Questions tagged [kubernetes]

For questions about Kubernetes, an open-source system for automating deployment, scaling, and management of containerized applications.

Filter by
Sorted by
Tagged with
0 votes
0 answers
7 views

Kubernetes NetworkPolicy to allow public internet traffic but deny private network traffic

I was able to apply a NetworkPolicy that successfully allows all egress and ingress traffic: apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: test-app namespace: test-namespace ...
Sean Bollin's user avatar
0 votes
0 answers
24 views

Figuring out why disk-pressure taint is unremovable

I have a two-server kubernetes cluster in my homelab. One of the nodes keeps getting marked with the node.kubernetes.io/disk-pressure taint. If I run kubectl taint nodes homelab02 node.kubernetes.io/...
JoSSte's user avatar
  • 135
0 votes
0 answers
7 views

How to make jenkins run pod agent based on label

I have Jenkins runs in k8s cluster, I have configured multiple pod templates so Jenkins uses them for building then deletes the pod agents, also added the build steps in a library using Jenkins-...
Mohammed Ehab's user avatar
0 votes
0 answers
11 views

How to add an existing kubernetes pod as a jenkins node.?

Is there any way to add a existing pod or create a new pod in kubernetes and attach as jenkins node.? We can create dynamic pods using kubernetes plugin using plugin settings and yaml provided in ...
tony's user avatar
  • 1
0 votes
0 answers
6 views

How to run kubernetes workload on another NIC?

We have 2 NIC's in our k8s nodes and now, My team has a requirement to run the workload on other NIC. Note: This is a fresh installation of cluster. So, Is it possible to run workload on other NIC? I ...
Newbie's user avatar
  • 101
0 votes
0 answers
11 views

Error from server (BadRequest): container velero is not valid for pod node-agent-

I'm getting frequent errors when I want to use kubectl exec deployment/[deployment]. This happens with Velero, a Kubernetes backup tool, but I assume that it happens with other deployments as well, ...
Kalle Richter's user avatar
0 votes
0 answers
5 views

micro-outage of kubernetes worker node in mutualized kubernetes cluster using vcluster

I deployed a mutualized kubernetes cluster using "Vcluster". Every 6 minutes, my worker node turn into "not ready" for few seconds. It can be showed in event section when I ...
BOY's user avatar
  • 1
0 votes
0 answers
10 views

Error in deploying airflow by kubectl+kubeadm+helm+caiico cni

Description I installed airflow from offical kubectl, kubeadm, helm, calico cni website but airflow can't be deployed. Tried Install kubectl, kubeadm, helm from offical website. Install calico cni ...
Tai Lu's user avatar
  • 1
0 votes
0 answers
12 views

Access a container with http works but failed with httpS

Summary I have a cluster with a container inside a pod I can access trough http. But since I try to replace http by https, it failed. Explanations So, when I set the cluster with the config files on “...
fauve's user avatar
  • 101
0 votes
0 answers
10 views

I need to migrate On-prem and AWS environments to Azure Cloud

please advise if my plan order and tooling stack is good: Not sure best practice to migrate Kuberenetes without down time?!?! Existing Infrastructure: • Fortinet Firewall – In AWS and in On-Premise. ...
cyrax1441's user avatar
-1 votes
1 answer
9 views

How to deploy AKS without exposing cluster API to the internet?

How to deploy Azure AKS kubernetes in a private network mode without exposing cluster API to the internet? I need to deploy React with Github actions and test that it's working
cyrax1441's user avatar
0 votes
1 answer
44 views

Ensure two node ports have the same IP address

I'm working on setting up a testing environment for my application. Without getting into all of the details, one requirement is that I stand up a container that is listening on two TCP ports. It is ...
Daniel Walker's user avatar
0 votes
1 answer
6 views

Server error 502 - problems with .net core web app deploy made on GCloud's GKE using OAuth 2.0 Authentication

I have an MVC .net core 6 web application that uses Google's OAuth2.0 authentication and I cannot publish it with Kubernetes. Project context: Locally it compiles and runs normally, including creating ...
LostMyMind's user avatar
0 votes
0 answers
8 views

How to work with krew in Jenkins?

