Questions tagged [kubernetes]

For questions about Kubernetes, an open-source system for automating deployment, scaling, and management of containerized applications.

80 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5
votes
1answer
238 views

Connect external Jenkins Master to GKE with Kubernetes plugin

I find the documentation at https://github.com/jenkinsci/kubernetes-plugin quite unclear when it comes to step by step configuration of external Jenkins master. What are the exact steps that need to ...
4
votes
1answer
55 views

Change docker container’s log PATH

Team: All my container logs are under /var/log/containers.. Where in kubelet or docker config can I specify this path such that logs are instead created under new path? Ex : /shared ? Instead of /var/...
4
votes
0answers
2k views

Is there a standard pattern for doing flyway migrations on a kubernetes stack?

There's these instructions from redhat but they're cooking their own flyway. Here's what I've done: I have a dockerfile that looks like this: FROM boxfuse/flyway ADD ./flyway /flyway #TODO: ...
2
votes
0answers
29 views

How to run a container from within another container while also mounting a volume from the first container?

I'm running a build in Jenkins which is running inside Kubernetes. When the job starts, a container starts in the cluster and the build runs inside it. A step in the build requires building an RPM ...
2
votes
1answer
36 views

Redirect to a custom page on 503 error in Ingress

When our site is getting deployed, the Ingress gets created and before I could get any response I get 503 for 5-6 minutes (time taken to startup). We need to configure our ingress to redirect to a ...
2
votes
0answers
32 views

Grafana K8s microservices availability dashboard based on actuator uptime

I need to create a dashboard that is using micrometer prometheus spring actuator endpoint to show all services for a given namespaces in green boxes or red boxes depending on status, the boxes should ...
2
votes
0answers
77 views

How to deploy StatsD listening on UDP in kubernetes with external loadbalancer on AWS?

Our goal is to have StatsD deployed on k8s cluster running on AWS. Currently all existing applications using UDP to send StatsD metrics. As we understood from the kubernetes docs and tests we ...
2
votes
0answers
118 views

Confluent Kafka helm chart - broker pods not being able to communicate to Zookeper overtime

We are running confluent helm chart on a lot of clusters, we occasionally get brokers pods failing after some time and no self-heal after is following, the error in the broker usually is the following:...
2
votes
0answers
54 views

Enable SSLv3 in Minikube Nginx Ingress

I have some problems with enabling SSLv3 in my Nginx Ingress used as a Minikube addon. I have read in docs how to do it. It should be as simple as adding single map. Unfortunately I haven't had much ...
2
votes
0answers
121 views

Where does PGBouncer sit on a Kubernetes Cluster

I'm wanting to deploy some sort of connection pooling within my applications across multiple nodes. Python naturally provides some pooling with the SQLAlchemy implementation; but obviously this ...
2
votes
0answers
43 views

SFTP server with third party user management system?

I understand how to set up SFTP servers on Linux and create users and their passwords manually. So basically, the users get authenticated as normal Linux users get authenticated through /etc/passwd. ...
2
votes
0answers
46 views

Issue with Spinnaker automated trigger

I am trying to get Spinnaker to have a pipeline use an automated trigger which is an image pushed to an ECR repo. I can add different repos fine but can't seem to see the images. I am following this ...
2
votes
0answers
450 views

Kubernetes metric or command to show liveness delay time (app startup time)

HTTP Kubernetes liveness and readiness checks are configured as per the documentation. The initialDelaySeconds field tells the kubelet how long it should wait before performing the first liveness / ...
2
votes
0answers
40 views

In simple terms, what is the advantage of a Virtual Kubelet?

I have read about the Virtual Kubelet project. I can see that it allows you to delegate from Kubernetes to an Azure Container Instance (ACI), that it allows you to deploy both unix/windows boxes, ...
2
votes
1answer
90 views

Easiest way to manage an elasticsearch cluster in GCP?

I'm trying to create my own Elasticsearch cluster to use for security analytics. I'm familiar with the function and setup of a single instance deployment, but I'm having trouble figuring out the ...
2
votes
0answers
82 views

What security loopholes does Istio tackle?

My application consists of four microservices. (hr, salary, stock and employee). Users of the application access the "hr" service using http. To fulfill this request the hr microservice communicates ...
1
vote
0answers
59 views

Modifying Microk8s System Manifests

To start, I am new to Kubernetes, so please feel free to point out and correct any terminology I get wrong. In a nutshell, I want to be able to run microk8s enable ingress with custom configuration ...
1
vote
1answer
61 views

How to use Hashicorp Vault with NodeJS application?

