Questions tagged [kubernetes]
For questions about Kubernetes, an open-source system for automating deployment, scaling, and management of containerized applications.
575
questions
1
vote
0answers
43 views
Create a Kubernetes Service that loads an external host url AND port
I have a url like this: http://myserver.mydomain.com:98765
I need to have this url be a Kubernetes service so I can address it in Kubernetes like this: my-service.mynamespace.svc.cluster.local. (So, ...
1
vote
0answers
19 views
calling shell commands on host from container
I've created a daemonset which adds a systemd unit and timer file to every host in the cluster.
apiVersion: apps/v1
kind: DaemonSet
metadata:
name: logclean-updater
spec:
selector:
matchLabels:...
1
vote
2answers
185 views
Unable to configure cert-manager. Wrong status code '403', expected '200'
I', trying to configure a cert-manager in a Baremetal server. I followed this link & this one
the k describe challenge my-domain.com-xqwh4-4005106243-2059835058
get
Status:
Presented: true
...
0
votes
0answers
11 views
Openshift: Worker nodes /dev/mapper/docker_data filling up
I have a openshift cluster, my nodes move to a not ready state, and i always get the alert that my filesystem is filling up /dev/mapper/docker_data. how can i clean up the space in the worker nodes?
I ...
2
votes
1answer
36 views
What parts of Kubernetes can have IP addresses?
Our network team says there an IP address in a subnet is being claimed and released seemingly at random. They are wondering if Kubernetes could be doing it.
I know that Pods, Services and Nodes can ...
2
votes
3answers
41 views
What is the idiomatic way to reload EKS/Kube configs when a new image is pushed to ECR
We are using CircleCI to automate the building of images when merges are detected on our release branch. Those images are then being pushed to ECR, but I am unsure of the best way to refresh some or ...
4
votes
1answer
90 views
What is the best practise way to expose a service over https in kubernetes without exposing it to the internet?
Coming from Docker
When I was still using Docker for running my services I had an nginx reverse proxy that handled issuing and signing certificates through letsencrypt automatically.
Using this setup, ...
1
vote
2answers
190 views
Monitoring Kubernetes CronJob & Job in Grafana for today day only
I'm trying to create a Dashboard in Grafana that will show the status of Cronjob & Job success & fail.
Currently i'm using kube_job_status_succeeded to get a status job, but the issue here ...
1
vote
1answer
46 views
Should we deploy Storage Class Per Application OR one Storage Class for All applications?
I am using aws-ebs-csi-driver on k8s for persistent volumes. I came across a scenario where I can create ebs storage class once and then use it across all the statefulsets deployments to create ...
0
votes
2answers
45 views
Explaining ingress installation with HELM
I was trying to install ingress helm charts but found a couple of tutorials but they just insert the different steps without proper explanation, But I want to know what exactly each step means:
...
2
votes
2answers
39 views
How to structure/combine the installation of helm + deployment files
I have a Wordpress Helm chart, and a seperate ingress definition to go along with it, which I specified in a wordpress-deployment.yaml file.
My workflow for installing would be:
Install the helm ...
2
votes
2answers
59 views
How do developers handle developing large scaled dockerized applications locally?
I am currently working on a fairly large scale project (upwards of 250 docker containers), which has complexe dependencies on multiple APIs and front-end applications. The staging and production ...
3
votes
3answers
90 views
Kubernetes pod eviction and traffic draining for to be evicted pod
I'm trying understand to Kuberentes pod eviction behaviour and when it decides to terminate a pod how it manages that no request should be in process state when it is going to terminate a pod.
It is ...
0
votes
1answer
25 views
kubectl retrieve update time for the resource
I'm wondering whether it's possible to get the time where my resource was updated?
e.g. via
$ kubectl describe deployment/myapp
I can see CreationTimestamp but I want to know the last time new ...
0
votes
0answers
25 views
Creating empty ConfigMaps but not overwriting existing ones
I frequently have this problem when doing Kubernetes or OpenShift deployments (with or without helm, but in this question I'd like to focus on a solution involving helm):
Most of our microservices ...
0
votes
0answers
108 views
GKE - Persistent Volume not able to mount to the if cluster have less than 4 nodes
I have a simple storage setup:
[ GKE [ NFS Server -> PV -> PVC -> Deployment (Min 2 pods-HPA) ] ]
GKE version: 1.19.12-gke.2101
The GKE cluster has 4 nodes before and I resize down to 3 nodes ...
