Questions tagged [kubernetes]

For questions about Kubernetes, an open-source system for automating deployment, scaling, and management of containerized applications.

107 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4
votes
2answers
243 views

Automate Helm's tiller installation with Terraform

I need to be able to generate disposable kubernetes environments using terraform. These environments should use helm for application deployment and ideally have tiller installed during the terraform ...
3
votes
1answer
82 views

Process auditing in containers

I've read numerous articles on this going back to 2013, but what I wasn't able to ascertain is whether a reliable method has yet been devised for auditing processes inside a container. This question ...
3
votes
2answers
59 views

Automatic Kubernetes deployments per Github pull-request

I'm looking for a tool/service that will achieve a similar result as Heroku Review Apps using Google services. When a new pull-request is created in Github: Create new Cloud Build trigger for it ...
3
votes
0answers
669 views

Kubernets docker registry behind nginx-ingress

I try to setup docker-registry in Kubernetes cluster behind the nginx-ingress controller. The issue is, when I try to push the image into private registry, it tells me: Get https://registry.local/...
3
votes
0answers
309 views

Kubernetes on Azure, how do I reuse an existing disk in a new PersistentVolume?

I currently have a managed Azure disk created from a Azure disk snapshot of a Kubernetes Persistent Volume that no longer exists. I would like to know how to reuse the restored disk in a new '...
2
votes
1answer
95 views

Does Prometheus expose the Horizontal Pod Autoscaler's “Current CPU Utilization” as shown in the Kubernetes dashboard?

In the Kubernetes dashboard, I can see for a HPA the following information: Min Replicas: 3 Max Replicas: 11 Target CPU Utilization: 80% Status Current Replicas: 3 Desired Replicas: 3 Current CPU ...
2
votes
0answers
169 views

Kubernetes auto scaling in cloud environment

Anyone knows if there is a solution to provision (non-managed) autoscaling Kubernetes clusters in the cloud? I am looking for a generic solution that will work in any public cloud and in private data ...
2
votes
0answers
178 views

Did somebody manage to activate IAP for k8s successfully?

IAP works on Google in conjunction with App engine, but when IAP is activated for a backend service behind a loadbalancer, a 404 is returned and the app is redirected to _gcp_gatekeeper/authenticate ...
2
votes
0answers
142 views

Encrypted at rest persistent volume in kubernetes?

Is there a recommended approach to using encrypted file system for persistent volumes in kubernetes? Perhaps mounting a LUKS fs disk image file ?
2
votes
0answers
45 views

How do I get Openshift to let Tomcat retain it's hosted site's changes

I have a pod in Redhat Openshift running Tomcat and inside Tomcat I have Ozone Widget Framework, my site hosted in Tomcat. I have executed the oc command to use my existing configuration so that my ...
1
vote
0answers
21 views

“Error: forwarding ports: Upgrade request required” Error in helm of a kubernetes cluster

I have a kubernetes cluster built using kubespray and imported to Rancher. The nodes are configured with CentOS Linux 7 3.10.0-957.12.1.el7.x86_64 Docker version : 18.9.5 Kubelet version : v1.14.1 ...
1
vote
1answer
23 views

Does K8s ClusterIP service supports custom timeout?

Report from Stack Overflow due to off-topic Base knowlege Since this question deals particularly with various timeouts configuration in Nginx, I thought giving their references here would make it ...
1
vote
0answers
80 views

Kubernetes metric or command to show liveness delay time (app startup time)

HTTP Kubernetes liveness and readiness checks are configured as per the documentation. The initialDelaySeconds field tells the kubelet how long it should wait before performing the first liveness / ...
1
vote
1answer
197 views

How to solve 'upstream connect error or disconnect/reset before headers. reset reason: connection termination' in Istio?

I try to setup an aws load balancer (ELB) with SSL follow the instruction at #6566 Certificate was attached on ELB. However, I got the issue "upstream connect error or disconnect/reset before ...
1
vote
0answers
21 views

Kubernetes scheduler trying to assign pods to node that no longer exists

I had a node get automatically removed from our kubernetes cluster by the autoscaler. However, it appears the scheduler didn't get the memo, and it's still trying to assign pods to the dead node: ...
1
vote
0answers
18 views

Deis Workflow Alternative

We're looking to build an internal Heroku-like PaaS that supports clustering and a DFS. We found Deis Workflow that seems to do exactly what we're looking for, but the project has since been ...
1
vote
0answers
27 views

How to differentiate logs on the Error Reporting in the GCloud?

