Skip to main content

Questions tagged [kubernetes]

For questions about Kubernetes, an open-source system for automating deployment, scaling, and management of containerized applications.

Filter by
Sorted by
Tagged with
0 votes
0 answers
10 views

I can't reach out the database from my pod

I have two servers A with private ip address 10.1.0.2 and B with private ip address 10.1.0.4 on server A I have a docker container that runs postgres database On server B have a pod that tries to ...
Jonas's user avatar
  • 1
0 votes
0 answers
6 views

Kubernetes RWO PersistentVolume node semantics with ceph-rbd

Context: Imagine I have a StatefulSet in a multi-node cluster, using a VolumeClaimTemplate to auto-provision storage using a rbd.csi.ceph.com provisioner using RWO. At runtime, I'll have I have ...
Jon Bates's user avatar
  • 101
0 votes
0 answers
20 views

How to preserve custom changes in Core DNS(Kube-DNS) in OKE(Oracle Cloud Kubernetes)?

I have created an Enhanced Cluster of Kubernetes(OKE) in Oracle Cloud (OCI). In the cluster I am required to do some communication from pods to some VM instances outside OKE but in the same VCN subnet ...
Sahil Aggarwal's user avatar
0 votes
0 answers
8 views

GKE Autopilot: probes failing on kube-system pods

I'm running a cluster on GKE Autopilot and I'm experiencing a lot of probes failing on kube-system pods. For example: Liveness probe failed: Get "https://10.95.128.210:10250/livez" on a ...
Ethan Van den Bleeken's user avatar
0 votes
1 answer
13 views

How to setup a K3s cluster on netbird or tailscale?

My company is running an IoT project with a distributed K3s cluster running on OpenVPN. Some K3s nodes are installed at customer premises, usually in a SOHO LAN with NAT, some are running in the cloud ...
Christian Schlichtherle's user avatar
0 votes
0 answers
7 views

Unable to Access Node.js Application on Internet deployed under SAP BTP Kyma Environment

I have deployed a Node.js application in the SAP BTP Kyma environment. I have enabled Istio sidecar injection in my namespace and created an API Rule to expose my service to the internet. However, I ...
Sweetlin Juliet Hentri Paul's user avatar
0 votes
1 answer
10 views

Got "Error: chart requires kubeVersion: >=1.19.0-0 which is incompatible with Kubernetes v1.16.0" when deploy kube-prometheus-stack using Argo CD

My Amazon EKS is using Kuberentes 1.30: ➜ kubectl version Client Version: v1.30.0 Kustomize Version: v5.0.4-0.20230601165947-6ce0bf390ce3 Server Version: v1.30.0-eks-036c24b However, when I deploy ...
Hongbo Miao's user avatar
0 votes
1 answer
10 views

Sealed Secrets got "error: cannot fetch certificate" in Amazon EKS cluster

I am using Amazon EKS. I can list my services by kubectl get services -n production-sealed-secrets NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE sealed-secrets ...
Hongbo Miao's user avatar
1 vote
0 answers
20 views

How to access Kubernetes Dashboard from outside the cluster (VirtualBox host )?

I have Kubernetes provisioned in my vagrant build using virtualbox. I have set the port forwarding in the vagrantfile as shown below: ... # NOTE: This will enable public access to the opened port ...
koss's user avatar
  • 11
0 votes
0 answers
8 views

K8S secret usage in SQLCMD password is always empty

I’m trying to connect to an SQL server using K8S secret for password but no matter what syntax or method I want to use, the password always empty. If I hardcode the password, everything works fine. I ...
Snooker's user avatar
0 votes
0 answers
5 views

Install Linkerd in the same kubernetes namespace as the application(s) - good practise?

