Questions tagged [kubernetes]

For questions about Kubernetes, an open-source system for automating deployment, scaling, and management of containerized applications.

Filter by
Sorted by
Tagged with
0
votes
0answers
6 views

How can I sign certificates with salt states without leaking the private key?

My salt master hosts the public and private keys of a root CA. I need to provision certificates signed by this CA to a number of servers provisioned by this master. I would like to do this in a ...
0
votes
1answer
6 views

Terraform and Kubernetes' StorageClass with node affinity

Im able to make a number of kubernetes constructs in terraform and even have done so for my ephemeral stateful data that requires low latency disk performance. I can terraform up a ...
1
vote
0answers
10 views

Kubernetes pod eviction and logging

EDIT: I found this Github issue and I'm waiting for their response: https://github.com/kubernetes/kubernetes/issues/26923#issuecomment-608581984. I have been tasked with improving our cluster-level ...
0
votes
1answer
17 views

How to tell kubectl to use different api groups

I am trying to list down resources which is in different api group. I am running the below command [jk@ome-esrs-adapter-master csadmin]# kubectl get issuers -n default Error from server (NotFound): ...
0
votes
0answers
20 views

Ansible shell - context deadline exceeded

I'm trying to run the eksctl tool from Ansible, but if fails whatever I'm trying to use - shell/command/raw: - name: "Create cluster with eksctl" raw: /usr/bin/eksctl create cluster -f /tmp/eks-...
0
votes
0answers
10 views

redirect host to different ingress in separate namespace in kubernetes

I have used helm v2 to install stable/nginx-ingress. I have provisioned aws elb and tring to redirect traffic using ingress. For this I have different namespace. Each namespace has its own service. I ...
0
votes
1answer
19 views

Is there a way through which I can control type of load balancer like round robin , least-connections etc using helm charts?

I am researching different types of loadbalancing methods available through kubernetes .I want to implement & see before deciding on one .I'm stuck at how to actually define typeof-loadbalancer.If ...
0
votes
0answers
6 views

How to execute kubectl command against an Azure Kubernetes Service (aks) resource using Azure Automation PowerShell Runbooks?

I would like to execute a kubectl command against an AKS resource using an Azure Automation Runbook. There doesn't seem to be any documentation on how to do this. The reason I'm using Azure ...
0
votes
0answers
7 views

Proxy configuration in Istio

I've got a problem with network connections inside istio. After setting up ServiceEntry that looks exactly like this: apiVersion: networking.istio.io/v1alpha3 kind: ServiceEntry metadata: name: ...
0
votes
0answers
8 views

Error: unable to verify the first certificate [ helm chart YAML ]

We have trying different formats to send mail from Astronomer docker container using Airflow. The different formats which we have tried in our YAML file are: reply: "EmailID" smtpUrl: ...
1
vote
0answers
7 views

How to enable anonymous authentication for kube-apiserver using kops on AWS C2?

I want to enable anonymous authentication using kops, but it's default settings provides the --anonymous-auth=false options to kube-apiserver: /usr/local/bin/kube-apiserver --allow-privileged=true --...
0
votes
0answers
8 views

Kubernetes apigroup update: “Existing persisted data”

Kubernetes 1.14 has begun the transition to using networking.k8s.io/v1beta1 instead of extensions/v1beta1 for the ingress resource. In the release notes, it says " Existing persisted data is ...
0
votes
1answer
17 views

How to get server url from kub dashboard?

I have access to kubernetes dashboard on aws with token. And now I want to connect with kubectl, how to get server url for kubectl config?
1
vote
1answer
23 views

How to deploy a Kubernetes service using NodePort on AWS?

I have created a cluster on AWS EC2 using kops consisting of a master node and two worker nodes, all with public IPv4 assigned. Now, I want to create a deployment with a service using NodePort to ...
1
vote
1answer
7 views

Istio: envoy proxy to https container in same pod

I've got a container that runs a https service on port 9999. The service is as follows: apiVersion: v1 kind: Service metadata: labels: role: pingfederate2 name: pingfederate2 spec: ports: ...
0
votes
0answers
15 views

Where in the Kubernetes cluster is /var/run/docker.sock mounted?

