Questions tagged [kubernetes]
For questions about Kubernetes, an open-source system for automating deployment, scaling, and management of containerized applications.
907
questions
0
votes
0
answers
10
views
deploy Harbor on Kubernetes via helm
I'm facing an issue with accessing the Harbor after deploying it on Kubernetes using Helm.
Here are the steps I followed:
Download Harbor helm chart:
helm repo add harbor https://helm.goharbor.io ...
-1
votes
0
answers
6
views
How to run cluster-image-scanner (SDA-SE project) [closed]
This is the link for the tool we want to use: https://github.com/SDA-SE/cluster-image-scanner
We decide to use this project to scan image in k8s cluster.
Although, we don't know how to run, and set ...
- 1
0
votes
0
answers
18
views
Is it possible to configure the kubernetes api server address when using traefik?
Today I found the Traefik could not forward the http request with the slave node(the slave node also edge node that could recieve http request from external internet), when I using this command to ...
- 111
0
votes
0
answers
6
views
Canarydeployment of AKS based applications using istio
We were trying to enable canary based deployment for our aks based applications using istio feature and HELM templates. By referring the documents provided in medium , intex we tried the solution as ...
- 101
1
vote
1
answer
31
views
helm trouble creating pod using bitnami/mongodb chart
Here is my My Chart.yaml file:
apiVersion: v2
name: pixer-microservice-infra
description: A Helm chart for Kubernetes
type: application
version: 0.1.0
appVersion: "1.16.0"
dependencies:
- ...
- 11
0
votes
0
answers
11
views
is it possible to pull from private repo when using crictl
when I use crictl crictl version 1.20.0-24-g53ad8bb7 to pull some private repo:
[root@k8smasterone ~]# crictl pull registry.cn-shanghai.aliyuncs.com/reddwarf-pro/dolphin-post:...
- 111
0
votes
1
answer
30
views
validate service connection: validate CRI v1 image API for endpoint
Today when I use this crictl crictl version v1.28.0 command to pull image in CentOS 7.9:
[root@k8sslave01 ~]# crictl pull registry.k8s.io/pause:3.6
WARN[0000] image connect using default endpoints: [...
- 111
0
votes
0
answers
6
views
does the containerd will delete the pasue images
Today I found the already downloaded kubernetes pause images(registry.k8s.io/pause:3.6) are missing. This images are already downloaded in the previous build process. it seems been deleted ...
- 111
0
votes
1
answer
29
views
Why is the containerd still pulling from the network even though the server contains an image
Today I found the kubernetes pod shows error like this:
Failed to create pod sandbox: rpc error: code = DeadlineExceeded desc = failed to get sandbox image "registry.k8s.io/pause:3.6": ...
- 111
0
votes
0
answers
8
views
K8s cluster has kube-system pod limits that are excessively high
Using AKS, the cluster has limits that are overcommitted due to kube-system pods having excessively high CPU/memory limits.
kube-system pods like coredns or have a combined CPU limit of 300+%
This is ...
- 101
0
votes
0
answers
12
views
CI/CD ArgoCD - how can we schedule a nightly build with ArgoCD? So deploy a temporary set of Kubernetes resources
Each night we run a nightly build. A 'docker-compose' stack is deployed, a Test docker container runs the tests. Works fine.
We started migrating to Kubernetes with ArgoCD.
How can we deploy a ...
- 101
0
votes
0
answers
12
views
Why does the kubernetes run the coreDNS as deployment in the cluster, rather than a static pod?
The Kubernetes controlplane usually run components as static pods:
kube-apiserver: static pod
kube-scheduler: static pod
kube-controller-manager: static pod
etcd: static pod
The DNS is also the ...
- 101
0
votes
0
answers
8
views
Is there a full list of Kubernetes controller names inside the kube-system namespace that are owned by Kubernetes?
I am aware that there is a kube-system namespace, and users are not expected to modify or create any objects in this namespace as it is not intended for user use. However, I would like to verify this ...
- 101
0
votes
0
answers
8
views
containerd to graylog
I was using /etc/docker/daemon.json to easily configure logs from containers to be sent via UDP to a remote Graylog server and it worked fine.
It's easily achievable with the following config in ...
0
votes
0
answers
3
views
Does Tekton Triggers support HTTP GET requests?
Does anyone know if Tekton event listeners and triggers work with HTTP GET requests?
Going off of this guide: https://tekton.dev/docs/getting-started/triggers/
I tried to create a binding that doesn't ...
- 101
0
votes
0
answers
38
views
Add K3s agent to server in a docker container (using Tailscale userspace networking)
I have a K3s server running somewhere, connected to Tailscale. I am able to connect regular VM agents to it via Tailscale under normal circumstances. However, I also need to add an agent "node&...
