Questions tagged [kubernetes]
For questions about Kubernetes, an open-source system for automating deployment, scaling, and management of containerized applications.
956
questions
0
votes
0
answers
3
views
Kubernetes rollout deployment history CHANGE-CAUSE field is always <none>
I just ran
kubectl create deploy nginx --image=nginx:1.18.0 --replicas=2 --port=80
to create a deployment.
Then edited the image of that deployment
kubectl set image deploy nginx nginx=nginx:1.19.8
...
0
votes
0
answers
6
views
Helm Charts for deploying a web app with a frontend and 5 microservices
My organization has decided to migrate to kubernetes and we have chosen to leverage eks.My task is to migrate our simple system consisting of a frontend and 5 microservices to the cluster.I want to ...
0
votes
0
answers
4
views
Mount Job Directory as Copy-on-Write
I’m working on a build system and have a master job that spawns other child jobs (ie build, deploy, etc).
I am currently downloading the repo in the master job and would like to share the directory as ...
0
votes
1
answer
15
views
Concat multiple meta labels on prometheus for relabling
How can I change the value of the label __param_target to resemble how I would interact with a Kubernetes service in-cluster, following the format: http://serviceName.namespace.svc:servicePort/path ?
...
0
votes
1
answer
15
views
get rid of PodSecurity warnings
I often use curl image to test out connectivity inside clusters:
kubectl --kubeconfig ./kubeconfig run curly --image=curlimages/curl --rm -it --restart=Never -- /bin/sh
However, with k8s v1.27+ a ...
0
votes
0
answers
13
views
Kubernetes: How to restart services after os patch
We have traefik service running as below:
~]$ netstat -pante | grep LIST | grep -w 443
tcp6 0 0 :::443 :::* LISTEN 0 82345 12345/...
0
votes
0
answers
12
views
+50
Discrepancy between Kubernetes node memory usage reported by kubectl top and summed pod memory usage
I'm facing a discrepancy in memory usage reporting in my Kubernetes cluster, and I'm hoping to gain some insights into what might be causing it.
When I run kubectl top pods --all-namespaces, I get the ...
1
vote
0
answers
10
views
CPU priorities for pods in k8s cluster
Consider this scenario:
1 worker node with 4 CPU cores
2 pods there, one of which is some CPU intensive bg task, another one is a web server with unpredictable CPU load during the day.
I need to ...
1
vote
0
answers
13
views
CSI Driver: FSGroup mentioned in POD spec is not accessible from NodePublish volume
I am using
volumeMountGroup := req.GetVolumeCapability().GetMount().GetVolumeMountGroup()
klog.V(2).Infof("-NodePublishVolume-: volumeMountGroup: %v",volumeMountGroup)
in my CSI ...
0
votes
0
answers
7
views
The Plain HttP Request sent to Https port for passbolt deployment
I have an issue when deploying passbolt on Kubernetes through helm chart. ( I use rancher for the management UI)
Nginx controller in used for k8s ingress and target port is 443 on passbolt service.
...
0
votes
1
answer
9
views
Is it possible to add a toleration in kube-fledged?
kube-fledged provides nodeSelector to select the node you want the image to be cached on. But there are taints on the nodes in my cluster. Would it be possible to add a toleration in the imagecache ...
-1
votes
1
answer
10
views
kube fleged imagePullSecrets not working(ImagePullBackOff)
apiVersion: kubefledged.io/v1alpha2
kind: ImageCache
metadata:
name: imagecache1
namespace: kube-fledged
labels:
app: kubefledged
component: imagecache
spec:
imagePullSecrets:
- ...
0
votes
0
answers
7
views
Kubernetes NetworkPolicy to allow public internet traffic but deny private network traffic
I was able to apply a NetworkPolicy that successfully allows all egress and ingress traffic:
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: test-app
namespace: test-namespace
...
0
votes
0
answers
27
views
Figuring out why disk-pressure taint is unremovable
I have a two-server kubernetes cluster in my homelab. One of the nodes keeps getting marked with the node.kubernetes.io/disk-pressure taint.
If I run kubectl taint nodes homelab02 node.kubernetes.io/...
0
votes
0
answers
7
views
How to make jenkins run pod agent based on label
I have Jenkins runs in k8s cluster, I have configured multiple pod templates so Jenkins uses them for building then deletes the pod agents, also added the build steps in a library using Jenkins-...
0
votes
0
answers
13
views
How to add an existing kubernetes pod as a jenkins node.?
Is there any way to add a existing pod or create a new pod in kubernetes and attach as jenkins node.?
We can create dynamic pods using kubernetes plugin using plugin settings and yaml provided in ...
