Questions tagged [kubernetes]

For questions about Kubernetes, an open-source system for automating deployment, scaling, and management of containerized applications.

Filter by
Sorted by
Tagged with
-3
votes
0answers
7 views

Need advice with my NodeJS + Mongo architecture

My production app is running on a 80 USD server on digital ocean. My tech stack is: MongoDB+Redis NodeJS+PM2 Nginx This is everything on 1 server. I receive no traffic in the night and hence it’s not ...
0
votes
0answers
6 views

How to consolidate multiple servers for CPU and Memory with Kubernetes

Setup: I have 10 Photovoltaics based setup where IOT Gateway get data from sensors, devices and send to Kubernetes Cluster. K8S cluster exposed its ActiveMQ broker with NodePort. Observation: AMQ has ...
0
votes
0answers
10 views

What is the best host solution for a medium starter aplication nowadays?

I'm am deploying an application that can be split into a dashboard with some control systems and an API. The system was developed to be an web interface for some scripts and bots used by a community ...
1
vote
0answers
24 views

How to use Hashicorp Vault with NodeJS application?

I have Node JS app inside pods, which needs to read vault secrets. So far I found 2 methods for doing that Using init container to mount secrets as .txt files and read/parse them in my app Using node-...
0
votes
1answer
10 views

Update volume size dynamically from inside a POD

I was wondering how I could dynamically create and then mount new volumes from inside a pod ? At runtime ! I have to download a lot of files with very different sizes and would like the storage to ...
0
votes
1answer
13 views

Jenkins and Kubernetes CLI plugin and GKE

I'm trying to use Jenkins Kubernetes CLI plugin from https://plugins.jenkins.io/kubernetes-cli/ to let deploy artifacts from Jenkins to GKE cluster. Expected Behavior Get cluster info on kubectl ...
1
vote
1answer
53 views

Can we do zero-downtime kubernetes deployment with a single pod?

I've inherited an app with K8s services with the following config spec: ... replicas: 1 strategy: rollingUpdate: maxSurge: 1 maxUnavailable: 1 type: RollingUpdate For most ...
0
votes
0answers
18 views

What's the equivalent of the eksctl CLI “--fargate” option in a config file?

I read How to run Serverless Kubernetes: AWS EKS on Fargate, and am wondering what the equivalent option for --fargate is in a config schema shown in Config file schema? I tried $ eksctl create ...
0
votes
1answer
16 views

What is the equivalent of eksctl option “--alb-ingress-access” in a config file?

I read How to run Serverless Kubernetes: AWS EKS on Fargate, and am wondering what the equivalent option for --alb-ingress-access is in a config schema shown in Config file schema? At least it's not ...
1
vote
2answers
137 views

Use one Helm chart for ALL microservices?

This is a follow up question to my post Parameterized Kubernetes manifest files?. I understand more about Helm now, after lots of reading, including the Learn Helm book (which I recommend). I still ...
0
votes
0answers
11 views

kubeadm installation issue in google cloud platform

I am installing opensource kubeadm in google cloud platform using k8s configuration files. As part of the installation, i updated the cloudprovider values as gce in initconfiguration, apiserver and ...
0
votes
1answer
18 views

Disabling HTTP Basic auth for requests from specific ips in k8s ingress

Currently I have a webpage which is freely accessible from certain networks an requires HTTP basic auth otherwise. This behaviour is set in the nginx config. It looks something like this: geo $...
0
votes
1answer
25 views

Ingress ip returns HTTP error DNS_PROBE_FINISHED_NXDOMAIN

I have the next ingress (output of "kubectl get ingress") NAME HOSTS ADDRESS PORTS AGE main * 192.168.39.190 80 46m But when I try to visit that IP address in ...
2
votes
1answer
56 views

Using helm to manage an “environment?”

I'm new to Kubernetes, and hence helm, so I've been reading a lot, and teaching myself by setting up a cluster, services, deployments, and pods. In my case I use AWS EKS. I now at least understand ...
2
votes
1answer
33 views

What's better: 2 pods (on the same server) or 1 standalone application?

For a client we're going to roll out a certain type of software installation. (I can give more details in the comments if you like.) The question is: would you go for 2 pods (on the same server)? Or ...
1
vote
0answers
14 views

In what time ranges do you verify your canary deployments?

I am currently implementing a canary deployment strategy for the services of an Have you already worked with carary deployments? After which timeframe do you decide to roull out 100%? Which factors do ...
1
vote
1answer
31 views

Parameterized Kubernetes manifest files?

