Questions tagged [kubernetes]

For questions about Kubernetes, an open-source system for automating deployment, scaling, and management of containerized applications.

111 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5
votes
1answer
920 views

Kubernets docker registry behind nginx-ingress

I try to setup docker-registry in Kubernetes cluster behind the nginx-ingress controller. The issue is, when I try to push the image into private registry, it tells me: Get https://registry.local/...
4
votes
2answers
640 views

Automate Helm's tiller installation with Terraform

I need to be able to generate disposable kubernetes environments using terraform. These environments should use helm for application deployment and ideally have tiller installed during the terraform ...
3
votes
0answers
13 views

How do I disable the effective 'time limit' on editing Kubernetes deployments?

If I edit a Kubernetes deployment (e.g. kubectl edit deployment <name> or using the Web UI), and wait too long before saving my changes and exiting, the deployment file will have changed while I ...
3
votes
1answer
141 views

Process auditing in containers

I've read numerous articles on this going back to 2013, but what I wasn't able to ascertain is whether a reliable method has yet been devised for auditing processes inside a container. This question ...
3
votes
1answer
141 views

Does Prometheus expose the Horizontal Pod Autoscaler's “Current CPU Utilization” as shown in the Kubernetes dashboard?

In the Kubernetes dashboard, I can see for a HPA the following information: Min Replicas: 3 Max Replicas: 11 Target CPU Utilization: 80% Status Current Replicas: 3 Desired Replicas: 3 Current CPU ...
3
votes
2answers
97 views

Automatic Kubernetes deployments per Github pull-request

I'm looking for a tool/service that will achieve a similar result as Heroku Review Apps using Google services. When a new pull-request is created in Github: Create new Cloud Build trigger for it ...
3
votes
0answers
168 views

Encrypted at rest persistent volume in kubernetes?

Is there a recommended approach to using encrypted file system for persistent volumes in kubernetes? Perhaps mounting a LUKS fs disk image file ?
3
votes
0answers
324 views

Kubernetes on Azure, how do I reuse an existing disk in a new PersistentVolume?

I currently have a managed Azure disk created from a Azure disk snapshot of a Kubernetes Persistent Volume that no longer exists. I would like to know how to reuse the restored disk in a new '...
2
votes
0answers
29 views

Deprecation errors using run to test an nginx container in Kubernetes v1.3.6

I'm getting deprecation errors while trying to run a couple of nginx pods bash-4.4$ kubectl run nginx --image=nginx --port=80 --replicas=3 WARNING: New generator "deployment/apps.v1beta1" specified, ...
2
votes
0answers
219 views

Kubernetes auto scaling in cloud environment

Anyone knows if there is a solution to provision (non-managed) autoscaling Kubernetes clusters in the cloud? I am looking for a generic solution that will work in any public cloud and in private data ...
2
votes
0answers
205 views

Did somebody manage to activate IAP for k8s successfully?

IAP works on Google in conjunction with App engine, but when IAP is activated for a backend service behind a loadbalancer, a 404 is returned and the app is redirected to _gcp_gatekeeper/authenticate ...
2
votes
0answers
46 views

How do I get Openshift to let Tomcat retain it's hosted site's changes

I have a pod in Redhat Openshift running Tomcat and inside Tomcat I have Ozone Widget Framework, my site hosted in Tomcat. I have executed the oc command to use my existing configuration so that my ...
1
vote
0answers
10 views

Keeping Pods Balanced Across Nodes in AKS

We had a fun issue yesterday and today where after a restart of some nodes, we ended up with more or less every pod on one server. After some research, it seems like most of the solutions for this ...
1
vote
0answers
27 views

Google cloud container running 40x slower then on aws

i have a flask api tunning a pytorch predict inside a kubernetes cluster. I deployed it on AWS and got good results. I have tried on GKE and had good results, but when im deploying my pods on a high ...
1
vote
0answers
126 views

Rancher Pipeline: How to pass environment variables from one stage to another

Currently I am trying to move our existing build infrastructure to Rancher with its CICD pipelines. My main question is: Is it possible to pass environment variables from one stage to another? Our ...
1
vote
0answers
58 views

“Error: forwarding ports: Upgrade request required” Error in helm of a kubernetes cluster

I have a kubernetes cluster built using kubespray and imported to Rancher. The nodes are configured with CentOS Linux 7 3.10.0-957.12.1.el7.x86_64 Docker version : 18.9.5 Kubelet version : v1.14.1 ...
1
vote
1answer
37 views

Does K8s ClusterIP service supports custom timeout?

