Questions tagged [kubernetes]

For questions about Kubernetes, an open-source system for automating deployment, scaling, and management of containerized applications.

Filter by
Sorted by
Tagged with
0 votes
0 answers
9 views

Understanding the Use of cattle-unauthenticated ClusterRole and ClusterRoleBinding for RANCHER

After running an EKS hardening program, I encountered a vulnerability related to the cattle-unauthenticated ClusterRole and its associated ClusterRoleBinding. The program advised against binding ...
Nasil Kp's user avatar
0 votes
0 answers
7 views

Why is the defaultRequest of a LimitRange not applied to a pod that specifies only the limit?

I was learning about LimitRanges when on this page I encountered a scenario where you have a LimitRange with a specified defaultRequest in place. Then, a pod specification only specifies a limit (and ...
Zimano's user avatar
  • 101
-1 votes
1 answer
24 views

NGINX ingress not listening custom port

Guys I'm trying to make my service accessable by domain_name with port ex: mycompany.com:8443 Is this possible? or any alternative ways to do? But my ingress service not listening port and my service ...
Breaking News's user avatar
0 votes
0 answers
10 views

Kubernetes (K3S) Masters on cloud and workers behind NAT

I have a working HA distributed hybrid Kubernetes (K3S) cluster with three masters running on VPS nodes. They have public IPs and no private network (nodes spread across regions and cloud providers). ...
Ostap's user avatar
  • 1
0 votes
0 answers
5 views

low level vs high level container runtime replacement

Which components inside docker can be replaced or run separately? standard docker distro has these components: docker cli(tool) on my local pc, translates docker cmds to rest api requests. docker ...
ERJAN's user avatar
  • 101
0 votes
0 answers
5 views

Ingress nginx routes to last wildcard and ignores precedence

I have the following ingress service config: apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: ingress-svc annotations: nginx.ingress.kubernetes.io/use-regex: "true" ...
reactor's user avatar
  • 101
1 vote
0 answers
43 views

Best practices of authentication to Vault

What could be considered the most secure way of authenticating in HashiCorp Vault by an application running in a Kubernetes cluster? The AppRole method is nice, but implementing AppRole implies that ...
Volodymyr Melnyk's user avatar
1 vote
1 answer
22 views

Cert-manager challenge failing self check

I am currently facing an issue with cert-manager while trying to obtain a Let's Encrypt certificate for my Kubernetes cluster running on Scaleway Kapsule. I have successfully installed cert-manager ...
cvk's user avatar
  • 111
-1 votes
0 answers
12 views

k8s's pod in EC2 get disabled every hours

I'm running k8s on my ec2(t3.medium, not eks node) as masternode for webapp. I thought t3.medium could handle k8s, but.. my api server just not works(nginx shows 502 bad gateway) every hours and I ...
bucky2's user avatar
  • 1
-1 votes
0 answers
5 views

Help: Coordinating Serverless Functions and Tracking Performance

I have a few questions about Nuclio serverless functions that I would appreciate some answers/suggestions. I am completely new to the tools I'm about to mention, as well as the concept of Serverless ...
Round Robin's user avatar
0 votes
1 answer
12 views

How to not create wildcard records using External-DNS?

I am now setting up External DNS to automate the DNS records creation on AWS Route53 for EKS Ingresses. I now have a working setup that can create and delete records depends on ingress existence. ...
Tony Chan's user avatar
-1 votes
0 answers
10 views

Can't resolve service in Kubernetes

Hi all! Please tell me, maybe someone has encountered a similar problem or knows in which direction to think and look. I have a pod that wants to connect to Redis, but we use dragonfly instead, but ...
Moonlight's user avatar
0 votes
1 answer
26 views

Container orchestration vs. VM orchestration in the cloud

I'm trying to understand the specific use cases where we'd prefer to use container orchestration (Kubernetes) as opposed to VM orchestration (Nomad) in an unmanaged cloud setting (e.g., EC2) It seems ...
shintuku's user avatar
  • 101
0 votes
0 answers
12 views

Minikube NGINX Unable to connect to the remote server

i have installed and run minikube on my NUK for testing purpose. Im trying to expose an nginx instance running on a POD so that it can be reached from another PC on the same network. My network is ...
cyberdemon's user avatar
0 votes
0 answers
13 views

`apiVersion` is set to `v1beta1`. Still getting 'no kind "ExecCredential" is registered for version "client.authentication.k8s.io/v1alpha1"'

Despite having explicitly set apiVersion: client.authentication.k8s.io/v1beta1, why the following error when running any kubectl command (f.e. kubectl version)? Unable to connect to the server: ...
VanillaDonuts's user avatar
0 votes
0 answers
9 views

Kubernetes rollout deployment history CHANGE-CAUSE field is always <none>

I just ran kubectl create deploy nginx --image=nginx:1.18.0 --replicas=2 --port=80 to create a deployment. Then edited the image of that deployment kubectl set image deploy nginx nginx=nginx:1.19.8 ...
Zimano's user avatar
  • 101
0 votes
0 answers
20 views

