All Questions
Tagged with kubernetes azure
97
questions
0
votes
0
answers
13
views
Cannot Push Log Data to Azure EventHub From Azure AKS using OpenTelemetry
I have an Azure AKS cluster and I am trying to send my container level logs to an Azure EventHub using OpenTelemetry Collector. I am deploying the OpenTelemetry Collector as a DaemonSet and below is ...
- 63
2
votes
0
answers
31
views
Switch ingress controller to new static IP with zero downtime?
My AKS app uses a standard ingress-nginx ingress controller with a static IP, installed via Helm chart:
myStaticIp=1.2.3.4
myNodeRg=MC_foobar_eastus
helm upgrade --install ingress-nginx ingress-nginx ...
- 385
0
votes
1
answer
64
views
Memory & CPU Utilization drastically different for AKS
I am planning to use Descheduler in my AKS deployment to balance memory consumption of AKS nodes. My current output of kubectl top nodes is:
NAME CPU(cores) CPU% ...
- 3
-1
votes
0
answers
16
views
Monitor the actions that extract data from AKS cluster to local machine
Is there a way to monitor the actions that extract data from AKS cluster to local machine? like for example another user A have this AKS cluster that have sensitive data and some other user B from ...
- 9
0
votes
0
answers
120
views
Pod of StatefulSet is terminated and stays in Status Completed
Introduction
I've an issue with a pod in a StatefulSet which is terminated, stays in the Completed state and is not restarted.
I will describe the situation in a concrete example, that will provide ...
- 211
1
vote
0
answers
97
views
502 Error When Accessing AKS via Application Gateway Ingress in Azure Private network
I have configured an Azure Kubernetes Service (AKS) with an Application Gateway in a private network setting. To facilitate communication between them, I've set up an Application Gateway Ingress ...
- 111
0
votes
1
answer
269
views
Terraform Azure - Error deploying AKS NoRegisteredProviderFound
I am trying to deploy an AKS cluster using this terraform code.
resource "azurerm_kubernetes_cluster" "k8s" {
name = local.k8s.name
location = ...
- 1,342
0
votes
0
answers
29
views
I'm getting the error "InvalidParameter" while trying to create nodes in my AKS Cluster
I'm trying to install CAST AI, a tool that helps to reduce kubernetes costs, the tool is trying to create a agentPools in my cluster but i'm getting the following error:
{ "code": "...
- 1
1
vote
0
answers
51
views
Upgrading personal AKS cluster
I have a personal Kubernetes cluster on AKS and Azure is making it mandatory for me to update the Kubernetes version in order to add a new node into the cluster.
Now that I have to do this, I would ...
0
votes
2
answers
143
views
Azure Istio - Revision asm-1-17 is not supported by the service mesh add-on
I am trying to activate istio in my azure kubernetes cluster, with the following command:
az aks mesh enable --resource-group rgtest01 --name akstest01
I am getting the error message:
(BadRequest) ...
0
votes
0
answers
60
views
Establishing mutual authentication over SSH using SPIFFE
For this learning purpose I have created a k8s cluster using 4 azure VMs (VM1, VM2, VM3 & VM4).I have followed the spiffe doc to deploy spire-server and spire-agent on a k8s infra. I have kept all ...
0
votes
1
answer
128
views
Azure kubernetes service private cluster
I have a private Kubernetes cluster that needs to be accessible by a client, but I still want to keep everything enclosed within a VPN. Unfortunately, the VPN I created requires an address space that ...
0
votes
2
answers
230
views
is Cloud loadbalancer necessary?
I currently have a Kubernetes cluster in the cloud AKS, and I'm using nginx-ingress to load balance, define routing rules and manage how traffic gets to my services. I see that many people are using ...
0
votes
0
answers
179
views
Containers in AKS cannot access Azure resources (Failed to resolve URL)
I have an API server (Python Flask) hosted on AKS. When the service starts, it:
Access Azure key-vault to get storage account connection string
use the connection string to perform CRUD jobs on Azure ...
- 101
0
votes
0
answers
21
views
Clarification Needed on Lifecycle Management of AKS LoadBalancer IP Addresses Labeled 'Static'
I'm currently managing an AKS cluster and have come across a point of confusion regarding the public IP addresses allocated for LoadBalancer services. These IPs are labeled as 'Static' in my Azure ...
0
votes
0
answers
334
views
Auto-Instrumentation of application using OpenTelemetry
I have an AKS cluster where I am running a test Python-Django based web application.
I also have Grafana and Prometheus configured. I need to use OpenTelemetry to get the metrics data from the test ...
- 63
0
votes
0
answers
252
views
OpenTelemetry Collector Data not being fetched by Prometheus in Grafana
I have a requirement where I have some container workload in Azure AKS cluster and I need to use OpenTelemetry to gather data like metrics, logs and traces. I also have Grafana as the visualisation ...
- 63
0
votes
0
answers
69
views
How to fix access denied error for aks kubernetes commands?
with service principal logged in with azure cli. Below command got this error.
az aks command invoke --resource-group rg-licanltcs-aks-prod --name aks-licanltcs-prod-eastus --command "kubectl ...