We have two clusters with multiple namespaces in each project. However our Error Reporting groups all errors together in the whole project and marking them as ‘gke_instances’ - there must be a better ...
1
vote
1answer
29 views

Secure Jenkins X on kubernetes

I install Jenkins X on kubernetes. I want to change the default installation and secure the Jenkins url, so it will be not accessible from the public. Can i change it to some port, or some way to ...
1
vote
0answers
29 views

kubernetes - load balancing where ressources are available

I would like to know how could I set up a load balancer at the Kubernetes level so my services point to the pods that have more RAM/CPU resources available, and not randomly. It would be co-existing ...
1
vote
0answers
20 views

jenkins-x with “jx” installer: enforce https instead of http

My current kubernetes setup has no open http port, for security reasons. But https is open and has a valid certificate. Still the jx installer of jenkins-x seems to require http in order to complete ...
1
vote
1answer
79 views

Keeping graphs of terminated Kubernetes pods in Prometheus/Grafana

I love using Prometheus/Grafana to monitor and tune resource usage on my Kubernetes clusters. When pods are terminated, however, the graphs are disposed of it seems. I am looking for a solution to ...
1
vote
0answers
585 views

Access denied when pulling private registry image using helm with gitlab runner helm chart and ci job

I have a kubernetes cluster with 1 master and 2 workers. All nodes have their IP address. Let's call them like this: master-0 worker-0 worker-1 The network pod policy and all my nodes communication ...
1
vote
0answers
33 views

Kubernetes: How to tell on which node a local storage PV has been created on

I have provisioned manually a few small local storage PVs for a redis stateful set (I have provisioned 10 on a 3 node cluster) They seem to to be working fine. The pods created by the redis stateful ...
1
vote
0answers
25 views

In simple terms, what is the advantage of a Virtual Kubelet?

I have read about the Virtual Kubelet project. I can see that it allows you to delegate from Kubernetes to an Azure Container Instance (ACI), that it allows you to deploy both unix/windows boxes, ...
1
vote
0answers
15 views

Flow for Confluent Plugins on Kubernetes

Our team is developing Confluent/Kafka Source Connector-plugins. Do you have any ideas on how to install/upgrade the plugins? How is the flow (git -> Jenkins -> running Source Connector) supposed to ...
1
vote
0answers
20 views

gcloud Kubernetes API - Can't scale over 25 RPS, or how to find a bottleneck

We recently moved our GraphQL API from a big stateful monolithic app to a stateless design running on kubernetes in Google Cloud. Our production cluster is composed of: 6x n1-standard-2 (2 vCPUs, 7....
1
vote
0answers
42 views

How do I set up a Prometheus rule to routinely scrape an HTTP endpoint?

I'm getting started with Prometheus (Prometheus Operator), and I'm looking at adding it to an existing cluster, where each container has a /healthcheck endpoint, that is going to either return true, ...
1
vote
1answer
33 views

Easiest way to manage an elasticsearch cluster in GCP?

I'm trying to create my own Elasticsearch cluster to use for security analytics. I'm familiar with the function and setup of a single instance deployment, but I'm having trouble figuring out the ...
1
vote
0answers
164 views

How to get all log files on kubernetes master node?

I need to receive all container logs using Filebeat autodiscover. When I deployed Filebeat to Kubernetes without using helm, I got all the container logs in the first attempt. I want to do the same ...
1
vote
0answers
66 views

How to setup external service (keycloak) to protect an app in kubernetes?

I have a java application protected by keycloak (that's an standalone application for session control which runs on port 9080). Keycloak is available to world because during auth process, my app ...
1
vote
0answers
136 views

running httpd and nginx in the same pod kubernetes

I am not able to run both apache (httpd) and nginx in the same pod. Indeed both containers are running on port 80. # kubectl logs -f multi-container -c apache (98)Address in use: AH00072: make_sock: ...
1
vote
0answers
44 views

What are the security loopholes closed by introducing Istio

My application consists of four microservices. (hr, salary, stock and employee). Users of the application access the "hr" service using http. To fulfill this request the hr microservice communicates ...
1
vote
1answer
714 views

Keep getting permissions error gcloud.container.clusters.get-credentials

I am trying to integrate CircleCi with gcloud Kubernetes engine. I created a service account with Kubernetes Engine Developer and Storage Admin roles. Created CircleCi yaml file and configured CI. ...
1
vote
0answers
18 views

