Questions tagged [kubernetes]

For questions about Kubernetes, an open-source system for automating deployment, scaling, and management of containerized applications.

Filter by
Sorted by
Tagged with
1 vote
1 answer
38 views

How to do maintenance work in kubernetes cluster

We just moved to kubernetes, but the engineer that helped launch it is on paternity leave before we had hoped (never trust a baby not to be eager!). Now we're trying to do maintenance tasks and one ...
user avatar
  • 111
0 votes
1 answer
633 views

k3s: The connection to the server localhost:8080 was refused - did you specify the right host or port?

When I run any kubectl commands, I'm getting The connection to the server localhost:8080 was refused - did you specify the right host or port?
user avatar
0 votes
1 answer
21 views

AKS Network Policy - cannot deny traffic to namespace

I am trying to implement Network Policies in my test Azure Kubernetes cluster, but I cannot get them to work. I have two namespaces - default and nginx (and others as well, but they shouldn't be ...
user avatar
0 votes
0 answers
157 views

fetch all secrets from vault using external secrets operator

I've deployed the external secrets operator https://github.com/external-secrets/external-secrets and Hashicorp vault in the same cluster via helm. I've authenticated externalsecrets to vault using the ...
user avatar
  • 1
0 votes
0 answers
284 views

nginx in Docker - returns "server" directive is not allowed here

I have dockerized an Angular application with the following Dockerfile and nginx.conf. The container works fine in Docker desktop. When deploying in Kubernetes cluster, the container fails to start ...
user avatar
  • 101
0 votes
0 answers
13 views

Missing values: gaps during deployments

Some context: I have little experience with ci/CD and manage a fast paced growing application since it saw the light of the day for the first time. It is composed by several microservices at different ...
user avatar
1 vote
1 answer
35 views

Make a readiness probe to fail when there is a newer version of the app being rolled out

How to make a readiness probe fail when there is a newer version of the app available Stack: Node.js, GKE Context Clients are connected to pods via websockets. During a rolling update, clients that ...
user avatar
0 votes
0 answers
18 views

Allowing going trafic with Egress and Denying it with Ingress in NetworkPolicy in Kubernetes

I hope you're all doing well and being safe. I have two pods A and B in two different namespaces. I wish that pod A in namespace-a has access to every pod on other namespaces so I ve deployed this ...
user avatar
0 votes
0 answers
23 views

Sharing AWS EFS Access Points across Persistent Volumes

I have an Access Point created on AWS EFS and now I do need to share it across multiple Persistent Volumes in Kubernetes which would eventually be used by multiple namespaces. Is there a way that I ...
user avatar
0 votes
0 answers
22 views

Cert-manager letsencrypt pending with cert-manager and traefik

i have a cluster on AKS, that is using traefik to serve a simple http service. I'm trying to use letsencrypt, the DNS is setted up and resolves to aks public ip address correctly but all certificate ...
user avatar
2 votes
0 answers
68 views

How to colorize kubernetes logs?

It's easy enough to enable colorful logs on docker containers (by setting TERM=xterm-256color and running with tty: True). Still, I'm not getting any color when I run kubectl logs/stern on the ...
user avatar
  • 121
0 votes
0 answers
9 views

k8s job specification doesnt work

I have a pod definition file: apiVersion: v1 kind: Pod metadata: name: redis-master namespace: sandbox labels: app: redis spec: containers: - name: master image: redis ...
user avatar
0 votes
0 answers
14 views

Communication failling between Kubernetes' node

I'm learning Kubernetes but I have some issues to establish a communication between 2 pods from 2 different nodes. I've initiliazed my cluster (1 master and 2 workers) thanks to kubeadm, I'm using ...
user avatar
  • 1
0 votes
0 answers
18 views

Launch EKS without aws-node

EKS seems to launch aws-node daemon on every new cluster. How can I prevent this? Context - I'd like to start a cluster with Cilium out of the box, running aws-node prevents this.
user avatar
  • 111
0 votes
0 answers
66 views

ArgoCD once only hook

I'm converting our existing deployment process to ArgoCD and using our existing helm chart but I'm not sure how to handle our existing hooks due to Argo not having as many as helm does. We have three ...
user avatar
0 votes
0 answers
30 views

Any good pattern to deploy and maintain multiple helm-released API version routes along with Istio Virtual Service routing?