Assuming I have got a business application such as content-managment-system. Should one install Linkerd in a seperate namespace than the application? Is a seperate namespace needed or just good ...
Simon_Prewo's user avatar
1 vote
1 answer
58 views

Migrating from a Helm chart release to an ArgoCD Application

The process to create an ArgoCD application from an existing helm chart release without downtime is well documented e.g. here: Just create an application, you can start with auto-sync turned off to ...
thiagowfx's user avatar
  • 113
0 votes
0 answers
18 views

How to install prometheus elasticsearch exporter by helm?

I installed Prometheus by helm repo add prometheus-community https://prometheus-community.github.io/helm-charts helm repo update helm install kube-prometheus-stack prometheus-community/kube-prometheus-...
Alpin Cleopatra's user avatar
0 votes
0 answers
11 views

Argo CD Deployment with Helmfile Plugin - VolumeMounts Not Found

I'm trying to set up an Argo CD deployment with a Helmfile plugin in my Rancher kubernetes cluster, following this reference document. However, I am encountering issues with volume mounts not being ...
hamed's user avatar
  • 1
0 votes
0 answers
25 views

Running a Redis cluster as a DaemonSet in Kubernetes so each node has all keys

Is it possible to host a Redis Sentinel cluster as a DaemonSet and have each node have all of the keys? And then setup a service that uses internalTrafficPolicy: Local to route pods to their ...
WPP's user avatar
  • 1
0 votes
0 answers
11 views

Contact Service DNS from another subnet of Kubernetes Cluster

I have a Kubernetes Cluster with its VNet and in the Kubernetes Cluster VNet I have two (or more) subnets: aks-subnet with 10.224.0.0/16 where PODs are taking their IPs (default / created with ...
Stavros Koureas's user avatar
0 votes
0 answers
37 views

microk8s dashboard keeps ending with port forwarding error

I run microk8s dashboard-proxy, and it generates a token to access through web browser, but randomly either using or without using it, it fails, I see an error in the console, and the web stops ...
Dane411's user avatar
  • 101
0 votes
0 answers
15 views

How to setup EKS ADOT for sending OpenTelemetry metrics to self managed prometheus?

I have tried to configure ADOT collector using below yaml file apiVersion: apps/v1 kind: Deployment metadata: name: adot-collector namespace: monitoring spec: replicas: 1 selector: ...
Vivek Parmar's user avatar
0 votes
0 answers
16 views

Delete renamed/removed Services/Pods

I installed fluxcd via terraform on my AKS Cluster. If i rename a Service in the Flux Repo, it deployes the Service with the new name - but doesn't delete the old Service. Is this normal or do i have ...
Andresch Serj's user avatar
0 votes
0 answers
29 views

Reducing downtime of Statefulset K8S

I am currently in the process of migrating applications from DO droplets (VPS) to Kubernetes (K8S). The old system applications are mostly stateful, so I am facing challenges in minimizing downtime. ...
Tristan's user avatar
0 votes
0 answers
5 views

How to create services mapped to separate Public IPs without Azure Kubernetes Service adding a Load Balancer rule for each service?

I have a AKS cluster with many applications, each application needs to be exposed to a unique public IP. I use an nginx ingress controller of type loadBalancer for each application and I'm able to get ...
Ehsan's user avatar
  • 1
0 votes
1 answer
79 views

Using kustomize and secretGenerator how do you create a secret under one key but from multiple files?

I have 2 separate properties files which contain secrets. I would like to use secretGenerator and merge them into a single property (i.e. app_properties). Here's the code I'm using but it's not ...
tftd's user avatar
  • 371
0 votes
0 answers
6 views

How to avoid Elastic Cloud on Kubernetes memory configuration deadlock?

I'm specifying an Elasticsearch cluster with the elasticsearch.k8s.elastic.co/v1/Elasticsearch from Elastic Cloud on Kubernetes 2.12 CRD like spec: nodeSets: - config: node.store....
Kalle Richter's user avatar
0 votes
0 answers
8 views

Should I use well-known labels as selectors for services and deployments?