I'm learning Kubernetes, coming from an AWS/CloudFormation background to set up my company's infrastructure. One of the strengths of CloudFormation is the use a template that can be parameterized for ...
0
votes
0answers
20 views

How to convert an ECS infra to an EKS infra?

I just need advise to see if I understand Kubernete's objects correctly in my context. I have the following ECS-based infrastructure. An api.mycompany.com Route53 recored points to the ALB ALB ...
0
votes
0answers
29 views

Kubernetes dns issue: pods cannot reach DNS server

I installed kubernetes cluster with one controller and 3 workers nodes. The nodes can reach the internet in-house DNS and external DNS ( 8.8.8.8). But when I deploy sample pods, the pods cannot ...
0
votes
0answers
22 views

What's the equivalent of “kubernetes apply -k” in terraform?

I want to use EFS in my EKS cluster. I'm following this eks workshop. I need to deploy EFS CSI Driver using kustomize: kubectl apply -k "github.com/kubernetes-sigs/aws-efs-csi-driver/deploy/...
1
vote
1answer
90 views

What does “eksctl create iamserviceaccount” do under the hood on an EKS cluster?

AWS supports IAM Roles for Service Accounts (IRSA) that allows cluster operators to map AWS IAM Roles to Kubernetes Service Accounts. To do so, one has to create an iamserviceaccount in an EKS cluster:...
0
votes
0answers
14 views

Why does empty node show as utilising 25% RAM in top nodes?

I have a node in AKS that runs absolutely nothing, is cordoned and drained. However, when I do kubectl top nodes it shows as using 25% RAM. This is already on top of RAM that the VM has but is not ...
1
vote
1answer
32 views

Is there a way to combine helm with some other tool for k8s configuration management without conflicts?

Currently I have a k8s project with multiple services which are managed by a helm chart. Said helm chart is installed on my local machine and I want to keep it this way if it's possible. But now I ...
1
vote
2answers
62 views

Where may I need Docker Compose as Kubernetes won the container orchestration war?

I found Docker Compose just release 1.28 on 2021-1-20 but as Kubernetes won the container orchestration war I am not sure where and why I may still need Docker Compose, under with case Docker Compose ...
0
votes
1answer
29 views

Is cross-region Kubernetes a thing, and if so, what role does VPN place in this context?

Given you are going to overcome risks of a whole cloud region going offline, you would implement some cross-site distribution mechanisms. In terms of Kubernetes, cluster communication would happen ...
2
votes
0answers
24 views

How to run a container from within another container while also mounting a volume from the first container?

I'm running a build in Jenkins which is running inside Kubernetes. When the job starts, a container starts in the cluster and the build runs inside it. A step in the build requires building an RPM ...
0
votes
0answers
14 views

Can I deploy Couchbase docker dependency in GKE?

I have a simple spring boot application which is wrapped into a Docker image along with its dependencies such as "Couchbase". I have pushed the docker image successfully to google cloud ...
0
votes
0answers
18 views

How should Kubernetes worker nodes get the correct /run/flannel/subnet.env file?

I am using Kubectl 1.20.2 on the client side and 1.18.9 on the server side. I have deployed EKS, and I have created a cluster. The pods never become ready unless I manually log into the worker nodes ...
0
votes
0answers
45 views

Jenkins agent fails to connect to docker socket in latest helm chart

Preface I have been using older version of Jenkins on Kubernetes with the Kubernetes plug spinning up Jenkins Agents deployed by the official Helm charts. I've had no issues with them. In fact I ...
0
votes
1answer
21 views

How to redirect the request to a different node when there is an unexpected exception and one of the pods gets restarted

We are deploying the application in a Kubernetes cluster and when we face an unexpected error and the pod gets restarted or goes down we are getting a 502 Gateway error even though there is another ...
0
votes
0answers
30 views

How do I install Istio 1.8 using Helm with custom profile?

I am looking at the documentation to install Istio using helm: https://istio.io/latest/docs/setup/install/helm/ I want to use a custom profile that I have a yaml for. However, on that page I do not ...
1
vote
1answer
47 views

Failed to install kubernetes on centos

Following the official documentation, I have an error when trying to install kubernetes cluster yum package. I am on Centos 7 using yum. So I run this commands: cat <<EOF | sudo tee /etc/yum....
1
vote
1answer
21 views

How to add a static slave to Jenkins running in Kubernetes?

I've installed a Kubernetes cluster and deployed Jenkins in it which dynamically starts slave machines using Kubernetes plugin for Jenkins. Some builds require a specific build machine with GNU make ...
1
vote
1answer
41 views

How to connect to a kubernetes cluster that is inside of a docker container?