Report from Stack Overflow due to off-topic Base knowlege Since this question deals particularly with various timeouts configuration in Nginx, I thought giving their references here would make it ...
1
vote
0answers
123 views

Kubernetes metric or command to show liveness delay time (app startup time)

HTTP Kubernetes liveness and readiness checks are configured as per the documentation. The initialDelaySeconds field tells the kubelet how long it should wait before performing the first liveness / ...
1
vote
1answer
1k views

How to solve 'upstream connect error or disconnect/reset before headers. reset reason: connection termination' in Istio?

I try to setup an aws load balancer (ELB) with SSL follow the instruction at #6566 Certificate was attached on ELB. However, I got the issue "upstream connect error or disconnect/reset before ...
1
vote
0answers
25 views

Kubernetes scheduler trying to assign pods to node that no longer exists

I had a node get automatically removed from our kubernetes cluster by the autoscaler. However, it appears the scheduler didn't get the memo, and it's still trying to assign pods to the dead node: ...
1
vote
0answers
39 views

Deis Workflow Alternative

We're looking to build an internal Heroku-like PaaS that supports clustering and a DFS. We found Deis Workflow that seems to do exactly what we're looking for, but the project has since been ...
1
vote
0answers
39 views

How to differentiate logs on the Error Reporting in the GCloud?

We have two clusters with multiple namespaces in each project. However our Error Reporting groups all errors together in the whole project and marking them as ‘gke_instances’ - there must be a better ...
1
vote
0answers
29 views

kubernetes - load balancing where ressources are available

I would like to know how could I set up a load balancer at the Kubernetes level so my services point to the pods that have more RAM/CPU resources available, and not randomly. It would be co-existing ...
1
vote
0answers
25 views

jenkins-x with “jx” installer: enforce https instead of http

My current kubernetes setup has no open http port, for security reasons. But https is open and has a valid certificate. Still the jx installer of jenkins-x seems to require http in order to complete ...
1
vote
1answer
180 views

Keeping graphs of terminated Kubernetes pods in Prometheus/Grafana

I love using Prometheus/Grafana to monitor and tune resource usage on my Kubernetes clusters. When pods are terminated, however, the graphs are disposed of it seems. I am looking for a solution to ...
1
vote
0answers
790 views

Access denied when pulling private registry image using helm with gitlab runner helm chart and ci job

I have a kubernetes cluster with 1 master and 2 workers. All nodes have their IP address. Let's call them like this: master-0 worker-0 worker-1 The network pod policy and all my nodes communication ...
1
vote
0answers
57 views

Kubernetes: How to tell on which node a local storage PV has been created on

I have provisioned manually a few small local storage PVs for a redis stateful set (I have provisioned 10 on a 3 node cluster) They seem to to be working fine. The pods created by the redis stateful ...
1
vote
0answers
30 views

In simple terms, what is the advantage of a Virtual Kubelet?

I have read about the Virtual Kubelet project. I can see that it allows you to delegate from Kubernetes to an Azure Container Instance (ACI), that it allows you to deploy both unix/windows boxes, ...
1
vote
0answers
15 views

Flow for Confluent Plugins on Kubernetes

Our team is developing Confluent/Kafka Source Connector-plugins. Do you have any ideas on how to install/upgrade the plugins? How is the flow (git -> Jenkins -> running Source Connector) supposed to ...
1
vote
0answers
25 views

gcloud Kubernetes API - Can't scale over 25 RPS, or how to find a bottleneck

We recently moved our GraphQL API from a big stateful monolithic app to a stateless design running on kubernetes in Google Cloud. Our production cluster is composed of: 6x n1-standard-2 (2 vCPUs, 7....
1
vote
0answers
46 views

How do I set up a Prometheus rule to routinely scrape an HTTP endpoint?

I'm getting started with Prometheus (Prometheus Operator), and I'm looking at adding it to an existing cluster, where each container has a /healthcheck endpoint, that is going to either return true, ...
1
vote
1answer
38 views

Easiest way to manage an elasticsearch cluster in GCP?

I'm trying to create my own Elasticsearch cluster to use for security analytics. I'm familiar with the function and setup of a single instance deployment, but I'm having trouble figuring out the ...
1
vote
0answers
203 views

How to get all log files on kubernetes master node?

