Questions tagged [google-kubernetes-engine]
Google Kubernetes Engine is a cluster manager and orchestrator for running Docker containers. It schedules your containers into the cluster and manages them automatically based on requirements you define (such as CPU and memory). It's built on the open source Kubernetes system, giving you the flexibility to take advantage of on-premises, hybrid, or public cloud infrastructure. It was formerly called Google Container Engine.
567
questions
37
votes
3
answers
30k
views
Stable public IP or IP range for outbound connections in GKE
I use Google Kubernetes Engine to run on demand pods. Each pod is publicly exposed to the internet using a nodeport service.
I am looking for a way in GKE to get a single IP or an IP range for ...
25
votes
4
answers
5k
views
gcloud docker -- push results in login attempt failed with 404
I am trying to push a docker image to Google's container registry but keep getting a error about Docker login having failed. I run
gcloud docker -- push gcr.io/<my-project-id>/test-image
I ...
- 439
23
votes
4
answers
34k
views
Using environment variables in Kubernetes deployment spec
I currently use a Kubernetes spec Deployment.yaml for deploying a service. The spec includes a verbatim reference to a specific IP address (marked as <static-ip-address> below):
spec:
type: ...
- 706
23
votes
4
answers
30k
views
kubernetes dns resolver in nginx
I was developing locally in docker-compose, and had an nginx container doing a simple proxy_pass like so:
location /app/ {
proxy_pass http://webapp:3000/;
proxy_http_version 1.1;
...
- 331
18
votes
3
answers
24k
views
How to choose the external IP address of a Kubernetes load balancer in Google Kubernetes Engine
I'm deploying a web app using Google Kubernetes Engine and I want to make it accessible via a load balancer on an existing static IP address that I control as part of the same project in Google Cloud ...
14
votes
4
answers
7k
views
Error creating GCE load balancer: requested address ip is neither static nor assigned to LB
I have a situation where Kubernetes apparently can no longer assign an external IP address to a service upon kubectl create -f Deployment.yaml. kubectl describe service <my-service> reports the ...
14
votes
2
answers
4k
views
Kubernetes - can I avoid using the GCE Load Balancer to reduce cost?
I'm deploying a Kubernetes cluster on GCE using Gitlab-CI. I'd like to keep the cost to a minimum - here's my current setup:
Nodes run on 3 f1-micro instances
A system pod running Traefik configured ...
14
votes
1
answer
5k
views
Enable VPC-native (alias IP) on an existing GKE cluster
Is there a way to enable Alias IP on existing GKE cluster (with disabled Alias IP)?
(Besides using https://github.com/bowei/k8s-custom-iptables to create NATs on each node)
13
votes
3
answers
4k
views
How to make Google Cloud Load Balancer respect the received X-Forwarded-Proto?
My app structure uses GKE and CloudFlare. It looks like this:
CloudFlare -> GKE -> Ingress -> My app running nginx
I'm using the flexible SSL in CloudFlare, so only the connection between ...
12
votes
1
answer
6k
views
google cloud http(s) load balancer returning 502 despite healthy backend service
I've got a GCE http(s) load balancer configured to direct traffic to 2 backends:
- the default backend
- a second backend with a separate host/path rule (<host>:/*)
Both backends exist on the ...
11
votes
2
answers
36k
views
Can host aliases be assigned to deployments in Kubernetes? If so, how?
This article describes how to assign host aliases to pods in kubernetes, is there anyway to do it for a deployment and not for a pod as such?
Any other suggestions to add host entries in kubernetes ...
- 919
11
votes
2
answers
7k
views
Where are the Google Health check logs
I am running a GCE instance and on it I have a Kubernetes cluster running. An HTTP Load Balancer is also configured to probe the health of the a Kubernetes service running on this instance. But I ...
10
votes
1
answer
15k
views
Can I mount Google cloud storage bucket to a pod as a persistent disk. If yes how?
I have a gke cluster with nodes in 3 different Zones but same region. I want to use persistent disks to my pods. But the pods are created randomly in all the 3 zones.How can I use a gcePD (common for ...