For CICD purposes, I need to run a docker container and then create a kubernetes cluster inside of it using kind. Here is my Dockerfile: FROM ubuntu:18.04 RUN apt-get update RUN apt-get install curl -...
-1
votes
1answer
32 views

Cannot resolve services with service name inside a kubernetes pod

I cannot access a pod from another pod with its service name. Getting error as cannot resolve host svcname When i try to view the information of /etc/resolv.conf, i do see ec2.internal as searches ...
0
votes
0answers
12 views

EKS dashboard without token

The requirement is to access my EKS dashboard without any token.I have setup the EKS dashboard and i am able to access it via a web browser now i am trying to access the dashboard without the token ...
0
votes
1answer
21 views

Group authentication in kubernetes

I am trying to implement group based authentication in k8s with RBAC. My requirement is as below: There is a linux group named "readonly". There are 3 users reader1, reader2 and reader3 in ...
0
votes
0answers
17 views

JGroups Kubernetes Discovery Protocol Vulnerabilities - CVE

I am using KUBE_PING (jgroups-kubernetes-1.0.13.Final.jar) as the discovery protocol for my application running under OpenShift-4.5 (Kubernetes-version 1.18.3). When I ran a vulnerability report ...
0
votes
1answer
20 views

ECK - Install Plugins: Error privileges

My setup: AWS EKS * Platform: eks.3 * K8s: 1.18 ECK (Elastic Cloud Kubernetes): * Deployment via: Operator * Elasticsearch version: 7.10.1 Summary I'm trying to install the repository-s3 plugin at ...
0
votes
0answers
21 views

Hen-egg problem when using Rancher to generate K8S Cluster?

Question: I tried to answer this on my own, but couldn't find a definitive answer. Before investing more time in getting Rancher / my setup running, I would need directives. Suppose I want to use ...
1
vote
1answer
49 views

In k8s, do the controller nodes have to be in same VPC as the worker nodes for a cluster?

I'm new to k8s and trying to grasp the infrastructure concepts, and trying to apply them in AWS. I know a k8s cluster has a control plane, which has the management nodes, and a data plane, which has ...
4
votes
1answer
45 views

Change docker container’s log PATH

Team: All my container logs are under /var/log/containers.. Where in kubelet or docker config can I specify this path such that logs are instead created under new path? Ex : /shared ? Instead of /var/...
1
vote
1answer
36 views

gitlab kubernernetes integration: configuring the installed runner

I connected my existing kubernetes cluster to gitlab using the gitlab integration in myproject/operations/kubernetes on the left tab pane in the gitlab gui. After having installed helm + gitlab runner ...
3
votes
1answer
64 views

K8s cluster in peered VPC can't reach RDS cluster

I have two K8s clusters in the same VPC that I want to connect to an MySQL Aurora RDS cluster. One of the clusters can reach the RDS cluster just fine. The other, however, cannot. I'll call these eks-...
0
votes
0answers
22 views

Kubernetes Cluster “healthz check failed” on macos

I cloned the kubernetes/kubernetes github repository and followed the given tasks to run the kubernetes cluster locally like mkdir -p $GOPATH/src/k8s.io cd $GOPATH/src/k8s.io git clone https://github....
1
vote
0answers
17 views

Redirect to a custom page on 503 error in Ingress

When our site is getting deployed, the ingress gets created and before I could get any response I get 503 for 5-6 minutes(time taken to startup) . We need to configure our ingress to redirect to a ...
0
votes
0answers
24 views

Schedule K8s pods to multiple AZ evenly in EKS 1.18

I have a requirement to distribute pods of a given deployment across 3 AZ. We are using HPA with 3 min and max 5 setup. The worker nodes are 12 initially in EKS cluster with maximum of 15. How can I ...
0
votes
1answer
24 views

Kubernetes namespaces with RBAC: sufficient for tenant isolation in a public environment?

Initially namespaces have been created to enable logical partitioning of a single Kubernetes cluster in order to prevent naming conflicts. Over time, this changed. While this article from 2016 sais ...
0
votes
0answers
49 views

Multiple roleRef in RoleBinding or ClusterRoleBinding

Does K8S RoleBinding or ClusterRoleBidning support reference using roleRef multiple roles? or do I have to create a binding for each role I want to give the user or group? Something like this: ...
0
votes
1answer
23 views

What reasons should I NOT use a private DNS zone and CNAME services in my AWS/K8s environment?

I have a Kubernetes cluster in AWS, with apps that talk to AWS services like RDS, Elasticache, Elasticsearch, DynamoDB, etc. For the services where it's available (Elasticache and RDS, and more ...

1
2 3 4 5
9