Questions tagged [kubernetes]

For questions about Kubernetes, an open-source system for automating deployment, scaling, and management of containerized applications.

Filter by
Sorted by
Tagged with
0 votes
0 answers
3 views

Kubernetes rollout deployment history CHANGE-CAUSE field is always <none>

I just ran kubectl create deploy nginx --image=nginx:1.18.0 --replicas=2 --port=80 to create a deployment. Then edited the image of that deployment kubectl set image deploy nginx nginx=nginx:1.19.8 ...
Zimano's user avatar
  • 101
0 votes
0 answers
6 views

Helm Charts for deploying a web app with a frontend and 5 microservices

My organization has decided to migrate to kubernetes and we have chosen to leverage eks.My task is to migrate our simple system consisting of a frontend and 5 microservices to the cluster.I want to ...
Stanley's user avatar
0 votes
0 answers
4 views

Mount Job Directory as Copy-on-Write

I’m working on a build system and have a master job that spawns other child jobs (ie build, deploy, etc). I am currently downloading the repo in the master job and would like to share the directory as ...
Jack's user avatar
  • 101
0 votes
1 answer
15 views

Concat multiple meta labels on prometheus for relabling

How can I change the value of the label __param_target to resemble how I would interact with a Kubernetes service in-cluster, following the format: http://serviceName.namespace.svc:servicePort/path ? ...
MrZorkiPongi's user avatar
0 votes
1 answer
15 views

get rid of PodSecurity warnings

I often use curl image to test out connectivity inside clusters: kubectl --kubeconfig ./kubeconfig run curly --image=curlimages/curl --rm -it --restart=Never -- /bin/sh However, with k8s v1.27+ a ...
Serve Laurijssen's user avatar
0 votes
0 answers
13 views

Kubernetes: How to restart services after os patch

We have traefik service running as below: ~]$ netstat -pante | grep LIST | grep -w 443 tcp6 0 0 :::443 :::* LISTEN 0 82345 12345/...
Mihir's user avatar
  • 101
0 votes
0 answers
12 views
+50

Discrepancy between Kubernetes node memory usage reported by kubectl top and summed pod memory usage

I'm facing a discrepancy in memory usage reporting in my Kubernetes cluster, and I'm hoping to gain some insights into what might be causing it. When I run kubectl top pods --all-namespaces, I get the ...
A. Vreeswijk's user avatar
1 vote
0 answers
10 views

CPU priorities for pods in k8s cluster

Consider this scenario: 1 worker node with 4 CPU cores 2 pods there, one of which is some CPU intensive bg task, another one is a web server with unpredictable CPU load during the day. I need to ...
Kivan's user avatar
  • 111
1 vote
0 answers
13 views

CSI Driver: FSGroup mentioned in POD spec is not accessible from NodePublish volume

I am using volumeMountGroup := req.GetVolumeCapability().GetMount().GetVolumeMountGroup() klog.V(2).Infof("-NodePublishVolume-: volumeMountGroup: %v",volumeMountGroup) in my CSI ...
ambikanair's user avatar
0 votes
0 answers
7 views

The Plain HttP Request sent to Https port for passbolt deployment

I have an issue when deploying passbolt on Kubernetes through helm chart. ( I use rancher for the management UI) Nginx controller in used for k8s ingress and target port is 443 on passbolt service. ...
Mhd Ridho Swasta's user avatar
0 votes
1 answer
9 views

Is it possible to add a toleration in kube-fledged?

kube-fledged provides nodeSelector to select the node you want the image to be cached on. But there are taints on the nodes in my cluster. Would it be possible to add a toleration in the imagecache ...
sylvesterasa's user avatar
-1 votes
1 answer
10 views

kube fleged imagePullSecrets not working(ImagePullBackOff)

apiVersion: kubefledged.io/v1alpha2 kind: ImageCache metadata: name: imagecache1 namespace: kube-fledged labels: app: kubefledged component: imagecache spec: imagePullSecrets: - ...
sylvesterasa's user avatar
0 votes
0 answers
7 views

Kubernetes NetworkPolicy to allow public internet traffic but deny private network traffic

I was able to apply a NetworkPolicy that successfully allows all egress and ingress traffic: apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: test-app namespace: test-namespace ...
Sean Bollin's user avatar
0 votes
0 answers
27 views

Figuring out why disk-pressure taint is unremovable

I have a two-server kubernetes cluster in my homelab. One of the nodes keeps getting marked with the node.kubernetes.io/disk-pressure taint. If I run kubectl taint nodes homelab02 node.kubernetes.io/...
JoSSte's user avatar
  • 135
0 votes
0 answers
7 views

How to make jenkins run pod agent based on label

I have Jenkins runs in k8s cluster, I have configured multiple pod templates so Jenkins uses them for building then deletes the pod agents, also added the build steps in a library using Jenkins-...
Mohammed Ehab's user avatar
0 votes
0 answers
13 views

How to add an existing kubernetes pod as a jenkins node.?

Is there any way to add a existing pod or create a new pod in kubernetes and attach as jenkins node.? We can create dynamic pods using kubernetes plugin using plugin settings and yaml provided in ...
tony's user avatar
  • 1
0 votes
0 answers
7 views

How to run kubernetes workload on another NIC?

