2

just create an ingress resource along side each application, that way you can modify individual ingress resources without impacting other applications. Load balancers do not allow you to do anything meaningful with your traffic. With ingress you can use cert-manager, external-dns, ssl offloading, etc.


2

The following setup works for me. When using the subPath in volumeMounts, the permission issue is automatically addressed, as the user postgres owns the folder corresponding to the subPath. spec: ... containers: - ... volumeMounts: # need a subpath as postgres wants an empty folder (the mounted folder `/var/lib/...


2

To debug this, check the container logs and the container events. kubectl get pods Find your pod name. kubectl logs If logs don't make it obvious... kubectl get events If you deployed into a namespace, make sure to add -n to all commands. This should reveal basically everything. If you're stuck, you can also browse around the k8s dashboard if you haven'...


2

First How to check Check certificate expiration You can use the kubeadm alpha certs check-expiration command to check when certificates expire on a given cluster. Simplest remedy : you can choose to upgrade the control plance which will renew the certs and then you are good and secure as before loosing your laptop. Automatic certificate renewal Note : ...


2

It just works Your configuration is correct. Provided YAML file generates nginx config like this: ... server { listen 80; server_name example.com; ... location ~* "^/service/test" { root /var/www/example.com/htdocs; } } Testing this config via this cool tester shows that location filter works: http://example.com/service/test1 -> ...


1

I would expect it to work like az login and open up a new tab in default browser. But somehow it doesn't work like that. I think the fix must come from azure CLI. Temporarily, For az aks browse you can setup an environment variable on WSL. export BROWSER="/mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe" In this case next when I run az aks ...


1

You would normally use an Azure AD object like a Service Principal to get the credentials for AKS using the az aks get-credentials command. To expire the aks credentials, you need to set a policy for token expiry on the Service principal which you use. Once you set the expiry time, kubectl will ask you to reauthenticate when the token expires. Refer: ...


1

which deploys containers based on Distroless Using Distroless is a good practice! This typically means that you don't have more than the absolute minimum in your container to run your application - it is typically just your application and some necessary libraries. This also means that there are no extra tools and debugging possibilities within the ...


1

I don't think it is the compatibility, need to really see your configuration to be sure. But most likely, you block something wrongly. If you use the default network policy api networking.k8s.io/v1 notice that it only allows what is defined.


1

The ConfigMap and Annotation configuration have different purposes. As per nginx-configuration/configmap/#ssl-protocols: Sets the SSL protocols to use. The default is: TLSv1.2 TLSv1.3 ngx_http_ssl_module.html#ssl_protocols Context: http, server i.e., enable the specified protocols to your Nginx Controller. client --ssl-protocols-> controller --> ...


1

If my assumption is correct that's related to having a loadbalancer that wasn't correctly deleted. Which could be resulted by redeploying a service (of type: load balancer) in a short time before Azure cleans up the previously associated loadbalancer resource. To my knowledge, that could be fixed with the rolling of Kubernetes 1.17 and the Loadbalancer ...


1

It looks like your dockerfile has both CMD and ENTRYPOINT, so it’s highly likely that what gets invoked as a commsnd is pwsh -f /app/Start-Test.ps1 /app/Start-Test.ps1. It could be that this command gives an error, kubectl describe <your-pod> might shed some light onto what’s going on. Check this answer for details on difference between CMD and ...


1

K8s works with concept of Health Check, in your application you have some port or command/trigger that K8s can monitoring? Maybe because of that your container is not works.


1

AzureFile didn't support that operation, so I tried AzureDisk and it worked. This is what I used: apiVersion: storage.k8s.io/v1 kind: StorageClass metadata: name: cockroach-disk namespace: cockroach provisioner: kubernetes.io/azure-disk parameters: storageaccounttype: Standard_LRS kind: Managed #resourceGroup: CockroachStorage reclaimPolicy: ...


1

I generally use an Ingress for each application. This allows for any updates to it to be specified as a separate deployable unit. If there is a need for separate public IPs, you can have multiple ingress controllers for different namespaces/environments.


1

With help from a Microsoft Engineer, we were able to resolve our issue. The trick to it was that the node that could communicate with the outside world was always the one that the kubernetes tunnel pod was running on. This indicated a problem with communication between nodes. The traceroute indicated that this, with no network security group traffic ...


Only top voted, non community-wiki answers of a minimum length are eligible