According to the well-known label docs (app.kubernetes.io/name, app.kubernetes.io/component, ...) In order to take full advantage of using these labels, they should be applied on every resource ...
Kalle Richter's user avatar
1 vote
1 answer
53 views

Ideal way to save edits to a Kubernetes Deployment/StatefulSet

I edited a deployment and a stateful set of a Helm chart so that it mounts a specific persistent volume to the pod container deployed to a local cluster. The Helm chart is installed via Helm install ...
kloudkid's user avatar
-1 votes
1 answer
15 views

while installing Kubernetes package related error occur, image attached how i can solve it ? (all ports are open)

Here's an inline link to install kubernetes https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/install-kubeadm/
Deepika's user avatar
0 votes
0 answers
9 views

AWS application load balancer not registering targets for EKS node target group

I have an EKS cluster with public/private access on a VPC with public and private subnets. I've setup my ALB in the public subnets on port 80, internet-facing and ip and installed the AWS controller ...
Alex Radwan's user avatar
0 votes
0 answers
3 views

Kubernetes is no accepting traffic from my Load Balancer when I deploy it in Terraform in DigitalOcean

When I deploy my ingress controller I get an error from digital ocean dashboard 0/1 Kubernetes nodes accepting traffic -- First I create my kubernetes cluster named avatares_cluster # main.tf ...
Juan Topo's user avatar
0 votes
0 answers
4 views

MySQL Operator on Kubernetes Pods Stuck in Initializing State with "FailedBinding" Error

I'm trying to deploy MySQL InnoDB Cluster on Kubernetes using the Oracle MySQL Operator with the help of manifest files and kubectl. However, when executing the mycluster.yaml file, the pods are stuck ...
Tharsha Sivapalarajah's user avatar
0 votes
0 answers
18 views

How Kubernetes deployment scaling down happens

I have a kubernetes deployment running. Let's call it "my-spboot-deployment". This deployment has 2 replicas running in two different worker nodes. (I have used node affinity for ...
Kasun Wimaladarma's user avatar
0 votes
1 answer
14 views

How do Istio Gateway ,VirtualService ,DestinationRule works together to fullfill a request?

I have a app running on k8s with istio as service mesh and nginx as ingress controller. I wonder what would be the request flow to my service. Is it possibly like so: user-request -->istio_gateway -...
user45187's user avatar
0 votes
1 answer
24 views

Flux somehow tries to bootstrap on random cluster

I use terraform to set up a cluster and install fluxcd on it. The cluster is set up correctly (i see both in azure portal). In the bootstrap step however, i get an error showing that flux tries to ...
Andresch Serj's user avatar
0 votes
0 answers
21 views

Rancher certificate issues with letsencrypt

We have a sandbox Rancher cluster that autonomously renews its certificate via Let's Encrypt. Since it's a sandbox cluster, we only bring it up when needed. The certificate expired while the cluster ...
younghoern's user avatar
0 votes
0 answers
23 views

Collecting logs from Kubernetes container file system (not from stdout or stderr)

I am trying to find a way to get Promtail collect logs from a container file system. These logs were not generated using the standard output, which automatically gets discovered by Promtail. They have ...
kloudkid's user avatar
0 votes
0 answers
15 views

Kubernetes Pod Error - Pod Wont Start Up, No Logs for Debugging, Only Pod Description to work with

I'm deploying Sentry on Kubernetes and the front-end won't start up successfully. The pod has no logs to tell me why that is the case & the description isn't telling me a lot. All other pods are ...
CoderS's user avatar
  • 1
0 votes
0 answers
24 views

Error: release: not found when trying to rollback existing helm release

I am currently running into an issue where when I try to rollback a helm release (that exists) I am getting an error saying the release cannot be found. When I run helm rollback johndoe-anon-app 1, I ...
Bucky Rich's user avatar
0 votes
0 answers
12 views

Path no access problems

I am trying to setup a Dotnet deployment, that are using some external denepdencies that are giving me problems. I am new to all this k8's and deployments. So far I have lots of stuff deployed with ...
Kiksen's user avatar
  • 101
0 votes
0 answers
96 views

