Questions tagged [kubernetes]
For questions about Kubernetes, an open-source system for automating deployment, scaling, and management of containerized applications.
944
questions
0
votes
0
answers
7
views
Kubernetes NetworkPolicy to allow public internet traffic but deny private network traffic
I was able to apply a NetworkPolicy that successfully allows all egress and ingress traffic:
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: test-app
namespace: test-namespace
...
0
votes
0
answers
24
views
Figuring out why disk-pressure taint is unremovable
I have a two-server kubernetes cluster in my homelab. One of the nodes keeps getting marked with the node.kubernetes.io/disk-pressure taint.
If I run kubectl taint nodes homelab02 node.kubernetes.io/...
0
votes
0
answers
7
views
How to make jenkins run pod agent based on label
I have Jenkins runs in k8s cluster, I have configured multiple pod templates so Jenkins uses them for building then deletes the pod agents, also added the build steps in a library using Jenkins-...
0
votes
0
answers
11
views
How to add an existing kubernetes pod as a jenkins node.?
Is there any way to add a existing pod or create a new pod in kubernetes and attach as jenkins node.?
We can create dynamic pods using kubernetes plugin using plugin settings and yaml provided in ...
0
votes
0
answers
6
views
How to run kubernetes workload on another NIC?
We have 2 NIC's in our k8s nodes and now, My team has a requirement to run the workload on other NIC. Note: This is a fresh installation of cluster. So, Is it possible to run workload on other NIC?
I ...
0
votes
0
answers
11
views
Error from server (BadRequest): container velero is not valid for pod node-agent-
I'm getting frequent errors when I want to use kubectl exec deployment/[deployment]. This happens with Velero, a Kubernetes backup tool, but I assume that it happens with other deployments as well, ...
0
votes
0
answers
5
views
micro-outage of kubernetes worker node in mutualized kubernetes cluster using vcluster
I deployed a mutualized kubernetes cluster using "Vcluster".
Every 6 minutes, my worker node turn into "not ready" for few seconds. It can be showed in event section when I ...
0
votes
0
answers
10
views
Error in deploying airflow by kubectl+kubeadm+helm+caiico cni
Description
I installed airflow from offical kubectl, kubeadm, helm, calico cni website but airflow can't be deployed.
Tried
Install kubectl, kubeadm, helm from offical website.
Install calico cni ...
0
votes
0
answers
12
views
Access a container with http works but failed with httpS
Summary
I have a cluster with a container inside a pod I can access trough http. But since I try to replace http by https, it failed.
Explanations
So, when I set the cluster with the config files on “...
0
votes
0
answers
10
views
I need to migrate On-prem and AWS environments to Azure Cloud
please advise if my plan order and tooling stack is good:
Not sure best practice to migrate Kuberenetes without down time?!?!
Existing Infrastructure:
• Fortinet Firewall – In AWS and in On-Premise.
...
-1
votes
1
answer
9
views
How to deploy AKS without exposing cluster API to the internet?
How to deploy Azure AKS kubernetes in a private network mode without exposing cluster API to the internet?
I need to deploy React with Github actions and test that it's working
0
votes
1
answer
44
views
Ensure two node ports have the same IP address
I'm working on setting up a testing environment for my application. Without getting into all of the details, one requirement is that I stand up a container that is listening on two TCP ports. It is ...
0
votes
1
answer
6
views
Server error 502 - problems with .net core web app deploy made on GCloud's GKE using OAuth 2.0 Authentication
I have an MVC .net core 6 web application that uses Google's OAuth2.0 authentication and I cannot publish it with Kubernetes.
Project context:
Locally it compiles and runs normally, including creating ...
0
votes
0
answers
8
views
How to work with krew in Jenkins?
I'm new to jenkins . I have written a jenkins pipeline to create blockchain network using HLF Operator.
I've installed kubectl on the vm and used it as node in jenkins.
The kubectl commands and other ...
0
votes
1
answer
16
views
Setting ingress port with helm parameter
I am runnning portainer on a k3s cluster, and installing/updating portainer using the command
helm upgrade --install --create-namespace -n portainer portainer portainer/portainer\
--set ...
0
votes
0
answers
13
views
Kubernetes pods container initialization doesn't finish for Dagster
Installation set-up:
I'm trying to run dagster on Kubernetes. I use the default values.yaml file and the only change I'm making is replacing "docker.io" with "registry.hub.docker.com&...
0
votes
0
answers
48
views
Postgres pod not creating user despite the `env` variable `POSTGRES_USER`
I have the following pod setup:
Secret:
apiVersion: v1
kind: Secret
metadata:
name: postgres-secret
labels:
app: postgres
type: Opaque
data:
postgres_user: <base64>
postgres_password:...