I want to create a CTF exercise for my colleagues to learn and play with Kubernetes security. To this end, I would want them to execute a command, like the following, to access a Kubernetes pod with /...
1
vote
1answer
16 views

Common config in Kubernetes ConfigMap

Kubernetes already provides a way to manage configuration with ConfigMap. However, I have a question/problem here. If I have multiple applications with different needs deployed in Kubernetes, all ...
0
votes
0answers
16 views

Common config in Kubernetes ConfigMap [duplicate]

Kubernetes already provides a way to manage configuration with ConfigMap. However, I have a question/problem here. If I have multiple applications with different needs deployed in Kubernetes, all ...
0
votes
1answer
17 views

Should my zombie backend container be restarted when database is down?

I have a situation where I have a Postgres and a Node server which connects to it. I am using Kubernetes to deploy them. If my Postgres container fails and stops working then its livenessProbe will ...
1
vote
0answers
38 views

Where does PGBouncer sit on a Kubernetes Cluster

I'm wanting to deploy some sort of connection pooling within my applications across multiple nodes. Python naturally provides some pooling with the SQLAlchemy implementation; but obviously this ...
0
votes
0answers
31 views

Using terraform and Kubernetes: Who/what is responsible for backup restoration after all databases are down?

I'm kinda new to the DevOps scene, doing my first job in half a month and I'm currently reading up on terraform/kubernetes. I'm thinking of a scenario where all the infrastructure concerning data ...
0
votes
0answers
14 views

Istio Upstream connection failure in addition to 503 response code in istio-proxy logs

Istio sidecar for ldap server showing this error [2020-03-09T10:26:28.802Z] "- - -" 0 - "-" "-" 2927 9389 120 - "-" "-" "-" "-" "192.168.64.17:8443" outbound|443||kubernetes.default.svc.cluster.local ...
1
vote
1answer
30 views

Auto tune kubernetes requests/limits?

I know of ways to set up monitoring (e.g. prometheus/alert-manger) to notify me if kubernetes pod requests/limits are too far off actual container usage. Are there any systems built to help you ...
1
vote
2answers
29 views

What is the difference between a node and a machine on OpenShift?

OpenShift 4.2 documentation defines: Machines A fundamental unit that describes the host for a Node. A machine has a providerSpec, which describes the types of compute nodes that are offered ...
0
votes
1answer
31 views

Accessing k8s outside of VM

I am running k8s cluster for evaluation purposes inside some vagrant box. I have external kubectl access. I was able to get PostgreSQL helm template running on the cluster. But now let say I want to ...
1
vote
1answer
46 views

Is Google Kubernetes (GKE) worth it for a program that runs once a week?

My team is on the process of migrating all our cloud applications from AWS to GCP, and we were considering using GKE for our main program, until we got the news that Google will now charge an hourly ...
0
votes
0answers
15 views

Pipeline for deploying WordPress instance with a custom plugin from Github actions

I'm not a dev ops expert so I mat mixing up some basic terms. I want to setup a pipeline that on creation of a pull request in GitHub on my WordPress plugin repo, GitHub action will create a ...
0
votes
0answers
23 views

Add persistent volume with gitlab autodeploy

I deploy a docker image on kubernetes with gitlab auto deploy. I need to add a persistent volume, do you have an example? I don't understand how to overload the helm chart.
0
votes
0answers
29 views

az aks browse doesn't open browser automatically on WSL and only showing JSON instead of the dashboard

az aks browse works fine on my Mac Mini, but I'm trying to work with it in WSL2 Ubuntu 18.04 with Azure CLI on a Windows 10 machine. $ az version This command is in preview. It ...
0
votes
1answer
28 views

Prometheus-operator - detection of expiring certs failing

I had a situation yesterday where my K8S master api cert has expired and I had Prometheus-operator active in the past weeks, but neither the 24 hours, neither the 7 days alert has triggered. I went to ...
3
votes
0answers
19 views

Conversion tool for converting kubernetes yaml files from 1.15 to 1.17?

we are on kubernetes 1.15.* and our yaml files are incompatible with the latest 1.17 installation. Is there an easy way of converting our yaml files with a tool?
4
votes
1answer
39 views

How To Determine Min/Max Resources For Kubernetes Pods?

Say I have 2 nodes for a kubernetes cluster. Both has 2 CPU → 4 Total 2G RAM → 4 Total I have 4 pods to shcedule-- no replicas yet, 1 major pod that'll use 80% of resources, other use 5% each. What ...
-1
votes
1answer
70 views

upstream connect error or disconnect/reset before headers. reset reason: connection failure

I am deploying a virtual service and gateway but when I run it on browser get the below error: upstream connect error or disconnect/reset before headers. reset reason: connection failure I deployed ...
1
vote
1answer
9 views

How to avoid OOMKilled with azcopy on k8s

When running azcopy copy with huge repos, or when running azcopy bench, the pods are killed with the error OOMKilled. (azcopy v10) The pod has to following resource limitations: limits: { cpu: 1, ...
2
votes
0answers
23 views

SFTP server with third party user management system?