0
votes
1
answer
34
views
kubernetes access nodeport fails, master cannot reach workers
I've got an on premise kubernetes cluster with a NodePort service running on port 32001. But in 80% of the cases requests fail:
curl localhost:32001
times out and sometimes it works, results are ...
- 502
0
votes
0
answers
43
views
How Do I Get the Information for a Minikube Cluster to Automatically Show Up in Backstage?
The problem:
The information for my Minikube cluster is supposed to be showing up under the Kubernetes tab for a Backstage component similar to the following images:
[2
However, I am getting the ...
- 1
0
votes
0
answers
5
views
How can I connect to Kubernetes Job without service from other Pod through dns?
I have Kubernetes job without service and I need to connect to it from different pod (not job) on the cluster. According to docs, I can do it only by using IP, but not with DNS as it has no service.
...
- 1
0
votes
0
answers
6
views
dial tcp: lookup dolphin-post-service.reddwarf-pro.svc.cluster.local on 100.100.2.138:53: no such host
I am using the traefik as the kubernets edge node gateway, today when I upgrade the centos linux kernel from 3.10 to 5.4, I found the traefik 2.10.5 forward rest api always return null. this is the ...
- 111
0
votes
0
answers
9
views
is it possible to stop the calico Installation
Now I want to change the calico config in kubernetes (v1.28.3) cluster, everytime I change the config, it will be rollback by the Installation. is it possible to stop the Installation? this is the ...
- 111
0
votes
1
answer
36
views
why the crictl command did not list the images
when I tried to use crictl to list all images like this in Debian 12:
root@k8sslave01:/etc# crictl images
IMAGE TAG IMAGE ID SIZE
did not show any images. the ...
- 111
0
votes
1
answer
17
views
is it possible to copy image from one server to another server
On the server A, I install many kubernetes images, because I could not access the dockerhub for some network issue. I want to copy some images from server A to server B. is it possible to copy the ...
- 111
0
votes
0
answers
17
views
ailed to create pod sandbox: rpc error: code = DeadlineExceeded desc = failed to get sandbox image "registry.k8s.io/pause:3.6
Today I found some events in kubernetes(v1.28.3) cluster, this error event look like this:
(combined from similar events): Failed to create pod sandbox: rpc error: code = DeadlineExceeded desc = ...
- 111
0
votes
0
answers
40
views
how to detect immutable field changes with helm before upgrade
We have pipelines to do some deployments in GCP. Underneath our pipeline uses helm apply/upgrade and sometimes it fails when our users try to change immutable helm fields. For example ...
- 1
0
votes
0
answers
2
views
Special DNS for other accessing other cluster's deployment
For accessing local deployment there is service1.namespace1.svc.cluster.local special internal domain name, how can we access other cluster's deployment internally if we have 2 cluster (eg. cluster1 ...
- 113
0
votes
0
answers
25
views
Collecting logs from Kubernetes using OpenTelemetry to send to Splunk
I am trying to collect logs from Kubernetes running on minikube and send it to Splunk Enterprise using Splunk OpenTelemetry Collector.
Followed this guide:
https://lantern.splunk.com/Data_Descriptors/...
0
votes
1
answer
71
views
Microk8s Cluster Node not ready on Ubuntu with "cni plugin not initialized: failed to load cni config"
I'm trying to start a microk8s kubernetes instance on an ubuntu server, however the node becomes not ready.
~$ microk8s status
microk8s is not running. Use microk8s inspect for a deeper inspection.
...
- 101
1
vote
1
answer
67
views
Kubenetes new Pods/Deployments/Resources stuck in pending state forever without error
I have a local Kubernetes cluster setup using kubeadm. Everything was working fine a few days back but now I've got a strange problem.
Whenever I add new resources be it a deployment or pod, it never ...
- 11
0
votes
0
answers
8
views
How to run job initialization on different nodes one by one?
I have a multi-node Kubernetes cluster built with microk8s under Ubuntu 22.04. On the cluster, I need to run a job (YAML fragment below), which requires pulling a docker image (during initialization) ...
- 111
0
votes
0
answers
16
views
already exists for an interface other than 'calid41c363
Today I found the kubernetes 1.26 cluster throw warning message:
│ Warning FailedCreatePodSandBox 34s kubelet Failed
to create pod sandbox: rpc error: code = Unknown ││ desc = ...
- 111
0
votes
0
answers
24
views
K8S how to get an overview of warnings
I have a k3s cluster set up in my home lab. I find that i Iversen a lot of warnings that i mainly get by using an app called kubenav
I am aware that I can describe a pod using kubectl describe pod ...
- 135
0
votes
1
answer
13
views
Redefine deployment (Portainer) pvc after node failure
I have a home lab running k3s.