We have 2 NIC's in our k8s nodes and now, My team has a requirement to run the workload on other NIC. Note: This is a fresh installation of cluster. So, Is it possible to run workload on other NIC? I ...
Newbie's user avatar
  • 101
0 votes
0 answers
13 views

Error from server (BadRequest): container velero is not valid for pod node-agent-

I'm getting frequent errors when I want to use kubectl exec deployment/[deployment]. This happens with Velero, a Kubernetes backup tool, but I assume that it happens with other deployments as well, ...
Kalle Richter's user avatar
0 votes
0 answers
5 views

micro-outage of kubernetes worker node in mutualized kubernetes cluster using vcluster

I deployed a mutualized kubernetes cluster using "Vcluster". Every 6 minutes, my worker node turn into "not ready" for few seconds. It can be showed in event section when I ...
BOY's user avatar
  • 1
0 votes
0 answers
17 views

Error in deploying airflow by kubectl+kubeadm+helm+caiico cni

Description I installed airflow from offical kubectl, kubeadm, helm, calico cni website but airflow can't be deployed. Tried Install kubectl, kubeadm, helm from offical website. Install calico cni ...
Tai Lu's user avatar
  • 1
0 votes
0 answers
12 views

Access a container with http works but failed with httpS

Summary I have a cluster with a container inside a pod I can access trough http. But since I try to replace http by https, it failed. Explanations So, when I set the cluster with the config files on “...
fauve's user avatar
  • 101
0 votes
0 answers
11 views

I need to migrate On-prem and AWS environments to Azure Cloud

please advise if my plan order and tooling stack is good: Not sure best practice to migrate Kuberenetes without down time?!?! Existing Infrastructure: • Fortinet Firewall – In AWS and in On-Premise. ...
cyrax1441's user avatar
-1 votes
1 answer
10 views

How to deploy AKS without exposing cluster API to the internet?

How to deploy Azure AKS kubernetes in a private network mode without exposing cluster API to the internet? I need to deploy React with Github actions and test that it's working
cyrax1441's user avatar
0 votes
1 answer
45 views

Ensure two node ports have the same IP address

I'm working on setting up a testing environment for my application. Without getting into all of the details, one requirement is that I stand up a container that is listening on two TCP ports. It is ...
Daniel Walker's user avatar
0 votes
1 answer
6 views

Server error 502 - problems with .net core web app deploy made on GCloud's GKE using OAuth 2.0 Authentication

I have an MVC .net core 6 web application that uses Google's OAuth2.0 authentication and I cannot publish it with Kubernetes. Project context: Locally it compiles and runs normally, including creating ...
LostMyMind's user avatar
0 votes
0 answers
8 views

How to work with krew in Jenkins?

I'm new to jenkins . I have written a jenkins pipeline to create blockchain network using HLF Operator. I've installed kubectl on the vm and used it as node in jenkins. The kubectl commands and other ...
Haaris Khatri's user avatar
0 votes
1 answer
16 views

Setting ingress port with helm parameter

I am runnning portainer on a k3s cluster, and installing/updating portainer using the command helm upgrade --install --create-namespace -n portainer portainer portainer/portainer\ --set ...
JoSSte's user avatar
  • 135
0 votes
0 answers
15 views

Kubernetes pods container initialization doesn't finish for Dagster

Installation set-up: I'm trying to run dagster on Kubernetes. I use the default values.yaml file and the only change I'm making is replacing "docker.io" with "registry.hub.docker.com&...
TheEsnSiavashi's user avatar
0 votes
0 answers
59 views

Postgres pod not creating user despite the `env` variable `POSTGRES_USER`

I have the following pod setup: Secret: apiVersion: v1 kind: Secret metadata: name: postgres-secret labels: app: postgres type: Opaque data: postgres_user: <base64> postgres_password:...
codehitman's user avatar
0 votes
0 answers
16 views

is it possible to show the pod pause image address in kubernetes

I want to check the pod pause image address, then using this command to check: > kubectl get pod reddwarf-postgresql-postgresql-0 -o=jsonpath='{.spec.containers[0].image}' -n reddwarf-storage ...
Dolphin's user avatar
  • 131
0 votes
0 answers
5 views

Running GKE Cluster behind a FortiGate Firewall VM

I have a simple project in which I should implement and deploy a GKE cluster behind a FortiGate FW, the Architecture of my project is (project is deployed on Google Cloud Platform): An external VPC ...
Mohammad Yousef's user avatar
0 votes
1 answer
55 views

Performance differences of using Remote Block Volume in Kubernetes?

In Kubernetes, there are various types of PVs, and local PV is mentioned as the most performant type among those. refs) https://kubernetes.io/docs/concepts/storage/persistent-volumes/#types-of-...
Shunsuke's user avatar
0 votes
1 answer
50 views

Execute Kubernetes commands with Jenkins

I am a beginner to devops and right now I'm learning jenkins. I have a kind cluster on my local machine and jenkins running inside a docker container at http://localhost:8000. I wish to execute the ...
Haaris Khatri's user avatar
0 votes
0 answers
10 views

How to configure kubectl scale command to fail if image is wrong

If the current image is wrong/old/dne then I want this command to fail: kubectl scale deploy gms --replicas=4 it just scales whatever is there - but I want it to check to ensure it's scaling the ...
Alexander Mills's user avatar
0 votes
1 answer
37 views

How to deploy one K8s master on several servers, e.g. on 2 servers?