Helm Charts for deploying a web app with a frontend and 5 microservices

My organization has decided to migrate to kubernetes and we have chosen to leverage eks.My task is to migrate our simple system consisting of a frontend and 5 microservices to the cluster.I want to ...
Stanley's user avatar
0 votes
0 answers
5 views

Mount Job Directory as Copy-on-Write

I’m working on a build system and have a master job that spawns other child jobs (ie build, deploy, etc). I am currently downloading the repo in the master job and would like to share the directory as ...
Jack's user avatar
  • 101
0 votes
1 answer
23 views

Concat multiple meta labels on prometheus for relabling

How can I change the value of the label __param_target to resemble how I would interact with a Kubernetes service in-cluster, following the format: http://serviceName.namespace.svc:servicePort/path ? ...
Elad Avikzer's user avatar
0 votes
1 answer
29 views

get rid of PodSecurity warnings

I often use curl image to test out connectivity inside clusters: kubectl --kubeconfig ./kubeconfig run curly --image=curlimages/curl --rm -it --restart=Never -- /bin/sh However, with k8s v1.27+ a ...
Serve Laurijssen's user avatar
0 votes
0 answers
16 views

Kubernetes: How to restart services after os patch

We have traefik service running as below: ~]$ netstat -pante | grep LIST | grep -w 443 tcp6 0 0 :::443 :::* LISTEN 0 82345 12345/...
Mihir's user avatar
  • 101
0 votes
1 answer
31 views

Discrepancy between Kubernetes node memory usage reported by kubectl top and summed pod memory usage

I'm facing a discrepancy in memory usage reporting in my Kubernetes cluster, and I'm hoping to gain some insights into what might be causing it. When I run kubectl top pods --all-namespaces, I get the ...
A. Vreeswijk's user avatar
1 vote
1 answer
18 views

CPU priorities for pods in k8s cluster

Consider this scenario: 1 worker node with 4 CPU cores 2 pods there, one of which is some CPU intensive bg task, another one is a web server with unpredictable CPU load during the day. I need to ...
Kivan's user avatar
  • 111
1 vote
0 answers
16 views

CSI Driver: FSGroup mentioned in POD spec is not accessible from NodePublish volume

I am using volumeMountGroup := req.GetVolumeCapability().GetMount().GetVolumeMountGroup() klog.V(2).Infof("-NodePublishVolume-: volumeMountGroup: %v",volumeMountGroup) in my CSI ...
ambikanair's user avatar
0 votes
0 answers
13 views

The Plain HttP Request sent to Https port for passbolt deployment

I have an issue when deploying passbolt on Kubernetes through helm chart. ( I use rancher for the management UI) Nginx controller in used for k8s ingress and target port is 443 on passbolt service. ...
Mhd Ridho Swasta's user avatar
0 votes
1 answer
10 views

Is it possible to add a toleration in kube-fledged?

kube-fledged provides nodeSelector to select the node you want the image to be cached on. But there are taints on the nodes in my cluster. Would it be possible to add a toleration in the imagecache ...
sylvesterasa's user avatar
-1 votes
1 answer
13 views

kube fleged imagePullSecrets not working(ImagePullBackOff)

apiVersion: kubefledged.io/v1alpha2 kind: ImageCache metadata: name: imagecache1 namespace: kube-fledged labels: app: kubefledged component: imagecache spec: imagePullSecrets: - ...
sylvesterasa's user avatar
-1 votes
1 answer
10 views

How to deploy AKS without exposing cluster API to the internet?

How to deploy Azure AKS kubernetes in a private network mode without exposing cluster API to the internet? I need to deploy React with Github actions and test that it's working
cyrax1441's user avatar
0 votes
1 answer
45 views

Ensure two node ports have the same IP address

I'm working on setting up a testing environment for my application. Without getting into all of the details, one requirement is that I stand up a container that is listening on two TCP ports. It is ...
Daniel Walker's user avatar
0 votes
1 answer
7 views

Server error 502 - problems with .net core web app deploy made on GCloud's GKE using OAuth 2.0 Authentication

I have an MVC .net core 6 web application that uses Google's OAuth2.0 authentication and I cannot publish it with Kubernetes. Project context: Locally it compiles and runs normally, including creating ...
LostMyMind's user avatar
0 votes
0 answers
8 views

How to work with krew in Jenkins?

I'm new to jenkins . I have written a jenkins pipeline to create blockchain network using HLF Operator. I've installed kubectl on the vm and used it as node in jenkins. The kubectl commands and other ...
Haaris Khatri's user avatar
0 votes
1 answer
19 views

Setting ingress port with helm parameter

I am runnning portainer on a k3s cluster, and installing/updating portainer using the command helm upgrade --install --create-namespace -n portainer portainer portainer/portainer\ --set ...
JoSSte's user avatar
  • 131
0 votes
0 answers
15 views

Kubernetes pods container initialization doesn't finish for Dagster

Installation set-up: I'm trying to run dagster on Kubernetes. I use the default values.yaml file and the only change I'm making is replacing "docker.io" with "registry.hub.docker.com&...
TheEsnSiavashi's user avatar
0 votes
0 answers
95 views