0
votes
1answer
27 views
Kibana kubernetes all containers dashboard
How to create dashboard which will show all running containers in a namespace along with how many different channel (header in route/rest api calls) calling the routes of that container?
2
votes
1answer
45 views
How to get public key from cert-manager?
I need to get a public key from cert manager from bash. How to do it properly?
I can see the private key in kubernetes secrets; how to get public key that can be safely shared?
0
votes
0answers
29 views
K8s hosted services external access using dns name
Here is my setup :
I have multiple influxdb running inside k8s (deployment), which are currently exposed via a ingress (nginx).
My k8s is on-prem.
Here is what I'm trying to achieve :
I'd like to ...
0
votes
1answer
17 views
Scaling a stateful service which has primary/secondary architecture by setting a property
I have a java web stateful service which connects to mongodb and currently it is being deployed as a jar directly on the VM. This service has a property in properties file i.e. primary.
If we set ...
0
votes
1answer
33 views
connection refused from webserver in container
I've got a simple python http server running on port 8080.
class Handler(BaseHTTPRequestHandler):
def do_GET(self):
print(self.path)
self.wfile.write(b'\n')
return
class ...
1
vote
2answers
56 views
k8s pods not load balanced
I've got a service running in an on premise k8s environment. It is basically an nginx image, and a call takes like 10 seconds.
replicas is two and of course two pods are running. But almost if not ...
1
vote
0answers
25 views
in k8s cant load dump db to postgres for init it
I have a k8s cluster for educational purposes. It has postgres one pod, but I can't load or dump db to postgres to initialise it.
I added a pv and pvc for /docker-entrypoint-initdb.d and added locate ...
2
votes
1answer
36 views
HAProxy Not Working with Kubernetes NodePort for Backend (Bare Metal)
I have a host running HAProxy already. It's been up and running since before I did anything with Kubernetes. It works flawlessly as a reverse proxy and SSL terminator for various web things in ...
0
votes
1answer
78 views
Read disk of distroless container in Kubernetes for debugging
I am using a helm chart, which deploys containers based on Distroless.
This means, I cannot open a shell on these containers, like I normally would for debugging, since Distroless containers seem to ...
0
votes
0answers
10 views
Why does kube-proxy authenticate to the kube-api-server using service account
I am digging down into the Kubernetes PKI. I noticed that mostly all the control-plane components, inclusing kubelet authenticate to the api-server using TLS certificates.
Only kube-proxy & ...
0
votes
1answer
89 views
How to assign static IP to Kubernetes cluster?
Is there any way to assign static IP to Kubernetes cluster, in which any user can able to access its application over static IP only.
for an example, I have set up a cluster over 192.168.0.131 (master)...
5
votes
3answers
730 views
Is docker absolutely necessary to deploy applications with Linode's Kubernetes?
Is learning and using docker required to deploy applications with Linode's Kubernetes Engine? (LKE)
As fun as docker sounds, I'd like to avoid having to learn that additional complexity if possible.
I ...
0
votes
0answers
29 views
curl command is getting delayed after node reboot in k8s cluster
I have deployed a private docker registry from here :- https://git.app.uib.no/caleno/helm-charts/tree/84725d0e7921fb75860199fc8f52f2ee58e3d0a4/stable/docker-registry with 2 replica sets. Everything ...
-1
votes
2answers
46 views
K8s with docker hub
I have configured jenkins with github.com. Jenkins notices if commit occurs and then jenkins make the docker image and upload the new image to docker hub. How can I make k8s listens to docker hub i.e. ...
0
votes
1answer
150 views
How to monitor ELK using metricbeat on kubernetes (v8 compatible and simple solution)
For probably more than a year there's been a deprecation warning on xpack monitoring in elasticsearch, logstash, kibana etc. saying the built-in monitoring is going to disappear.
Since I don't like ...
1
vote
1answer
53 views
How to setup ExternalDNS on Microk8s cluster?
I have a Highly Available, 3 nods, Microk8s cluster with MetalLB and Ingress.
The cluster is supposed to serve a website with high availability.
I want to enable ExternalDNS for the website with the ...
0
votes
1answer
37 views
Configuration for Cloudflare endpoint using SSL to Kubernetes (load balancer & flask service)
Here is a summary of what I'm trying to do:
I can get my flask app to respond without HTTPS/SSL. But am receiving a '503 Service Unavailable' when I am trying to use SSL. My understanding is since ...