9
votes
1
answer
3k
views
NGINX vs. GCE Kubernetes ingress classes
When setting up a Kubernetes ingress on Google Container Engine, you can choose the ingress class (gce or nginx). I realize that the GCE class provisions a load balancer on Google's Cloud Platform, ...
9
votes
1
answer
9k
views
Detecting Kubernetes OOMKilled Events in GKE Logs
I'd like to set up instrumentation for OOMKilled events, which look like this when examining a pod:
Name: pnovotnak-manhole-123456789-82l2h
Namespace: test
Node: test-cluster-cja8smaK-oQSR/10.x....
- 260
9
votes
5
answers
6k
views
Cannot connect to Cloud SQL Postgres from GKE via Private IP
I am having trouble accessing a Cloud SQL instance running Postgres from a GKE cluster using the database's private IP. All the documentation I've found suggests using a VPC-enabled cluster to ...
8
votes
2
answers
23k
views
Pod keeps restarting and is in a CrashLoopBackOff state
One of our pods won't start and is constantly restarting and is in a CrashLoopBackOff state:
NAME READY STATUS RESTARTS AGE
...
- 93
7
votes
2
answers
7k
views
Why a pod can't connect to another network? (In the new version of Kubernetes)
I have two projects in GCP:
With Kubernetes Nodes v1.8.8-gke.0. and a database outside of Kubernetes but in the default network. All pods can connect to this server and all ports
With Kubernetes ...
7
votes
1
answer
6k
views
Google Kubernetes Engine node pool does not autoscale from 0 nodes
I am trying to run a machine learning job on GKE, and need to use a GPU.
I created a node pool with Tesla K80, as described in this walkthrough.
I set the minimum node size to 0, and hoped that the ...
- 173
7
votes
1
answer
16k
views
ERR_SSL_PROTOCOL_ERROR on otherwise working kubernetes ingress/service
I have a basic nginx deployment and an existing certificate issued by let's encrypt via cert-manager. I thought everything was in place to start using the certificate but I'm unable to connect on ...
- 394
7
votes
2
answers
10k
views
Pods stuck in 'Pending', no events being logged
I don't know where to look for hints.
We have installed gitlab-runners using a helm chart in our development cluster. Most of the time this works, but in the last week or so we have experienced pods ...
6
votes
1
answer
7k
views
Can't delete dangling k8s load balancer due to http target proxy that doesn't exist
I'm trying to delete the forwarding rule, target proxy, url map and backend services that belong to an extinct k8s ingress.
I successfully delete the forwarding rule and target proxy but then when I ...
6
votes
3
answers
8k
views
Resize kubernetes cluster with a different machine type?
I want to add a new node in existing kubernetes cluster, but with a different machine type. For the new node I will add label for it so that only some application will run on it.
I tried the ...
6
votes
1
answer
4k
views
Does order of network policies matter in kubernetes?
I have a cluster on Google Kubernetes Engine, It has Network Policies enabled using Calico.
Until now I have written 12 Network Policies as a form of YAML files.
One thing I can't seem to figure out ...
- 239
6
votes
2
answers
8k
views
Recommended disk size for GKE nodes?
When I create a new node pool in GKE, the size of the disks default to 100GB.
However, when I SSH into a node that's been up for a while, after running df -h there's only 32GB in use. (I don't ...
- 183
6
votes
4
answers
2k
views
pushing an image with two tags to gcr.io results in two different images
I'm doing the following:
docker build -t gcr.io/projid/imgname:333 -t gcr.io/projid/imgname:latest .
docker login -u _json_key -p "$(cat /secrets/service-account.json)" https://gcr.io
docker push ...
- 205
6
votes
2
answers
15k
views
Kubernetes Ingress: How can I expose two ports on one path?
I have a GCE Ingress configured and working with SSL on port 443. I'm trying to get port 28080 pointing to my standalone actionable server.
I currently have this for my Ingress yaml:
# web-ingress....
- 394
6
votes
3
answers
4k
views
Google Cloud Run - How to mount FileStore / NFS?