I understand how to set up SFTP servers on Linux and create users and their passwords manually. So basically, the users get authenticated as normal Linux users get authenticated through /etc/passwd. ...
0
votes
0answers
14 views

Kubernetes Persistent Volume Mount Not Syncing Files

I have an AWS EFS persistent volume mounting a file at /opt/file.jar via: $ mount | grep file.jar fs-xxxxxxxx.efs.us-west-2.amazonaws.com:/pvc-12345/file.jar on /opt/file.jar type nfs4 (rw,relatime,...
1
vote
1answer
24 views

How to copy files from a different linux server folder to Kubernetes pod

I have multiple files in a different linux server folder and I want to create a cron job and run daily in kubernetes that should copy the files to a pod network folder. I am researching a lot on ...
0
votes
0answers
25 views

haproxy ingress ipv4 only

I'm trying to deploy an haproxy ingress in my kubernetes cluster (v1.15.1), where the worker nodes have IPv6 protocol disabled. This is the guide I'm following https://www.haproxy.com/documentation/...
0
votes
0answers
13 views

EKS ELB unable to send/recieve options request

I have a Kuberentes cluster which is running on AWS via EKS. I have a classic LB created and the front end I use (Vue.js/ axios) sends a OPTIONS request before the POST request I belive. My issue ...
1
vote
0answers
14 views

Backup kubernetes cluster + EBS PVs / restore to new account?

We are migrating multiple EKS kubernetes clusters to new AWS accounts, and each of them has AWS EBS persistent volumes encrypted with the default account key. Within an account we were planning on ...
0
votes
0answers
3 views

Distinguiushing between state transition analysis versus reconciler pattern

State transition analysis is a well known computing concept, widely applied in various domains including virtual machine introspection. Conversely, reconciler pattern, recently became popular due to ...
0
votes
1answer
27 views

StatefulSet or Deployment for Jira on Kubernetes

We are looking into moving our Jira instance on a Kubernetes cluster and one of the concerns that were recently risen is whether we should go with a StatefulSet or a Deployment. So, are there any ...
0
votes
1answer
35 views

Kubernetes: CPU Limits at (200%)?

So, let's say there's a cluster node, with 4 CPU cores. It's running two pods. Each pod sets the CPU requirement at: 500m, but the CPU limit at 4000m. running kubectl describe node <noode> ...
2
votes
2answers
106 views

Does Kubernetes internal networking keep traffic to co-located Pods where possible?

In Kubernetes, if I run a Service Foo on every Node, and also Service Bar on every Node, i.e. with DaemonSets. If a Pod from Service Foo needs to make a request to Service Bar, does Kubernetes ...
1
vote
1answer
151 views

kubeadm init fails when using cri-o

I've been following this doc to deploy kubernetes https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/high-availability/ After launching the "kubeadm init" command and during its ...
1
vote
2answers
188 views

Error from server (Forbidden): error when retrieving current configuration of: Resource: “apps/v1, Resource=deployments”,

I integrate the existing kubernetes cluster to the gitlab instance (omnibus). I get the below error in the deployment stage of CI/CD pipeline: Error from server (Forbidden): error when retrieving ...
0
votes
0answers
10 views

Problems with ISTIO incorrectly handling gRPC connections

We've seen some odd behaviour on our kubernetes cluster. We have two test applications that speak gRPC. One sends a subscription message and the other sends back a stream of responses. The envisaged ...
0
votes
1answer
35 views

Using a ubuntu base image vs an application specific image (node, python, etc)

What are the benefits of using an application specific Docker image vs a generic OS? I'll use an angular app here as a contextual example, but this should apply to other apps as well. Example 1 | Use ...
0
votes
0answers
40 views

How to manage a fixed infrastructure?

I work for a company that serve software for gas stations, our job is to provide a software that manage all functionalities, including financial, vendors, attendants, prices, etc. For this we use ...
2
votes
2answers
94 views

How to introduce(join) new worker node to an existing k8s cluster with selective scheduling only

Given a working Kubernetes cluster consisting of a master and some workers. We need to add a node to run a very specific pod and be part of the cluster for networking reasons. Then being largely ...

1
2 3 4 5
7