I have Node JS app inside pods, which needs to read vault secrets. So far I found 2 methods for doing that Using init container to mount secrets as .txt files and read/parse them in my app Using node-...
1
vote
0answers
15 views

In what time ranges do you verify your canary deployments?

I am currently implementing a canary deployment strategy for the services of an Have you already worked with carary deployments? After which timeframe do you decide to roull out 100%? Which factors do ...
1
vote
0answers
183 views

Remove resource from Kustomize base?

I have a kustomize base that I'd like to re-use without editing it. Unfortunately, it creates a namespace I don't want to create. I'd like to simply remove that resource from consideration when ...
1
vote
0answers
51 views

Copying a large number of files (>4GB) into a Kubernetes pod results in error code 137

I'm trying to find a workaround for this that isn't incredibly slow. I'm trying to download a large data folder from a Kubernetes pod for reupload to another cluster that is not connected to the ...
1
vote
0answers
26 views

How to use tcpdump to kubernetes loadbalancer assigned services

My k8 cluster has MetalLB. Now I want to get a tcpdump to check inter-communication. As described here In this mode a service is owned by one node in the cluster. It is implemented by announcing that ...
1
vote
0answers
34 views

How can i deploy docker image into kubernetes cluster using Jenkins single job run

Certificate will be generated by a tool Jenkins instance installed. Need to automate certificate renewal process for kubernetes cluster.
1
vote
0answers
29 views

K8s sig-storage-local-static-provisioner hostDir against /vagrant mount?

I am trying to set storage sig-storage-local-static-provisioner to /vagrant mapped folder on windows host, my expectation is that the localstorage calss will automatically provision pvs based on pvc ...
1
vote
0answers
70 views

Lock down Kubernetes cluster to Github-hosted runners (GH Actions)?

After building a new container image in a GitHub Actions workflow, I would like to deploy it to a Kubernetes cluster (hosted in AKS) via the k8s-deploy action. This requires the cluster to be ...
1
vote
0answers
18 views

K8 / Cert-Manager / Errors and Possible YAML misconfiguration

I am attempting to get cert-manager working with Let's Encrypt and I am running into some interesting errors, such as cert-manager not being able to access resources. I am also seeing two certificates ...
1
vote
1answer
57 views

Pattern(s) to scale node.js based ETL

I have a node.js ETL application that transforms data from 1..n locations and from each location there will be 0..m transactions. The application is started via cron on a configurable interval, ...
1
vote
0answers
227 views

How can I ensure Helm doesn't install a dependency twice?

If I have a chart, say ChartA, that has a dependency on ChartB, I want to only install ChartB if it hasn't been installed already. Why? Let's say I run 2 copies of ChartA, and they both need a ...
1
vote
0answers
42 views

Can't set up basic k3s cluster on raspberry pi setup

I apologize in advance if this is trivial as I am an undergrad and quite new to kubernetes, raspberry pis, and networking in general. I only included the fact I am working on Raspberry Pi for ...
1
vote
0answers
25 views

Kubernetes pod eviction and logging

EDIT: I found this Github issue and I'm waiting for their response: https://github.com/kubernetes/kubernetes/issues/26923#issuecomment-608581984. I have been tasked with improving our cluster-level ...
1
vote
0answers
18 views

How to enable anonymous authentication for kube-apiserver using kops on AWS C2?

I want to enable anonymous authentication using kops, but it's default settings provides the --anonymous-auth=false options to kube-apiserver: /usr/local/bin/kube-apiserver --allow-privileged=true --...
1
vote
0answers
26 views

Backup kubernetes cluster + EBS PVs / restore to new account?

We are migrating multiple EKS kubernetes clusters to new AWS accounts, and each of them has AWS EBS persistent volumes encrypted with the default account key. Within an account we were planning on ...
1
vote
2answers
40 views

Gather resource usage by process in a kubernetes cluster

I am searching for a tool similar to Prometheus + Grafana that gather and record resource usage especially memory usage by process-ID or process-name. We have two components that are running ...
1
vote
0answers
2k views

Access denied when pulling private registry image using helm with gitlab runner helm chart and ci job

I have a kubernetes cluster with 1 master and 2 workers. All nodes have their IP address. Let's call them like this: master-0 worker-0 worker-1 The network pod policy and all my nodes communication ...
0
votes
0answers
11 views

Can't reach AWS/EC2 + K3D + nginx + service

I'm having trouble accessing my K8S service... I'm running the service in K3D on an ec2 instance in AWS. I have deployed a simple HTTP rest API to this and I want to access it via a browser. I have a ...
0
votes
0answers
19 views

Jenkins and Kubernetes Design Involving GitHub

I am new to DevOps and am currently designing a CI/CD pipeline that involves integrating GitHub webhooks with Jenkins in a Kubernetes environment, and I would like to see whether this is feasible or ...
0
votes
0answers
13 views

What are snap.microk8s.x processes?