Our application requires the presence of data on two filestores. On our current Kubernetes configuration, we use a persistent volume like so:
apiVersion: v1
kind: PersistentVolume
metadata:
name: ...
6
votes
2
answers
2k
views
Intermittent DNS failures in Google Container Engine
[Question rewritten with details of findings.]
I am running a Google Container Engine cluster with about 100 containers which perform about 100,000 API calls a day. Some of the pods started getting ...
5
votes
1
answer
4k
views
Issue Connecting to Cloud SQL Postgres using Private IP from GKE
Steps I have followed:
1. Create VPC network
gcloud compute networks create stg-vpc \
--subnet-mode custom
2. Create IP range for VPC Peering for this network
gcloud beta compute addresses ...
5
votes
2
answers
5k
views
Can I remove the external IP from my GKE cluster?
I've just started using Google Kubernetes Engine (GKE) and I love it.
I spent some time getting an Internal Load Balancer working so my app has a 10.128.0.0/16 IP.
Now I am wondering, can I remove ...
5
votes
3
answers
3k
views
GCE Health Check settings are reverting to default
I set up a Load Balancer on the GCP using an Ingress in the Kubernetes Engine.
The Backend Service by default registered all instances as unhealthy. I updated the health check to the HTTPS protocol ...
5
votes
1
answer
7k
views
Deleting all instances of resource type across multiple/all Kubernetes namespaces
I'm trying to uninstall and reinstall cert-manager on our Kubernetes clusters. Their uninstall docs mention:
Before continuing, ensure that all cert-manager resources that have
been created by users ...
- 7,918
5
votes
1
answer
12k
views
IP space is exhausted
I have an issue about GKE/GCE.
I'm using GKE under shared VPC(alias ip) and I have 4 machines of 2 node pools. When I try to add more node pools(because I want to have more type of machines), it ...
5
votes
3
answers
10k
views
How to configure Redis Cluster inside a Kubernetes cluster to be accessible by external applications
I'm having trouble exposing my Redis Cluster on Kubernetes to external applications. Using a Kubernetes load balancer service, I'm able to assign an external IP to Redis which provides initial ...
- 116
5
votes
1
answer
3k
views
GKE pod connecting via VPN?
I have a GKE cluster with a handful of nodes and I would like pods in this cluster to be able to connect to remote hosts on a private network that can be reached via a site-to-site VPN provided by GCE....
- 3,130
5
votes
2
answers
32k
views
Keep getting "Does not have minimum availability" in Kubernetes cluster when deploying workload
I'm currently running a Kubernetes cluster on a n1 standard1 node (1vCPU and 3.75GB memory).I tried to deploy 4 workloads.
I have set resource request and limit as 100m and 128Mi (for container) for ...
- 51
5
votes
1
answer
4k
views
GCP: Run kubectl exec on private cluster over proxy
I have a private kubernetes cluster with private ip.
In order to access it i have set up a bastion host with squid proxy.
It looks like this:
My host -> bastion -> private cloud
Regular ...
- 177
5
votes
1
answer
4k
views
Unable to SFTP with password authentication from outside localhost
I'm having a strange problem with an SFTP server I've deployed on Kubernetes. I suspect the issue has to do with sshd_config so I figured I would ask here (been digging into the docs for a while, also ...
- 321
5
votes
1
answer
532
views
Access services via Cloud VPN from Kubernetes container
I have a VPC network set-up with a VPN connecting to the on-prem network.
Cloud router is used to create routes (BGP) internally and with the VPN network.
One of the projects is hosting public ...
5
votes
0
answers
737
views
Heapster + InfluxDB on Google Container Engine (GKE)
I am trying to figure out what the best way to run Grafana/Heapster/InfluxDB on my GKE Kubernetes cluster.
From what I understand I cannot modify the kube-system namespace unless I want google to ...
- 205
4
votes
3
answers
9k
views
How can I enable HSTS on the default Google Load Balancer coming with Google Container Engine?
I'd love to set up HSTS with my GKE cluster, as right now HTTP requests return a Google broken robot 404 page after setting this up in ingress.yml annotations:
kubernetes.io/ingress.allow-http: "false"...