I'm new to jenkins . I have written a jenkins pipeline to create blockchain network using HLF Operator. I've installed kubectl on the vm and used it as node in jenkins. The kubectl commands and other ...
Haaris Khatri's user avatar
0 votes
1 answer
16 views

Setting ingress port with helm parameter

I am runnning portainer on a k3s cluster, and installing/updating portainer using the command helm upgrade --install --create-namespace -n portainer portainer portainer/portainer\ --set ...
JoSSte's user avatar
  • 135
0 votes
0 answers
13 views

Kubernetes pods container initialization doesn't finish for Dagster

Installation set-up: I'm trying to run dagster on Kubernetes. I use the default values.yaml file and the only change I'm making is replacing "docker.io" with "registry.hub.docker.com&...
TheEsnSiavashi's user avatar
0 votes
0 answers
48 views

Postgres pod not creating user despite the `env` variable `POSTGRES_USER`

I have the following pod setup: Secret: apiVersion: v1 kind: Secret metadata: name: postgres-secret labels: app: postgres type: Opaque data: postgres_user: <base64> postgres_password:...
codehitman's user avatar
0 votes
0 answers
15 views

is it possible to show the pod pause image address in kubernetes

I want to check the pod pause image address, then using this command to check: > kubectl get pod reddwarf-postgresql-postgresql-0 -o=jsonpath='{.spec.containers[0].image}' -n reddwarf-storage ...
Dolphin's user avatar
  • 131
0 votes
0 answers
4 views

Running GKE Cluster behind a FortiGate Firewall VM

I have a simple project in which I should implement and deploy a GKE cluster behind a FortiGate FW, the Architecture of my project is (project is deployed on Google Cloud Platform): An external VPC ...
Mohammad Yousef's user avatar
0 votes
1 answer
55 views

Performance differences of using Remote Block Volume in Kubernetes?

In Kubernetes, there are various types of PVs, and local PV is mentioned as the most performant type among those. refs) https://kubernetes.io/docs/concepts/storage/persistent-volumes/#types-of-...
Shunsuke's user avatar
0 votes
1 answer
43 views

Execute Kubernetes commands with Jenkins

I am a beginner to devops and right now I'm learning jenkins. I have a kind cluster on my local machine and jenkins running inside a docker container at http://localhost:8000. I wish to execute the ...
Haaris Khatri's user avatar
0 votes
0 answers
10 views

How to configure kubectl scale command to fail if image is wrong

If the current image is wrong/old/dne then I want this command to fail: kubectl scale deploy gms --replicas=4 it just scales whatever is there - but I want it to check to ensure it's scaling the ...
Alexander Mills's user avatar
0 votes
1 answer
35 views

How to deploy one K8s master on several servers, e.g. on 2 servers?

Sorry, as a noob I have no clue about how to deploy one K8s master node on several physical servers, e.g. deploy one master node on 2 servers? Not HA solution, just one master node. Could anyone give ...
Ben's user avatar
  • 13
0 votes
0 answers
24 views

How to use Kubernetes OICD-Login WITH OTP but WITHOUT userinterface/browser?

I am connecting to Kubernetes Cluster, using kubectl oidc-login ( https://github.com/int128/kubelogin/ ) and using grant-type=password as there is no browser available on the system. This works fine: ...
Simon_Prewo's user avatar
1 vote
0 answers
37 views

How to sync External Secrets on an AKS Cluster with an Azure Key Vault?