I need to receive all container logs using Filebeat autodiscover. When I deployed Filebeat to Kubernetes without using helm, I got all the container logs in the first attempt. I want to do the same ...
1
vote
0answers
73 views

How to setup external service (keycloak) to protect an app in kubernetes?

I have a java application protected by keycloak (that's an standalone application for session control which runs on port 9080). Keycloak is available to world because during auth process, my app ...
1
vote
0answers
180 views

running httpd and nginx in the same pod kubernetes

I am not able to run both apache (httpd) and nginx in the same pod. Indeed both containers are running on port 80. # kubectl logs -f multi-container -c apache (98)Address in use: AH00072: make_sock: ...
1
vote
0answers
56 views

What are the security loopholes closed by introducing Istio

My application consists of four microservices. (hr, salary, stock and employee). Users of the application access the "hr" service using http. To fulfill this request the hr microservice communicates ...
1
vote
1answer
1k views

Keep getting permissions error gcloud.container.clusters.get-credentials

I am trying to integrate CircleCi with gcloud Kubernetes engine. I created a service account with Kubernetes Engine Developer and Storage Admin roles. Created CircleCi yaml file and configured CI. ...
1
vote
1answer
121 views

Tfs octopus migration to k8s and docker

My current client uses .net and .net core, tfs and deploys via octopus. They want to use helm, k8s and docker. With all of the environments, env variables are already in octopus. I am thinking to ...
1
vote
0answers
328 views

Kubernetes Continuous deployment stage in Gitlab Online fails

I am working on setting up a cloud DevOps deployment pipeline using Gitlab CI online, Kubernetes, and docker. I am following an example post at Continous delivery of a spring boot application with ...
1
vote
0answers
1k views

Is there a standard pattern for doing flyway migrations on a kubernetes stack?

My google-fu is failing me here. There's these instructions from redhat but they're cooking their own flyway. Here's what I've done: I have a dockerfile that looks like this: FROM boxfuse/...
1
vote
0answers
265 views

Gateway TimeoutError from server while accessing pods logs

I'm trying to execute kubectl logs on one of my pods. When pod is created on node different than master - it fails with following message: Error from server: Get https://kube-worker-3:10250/...
1
vote
0answers
594 views

How to write Apache airflow dag for file watcher

Problem statement- New files arrive on NFS and looking for a solution (using Apache airflow) to perform continuous NFS scan (for new file arrival) and unzip & copy file to another repository (on ...
1
vote
1answer
137 views

How to identify the physical IP of where Kubernetes API server runs

Question In a Kubernetes cluster, there is a Docker network IP which looks to be the API server. However, not sure how to identify the physical IP and location of the box in which it is working. If ...
1
vote
0answers
36 views

How To Access Docker Client From Cloud Cluster

I am trying to create a Kubernetes Deployment out of a third party library related to my other question. This library requires pre-pulled docker images and will temporarily launch the containers as ...
1
vote
0answers
289 views

How to get eth1 ENI on AWS Instance to Respond to NodePort Requests?

Kubernetes 1.5 cluster running in AWS. Node1 (worker) has an additional network interface assigned to it with a static IP, so if you run "ip addr show" on the node you see eth0, eth1, and the gang of ...
0
votes
0answers
3 views

Kubernetes node dropping packets with source ip outside its network

I have a Kubernetes cluster set up with kubespray, with Flannel network and MetalLB installed. I set up my nginx-ingress-controller service to use NodePort, and from my laptop on the same network, ...
0
votes
0answers
11 views

How can I verify my Kubernetes Secret has been updated to the new value?

I am working to update the TLS Certificates across numerous deployments that I inherited. Each deployment consumes a series of shared secrets, including TLS Certificates. I have SSL/TLS Certs ...
0
votes
0answers
28 views

Run docker applications within a kubernetes cluster

As part of my architecture, I want to create a deployment/service on my kubernetes cluster which reads message queues and open dockerized subscribers and then subsequently relay message to the ...
0
votes
1answer
12 views

Kubernetes and Jenkins

I started building CI/CD pipeline using two Kubernetes clusters and one Jenkins. Two clusters are totally isolated as one is in the test environment and other in production. After searching from many ...
0
votes
0answers
8 views

Are there any multi-host container orchestration tools which allow USB device mapping? Or any production grade solutions/hacks?

Docker provides a --device flag for individual containers to map device ports (USB devices for example; ttyUSB0, ttyACM0) at run-time. This feature is great but seems to disappear when we abstract ...