Questions tagged [kubernetes]
For questions about Kubernetes, an open-source system for automating deployment, scaling, and management of containerized applications.
693
questions
1
vote
1
answer
38
views
How to do maintenance work in kubernetes cluster
We just moved to kubernetes, but the engineer that helped launch it is on paternity leave before we had hoped (never trust a baby not to be eager!).
Now we're trying to do maintenance tasks and one ...
- 111
0
votes
1
answer
633
views
k3s: The connection to the server localhost:8080 was refused - did you specify the right host or port?
When I run any kubectl commands, I'm getting
The connection to the server localhost:8080 was refused - did you specify the right host or port?
- 470
0
votes
1
answer
21
views
AKS Network Policy - cannot deny traffic to namespace
I am trying to implement Network Policies in my test Azure Kubernetes cluster, but I cannot get them to work. I have two namespaces - default and nginx (and others as well, but they shouldn't be ...
0
votes
0
answers
157
views
fetch all secrets from vault using external secrets operator
I've deployed the external secrets operator https://github.com/external-secrets/external-secrets and Hashicorp vault in the same cluster via helm.
I've authenticated externalsecrets to vault using the ...
- 1
0
votes
0
answers
284
views
nginx in Docker - returns "server" directive is not allowed here
I have dockerized an Angular application with the following Dockerfile and nginx.conf. The container works fine in Docker desktop. When deploying in Kubernetes cluster, the container fails to start ...
- 101
0
votes
0
answers
13
views
Missing values: gaps during deployments
Some context:
I have little experience with ci/CD and manage a fast paced growing application since it saw the light of the day for the first time. It is composed by several microservices at different ...
- 33
1
vote
1
answer
35
views
Make a readiness probe to fail when there is a newer version of the app being rolled out
How to make a readiness probe fail when there is a newer version of the app available
Stack: Node.js, GKE
Context
Clients are connected to pods via websockets. During a rolling update, clients that ...
- 41
0
votes
0
answers
18
views
Allowing going trafic with Egress and Denying it with Ingress in NetworkPolicy in Kubernetes
I hope you're all doing well and being safe.
I have two pods A and B in two different namespaces.
I wish that pod A in namespace-a has access to every pod on other namespaces so I ve deployed this ...
0
votes
0
answers
23
views
Sharing AWS EFS Access Points across Persistent Volumes
I have an Access Point created on AWS EFS and now I do need to share it across multiple Persistent Volumes in Kubernetes which would eventually be used by multiple namespaces.
Is there a way that I ...
- 101
0
votes
0
answers
22
views
Cert-manager letsencrypt pending with cert-manager and traefik
i have a cluster on AKS, that is using traefik to serve a simple http service. I'm trying to use letsencrypt, the DNS is setted up and resolves to aks public ip address correctly but all certificate ...
2
votes
0
answers
68
views
How to colorize kubernetes logs?
It's easy enough to enable colorful logs on docker containers (by setting TERM=xterm-256color and running with tty: True).
Still, I'm not getting any color when I run kubectl logs/stern on the ...
- 121
0
votes
0
answers
9
views
k8s job specification doesnt work
I have a pod definition file:
apiVersion: v1
kind: Pod
metadata:
name: redis-master
namespace: sandbox
labels:
app: redis
spec:
containers:
- name: master
image: redis
...
0
votes
0
answers
14
views
Communication failling between Kubernetes' node
I'm learning Kubernetes but I have some issues to establish a communication between 2 pods from 2 different nodes.
I've initiliazed my cluster (1 master and 2 workers) thanks to kubeadm, I'm using ...
- 1
0
votes
0
answers
18
views
Launch EKS without aws-node
EKS seems to launch aws-node daemon on every new cluster. How can I prevent this?
Context - I'd like to start a cluster with Cilium out of the box, running aws-node prevents this.
- 111
0
votes
0
answers
66
views
ArgoCD once only hook
I'm converting our existing deployment process to ArgoCD and using our existing helm chart but I'm not sure how to handle our existing hooks due to Argo not having as many as helm does. We have three ...
- 111
0
votes
0
answers
30
views
Any good pattern to deploy and maintain multiple helm-released API version routes along with Istio Virtual Service routing?
I am deploying multiple API versions (helm chart) from automated pipeline and I want to deploy an Istio virtual service to establish routing to those version (/v1, /v2, etc.). Each of these API helm ...
- 101
0
votes
0
answers
16
views
Using vespa ai in kubernetes environment behind an ingress
I am trying a vespa ai Quick Start Kubernetes tutorial. Using the same kubernetes configs, but instead of port-forwarding I want to use an ingress with a configuration:
apiVersion: networking.k8s.io/...