I'm trying to integrate AKS with Key Vault using the External Secrets operator. I've set up the operator itself using the Helm chart, and I've created a SecretStore resource pointed at a Vault (we'll ...
Ryan Draga's user avatar
0 votes
0 answers
7 views

Gatekeeper not showing kube-system pods as violations

I am following this gatekeeper guide and it gives violation if a pod doesn’t have limits but I am unable to see pods from kube-system namespace as violations. I am testing this on AWS EKS. I haven’t ...
iammrmehul's user avatar
0 votes
0 answers
9 views

Get OCP containers information

I'm trying to get some information of all the containers running in a namespace: oc get pods -n my-namespace -o custom-columns=NAME:.spec.containers[*].name,CPU:.spec.containers[*].resources.requests....
Mari Faleiros's user avatar
0 votes
0 answers
12 views

Best way to filter system logs using Datadog + GKE?

I've recently set up datadog agent on a K8s cluster in GKE. The cluster is ran using GKE autopilot. Logs are being collected from my services, but they are also being collected from internal services ...
Jackson Christoffersen's user avatar
0 votes
0 answers
20 views

Do kubernetes pods enter Terminating during or after preStop hook call?

I originally posted this on Stackoverflow but it was suggested I cross post here. OK my real requirement is about graceful termination. I have a pod that implements a service via a grpc interface. ...
johnfo's user avatar
  • 101
0 votes
0 answers
16 views

How to execute scripts inside kubernetes pod from node js server

I need to execute scripts inside kubernetes pod from the node js server. I did find kubernetes client library for node quiet useful. The issue is , I need the script to be executed in multiple pods ...
Haaris Khatri's user avatar
0 votes
0 answers
145 views

Kubernetes nginx ingress setup to get visitor's real IP using Cloudflare

I have a kubernetes setup as below using Cloudflare as my DNS hosting. The domain is on Cloudflare and it's proxied. I tried to search about how to make my nginx ingress to get the visitor's real IP ...
DevGuy's user avatar
  • 1
0 votes
0 answers
33 views

kubernetes pods/pod/exec API call 403 forbidden response

I have an init-container in my deployment definition with a shared volume and a directory '/validators'. Inside this directory, there is a sh file that I want to execute using the following URL http://...
elyes kabous's user avatar
0 votes
0 answers
26 views

How to skip a required CRD property for server-side apply with kubectl?

I'd like to patch an existing PrometheusRule which has spec.groups[].rules[].expr required. The existing rule has an expr, however I'd like to omit it from my patch because the existing one is fine ...
Kalle Richter's user avatar
0 votes
0 answers
15 views

Unable to get metrics relabeling working on Grafana Agent Integrations

I'm running Grafana Agent v0.36.2 in Static mode as a K8s operator, and I've implemented a combination of Integrations custom resources, and additionalScrapeMetrics (on the MetricsInstance custom ...
user43131's user avatar
0 votes
0 answers
44 views

Why is my worker node kubelet service not starting?. kubelet[8094]: Insecure values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

Following Kelsey Hightower's KTHW on AWS EC2 instances and got to boot strapping the worker nodes and somehow kubelet seems to be fubarred. NOT USING KUBEADM or DOCKER. Getting the following error now....
twinone4478's user avatar
0 votes
1 answer
23 views

Using route and proxy with a NGINX virtualserver K8s config

I have a kinda weird set up where I have a general url(www.example.com) that terminates on an F5 that points to a nginx VS on an EKS cluster that has a localized domain(www.ue1.example.com). So the ...
flyerhawk's user avatar
0 votes
1 answer
127 views

metrics-server on EKS - no metrics to server

I am attempting to setup metrics-server to server my 'horizon pod autoscaling' and manage my app pods scaling based on CPU. I am unable to get the metrics-server to run properly which fails with ...
Don Draper's user avatar
-1 votes
1 answer
26 views

How to monitor k3s/rancher pods?

