Questions tagged [kubernetes]

For questions about Kubernetes, an open-source system for automating deployment, scaling, and management of containerized applications.

Filter by
Sorted by
Tagged with
0
votes
0answers
11 views

SFTP server with third party user management system?

I understand how to set up SFTP servers on Linux and create users and their passwords manually. So basically, the users get authenticated as normal Linux users get authenticated through /etc/passwd. ...
0
votes
0answers
11 views

Kubernetes Persistent Volume Mount Not Syncing Files

I have an AWS EFS persistent volume mounting a file at /opt/file.jar via: $ mount | grep file.jar fs-xxxxxxxx.efs.us-west-2.amazonaws.com:/pvc-12345/file.jar on /opt/file.jar type nfs4 (rw,relatime,...
0
votes
1answer
15 views

How to copy files from a different linux server folder to Kubernetes pod

I have multiple files in a different linux server folder and I want to create a cron job and run daily in kubernetes that should copy the files to a pod network folder. I am researching a lot on ...
0
votes
0answers
12 views

haproxy ingress ipv4 only

I'm trying to deploy an haproxy ingress in my kubernetes cluster (v1.15.1), where the worker nodes have IPv6 protocol disabled. This is the guide I'm following https://www.haproxy.com/documentation/...
0
votes
0answers
6 views

EKS ELB unable to send/recieve options request

I have a Kuberentes cluster which is running on AWS via EKS. I have a classic LB created and the front end I use (Vue.js/ axios) sends a OPTIONS request before the POST request I belive. My issue ...
1
vote
0answers
14 views

Backup kubernetes cluster + EBS PVs / restore to new account?

We are migrating multiple EKS kubernetes clusters to new AWS accounts, and each of them has AWS EBS persistent volumes encrypted with the default account key. Within an account we were planning on ...
0
votes
0answers
3 views

Distinguiushing between state transition analysis versus reconciler pattern

State transition analysis is a well known computing concept, widely applied in various domains including virtual machine introspection. Conversely, reconciler pattern, recently became popular due to ...
0
votes
1answer
19 views

StatefulSet or Deployment for Jira on Kubernetes

We are looking into moving our Jira instance on a Kubernetes cluster and one of the concerns that were recently risen is whether we should go with a StatefulSet or a Deployment. So, are there any ...
0
votes
1answer
27 views

Kubernetes: CPU Limits at (200%)?

So, let's say there's a cluster node, with 4 CPU cores. It's running two pods. Each pod sets the CPU requirement at: 500m, but the CPU limit at 4000m. running kubectl describe node <noode> ...
2
votes
2answers
70 views

Does Kubernetes internal networking keep traffic to co-located Pods where possible?

In Kubernetes, if I run a Service Foo on every Node, and also Service Bar on every Node, i.e. with DaemonSets. If a Pod from Service Foo needs to make a request to Service Bar, does Kubernetes ...
1
vote
1answer
82 views

kubeadm init fails when using cri-o

I've been following this doc to deploy kubernetes https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/high-availability/ After launching the "kubeadm init" command and during its ...
1
vote
2answers
59 views

Error from server (Forbidden): error when retrieving current configuration of: Resource: “apps/v1, Resource=deployments”,

I integrate the existing kubernetes cluster to the gitlab instance (omnibus). I get the below error in the deployment stage of CI/CD pipeline: Error from server (Forbidden): error when retrieving ...
0
votes
0answers
9 views

Problems with ISTIO incorrectly handling gRPC connections

We've seen some odd behaviour on our kubernetes cluster. We have two test applications that speak gRPC. One sends a subscription message and the other sends back a stream of responses. The envisaged ...
0
votes
1answer
34 views

Using a ubuntu base image vs an application specific image (node, python, etc)

What are the benefits of using an application specific Docker image vs a generic OS? I'll use an angular app here as a contextual example, but this should apply to other apps as well. Example 1 | Use ...
0
votes
0answers
34 views

How to manage a fixed infrastructure?

I work for a company that serve software for gas stations, our job is to provide a software that manage all functionalities, including financial, vendors, attendants, prices, etc. For this we use ...
2
votes
2answers
72 views

How to introduce(join) new worker node to an existing k8s cluster with selective scheduling only

Given a working Kubernetes cluster consisting of a master and some workers. We need to add a node to run a very specific pod and be part of the cluster for networking reasons. Then being largely ...
1
vote
1answer
39 views

How do I expire users credentials for Kubernetes in Azure?