Sorry, as a noob I have no clue about how to deploy one K8s master node on several physical servers, e.g. deploy one master node on 2 servers? Not HA solution, just one master node. Could anyone give ...
Ben's user avatar
  • 13
0 votes
0 answers
29 views

How to use Kubernetes OICD-Login WITH OTP but WITHOUT userinterface/browser?

I am connecting to Kubernetes Cluster, using kubectl oidc-login ( https://github.com/int128/kubelogin/ ) and using grant-type=password as there is no browser available on the system. This works fine: ...
Simon_Prewo's user avatar
1 vote
0 answers
46 views

How to sync External Secrets on an AKS Cluster with an Azure Key Vault?

I'm trying to integrate AKS with Key Vault using the External Secrets operator. I've set up the operator itself using the Helm chart, and I've created a SecretStore resource pointed at a Vault (we'll ...
Ryan Draga's user avatar
0 votes
0 answers
8 views

Gatekeeper not showing kube-system pods as violations

I am following this gatekeeper guide and it gives violation if a pod doesn’t have limits but I am unable to see pods from kube-system namespace as violations. I am testing this on AWS EKS. I haven’t ...
iammrmehul's user avatar
0 votes
0 answers
9 views

Get OCP containers information

I'm trying to get some information of all the containers running in a namespace: oc get pods -n my-namespace -o custom-columns=NAME:.spec.containers[*].name,CPU:.spec.containers[*].resources.requests....
Mari Faleiros's user avatar
0 votes
0 answers
14 views

Best way to filter system logs using Datadog + GKE?

I've recently set up datadog agent on a K8s cluster in GKE. The cluster is ran using GKE autopilot. Logs are being collected from my services, but they are also being collected from internal services ...
Jackson Christoffersen's user avatar
0 votes
0 answers
20 views

Do kubernetes pods enter Terminating during or after preStop hook call?

I originally posted this on Stackoverflow but it was suggested I cross post here. OK my real requirement is about graceful termination. I have a pod that implements a service via a grpc interface. ...
johnfo's user avatar
  • 101
0 votes
0 answers
18 views

How to execute scripts inside kubernetes pod from node js server

I need to execute scripts inside kubernetes pod from the node js server. I did find kubernetes client library for node quiet useful. The issue is , I need the script to be executed in multiple pods ...
Haaris Khatri's user avatar
0 votes
0 answers
149 views

Kubernetes nginx ingress setup to get visitor's real IP using Cloudflare

I have a kubernetes setup as below using Cloudflare as my DNS hosting. The domain is on Cloudflare and it's proxied. I tried to search about how to make my nginx ingress to get the visitor's real IP ...
DevGuy's user avatar
  • 1
0 votes
0 answers
37 views

kubernetes pods/pod/exec API call 403 forbidden response

I have an init-container in my deployment definition with a shared volume and a directory '/validators'. Inside this directory, there is a sh file that I want to execute using the following URL http://...
elyes kabous's user avatar
0 votes
0 answers
28 views

How to skip a required CRD property for server-side apply with kubectl?

I'd like to patch an existing PrometheusRule which has spec.groups[].rules[].expr required. The existing rule has an expr, however I'd like to omit it from my patch because the existing one is fine ...
Kalle Richter's user avatar
0 votes
0 answers
17 views

Unable to get metrics relabeling working on Grafana Agent Integrations

I'm running Grafana Agent v0.36.2 in Static mode as a K8s operator, and I've implemented a combination of Integrations custom resources, and additionalScrapeMetrics (on the MetricsInstance custom ...
user43131's user avatar
0 votes
0 answers
50 views

Why is my worker node kubelet service not starting?. kubelet[8094]: Insecure values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

Following Kelsey Hightower's KTHW on AWS EC2 instances and got to boot strapping the worker nodes and somehow kubelet seems to be fubarred. NOT USING KUBEADM or DOCKER. Getting the following error now....
twinone4478's user avatar
0 votes
1 answer
26 views

Using route and proxy with a NGINX virtualserver K8s config

I have a kinda weird set up where I have a general url(www.example.com) that terminates on an F5 that points to a nginx VS on an EKS cluster that has a localized domain(www.ue1.example.com). So the ...
flyerhawk's user avatar
0 votes
1 answer
146 views

metrics-server on EKS - no metrics to server

I am attempting to setup metrics-server to server my 'horizon pod autoscaling' and manage my app pods scaling based on CPU. I am unable to get the metrics-server to run properly which fails with ...
Don Draper's user avatar
-1 votes
1 answer
28 views

How to monitor k3s/rancher pods?

The problems I'm facing are these pods crash out of nowhere and I'm unable to debug why it happened. How can I monitor them?
barnyard9's user avatar
  • 101

1
2 3 4 5
20