The problems I'm facing are these pods crash out of nowhere and I'm unable to debug why it happened. How can I monitor them?
barnyard9's user avatar
  • 101
0 votes
0 answers
17 views

How to authenticate a pod with its service account token on a OIDC server

I have a k8s cluster, on this cluster I have a service AA and a service BB. On this same cluster I have a keycloak instance running. AA's pods has a service account token. BB has a service and listens ...
Grégoire's user avatar
0 votes
0 answers
106 views

Cilium installation problem after kubeadm init for a 2 node Kubernetes cluster in local VMs

I want to setup a 2 node Kubernetes cluster in local VMs using VMware. I have set up the control node using the following command: kubeadm init --pod-network-cidr=10.1.1.0/24 --apiserver-advertise-...
Panagiotis Pavlidis's user avatar
0 votes
0 answers
85 views

0/2 nodes are available: pod has unbound immediate PersistentVolumeClaims. preemption: 0/2 nodes are available

I want to deploy zookeper on native Kubernetes. I tried this deployment chart: https://bitnami.com/stack/zookeeper/helm But I get error: 0/2 nodes are available: pod has unbound immediate ...
Peter Penzov's user avatar
0 votes
1 answer
447 views

How to use uriRegexRewrite in Istio VirtualService?

I was waiting on the Regex Rewrite based on Capture Groups for a long time and it was finally merged in 1.19.4. I cannot find much documentation regarding how to use the uriRegexRewrite and my ...
Sinux's user avatar
  • 1
0 votes
1 answer
16 views

Is the data shared between two pods database deployment k8s

I have a structure like shown in the image below: cluster with two nodes and service for the database (postgres). Is the data shared between those two pods of postgres images or is it possible to set ...
Aleksa Ristic's user avatar
0 votes
1 answer
131 views

How to deploy an nginx ingress to a kubeadm cluster

I'm attempting to set up my own bare-metal Kubernetes cluster composed of a control plane (VPS 149.62.186.95) and a worker node (VPS 149.62.189.139). Both my VPS are running Ubuntu 22.04 with 2 vCPUs ...
Lorenzo Rottigni's user avatar
0 votes
1 answer
113 views

Deploy a Redis cluster with Docker

I need to create a Redis cluster using Docker (with Kubernetes afterwards) and didn't find any official documentation on that matter. Could I have guidance on that subject ? I have the below yaml ...
Jérémy Ferfer's user avatar
0 votes
1 answer
66 views

Tekton Kaniko build - gives push permissions errors

When running a pipeline with a Kaniko build task, I see the following error message: E0105 13:50:28.345758 19 aws_credentials.go:77] while getting AWS credentials NoCredentialProviders: no valid ...
tm1701's user avatar
  • 101
0 votes
0 answers
16 views

how to detect the pause image load address when change kubernetes containerd config

I am trying to override the kubernetes system default kubernetes pause image address with file /etc/containerd/config.toml like this: [plugins."io.containerd.grpc.v1.cri"] sandbox_image = &...
Dolphin's user avatar
  • 131
0 votes
0 answers
28 views

Can't access external ip of kubernetes deploy on docker desktop in macOS

I am running Minikube on Docker in macOS to install Kubernetes locally. I am facing an issue can't access service Kubernetes by external IP. Service type is NodePort. Version components I am using ...
Hoang's user avatar
  • 101
0 votes
0 answers
28 views

No targets in Prometheus at Kubernetes

Why there is no targets at my Prometheus? I did everything like in Prometheus documentation. Also I have pods with label: "name=cadvisor". I have the following configuration file: # ...
Denis Bibishkin's user avatar
0 votes
0 answers
16 views

Getting IDENTITY_PROVIDER_LOGIN_ERROR with keycloak, OAuth authentication with Github, "federatedIdentityModel" is null

I am running KeyCloak as one of the services in a K3s cluster to provide identity management for another service on the cluster, both of which is behind Ngnix. After deleting Github(the initial ...
Lois's user avatar
  • 1

1
2 3 4 5
19