- 101
0
votes
0
answers
35
views
HaProxy 2.5 with docker for load balacing 3 physical node cluster
I have k8s cluster 3 physical node and trying to configure load balancing for k8s cluster using haproxy-2.5 docker container in 4th physical node. I want to achieve something like this.
I know if I ...
3
votes
0
answers
612
views
Kubernetes deployement with minimum disruption to websocket connections
Problem statement: Make a deployment with minimum disruption to clients connected via websockets.
Stack: GKE (Regional cluster - 1.22.8-gke.200), helm, Node.js/websockets, HPA, Rolling Update.
Our ...
- 41
0
votes
0
answers
105
views
basic authentication prometheus pod
I'm trying to add basic authentication for prometheus pod but when I deploy the pod with the below config I get the error: "Readiness probe failed: HTTP probe failed with statuscode: 401", I ...
0
votes
0
answers
10
views
Portworx and Pure Storage
I am currently running a POC on a rancher Kubernetes cluster where Portworx is used in combination with Pure flash arrays as a storage solution. I currently struggle to synchronize a volume over two ...
- 1
0
votes
0
answers
24
views
vGPUs & Kubernetes
I am looking for a way to share the same Nvidia GPU to multiple pods in Kubernetes.
As far as I know, it is not possible to do it directly, so I am looking for alternatives to do that.
With Nvidia ...
- 1
1
vote
0
answers
79
views
Dokku and Kubernetes: How to Build A PaaS?
I am fairly new to the world of DevOps. I am trying to build a platform that is similar to Heroku. I have gotten introduced to Dokku and Kubernetes and thought I might be able to install dokku on ...
0
votes
0
answers
20
views
Can You Run Dokku Containers on a Kubernetes Pod? If So, How?
I am playing around with Kubernetes and Dokku to build a platform like Heroku. My initial idea is to allow users to deploy their applications to Dokku containers that live inside Pods or Nodes (...
0
votes
0
answers
9
views
load list to pod running redis, from external source
I have a job which is running redis pod.:
apiVersion: batch/v1
kind: Job
metadata:
name: redis-job
spec:
parallelism: 1
ttlSecondsAfterFinished: 10
template:
metadata:
name: redis-...
1
vote
0
answers
12
views
capability to pull docker images to host
We've got a docker container running with a mount to /var/run/docker. It's a daemonset pulling an image every day to the host the pod is running on.
containers:
- name: updater
image: ...
- 243
1
vote
0
answers
120
views
How to configure registries.yaml to point to several Harbor proxy cache registry?
I have configured a Harbor (with SSL and FQDN: harbor.example.com) as a proxy cache for several docker registries (docker.io, quay.io and k8s.gcr.io). I can pull any images without any problem from ...
- 123
1
vote
0
answers
49
views
HashiCorp Vault SideCar stuck on Init
I am creating a Monstache Deployment in Kubernetes which uses some Vault secrets, which will be injected via the sidecar. But the Deployment is stuck on Init, and I don't get any error. Can someone ...
1
vote
0
answers
14
views
Kubernetes Vetical Pod Autoscaler wont recreate pods
I'm running the Kubernetes VPA on a GKE project. It has Vertical Pod Autoscaling enabled and I've run the vpa-up.sh script from their Github VPA.
Furthermore, the pods running are JupyterHub notebook ...
- 11
0
votes
0
answers
18
views
Kubernetes pods is failing with error Back-off pulling image "arey/mysql-client"
My machine is offline which has no connectivity to external site, images are pulled from another machine and loaded to the offline machine.
arey/mysql-client image is loaded to docker images with tag ...
0
votes
0
answers
19
views
Kube MQ installation ways
(I am trying to install and use KubeMQ in a VM on a cloud, so no GUI is available.)
Kube MQ has 3 ways of installing it:
using kubectl
using docker (standalone container)
using binary files.
Could ...
- 1
0
votes
0
answers
22
views
When may changes to object specification lead to hardware state changes?
In Kubernetes, when using custom resources to describe hardware, when is it okay to read changes to .spec as requests to alter not just .status but also the hardware state? In my specific case, I have ...
- 109
0
votes
2
answers
68
views
Creating container image without docker
Is it possible to build a container image as a simple user account on a system which does not have docker or podman installed? In other words, is there a user-space tool/application which can build an ...
- 103
2
votes
1
answer
62
views
Kubernetes container networking between pods
So I have a few services running using nodejs, in more than one kubernetes pod.