I am deploying multiple API versions (helm chart) from automated pipeline and I want to deploy an Istio virtual service to establish routing to those version (/v1, /v2, etc.). Each of these API helm ...
user avatar
0 votes
0 answers
16 views

Using vespa ai in kubernetes environment behind an ingress

I am trying a vespa ai Quick Start Kubernetes tutorial. Using the same kubernetes configs, but instead of port-forwarding I want to use an ingress with a configuration: apiVersion: networking.k8s.io/...
user avatar
  • 101
0 votes
0 answers
35 views

HaProxy 2.5 with docker for load balacing 3 physical node cluster

I have k8s cluster 3 physical node and trying to configure load balancing for k8s cluster using haproxy-2.5 docker container in 4th physical node. I want to achieve something like this. I know if I ...
user avatar
3 votes
0 answers
612 views

Kubernetes deployement with minimum disruption to websocket connections

Problem statement: Make a deployment with minimum disruption to clients connected via websockets. Stack: GKE (Regional cluster - 1.22.8-gke.200), helm, Node.js/websockets, HPA, Rolling Update. Our ...
user avatar
0 votes
0 answers
105 views

basic authentication prometheus pod

I'm trying to add basic authentication for prometheus pod but when I deploy the pod with the below config I get the error: "Readiness probe failed: HTTP probe failed with statuscode: 401", I ...
user avatar
0 votes
0 answers
10 views

Portworx and Pure Storage

I am currently running a POC on a rancher Kubernetes cluster where Portworx is used in combination with Pure flash arrays as a storage solution. I currently struggle to synchronize a volume over two ...
user avatar
  • 1
0 votes
0 answers
24 views

vGPUs & Kubernetes

I am looking for a way to share the same Nvidia GPU to multiple pods in Kubernetes. As far as I know, it is not possible to do it directly, so I am looking for alternatives to do that. With Nvidia ...
user avatar
  • 1
1 vote
0 answers
79 views

Dokku and Kubernetes: How to Build A PaaS?

I am fairly new to the world of DevOps. I am trying to build a platform that is similar to Heroku. I have gotten introduced to Dokku and Kubernetes and thought I might be able to install dokku on ...
user avatar
0 votes
0 answers
20 views

Can You Run Dokku Containers on a Kubernetes Pod? If So, How?

I am playing around with Kubernetes and Dokku to build a platform like Heroku. My initial idea is to allow users to deploy their applications to Dokku containers that live inside Pods or Nodes (...
user avatar
0 votes
0 answers
9 views

load list to pod running redis, from external source

I have a job which is running redis pod.: apiVersion: batch/v1 kind: Job metadata: name: redis-job spec: parallelism: 1 ttlSecondsAfterFinished: 10 template: metadata: name: redis-...
user avatar
1 vote
0 answers
12 views

capability to pull docker images to host

We've got a docker container running with a mount to /var/run/docker. It's a daemonset pulling an image every day to the host the pod is running on. containers: - name: updater image: ...
user avatar
1 vote
0 answers
120 views

How to configure registries.yaml to point to several Harbor proxy cache registry?

I have configured a Harbor (with SSL and FQDN: harbor.example.com) as a proxy cache for several docker registries (docker.io, quay.io and k8s.gcr.io). I can pull any images without any problem from ...
user avatar
  • 123
1 vote
0 answers
49 views

HashiCorp Vault SideCar stuck on Init

I am creating a Monstache Deployment in Kubernetes which uses some Vault secrets, which will be injected via the sidecar. But the Deployment is stuck on Init, and I don't get any error. Can someone ...
user avatar
1 vote
0 answers
14 views

Kubernetes Vetical Pod Autoscaler wont recreate pods

I'm running the Kubernetes VPA on a GKE project. It has Vertical Pod Autoscaling enabled and I've run the vpa-up.sh script from their Github VPA. Furthermore, the pods running are JupyterHub notebook ...
user avatar
  • 11
0 votes
0 answers
18 views

Kubernetes pods is failing with error Back-off pulling image "arey/mysql-client"

My machine is offline which has no connectivity to external site, images are pulled from another machine and loaded to the offline machine. arey/mysql-client image is loaded to docker images with tag ...
user avatar
0 votes
0 answers
19 views

Kube MQ installation ways

(I am trying to install and use KubeMQ in a VM on a cloud, so no GUI is available.) Kube MQ has 3 ways of installing it: using kubectl using docker (standalone container) using binary files. Could ...
user avatar
  • 1
0 votes
0 answers
22 views

When may changes to object specification lead to hardware state changes?