I am looking for information on how to forcefully expire users credentials in Azure Kubernetes Service (AKS). The reason is to better understand Security models and protecting Kubernetes deployments ...
1
vote
1answer
20 views

kubernetes: how to set “top node” and “top pod” permissions?

Hoping for some pointers, I have a question: what role/permissions do I need to bind to a user that has ClusterRole=view in order to let that user use top node and top pod commands in kubectl? My ...
0
votes
1answer
23 views

Bare-Metal Kubernetes storage in enterprise

Problem in a nutshell What kind of storage for dynamic provisioning in a bare-metal kubernetes should i use. Our configuration Each of our kubernetes nodes (worker and master) are running on VMs. ...
1
vote
4answers
81 views

Why will my container run in Docker, but will not run in Kubernetes?

Background I have a container that I have defined with an CMD and an ENTRYPOINT in Docker. When I run the following command my container runs with no issues whatsoever. docker run --rm -ti custom-...
0
votes
0answers
9 views

How can you migrate an EKS cluster and EBS persistent volumes to a new account?

We were testing out backing up and restoring our EKS clusters with Velero. Unfortunately, it seems to have a pretty severe limitation when it comes to doing this across accounts. It snapshots your ...
1
vote
2answers
36 views

Can an in-memory filesystem be created from inside a docker container with no special permissions?

I'd like to create an in-memory filesystem within a docker container running on a cluster where I can't assign the container any special permissions (e.g. the container can't have CAP_SYS_ADMIN ...
1
vote
1answer
25 views

How to exclude a node in kubernets using podAntiAffinity?

I'm trying to exclude a set of nodes when I submit a job in kubernetes. The set of nodes do not (yet) have a label to differentiate them, so all I can exclude them on is hostname (for now). All the ...
0
votes
0answers
45 views

Can't get either Postgres permissions or PVC working in AKS

These are pretty much the steps I have followed in order. Basically what is outlined in the documentation: https://docs.microsoft.com/en-us/azure/aks/azure-files-dynamic-pv azure-storage-claim.yaml ...
0
votes
1answer
18 views

How to pass parameters to a container orchestrated by Kubernetes similar to running the container at the command line using the docker run command?

Background I have a docker container that I run in the following fashion: docker run --rm my-custom-container:latest --username me --password yes --url "https://my.url" The container does what ...
1
vote
1answer
62 views

Issue getting HTTPS working for subdomain despite “Certificate issued successfully”

Part of my struggle to learn this, I think, is that cert-manager is updated pretty regularly so a lot of the tutorials, blog posts, questions, and courses I have read or taken are no longer relevant. ...
1
vote
1answer
21 views

Dump Kubernetes log files for all services/pods/jobs etc

We are remotely deploying a kubernetes cluster and when the installation fails, we would like to see the logs of all the services and migrations and pods etc. that we are trying to install. Instead of ...
0
votes
1answer
26 views

Worker Node in Kubernetes

I am new to Kubernetes. I have followed one document and setup master node in Kubernetes. Now I want to create a Worker node, so How can I create it? I don't know anything about to set up a worker ...
2
votes
1answer
90 views

helm install causes nil pointer

I'm really a beginner with kubernetes and really struggle with this simple tutorial from baeldung.com The only thing I did different (intentionally) was using a google cloud cluster instead of ...
0
votes
0answers
4 views

Ambassador Gateway on same cluster?

I have more of a architectural design question. I want to use Ambassador Gateway to run in a kubernetes cluster. The question I have is whether is good idea to put the microservices in the same ...
1
vote
1answer
22 views

Kubernetes: How to expose a Pod/Deployment to the Nodes Network

Ok, let's assume I've got the following theoretical setup: I want to somehow assign IP-Addresses accessible by the PCs on the left to my pods. I can set routes etc. as I need since this setup is ...
1
vote
1answer
33 views

Authentication Error in Kubernetes

I am new to Kubernetes. I am getting below error while creating deployments in Kubernetes. <!-- You are authenticated as: anonymous Groups that you are in: Permission you need to have (but didn'...
0
votes
1answer
17 views

Nginx unable to get SSL cert to work

I'm trying to get a kubernetes cluster using the nginx ingress controller and cert manager to get an SSL cert from lets encrypt. Currently is appears the cert has been issued however I am unable to ...
2
votes
2answers
45 views

localhost Pod to Pod communication k8s

I am trying to transfer an old legacy system to k8s. I have a custom server that client apps connect to in order to communicate with one another. Both the server and clients were originally created ...
1
vote
1answer
43 views