These services obviously need to talk to each other, and be able to find the database included in this kubernetes ...
- 125
1
vote
1
answer
57
views
Why pods are started for old ReplicaSet
A new deployment has been created and the release was successfully deployed on our AKS cluster.
We have noticed in logs that pods, for old ReplicaSet(which still exists on the cluster), are regularly ...
0
votes
0
answers
20
views
Istio WorkloadEntry is not using DestinationRule
Is it possible to make WorkloadEntry to use DestinationRule? I am unable to make this configuration to work:
apiVersion: networking.istio.io/v1alpha3
kind: WorkloadEntry
metadata:
name: we
spec:
...
- 101
0
votes
0
answers
11
views
How's it possible that ingress-nginx create a LoadBalancer in a Bare Metal K8s Cluster?
I have a bare-metal k8s cluster. I set up Ingress Nginx + MetalLB because, if I understood correctly, Ingress Nginx can't provide a LoadBalancer. Everything was working right until I realized that, if ...
0
votes
0
answers
15
views
How to allow ServiceAccount list namespaces it has access to within a cluster?
I have a cluster with multiple namespaces. Let's call them: ns1 and ns2 I also have multiple service accounts, lets call them sa1 and sa2, all in one namespace - sa-ns.
Both users can access all ...
0
votes
1
answer
93
views
K8S + HELM. Create a persistence volume for mysql database
I am using K8S with Helm 3.
I am also using MYSQL 5.7 database.
How can I create MYSQL pod, that the database will persist (created on first time) after first time the pod is created, and even the pod ...
- 103
0
votes
1
answer
46
views
ImagePullBackOff err while pulling docker image in different project in Google Cloud
I am trying to pull a private image from Artifact Registry repo in Google Cloud from a kubernetes cluster running in a different Google Cloud project using kubectl.
kubernetes version 1.20.15-gke.1000 ...
- 101
0
votes
0
answers
53
views
Allow Kubernetes to use NVidia gpu
I have set up a docker image that supports GPU acceleration, and this works just fine - running docker run --rm -it --gpus=all -p 5000:5000 -e PORT=5000 my_app results in my app runnning in GPU-...
- 101
0
votes
0
answers
48
views
install helm chart package without public container registry (offline,locally)
When I want to install a package in kubernetes cluster with helm chart, for example install gitlab with helm, during installation there is need to download docker image from a public registry and I ...
- 1
0
votes
0
answers
12
views
Is it possible to assign pods to all matches except particular nodes in k8s?
On a shared cluster, I'm trying to deploy my app on dedicated nodes, all have myrole role. I would like to exclude a few of these nodes by name.
This doesn't work:
affinity:
nodeAffinity:
...
0
votes
0
answers
39
views
Kubernetes YAML with local Docker images?
I have build two docker images via docker build -t name, one is a NodeJS/React frontend and one is a Python API that the frontend should call and get messages from. This is all happening locally on a ...
- 101
4
votes
2
answers
116
views
Why use configuration management tools in the world of modern cloud?
Configuration management tools like Ansible, Chef, Puppet, and Saltstack allows us to configure a cluster of blank machines to help install and deploy an application. For example, with Ansible, we can ...
- 43
0
votes
0
answers
161
views
Docker daemon stop responding in Kubernetes
Some node in my k8s become Not Ready for reason like:
"PLEG is not healthy: pleg was last seen active XXXXX ago; threshold is 3m0s"
and events like
Warning ContainerGCFailed 11m ...
- 1
2
votes
1
answer
108
views
Use S3 To Store ConfigMap
I have a ConfigMap which stores Nginx configs and It is getting size exceeded. There are many site configs in there so I can't create multiple ConfigMaps.
I thought of using S3 to store ConfigMap, is ...
- 123
0
votes
0
answers
40
views
issues with creating tsl secret from external cert imported to kevault for AKS ingress with nginx
Im having issues with creating tsl secret from external cert imported to key vault for AKS ingress nginx
this is secret config
apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
...
0
votes
0
answers
16
views
port forward azure VM to internal pod/service
I've got an azure VM running, say on public ip 20.20.20.20
On the VM a local kubernetes cluster is running with "kind".
An nginx pod + service is running on 172.18.0.2:32000 and is ...
- 243
1
vote
1
answer
742
views
"The plain HTTP request was sent to HTTPS port" issue with nginx-ingress in rancher/k8s
I'm running Rancher v2.6.3 and I have a cluster with a Django workload built all on top of AWS. The deployment has a cluster ip port set up, I have an ingress created with a prefix rule pointing at ...
- 121