0
votes
0
answers
15
views
is it possible to show the pod pause image address in kubernetes
I want to check the pod pause image address, then using this command to check:
> kubectl get pod reddwarf-postgresql-postgresql-0 -o=jsonpath='{.spec.containers[0].image}' -n reddwarf-storage
...
0
votes
0
answers
4
views
Running GKE Cluster behind a FortiGate Firewall VM
I have a simple project in which I should implement and deploy a GKE cluster behind a FortiGate FW, the Architecture of my project is (project is deployed on Google Cloud Platform): An external VPC ...
0
votes
1
answer
55
views
Performance differences of using Remote Block Volume in Kubernetes?
In Kubernetes, there are various types of PVs, and local PV is mentioned as the most performant type among those.
refs)
https://kubernetes.io/docs/concepts/storage/persistent-volumes/#types-of-...
0
votes
1
answer
43
views
Execute Kubernetes commands with Jenkins
I am a beginner to devops and right now I'm learning jenkins. I have a kind cluster on my local machine and jenkins running inside a docker container at http://localhost:8000. I wish to execute the ...
0
votes
0
answers
10
views
How to configure kubectl scale command to fail if image is wrong
If the current image is wrong/old/dne then I want this command to fail:
kubectl scale deploy gms --replicas=4
it just scales whatever is there - but I want it to check to ensure it's scaling the ...
0
votes
1
answer
35
views
How to deploy one K8s master on several servers, e.g. on 2 servers?
Sorry, as a noob I have no clue about how to deploy one K8s master node on several physical servers, e.g. deploy one master node on 2 servers? Not HA solution, just one master node.
Could anyone give ...
0
votes
0
answers
24
views
How to use Kubernetes OICD-Login WITH OTP but WITHOUT userinterface/browser?
I am connecting to Kubernetes Cluster, using kubectl oidc-login
( https://github.com/int128/kubelogin/ ) and using grant-type=password as there is no browser available on the system.
This works fine:
...
1
vote
0
answers
37
views
How to sync External Secrets on an AKS Cluster with an Azure Key Vault?
I'm trying to integrate AKS with Key Vault using the External Secrets operator. I've set up the operator itself using the Helm chart, and I've created a SecretStore resource pointed at a Vault (we'll ...
0
votes
0
answers
7
views
Gatekeeper not showing kube-system pods as violations
I am following this gatekeeper guide and it gives violation if a pod doesn’t have limits but I am unable to see pods from kube-system namespace as violations.
I am testing this on AWS EKS.
I haven’t ...
0
votes
0
answers
9
views
Get OCP containers information
I'm trying to get some information of all the containers running in a namespace:
oc get pods -n my-namespace -o custom-columns=NAME:.spec.containers[*].name,CPU:.spec.containers[*].resources.requests....
0
votes
0
answers
12
views
Best way to filter system logs using Datadog + GKE?
I've recently set up datadog agent on a K8s cluster in GKE. The cluster is ran using GKE autopilot. Logs are being collected from my services, but they are also being collected from internal services ...
0
votes
0
answers
20
views
Do kubernetes pods enter Terminating during or after preStop hook call?
I originally posted this on Stackoverflow but it was suggested I cross post here.
OK my real requirement is about graceful termination. I have a pod that implements a service via a grpc interface. ...
0
votes
0
answers
16
views
How to execute scripts inside kubernetes pod from node js server
I need to execute scripts inside kubernetes pod from the node js server. I did find kubernetes client library for node quiet useful. The issue is , I need the script to be executed in multiple pods ...
0
votes
0
answers
145
views
Kubernetes nginx ingress setup to get visitor's real IP using Cloudflare
I have a kubernetes setup as below using Cloudflare as my DNS hosting. The domain is on Cloudflare and it's proxied.
I tried to search about how to make my nginx ingress to get the visitor's real IP ...
0
votes
0
answers
33
views
kubernetes pods/pod/exec API call 403 forbidden response
I have an init-container in my deployment definition with a shared volume and a directory '/validators'. Inside this directory, there is a sh file that I want to execute using the following URL http://...
0
votes
0
answers
26
views
How to skip a required CRD property for server-side apply with kubectl?
I'd like to patch an existing PrometheusRule which has spec.groups[].rules[].expr required. The existing rule has an expr, however I'd like to omit it from my patch because the existing one is fine ...