Yesterday, we had a downtime because of CPU 100% usage. When I checked new relic, it showed a few processes starting with snap.microk8s. taking all CPU power. I'm not familiar with microk8s. But, ...
0
votes
0answers
14 views

Kubernetes workers outside the SDDC cloud not connect to the masters

Please help us with the following problem: We are using calico from https://docs.projectcalico.org/manifests/calico.yaml to setup Kubernetes network on SDDC cloud. The masters are inside the cloud, ...
0
votes
1answer
18 views

kubectl asking for username (k8s cluster created via kops)

I created a kubernetes cluster using kops and deployed it in AWS (not EKS manual cluster using kops). Then I export in my local machine the configuration like kops export kubecfg --state ${...
0
votes
0answers
7 views

Linkerd vs kube-proxy

I have a basic understanding of both kube-proxy and Linkerd, but what i dont understand is how they overlap. When i apply new deployment with fx a ReplicaSet + a ClusterIP service, kube-proxy ...
0
votes
0answers
11 views

GKE How to update Ingresses with different names via helm?

We have 3 clusters, dev, stg and prd in Google Kubernetes Engine. For some reason, the ingress resources are differently named between clusters. So for dev and stage it is called ingress-resource and ...
0
votes
0answers
10 views

istiod reports “pilot_conflict_inbound_listener”

Every so often we see push status messages from istiod that report a pilot_conflict_inbound_listener. The conflicts appear to be reported for pods with more than one ClusterIP service pointing at them....
0
votes
0answers
13 views

How to use new VPC CIDR range in a Fargate-only EKS cluster?

I created an EKS Fargate-only cluster using an existing VPC, and currently have objects running in it. I want to associate new CIDR ranges for my VPC by following How do I use multiple CIDR ranges ...
0
votes
0answers
14 views

How to make sure K8S nodes only communicate via private network

I have the following setup: master and worker node are connected via eth0 to the internet and via enp7s0 to a local newtork (IP's 10.0.0.2 and 10.0.0.3). I have installed K8S with flannel as ...
0
votes
0answers
3 views

Grafana zabbix plugin is not shown in kubernetes service

I had created a custom docker image with zabbix plugin integrated to grafana. When I run docker run -p 3000:3000 myregistry:5000/grafana-zabbix, Grafana UI shows Zabbix plugin and I can enable and use ...
0
votes
0answers
11 views

Doing kubectl rollout undo causing current and previous replicasets persists

I am using kubectl for Kubernetes based deployments. I created a deployment that gone to crashloopbackoff state. Then for correcting this issue, a rolling update was done. But the deployment failed ...
0
votes
0answers
11 views

Are Fedora's Silverblue and CoreOS projects viable for Team Stations and Dev/Production envs, respectively? (Instead of CentOS)

According to RHE's website, the project Atomic Host was deprecated on August 06, 2020. I am curious if anyone knows if they are actively contributing to Fedora's Silverblue project and/or CoreOS ...
0
votes
1answer
49 views

Gitlab CI/CD: deploy docker image to existing kubernetes cluster

I have node.js application that I need to deploy to exising kubernetes cluster. The cluster is setup using kops on AWS. I have created .gitlab-ci.yml file for building docker images. So, whenever a ...
0
votes
0answers
10 views

I Want to deploy Consul and Registrator docker containers on Kubernetes

Locally on docker desktop it runs fine commands are. docker run -p 8400:8400 -p 8500:8500 -p 8600:53/udp -h node1 progrium/consul -server -bootstrap -ui-dir /ui 2.docker run -d --name=registrator --...
0
votes
0answers
13 views

What is the best host solution for a medium starter aplication nowadays?

I'm am deploying an application that can be split into a dashboard with some control systems and an API. The system was developed to be an web interface for some scripts and bots used by a community ...