NAME STATUS ROLES AGE VERSION
k8s-node-001 Ready control-plane,master,worker 302d v1.27.6+k3s1
k8s-node-002 Ready worker ...
- 135
0
votes
0
answers
8
views
How to remove the Kubernetes finaliser in PV object?
I am trying to delete the finalisers in the PV by issuing kubectl patch command and it deletes partially leaving behind Kubernetes.io/pv-protection
Described the PVC and able to see two entries
...
0
votes
0
answers
14
views
How to delete Kubernetes Finalisers Kubernetes.io/pv-protection?
I am trying to delete the finalisers in the PV by issuing kubectl patch command and it deletes partially leaving behind Kubernetes.io/pv-protection
Described the PVC and able to see two entries
...
0
votes
0
answers
11
views
istioctl manifest apply with custom parameters
I want to apply the default manifest with some custom parameters such as namespace and tolerations but I have no idea how to pass tolerations parameters into the manifest.
and I used the command and ...
0
votes
0
answers
16
views
error adding host side routes for interface
Today I find a warning events in kubernetes 1.26 cluster, the message like this:
Failed to create pod sandbox: rpc error: code = Unknown desc = failed to setup network for sandbox "...
- 111
0
votes
0
answers
31
views
remove netns: unlinkat device or resource busy
Today I found the kubernetes v1.26 cluster contains some warning message like this:
error determining status: rpc error: code = Unknown desc = failed to get sandbox ip: check network namespace closed: ...
- 111
0
votes
0
answers
23
views
Load balancing between Slurm clusters
What strategy of load balancing in k8s would be recommended between Slurm (think SGE) clusters?
The reason I raise this is Slurm has a Pythonic API governing the queuing system.
Information can freely ...
- 101
0
votes
0
answers
13
views
How to make master node and worker nodes before installing kubernetes on Ubuntu?
I am trying to install kubernetes on my Ubuntu 22.04 os. I found blogs and videos in Youtube but failed and deleted all. I had hard time when making master node and worker nodes because there was no ...
- 1
0
votes
0
answers
21
views
How do I expose a GRPC service with Istio on Kubernetes?
Trying to setup grpc service via istio ingress controller
I can access istio http, but not grpc. Service grpc is working.
Ingress is here:
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
...
0
votes
0
answers
5
views
replace proxyless master to haproxy as advertise-address
I've got an on premise k8s cluster (1.26) running with a single master.
Now I've added an external haproxy load balancer which points its backend to that master node.
frontend kubernetes
bind *...
- 502
0
votes
0
answers
23
views
How can I have working auto certificate renewal when using custom path in k8s ingress
In our k8s cluster we have multiple services, reachable from public internet, we're using nginx ingresses for routing + let's encrypt for certificate management.
As we're using custom rewrite rule and ...
- 344
1
vote
1
answer
40
views
What is a "single kubectl list object" as mentioned in jsonnet documentation?
The jsonnet documentation > Using Jsonnet With Kubernetes says:
Use YAML stream output, multi-file output, or a single kubectl list object. This latter option is provided by Kubernetes without ...
- 121
0
votes
0
answers
13
views
Setup TLS Certs for Prometheus adapter in Local k3d
I am trying to setup HorizontalPodAutoscaler in K8s, for which I am setting up a custom metric to be used by HPA. I am using k3d locally to test the autoscaling feature.
For this custom metric , I ...
- 111
0
votes
0
answers
35
views
Allow scheduling pod when we have anti affinity enabled
I have a deployment where I have added affinity as below -
affinity:
nodeAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
nodeSelectorTerms:
- matchExpressions:
- ...
0
votes
0
answers
6
views
PIDPressure In DO
I have a 3 nodes-cluster on Digital Ocean, I have around 22 pods, most of them are golang microservices with a few open sources, my pods are getting evicted and I cannot seem to debug that PIDPressure ...
- 1
0
votes
0
answers
17
views
Kubernetes Gateway API - Using HTTPRoute rules to rewrite URI paths
My goal is to have a single Gateway that can be used to host multiple applications at different paths. The URLRewrite filter exists, however, when it does not seem to be working as expected.
Using ...
- 183
0
votes
0
answers
38
views
MicroK8s does not authenticate with gitlab private registry
I have an instance of MicroK8s, I am currently migrating my applications. But I can't authenticate to Gitlab's private registry.
About my environment:
MicroK8s
Gitlab (with registry working securely)
...
- 101
0
votes
0
answers
36
views
key "meta.helm.sh/release-namespace" must equal "tigera-operator": current value is "default"
when I am trying to install calico using helm 3 like this:
helm install calico projectcalico/tigera-operator --version v3.26.1 --namespace tigera-operator
shows error:
Error: INSTALLATION FAILED: ...
- 111