Postgres pod not creating user despite the `env` variable `POSTGRES_USER`

I have the following pod setup: Secret: apiVersion: v1 kind: Secret metadata: name: postgres-secret labels: app: postgres type: Opaque data: postgres_user: <base64> postgres_password:...
codehitman's user avatar
0 votes
0 answers
16 views

is it possible to show the pod pause image address in kubernetes

I want to check the pod pause image address, then using this command to check: > kubectl get pod reddwarf-postgresql-postgresql-0 -o=jsonpath='{.spec.containers[0].image}' -n reddwarf-storage ...
Dolphin's user avatar
  • 121
0 votes
0 answers
6 views

Running GKE Cluster behind a FortiGate Firewall VM

I have a simple project in which I should implement and deploy a GKE cluster behind a FortiGate FW, the Architecture of my project is (project is deployed on Google Cloud Platform): An external VPC ...
Mohammad Yousef's user avatar
0 votes
1 answer
55 views

Performance differences of using Remote Block Volume in Kubernetes?

In Kubernetes, there are various types of PVs, and local PV is mentioned as the most performant type among those. refs) https://kubernetes.io/docs/concepts/storage/persistent-volumes/#types-of-...
Shunsuke's user avatar
0 votes
1 answer
72 views

Execute Kubernetes commands with Jenkins

I am a beginner to devops and right now I'm learning jenkins. I have a kind cluster on my local machine and jenkins running inside a docker container at http://localhost:8000. I wish to execute the ...
Haaris Khatri's user avatar
0 votes
0 answers
10 views

How to configure kubectl scale command to fail if image is wrong

If the current image is wrong/old/dne then I want this command to fail: kubectl scale deploy gms --replicas=4 it just scales whatever is there - but I want it to check to ensure it's scaling the ...
Alexander Mills's user avatar
0 votes
1 answer
49 views

How to deploy one K8s master on several servers, e.g. on 2 servers?

Sorry, as a noob I have no clue about how to deploy one K8s master node on several physical servers, e.g. deploy one master node on 2 servers? Not HA solution, just one master node. Could anyone give ...
Ben's user avatar
  • 13
0 votes
0 answers
43 views

How to use Kubernetes OICD-Login WITH OTP but WITHOUT userinterface/browser?

I am connecting to Kubernetes Cluster, using kubectl oidc-login ( https://github.com/int128/kubelogin/ ) and using grant-type=password as there is no browser available on the system. This works fine: ...
Simon_Prewo's user avatar
0 votes
0 answers
60 views

How to sync External Secrets on an AKS Cluster with an Azure Key Vault?

I'm trying to integrate AKS with Key Vault using the External Secrets operator. I've set up the operator itself using the Helm chart, and I've created a SecretStore resource pointed at a Vault (we'll ...
Ryan Draga's user avatar
0 votes
1 answer
33 views

Using route and proxy with a NGINX virtualserver K8s config

I have a kinda weird set up where I have a general url(www.example.com) that terminates on an F5 that points to a nginx VS on an EKS cluster that has a localized domain(www.ue1.example.com). So the ...
flyerhawk's user avatar
0 votes
1 answer
201 views

metrics-server on EKS - no metrics to server

I am attempting to setup metrics-server to server my 'horizon pod autoscaling' and manage my app pods scaling based on CPU. I am unable to get the metrics-server to run properly which fails with ...
Don Draper's user avatar
-1 votes
1 answer
28 views

How to monitor k3s/rancher pods?

The problems I'm facing are these pods crash out of nowhere and I'm unable to debug why it happened. How can I monitor them?
barnyard9's user avatar
  • 101
0 votes
1 answer
811 views

How to use uriRegexRewrite in Istio VirtualService?

I was waiting on the Regex Rewrite based on Capture Groups for a long time and it was finally merged in 1.19.4. I cannot find much documentation regarding how to use the uriRegexRewrite and my ...
Sinux's user avatar
  • 1
0 votes
1 answer
18 views

Is the data shared between two pods database deployment k8s

I have a structure like shown in the image below: cluster with two nodes and service for the database (postgres). Is the data shared between those two pods of postgres images or is it possible to set ...
Aleksa Ristic's user avatar
0 votes
1 answer
177 views

How to deploy an nginx ingress to a kubeadm cluster

I'm attempting to set up my own bare-metal Kubernetes cluster composed of a control plane (VPS 149.62.186.95) and a worker node (VPS 149.62.189.139). Both my VPS are running Ubuntu 22.04 with 2 vCPUs ...
Lorenzo Rottigni's user avatar
0 votes
1 answer
216 views

Deploy a Redis cluster with Docker

I need to create a Redis cluster using Docker (with Kubernetes afterwards) and didn't find any official documentation on that matter. Could I have guidance on that subject ? I have the below yaml ...
Jérémy Ferfer's user avatar
0 votes
1 answer
97 views

Tekton Kaniko build - gives push permissions errors

When running a pipeline with a Kaniko build task, I see the following error message: E0105 13:50:28.345758 19 aws_credentials.go:77] while getting AWS credentials NoCredentialProviders: no valid ...
tm1701's user avatar
  • 101

1
2 3 4 5
17