0
votes
0
answers
15
views
Unable to get metrics relabeling working on Grafana Agent Integrations
I'm running Grafana Agent v0.36.2 in Static mode as a K8s operator, and I've implemented a combination of Integrations custom resources, and additionalScrapeMetrics (on the MetricsInstance custom ...
0
votes
0
answers
44
views
Why is my worker node kubelet service not starting?. kubelet[8094]: Insecure values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
Following Kelsey Hightower's KTHW on AWS EC2 instances and got to boot strapping the worker nodes and somehow kubelet seems to be fubarred.
NOT USING KUBEADM or DOCKER.
Getting the following error now....
0
votes
1
answer
23
views
Using route and proxy with a NGINX virtualserver K8s config
I have a kinda weird set up where I have a general url(www.example.com) that terminates on an F5 that points to a nginx VS on an EKS cluster that has a localized domain(www.ue1.example.com).
So the ...
0
votes
1
answer
127
views
metrics-server on EKS - no metrics to server
I am attempting to setup metrics-server to server my 'horizon pod autoscaling' and manage my app pods scaling based on CPU. I am unable to get the metrics-server to run properly which fails with ...
-1
votes
1
answer
26
views
How to monitor k3s/rancher pods?
The problems I'm facing are these pods crash out of nowhere and I'm unable to debug why it happened. How can I monitor them?
0
votes
0
answers
17
views
How to authenticate a pod with its service account token on a OIDC server
I have a k8s cluster, on this cluster I have a service AA and a service BB. On this same cluster I have a keycloak instance running. AA's pods has a service account token. BB has a service and listens ...
0
votes
0
answers
106
views
Cilium installation problem after kubeadm init for a 2 node Kubernetes cluster in local VMs
I want to setup a 2 node Kubernetes cluster in local VMs using VMware. I have set up the control node using the following command:
kubeadm init --pod-network-cidr=10.1.1.0/24 --apiserver-advertise-...
0
votes
0
answers
85
views
0/2 nodes are available: pod has unbound immediate PersistentVolumeClaims. preemption: 0/2 nodes are available
I want to deploy zookeper on native Kubernetes. I tried this deployment chart:
https://bitnami.com/stack/zookeeper/helm
But I get error:
0/2 nodes are available: pod has unbound immediate ...
0
votes
1
answer
447
views
How to use uriRegexRewrite in Istio VirtualService?
I was waiting on the Regex Rewrite based on Capture Groups for a long time and it was finally merged in 1.19.4. I cannot find much documentation regarding how to use the uriRegexRewrite and my ...
0
votes
1
answer
16
views
Is the data shared between two pods database deployment k8s
I have a structure like shown in the image below: cluster with two nodes and service for the database (postgres).
Is the data shared between those two pods of postgres images or is it possible to set ...
0
votes
1
answer
131
views
How to deploy an nginx ingress to a kubeadm cluster
I'm attempting to set up my own bare-metal Kubernetes cluster composed of a control plane (VPS 149.62.186.95) and a worker node (VPS 149.62.189.139). Both my VPS are running Ubuntu 22.04 with 2 vCPUs ...
0
votes
1
answer
113
views
Deploy a Redis cluster with Docker
I need to create a Redis cluster using Docker (with Kubernetes afterwards) and didn't find any official documentation on that matter. Could I have guidance on that subject ?
I have the below yaml ...
0
votes
1
answer
66
views
Tekton Kaniko build - gives push permissions errors
When running a pipeline with a Kaniko build task, I see the following error message:
E0105 13:50:28.345758 19 aws_credentials.go:77] while getting AWS credentials NoCredentialProviders: no valid ...
0
votes
0
answers
16
views
how to detect the pause image load address when change kubernetes containerd config
I am trying to override the kubernetes system default kubernetes pause image address with file /etc/containerd/config.toml like this:
[plugins."io.containerd.grpc.v1.cri"]
sandbox_image = &...
0
votes
0
answers
28
views
Can't access external ip of kubernetes deploy on docker desktop in macOS
I am running Minikube on Docker in macOS to install Kubernetes locally. I am facing an issue can't access service Kubernetes by external IP. Service type is NodePort.
Version components I am using
...
0
votes
0
answers
28
views
No targets in Prometheus at Kubernetes
Why there is no targets at my Prometheus? I did everything like in Prometheus documentation. Also I have pods with label: "name=cadvisor".
I have the following configuration file:
# ...
0
votes
0
answers
16
views
Getting IDENTITY_PROVIDER_LOGIN_ERROR with keycloak, OAuth authentication with Github, "federatedIdentityModel" is null
I am running KeyCloak as one of the services in a K3s cluster to provide identity management for another service on the cluster, both of which is behind Ngnix. After deleting Github(the initial ...