- 165
4
votes
2
answers
900
views
How do I obtain kernel headers on GKE ContainerOS image?
I need the kernel headers but there is no /lib/modules/[kernel version]/build or /usr/src/[kernel version]. I'm assuming they ripped those out to trim down the image.
My use case: I am using bpftrace ...
- 193
4
votes
3
answers
10k
views
Unable to access internet on pod in private GKE cluster
I'm currently unable to access/ping/connect to any service outside of Google from my private Kubernetes cluster. The pods are running Alpine linux.
Routing Tables
/sleepez/api # ip route show table ...
4
votes
3
answers
6k
views
How ssh Kubernetes engine instances and check public IPs of Kubernetes engine?
How can I access through ssh to the machine running the Kubernetes Engine?
How can I check a public IP of the machines running the Kubernetes engine?
4
votes
3
answers
3k
views
Create Google Container Engine Cluster Without Default Node Pool?
When I create a cluster on Google Cloud's Container Engine, e.g. using
gcloud container clusters create my-cluster --zone=my-zone
a node pool ("default-pool") is created as well. I don't want this ...
4
votes
2
answers
15k
views
Why does kubectl port-forward require the destination service to be bound to localhost?
I have noticed that kubectl port-forward only works when the process being forwarded to is listening on 127.0.0.1 or localhost. If the process is bound to another address, like the pod IP, then port ...
- 567
4
votes
3
answers
8k
views
How to create GPC firewall rule to allow traffic between GKE clusters
Background
I have a GCP project with two GKE clusters: public-cluster and private-cluster. public-cluster runs an API gateway which performs centralized authentication, logging, rate-limiting etc and ...
4
votes
2
answers
3k
views
Kubernetes - External Connection through single IP
I need to find a way to have 1 IP that is used by all pods everytime they need to connect to the "outside world".
FULL VERSION:
I'm trying to integrate my application with a Payments Gateway service....
4
votes
1
answer
1k
views
Achieving stickiness on kubernetes cluster with ingress-gce
I'm trying to achieve stickiness on kubernetes cluster but I am redirected to a different pod every time I access the load balancer. I have session affinity set to 'ClientIP' and also tried with '...
Related Tags
kubernetes × 320
google-cloud-platform × 294
docker × 33
load-balancing × 30
networking × 22
gcloud × 20
ingress × 19
google-stackdriver × 18
nginx × 14
cloud × 11
google × 11
terraform × 9
linux × 7
google-cloud-sql × 7
ssl-certificate × 6
cluster × 6
containers × 6
nginx-ingress × 6
vpn × 5
firewall × 5
logging × 5
autoscaling × 5
more related tags
Hot Network Questions
- How do I get my D&D group to engage to a minimum
- How to bid a very strong hand with values in only 2 suits?
- Simple Container Class
- Less ridiculous way to prove that an Ascii character compares equal with itself in Coq
- What is the relationship between gravitation, centripetal and centrifugal force on the Earth?
- Trying to determine what this small glass-enclosed item is
- Clip data in GeoPandas to keep everything not in polygons
- Can a directed set be empty?
- Which numbers are sums of finite numbers of reciprocal squares?
- In By His Bootstraps (Heinlein) why is Hitler's name Schickelgruber?
- How to make D&D easier for kids?
- Why can't I conserve mass instead of moles and apply ratio in this problem?
- Is it better to show fake sympathy to maintain a good atmosphere?
- Have there been any scholarly attempts and/or consensus as regards the missing lines of "The Ruin"?
- Is there any legal justification for content on the web without an explicit licence being freeware?
- Why do we care if the likelihood function is tractable?
- Algorithm to evaluate "connectedness" of a binary matrix
- Cancellation of the Deutschlandticket
- Were there engineers in blimp nacelles, and why were they there?
- White grids appears when export GraphicsRow to PDF
- Why depreciation is considered a cost to own a car?
- Could space habitats have large transparent roofs?
- Different Bekenstein bound equations – what’s the difference?
- Do capacitor packages make a difference in MLCCs?