2

To debug this, check the container logs and the container events. kubectl get pods Find your pod name. kubectl logs If logs don't make it obvious... kubectl get events If you deployed into a namespace, make sure to add -n to all commands. This should reveal basically everything. If you're stuck, you can also browse around the k8s dashboard if you haven'...


2

just create an ingress resource along side each application, that way you can modify individual ingress resources without impacting other applications. Load balancers do not allow you to do anything meaningful with your traffic. With ingress you can use cert-manager, external-dns, ssl offloading, etc.


1

I generally use an Ingress for each application. This allows for any updates to it to be specified as a separate deployable unit. If there is a need for separate public IPs, you can have multiple ingress controllers for different namespaces/environments.


1

With help from a Microsoft Engineer, we were able to resolve our issue. The trick to it was that the node that could communicate with the outside world was always the one that the kubernetes tunnel pod was running on. This indicated a problem with communication between nodes. The traceroute indicated that this, with no network security group traffic ...


1

If my assumption is correct that's related to having a loadbalancer that wasn't correctly deleted. Which could be resulted by redeploying a service (of type: load balancer) in a short time before Azure cleans up the previously associated loadbalancer resource. To my knowledge, that could be fixed with the rolling of Kubernetes 1.17 and the Loadbalancer ...


1

It just works Your configuration is correct. Provided YAML file generates nginx config like this: ... server { listen 80; server_name example.com; ... location ~* "^/service/test" { root /var/www/example.com/htdocs; } } Testing this config via this cool tester shows that location filter works: http://example.com/service/test1 -> ...


1

I would expect it to work like az login and open up a new tab in default browser. But somehow it doesn't work like that. I think the fix must come from azure CLI. Temporarily, For az aks browse you can setup an environment variable on WSL. export BROWSER="/mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe" In this case next when I run az aks ...


1

First How to check Check certificate expiration You can use the kubeadm alpha certs check-expiration command to check when certificates expire on a given cluster. Simplest remedy : you can choose to upgrade the control plance which will renew the certs and then you are good and secure as before loosing your laptop. Automatic certificate renewal Note : ...


1

It looks like your dockerfile has both CMD and ENTRYPOINT, so it’s highly likely that what gets invoked as a commsnd is pwsh -f /app/Start-Test.ps1 /app/Start-Test.ps1. It could be that this command gives an error, kubectl describe <your-pod> might shed some light onto what’s going on. Check this answer for details on difference between CMD and ...


1

K8s works with concept of Health Check, in your application you have some port or command/trigger that K8s can monitoring? Maybe because of that your container is not works.


1

The following setup works for me. When using the subPath in volumeMounts, the permission issue is automatically addressed, as the user postgres owns the folder corresponding to the subPath. spec: ... containers: - ... volumeMounts: # need a subpath as postgres wants an empty folder (the mounted folder `/var/lib/...


1

AzureFile didn't support that operation, so I tried AzureDisk and it worked. This is what I used: apiVersion: storage.k8s.io/v1 kind: StorageClass metadata: name: cockroach-disk namespace: cockroach provisioner: kubernetes.io/azure-disk parameters: storageaccounttype: Standard_LRS kind: Managed #resourceGroup: CockroachStorage reclaimPolicy: ...


Only top voted, non community-wiki answers of a minimum length are eligible