Deprecation errors using run to test an nginx container in Kubernetes v1.3.6

I'm getting deprecation errors while trying to run a couple of nginx pods bash-4.4$ kubectl run nginx --image=nginx --port=80 --replicas=3 WARNING: New generator "deployment/apps.v1beta1" specified, ...
1
vote
1answer
104 views

Tfs octopus migration to k8s and docker

My current client uses .net and .net core, tfs and deploys via octopus. They want to use helm, k8s and docker. With all of the environments, env variables are already in octopus. I am thinking to ...
1
vote
1answer
1k views

Jenkins Pipeline Kubernetes Agent shared Volumes

I have a Jenkins Pipeline using Kubernetes Agent. I schedule multiple containers in my pod template. I recently wanted to add volumes that would be shared some of the containers and am having ...
1
vote
0answers
282 views

Kubernetes Continuous deployment stage in Gitlab Online fails

I am working on setting up a cloud DevOps deployment pipeline using Gitlab CI online, Kubernetes, and docker. I am following an example post at Continous delivery of a spring boot application with ...
1
vote
0answers
925 views

Is there a standard pattern for doing flyway migrations on a kubernetes stack?

My google-fu is failing me here. There's these instructions from redhat but they're cooking their own flyway. Here's what I've done: I have a dockerfile that looks like this: FROM boxfuse/...
1
vote
0answers
221 views

Gateway TimeoutError from server while accessing pods logs

I'm trying to execute kubectl logs on one of my pods. When pod is created on node different than master - it fails with following message: Error from server: Get https://kube-worker-3:10250/...
1
vote
0answers
527 views

How to write Apache airflow dag for file watcher

Problem statement- New files arrive on NFS and looking for a solution (using Apache airflow) to perform continuous NFS scan (for new file arrival) and unzip & copy file to another repository (on ...
1
vote
1answer
99 views

How to identify the physical IP of where Kubernetes API server runs

Question In a Kubernetes cluster, there is a Docker network IP which looks to be the API server. However, not sure how to identify the physical IP and location of the box in which it is working. If ...
1
vote
0answers
36 views

How To Access Docker Client From Cloud Cluster

I am trying to create a Kubernetes Deployment out of a third party library related to my other question. This library requires pre-pulled docker images and will temporarily launch the containers as ...
1
vote
0answers
253 views

How to get eth1 ENI on AWS Instance to Respond to NodePort Requests?

Kubernetes 1.5 cluster running in AWS. Node1 (worker) has an additional network interface assigned to it with a static IP, so if you run "ip addr show" on the node you see eth0, eth1, and the gang of ...
0
votes
0answers
12 views

Is a ReplicaSet pulling a fresh image at every spin up?

I inherited an app without a ton of handoff information, and there's a Kubernetes setup with ReplicaSets and KOPS (and based on Docker containers). I am pretty new to Kubernetes Whenever one of the ...
0
votes
0answers
6 views

Gitlab + Kubernetes on GCE + DIND - how to get access to docker subsystem in the cluster?

Preliminaries I am using Gitlab Community Edition 12.0.3, in which I have standard project admin permissions but no more. The installation only has few and slow CI runners, so I went and created a ...
0
votes
0answers
21 views

Permission denied connecting to Docker daemon socket under Jenkins with Kubernetes Plugin

I have a docker image that is built from the ubuntu image and all I add is gradle and openjdk11 My jenkinsfile defines the containerTemplate as this: podTemplate(label: 'java11builder', containers: [...
0
votes
1answer
11 views

Why do many pods fail to communicate with the master

I have lots of unexplained errors in kubernetes. Often I see errors in logs of pods with the following: Get https://10.152.183.1:443/api/v1/namespaces/{REDACTED}: x509: certificate is valid for 192....
0
votes
0answers
21 views

“NetworkPlugin cni failed to set up pod” error when deploying Pod, while Deployment work

For testing purpose, I want to keep things simple and run a Python Docker image on Kubernetes. So I used a Pod as smallest unit, based on the official template from the Kubernetes docs: apiVersion: ...
0
votes
0answers
29 views

Docker ps shows a container that doesn't exist anymore

When I run docker ps I get a container ID that doesn't exist anymore. docker inspect and exec give me the Error: no such object message, and when I go to /var/lib/docker/containers/ there's no folder ...
0
votes
0answers
18 views

Jenkins: Managing Multiple Environment Configuration and Deployments

I am working on a product where we have 3 dev teams. 1 for UI and 2 for backend. Each team requires a complete env for their own testing. There 10+ backend services and many more other components and ...