How to clear older images io.containerd.snapshotter.v1.overlayfs folder in kubernetes

The vulnerability checks is picking up older version of apps/software which are from /apps/data/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/XX/fs/usr/lib on our Kubernetes nodes. We ...
Mihir's user avatar
  • 101
0 votes
0 answers
17 views

Troubleshooting the 'View in Alertmanager' Button in MultiClusterObservability Email Notifications

This question concerns Openshift, but perhaps someone who simply deals with Kubernetes might be able to help. I have 2 clusters and on one of them I deployed Prometheus Alertmanager on Redhat ACM ...
Daveron's user avatar
0 votes
0 answers
16 views

A way to automatically recreate pod on CreateContainerError

In my K8S cluster there is a occasional issue of pods getting stuck in "CreateContainerError" state without any errors or problems. Every time the problem is fixed simply by deleting stuck ...
fourslashw's user avatar
0 votes
0 answers
23 views

Understanding the Use of cattle-unauthenticated ClusterRole and ClusterRoleBinding for RANCHER

After running an EKS hardening program, I encountered a vulnerability related to the cattle-unauthenticated ClusterRole and its associated ClusterRoleBinding. The program advised against binding ...
Nasil Kp's user avatar
0 votes
0 answers
10 views

Why is the defaultRequest of a LimitRange not applied to a pod that specifies only the limit?

I was learning about LimitRanges when on this page I encountered a scenario where you have a LimitRange with a specified defaultRequest in place. Then, a pod specification only specifies a limit (and ...
Zimano's user avatar
  • 101
-1 votes
1 answer
66 views

NGINX ingress not listening custom port

Guys I'm trying to make my service accessable by domain_name with port ex: mycompany.com:8443 Is this possible? or any alternative ways to do? But my ingress service not listening port and my service ...
Breaking News's user avatar
0 votes
0 answers
48 views

Kubernetes (K3S) Masters on cloud and workers behind NAT

I have a working HA distributed hybrid Kubernetes (K3S) cluster with three masters running on VPS nodes. They have public IPs and no private network (nodes spread across regions and cloud providers). ...
Ostap's user avatar
  • 1
0 votes
0 answers
9 views

low level vs high level container runtime replacement

Which components inside docker can be replaced or run separately? standard docker distro has these components: docker cli(tool) on my local pc, translates docker cmds to rest api requests. docker ...
ERJAN's user avatar
  • 101
0 votes
0 answers
6 views

Ingress nginx routes to last wildcard and ignores precedence

I have the following ingress service config: apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: ingress-svc annotations: nginx.ingress.kubernetes.io/use-regex: "true" ...
reactor's user avatar
  • 101
2 votes
2 answers
125 views

Best practices of authentication to Vault

What could be considered the most secure way of authenticating in HashiCorp Vault by an application running in a Kubernetes cluster? The AppRole method is nice, but implementing AppRole implies that ...
Volodymyr Melnyk's user avatar
1 vote
1 answer
70 views

Cert-manager challenge failing self check

I am currently facing an issue with cert-manager while trying to obtain a Let's Encrypt certificate for my Kubernetes cluster running on Scaleway Kapsule. I have successfully installed cert-manager ...
cvk's user avatar
  • 111
0 votes
1 answer
41 views

How to not create wildcard records using External-DNS?

I am now setting up External DNS to automate the DNS records creation on AWS Route53 for EKS Ingresses. I now have a working setup that can create and delete records depends on ingress existence. ...
Tony Chan's user avatar
1 vote
1 answer
34 views

Container orchestration vs. VM orchestration in the cloud

I'm trying to understand the specific use cases where we'd prefer to use container orchestration (Kubernetes) as opposed to VM orchestration (Nomad) in an unmanaged cloud setting (e.g., EC2) It seems ...
shintuku's user avatar
  • 111

1
2 3 4 5
17