0
votes
0
answers
7
views
How to run kubernetes workload on another NIC?
We have 2 NIC's in our k8s nodes and now, My team has a requirement to run the workload on other NIC. Note: This is a fresh installation of cluster. So, Is it possible to run workload on other NIC?
I ...
0
votes
0
answers
13
views
Error from server (BadRequest): container velero is not valid for pod node-agent-
I'm getting frequent errors when I want to use kubectl exec deployment/[deployment]. This happens with Velero, a Kubernetes backup tool, but I assume that it happens with other deployments as well, ...
0
votes
0
answers
5
views
micro-outage of kubernetes worker node in mutualized kubernetes cluster using vcluster
I deployed a mutualized kubernetes cluster using "Vcluster".
Every 6 minutes, my worker node turn into "not ready" for few seconds. It can be showed in event section when I ...
0
votes
0
answers
17
views
Error in deploying airflow by kubectl+kubeadm+helm+caiico cni
Description
I installed airflow from offical kubectl, kubeadm, helm, calico cni website but airflow can't be deployed.
Tried
Install kubectl, kubeadm, helm from offical website.
Install calico cni ...
0
votes
0
answers
12
views
Access a container with http works but failed with httpS
Summary
I have a cluster with a container inside a pod I can access trough http. But since I try to replace http by https, it failed.
Explanations
So, when I set the cluster with the config files on “...
0
votes
0
answers
11
views
I need to migrate On-prem and AWS environments to Azure Cloud
please advise if my plan order and tooling stack is good:
Not sure best practice to migrate Kuberenetes without down time?!?!
Existing Infrastructure:
• Fortinet Firewall – In AWS and in On-Premise.
...
-1
votes
1
answer
10
views
How to deploy AKS without exposing cluster API to the internet?
How to deploy Azure AKS kubernetes in a private network mode without exposing cluster API to the internet?
I need to deploy React with Github actions and test that it's working
0
votes
1
answer
45
views
Ensure two node ports have the same IP address
I'm working on setting up a testing environment for my application. Without getting into all of the details, one requirement is that I stand up a container that is listening on two TCP ports. It is ...
0
votes
1
answer
6
views
Server error 502 - problems with .net core web app deploy made on GCloud's GKE using OAuth 2.0 Authentication
I have an MVC .net core 6 web application that uses Google's OAuth2.0 authentication and I cannot publish it with Kubernetes.
Project context:
Locally it compiles and runs normally, including creating ...
0
votes
0
answers
8
views
How to work with krew in Jenkins?
I'm new to jenkins . I have written a jenkins pipeline to create blockchain network using HLF Operator.
I've installed kubectl on the vm and used it as node in jenkins.
The kubectl commands and other ...
0
votes
1
answer
16
views
Setting ingress port with helm parameter
I am runnning portainer on a k3s cluster, and installing/updating portainer using the command
helm upgrade --install --create-namespace -n portainer portainer portainer/portainer\
--set ...
0
votes
0
answers
15
views
Kubernetes pods container initialization doesn't finish for Dagster
Installation set-up:
I'm trying to run dagster on Kubernetes. I use the default values.yaml file and the only change I'm making is replacing "docker.io" with "registry.hub.docker.com&...
0
votes
0
answers
59
views
Postgres pod not creating user despite the `env` variable `POSTGRES_USER`
I have the following pod setup:
Secret:
apiVersion: v1
kind: Secret
metadata:
name: postgres-secret
labels:
app: postgres
type: Opaque
data:
postgres_user: <base64>
postgres_password:...
0
votes
0
answers
16
views
is it possible to show the pod pause image address in kubernetes
I want to check the pod pause image address, then using this command to check:
> kubectl get pod reddwarf-postgresql-postgresql-0 -o=jsonpath='{.spec.containers[0].image}' -n reddwarf-storage
...
0
votes
0
answers
5
views
Running GKE Cluster behind a FortiGate Firewall VM
I have a simple project in which I should implement and deploy a GKE cluster behind a FortiGate FW, the Architecture of my project is (project is deployed on Google Cloud Platform): An external VPC ...
0
votes
1
answer
55
views
Performance differences of using Remote Block Volume in Kubernetes?
In Kubernetes, there are various types of PVs, and local PV is mentioned as the most performant type among those.
refs)
https://kubernetes.io/docs/concepts/storage/persistent-volumes/#types-of-...
0
votes
1
answer
50
views
Execute Kubernetes commands with Jenkins
I am a beginner to devops and right now I'm learning jenkins. I have a kind cluster on my local machine and jenkins running inside a docker container at http://localhost:8000. I wish to execute the ...