1
vote
1answer
49 views
How prometheus scrapes individual pods actuator endpoints when they are exposed via a single service in kubernetes?
I have created a deployment with 2 replica sets. But the Service exposes the 8080 and the management endpoint using NodePort. How should I set up the pods deployment if Prometheus deployment should ...
0
votes
0answers
105 views
nginx ingress same path different ports + proxy_pass
I'm still new to k8s, and currently discovering ingress basics.
We have multiple influxdb instances running which I'd like to give access using a fancy URL, such as : influxdb.dev.toto/staging, ...
0
votes
0answers
21 views
Does Metrics Server kill pods that use too much memory?
I have a pod (in my on premises Kubernetes cluster) that I setup to eventually try to exceed its memory limit. When it did that, my pod started throwing an error saying it was out of memory.
It ...
1
vote
1answer
56 views
Automating deployment of microservices from start to finish
I'm currently part of a team that trains multiple pods of new hires. Each pod creates a client simulated project that involves the following steps:
Creating kubernetes namespaces for each pod for ...
1
vote
2answers
59 views
Dynamic environments per client, which is the best approach, if any?
I don't know how to explain this problem better, but I'll try to explain it clearly:
Where I work our customers are companies, with lots of users
We offer a SaaS solution for them to manage stuff
For ...
0
votes
0answers
14 views
Curious about which kubernetes policy management is better (pros and cons)
I have a cluster in Azure Kubernetes services. I was looking various policy management in kubernetes want to know the pros and cons would be really helpful.
Here are the options I came to know
Open ...
0
votes
1answer
39 views
How to setup basic auth for Prometheus deployed on K8s cluster using yamls?
How to setup basic auth for Prometheus deployed on K8s cluster using yamls??
I was able to achieve this easily when Prometheus was deployed on a host locally using tar file. But when it is deployed as ...
0
votes
0answers
18 views
Gitlab review k8s role with postgres-operator
I want to integrate review enironments of kubernetes cluster and crunchy postgres-operator.
I have integrated group k8s cluster with enabled “Namespace per environment” option.
My review deploy ...
2
votes
1answer
66 views
mounting overlayfs within kubernetes POD - "cannot mount overlay read-only"
I try to "manually" mount an overlayfs within a Kubernetes POD, to create a copy-on-write layer on top of a shared persistent volume.
(For running a read-only postgres - postgres cannot run ...
2
votes
1answer
58 views
How to do docker build image from dockerfile on Kubernetes 1.20
Kubernetes 1.20 moved from docker to CRI-O as container runtime. I have a scenario where my Jenkins run on kubernetes and does docker build my dockerfile .But the build breaks as docker daemon is not ...
0
votes
0answers
14 views
How to route traffic from vps to kubernetes load balancer
I'm moving my project from docker compose setup to kubernetes setup. I've read a lot and view some tutorials but I'm stuck when it comes to sharing load balancer/ingress to the outside world.
I always ...
0
votes
0answers
14 views
Spruce: How to grab a specific value from a different YAML file?
Spruce, the yaml templating engine has the 'grab' operator however every example I've seen references a local path:
cluster:
name: cluster1
client:
connect_to: (( grab cluster.name ))
...
1
vote
1answer
47 views
Installing NVIDIA driver on EKS nodes
I have a EKS cluster that has two node pools. One CPU general compute, the other one has GPU support (g4dn). I want to install NVIDIA driver on to the GPU node group. The best I can do right now is to ...
1
vote
1answer
512 views
Minikube will not start again after a stop
Running gentoo linux... I am new to kubernetes and learning it on my dev cloud. I am able to start minikube with no issues (other than the second node is missing...not sure why). Then I stop minikube. ...
1
vote
0answers
56 views
Kubernetes the hard way, how different to production like kubernetes cluster?
I am learning about kubernetes clusters and tried two alternatives to create the cluster. Kubeadm and Kubernetes the hard way.
I see the following description in the repository of kubernetes the hard ...
0
votes
0answers
23 views
Kubernetes Service Templates
Are there any common practices around creating a Service "template"? We are looking into either having a service file (yaml) with tokens in it that are replaced with actual values by a ...
0
votes
0answers
13 views
Tweak traffic volume on a single pod of rollout
I have two separate applications (app1, app2) running, configured on different rollout. There are multiple pods running under both rollout. App1 sends traffic to App2 on it's local endpoint (http://...