In Kubernetes, when using custom resources to describe hardware, when is it okay to read changes to .spec as requests to alter not just .status but also the hardware state? In my specific case, I have ...
user avatar
  • 109
0 votes
2 answers
68 views

Creating container image without docker

Is it possible to build a container image as a simple user account on a system which does not have docker or podman installed? In other words, is there a user-space tool/application which can build an ...
user avatar
  • 103
2 votes
1 answer
62 views

Kubernetes container networking between pods

So I have a few services running using nodejs, in more than one kubernetes pod. These services obviously need to talk to each other, and be able to find the database included in this kubernetes ...
user avatar
  • 125
1 vote
1 answer
57 views

Why pods are started for old ReplicaSet

A new deployment has been created and the release was successfully deployed on our AKS cluster. We have noticed in logs that pods, for old ReplicaSet(which still exists on the cluster), are regularly ...
user avatar
0 votes
0 answers
20 views

Istio WorkloadEntry is not using DestinationRule

Is it possible to make WorkloadEntry to use DestinationRule? I am unable to make this configuration to work: apiVersion: networking.istio.io/v1alpha3 kind: WorkloadEntry metadata: name: we spec: ...
user avatar
  • 101
0 votes
0 answers
11 views

How's it possible that ingress-nginx create a LoadBalancer in a Bare Metal K8s Cluster?

I have a bare-metal k8s cluster. I set up Ingress Nginx + MetalLB because, if I understood correctly, Ingress Nginx can't provide a LoadBalancer. Everything was working right until I realized that, if ...
user avatar
0 votes
0 answers
15 views

How to allow ServiceAccount list namespaces it has access to within a cluster?

I have a cluster with multiple namespaces. Let's call them: ns1 and ns2 I also have multiple service accounts, lets call them sa1 and sa2, all in one namespace - sa-ns. Both users can access all ...
user avatar
0 votes
1 answer
93 views

K8S + HELM. Create a persistence volume for mysql database

I am using K8S with Helm 3. I am also using MYSQL 5.7 database. How can I create MYSQL pod, that the database will persist (created on first time) after first time the pod is created, and even the pod ...
user avatar
  • 103
0 votes
1 answer
46 views

ImagePullBackOff err while pulling docker image in different project in Google Cloud

I am trying to pull a private image from Artifact Registry repo in Google Cloud from a kubernetes cluster running in a different Google Cloud project using kubectl. kubernetes version 1.20.15-gke.1000 ...
user avatar
0 votes
0 answers
53 views

Allow Kubernetes to use NVidia gpu

I have set up a docker image that supports GPU acceleration, and this works just fine - running docker run --rm -it --gpus=all -p 5000:5000 -e PORT=5000 my_app results in my app runnning in GPU-...
user avatar
  • 101
0 votes
0 answers
48 views

install helm chart package without public container registry (offline,locally)

When I want to install a package in kubernetes cluster with helm chart, for example install gitlab with helm, during installation there is need to download docker image from a public registry and I ...
user avatar
  • 1
0 votes
0 answers
12 views

Is it possible to assign pods to all matches except particular nodes in k8s?

On a shared cluster, I'm trying to deploy my app on dedicated nodes, all have myrole role. I would like to exclude a few of these nodes by name. This doesn't work: affinity: nodeAffinity: ...
user avatar
0 votes
0 answers
39 views

Kubernetes YAML with local Docker images?

I have build two docker images via docker build -t name, one is a NodeJS/React frontend and one is a Python API that the frontend should call and get messages from. This is all happening locally on a ...
user avatar
  • 101
4 votes
2 answers
116 views

Why use configuration management tools in the world of modern cloud?

Configuration management tools like Ansible, Chef, Puppet, and Saltstack allows us to configure a cluster of blank machines to help install and deploy an application. For example, with Ansible, we can ...
user avatar
0 votes
0 answers
161 views

Docker daemon stop responding in Kubernetes

Some node in my k8s become Not Ready for reason like: "PLEG is not healthy: pleg was last seen active XXXXX ago; threshold is 3m0s" and events like Warning ContainerGCFailed 11m ...
user avatar
  • 1
2 votes
1 answer
108 views

Use S3 To Store ConfigMap

I have a ConfigMap which stores Nginx configs and It is getting size exceeded. There are many site configs in there so I can't create multiple ConfigMaps. I thought of using S3 to store ConfigMap, is ...
user avatar
0 votes
0 answers
40 views

issues with creating tsl secret from external cert imported to kevault for AKS ingress with nginx

Im having issues with creating tsl secret from external cert imported to key vault for AKS ingress nginx this is secret config apiVersion: secrets-store.csi.x-k8s.io/v1 kind: SecretProviderClass ...
user avatar
0 votes
0 answers
16 views

port forward azure VM to internal pod/service

I've got an azure VM running, say on public ip 20.20.20.20 On the VM a local kubernetes cluster is running with "kind". An nginx pod + service is running on 172.18.0.2:32000 and is ...
user avatar
1 vote
1 answer
742 views

"The plain HTTP request was sent to HTTPS port" issue with nginx-ingress in rancher/k8s

I'm running Rancher v2.6.3 and I have a cluster with a Django workload built all on top of AWS. The deployment has a cluster ip port set up, I have an ingress created with a prefix rule pointing at ...
user avatar
  • 121

1
2
3 4 5
14