0
votes
0
answers
10
views
How to configure kubectl scale command to fail if image is wrong
If the current image is wrong/old/dne then I want this command to fail:
kubectl scale deploy gms --replicas=4
it just scales whatever is there - but I want it to check to ensure it's scaling the ...
0
votes
1
answer
37
views
How to deploy one K8s master on several servers, e.g. on 2 servers?
Sorry, as a noob I have no clue about how to deploy one K8s master node on several physical servers, e.g. deploy one master node on 2 servers? Not HA solution, just one master node.
Could anyone give ...
0
votes
0
answers
29
views
How to use Kubernetes OICD-Login WITH OTP but WITHOUT userinterface/browser?
I am connecting to Kubernetes Cluster, using kubectl oidc-login
( https://github.com/int128/kubelogin/ ) and using grant-type=password as there is no browser available on the system.
This works fine:
...
1
vote
0
answers
46
views
How to sync External Secrets on an AKS Cluster with an Azure Key Vault?
I'm trying to integrate AKS with Key Vault using the External Secrets operator. I've set up the operator itself using the Helm chart, and I've created a SecretStore resource pointed at a Vault (we'll ...
0
votes
0
answers
8
views
Gatekeeper not showing kube-system pods as violations
I am following this gatekeeper guide and it gives violation if a pod doesn’t have limits but I am unable to see pods from kube-system namespace as violations.
I am testing this on AWS EKS.
I haven’t ...
0
votes
0
answers
9
views
Get OCP containers information
I'm trying to get some information of all the containers running in a namespace:
oc get pods -n my-namespace -o custom-columns=NAME:.spec.containers[*].name,CPU:.spec.containers[*].resources.requests....
0
votes
0
answers
14
views
Best way to filter system logs using Datadog + GKE?
I've recently set up datadog agent on a K8s cluster in GKE. The cluster is ran using GKE autopilot. Logs are being collected from my services, but they are also being collected from internal services ...
0
votes
0
answers
20
views
Do kubernetes pods enter Terminating during or after preStop hook call?
I originally posted this on Stackoverflow but it was suggested I cross post here.
OK my real requirement is about graceful termination. I have a pod that implements a service via a grpc interface. ...
0
votes
0
answers
18
views
How to execute scripts inside kubernetes pod from node js server
I need to execute scripts inside kubernetes pod from the node js server. I did find kubernetes client library for node quiet useful. The issue is , I need the script to be executed in multiple pods ...
0
votes
0
answers
149
views
Kubernetes nginx ingress setup to get visitor's real IP using Cloudflare
I have a kubernetes setup as below using Cloudflare as my DNS hosting. The domain is on Cloudflare and it's proxied.
I tried to search about how to make my nginx ingress to get the visitor's real IP ...
0
votes
0
answers
37
views
kubernetes pods/pod/exec API call 403 forbidden response
I have an init-container in my deployment definition with a shared volume and a directory '/validators'. Inside this directory, there is a sh file that I want to execute using the following URL http://...
0
votes
0
answers
28
views
How to skip a required CRD property for server-side apply with kubectl?
I'd like to patch an existing PrometheusRule which has spec.groups[].rules[].expr required. The existing rule has an expr, however I'd like to omit it from my patch because the existing one is fine ...
0
votes
0
answers
17
views
Unable to get metrics relabeling working on Grafana Agent Integrations
I'm running Grafana Agent v0.36.2 in Static mode as a K8s operator, and I've implemented a combination of Integrations custom resources, and additionalScrapeMetrics (on the MetricsInstance custom ...
0
votes
0
answers
50
views
Why is my worker node kubelet service not starting?. kubelet[8094]: Insecure values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
Following Kelsey Hightower's KTHW on AWS EC2 instances and got to boot strapping the worker nodes and somehow kubelet seems to be fubarred.
NOT USING KUBEADM or DOCKER.
Getting the following error now....
0
votes
1
answer
26
views
Using route and proxy with a NGINX virtualserver K8s config
I have a kinda weird set up where I have a general url(www.example.com) that terminates on an F5 that points to a nginx VS on an EKS cluster that has a localized domain(www.ue1.example.com).
So the ...
0
votes
1
answer
146
views
metrics-server on EKS - no metrics to server
I am attempting to setup metrics-server to server my 'horizon pod autoscaling' and manage my app pods scaling based on CPU. I am unable to get the metrics-server to run properly which fails with ...
-1
votes
1
answer
28
views
How to monitor k3s/rancher pods?
The problems I'm facing are these pods crash out of nowhere and I'm unable to debug why it happened. How can I monitor them?