How do i connect docker pipeline on jenkins to kubernetes cluster

I am trying to setup a pipeline on jenkins that uses docker containers to execute tasks like for example deploy an helm charts using a docker image with helm here is what my Jenkinsfile looks like ...
0
votes
1answer
76 views

Getting permission denied with docker pipeline on jenkins

I have jenkins deployed via helm charts on kubernetes cluster Now i want to be able to run helm to deploy helm charts applications on my kubernetes cluster and have the following in my jenkinsfile ...
4
votes
1answer
27 views

Using Prometheus to monitor Spring Boot Applications in Kubernetes Cluster

I have spring boot powered microservices deployed in my local kubernetes cluster. The microservices are using micrometer and prometheus registry but due to our company policy the actuator is available ...
0
votes
2answers
97 views

Are there arguments against using “imagization" tools in the literature and if so, what are the main ones?

Although I never used an "imagization" tool (for example, Docker) I understand a container as an instantiated (running or stopped) image which in plural are simply put, a server environment and ...
2
votes
3answers
44 views

What is the best tool for the release management for Kubernetes in a small startup?

In our small startup (6 developers) and we use Google Kubernetes Engine + CircleCi (which deploys docker images to K8S with simple bash scripts). We have ~10 services, but we are growing. We use a ...
0
votes
0answers
8 views

Is it possible / best practice to scale API Gateway by generating multiple replicas of API Gateway to handle the load?

Is it possible/best practice to scale API Gateway by generating multiple replicas of API Gateway to handle the load ? By setting a load balancer before the API Gateway, the LB will route the requests ...
1
vote
0answers
26 views

How to connect AWS LoadBalancer to EKS node group using Terraform?

I've created the following service using Terraform: resource "kubernetes_service" "example" { metadata { name = "example" labels = { app = "example" } } spec { port { ...
2
votes
0answers
10 views

Issue with Spinnaker automated trigger

I am trying to get Spinnaker to have a pipeline use an automated trigger which is an image pushed to an ECR repo. I can add different repos fine but can't seem to see the images. I am following this ...
1
vote
0answers
31 views

No Such Host: Kubernetes/Docker cannot pull from private k8 registry

I have a private docker registry in k8 in the default namespace with tls at https://docker-registry.default:5000. By doing local port forwarding to it(at port 5000) and adding docker-registry.default ...
1
vote
1answer
16 views

Kops: How to delete the multiple SSHPublicKey

SSHPublicKey admin 2b:xx: SSHPublicKey admin 2c:yy How to remove one ssh key from the cluster ? when tried to delete via normal way, kops delete secret --name cluster-1.dev.transein.com ...
0
votes
1answer
229 views

No Kubernetes Option in Docker Desktop for Windows

Just getting started on Docker and after installing Docker Desktop on a Windows 10 Pro machine, the option to enable Kubernetes is missing from the context menu when using Windows containers. See the ...
3
votes
1answer
82 views

What about installing an Antivirus on Windows K8s nodes?

We're building an on-premise Kubernetes cluster with Windows nodes. As a company policy, all Windows Servers needs an antivirus (symantec endpoint security). The antivirus would be installed on the ...
0
votes
0answers
35 views

Unable to connect to Consul when deployed via Helm

I have a Kubernetes cluster that was created using KOPS which I have consul installed on via the helm chart with default values except server count and bootstrapexpect are both set to 1 because of ...
2
votes
0answers
34 views

Grafana sometimes can't resolve prometheus hostname [closed]

Scenario I deploy grafana and prometheus onto EKS cluster (AWS K8s service). If I use prometheus service's fqdn (prometheus-server.monitoring.svc.cluster.local) as the data source, grafana sometimes ...
0
votes
0answers
53 views

Replace/Consume Istio's Prometheus/Grafana by existing Prometheus-operator

I have multiple K8S clusters that have Prometheus-operator Helm chart installed in monitoring namespace. Each operator consists of Prometheus/Alertmanager/Grafana. Aside from it I have Istio Helm ...
0
votes
0answers
92 views

Error loading config file “/root/.kube/config”: no kind “Pod” is registered for version “v1”

My YAML file is : --- apiVersion: v1 kind: Pod metadata: name: test spec: containers: - name: mysql image: mysql imagePullPolicy: Always command: [...

1 2 3 4 5 7