
280 views

Ingress or LoadBalancer on AKS

I'm wondering whether to use an Ingress or LoadBalancer to expose services on Azure AKS. I have successfully used both, but I cannot really choose. On one side, an Ingress allows us to have a single ...
user avatar
1 vote
2 answers
270 views

nodes in a kubernetes cluster in azure unable to communicate with one another

I'll start off by saying I'm not really an infrastructure person, but am being required to maintain it until we hire someone more suited to it, so apologies if I have any terminology wrong. We have a ...
user avatar