0
votes
0
answers
178
views
OpenTelemetry K8s Operator Collector - Exporter Configuration for Prometheus
I have some container workloads in Azure AKS cluster. I need to use OpenTelemetry to get the metrics, logs and trace data from the container workload and get it collected by the OTEL collector.
I have ...
- 63
0
votes
1
answer
113
views
What happens to Pod-Workload if a Node gets destroyed
when running pod-workload on an AKS-cluster with autoscaling enabled, what happens, if the pool gets scaled down? If a Pod is running workload on a node, and this node is being removed because of ...
- 25
0
votes
0
answers
17
views
How to use single signon of nodejs app using kubernetes deployment?
I have tried setting up single signon on a sample node.js app with express and Microsoft authentication.
This is the steps and source code link
When I run locally, it is working.
When I kept in ...
- 11
0
votes
0
answers
138
views
AKS System Node Pool and number of nodes
The AKS docs mention that 3 nodes are recommended in Production for System Node Pool.
What is the rationale behind this?
Does the fact that the cluster is a private cluster change anything in the ...
- 111
0
votes
0
answers
118
views
Kubernetes yaml not working on Rabbitmq cluster
I have a Rabbitmq Kubernetes cluster version 3.10.2 running on Azure AKS. I have applied cluster operator using.
kubectl apply -f "https://github.com/rabbitmq/cluster-operator/releases/latest/...
- 101
0
votes
0
answers
77
views
Restrict access to a Prometheus server in AKS can only be achieved with nginx-ingress?
Prometheus server with its respective Loadbalancer in AKS.
I wanted to secure the access to /metrics through network rules...but it doesn't work. I can still acess to the endpoint with any device.
...
- 1
1
vote
1
answer
580
views
Why do my AKS node have public IP even though "enableNodePublicIP" is set to false?
I have an AKS cluster where I added a new node pool. While creating the node pool, I set the option "Enable public IP per node" as Disabled. However, I still notice that my nodes in the VMSS ...
- 108
0
votes
0
answers
190
views
HTTP 502/404 with Grafana in Kubernetes, using AGIC
I'm trying to deploy Grafana in Azure Kubernetes service (AKS), through Helm. I'm using the Helm charts provided by Bitnami. I've been following this Microsoft tutorial to set up the application ...
- 123
0
votes
1
answer
326
views
Azure - AKS integration with API Manager for JWT authentication
I am trying to implement the following workflow to setup in the Azure:
Private AKS cluster to deploy my applications - Already provisioned
An ingress controller (AGIC preferably) for routing traffic ...
- 191
0
votes
0
answers
151
views
Firebird horizontally scaling using containers
I am trying to setup a firebird server within K8s and using docker containers. This has worked well with using Azure Files as a persistent volume storage, however when I try scaling past 1, there are ...
- 101
0
votes
1
answer
575
views
nginx-ingress returns 502 After upgrading to kubernetes v1.24.6
When trying to upgrade from kubernetes v1.23.X to v1.24.X.
I has been seen that the health probe needs to be changed to be /healthz (azure)
I have a configuration that works in 1.23 but not 1.24
I ...
- 11
14
votes
1
answer
7k
views
Kubernetes v1.24.3 upgrade broke ingress-nginx
After upgrading our AKS kubernetes cluster to from v1.23.8 to v1.24.3 our ingress stopped working properly. No errors logged in events and the ingress-nginx pod does not report any errors on the ...
- 441
1
vote
1
answer
287
views
azure kubernetes service - not able to pull images from ACR - connection refused - inconsistent
the issue started out of nowhere without any apparent change that we did. All of a sudden, deployments to our AKS (Kubernetes Version 1.23.8) clusters would randomly fail with errors like the below. ...
- 131
2
votes
2
answers
5k
views
How does Azure Loadbalancer work with Azure AKS
I recently tried to figure out how an Azure Loadbalancer in front of an Azure AKS cluster actually routes traffic to the cluster nodes.
Our (quite basic) setup:
AKS cluster version 1.23.x with the ...
- 123
0
votes
1
answer
998
views
Azure fails to attach disk to VM
I have a VM in zone 1 and 2 and a disk in zone 1, but when I run my script it fails with the following message:
AttachVolume.Attach failed for volume "disk-name" : rpc error: code = Unknown ...
- 3
1
vote
1
answer
16k
views
How to cleanup namespace in kubernetes?
We have one cluster in aks.
Where we deployed consul helm chart in consul namespace.
It created many CRDs.
The using these CRDs internally created one more namespace applicationns
When we deleted ...
- 185
1
vote
0
answers
1k
views
ETCD snapshots causing etcdserver: leader changed
For a while now we've experienced regular errors from operations on kube API in AKS resulting in etcdserver: leader changed message. From what we've learned there is an ETCD snapshot performed every ...
0
votes
0
answers
69
views
How are Kubernetes persistent volumes related to AzureDisks in AKS?
Say I have One K8s node with Two pods. Each pod claims 5Gi of PV storage. The provisioned AKS VM (node) has a 32GiB SKU SSD AzureDisk data drive.
Will/can both of the 5Gi K8s volumes be located on the ...
- 101
0
votes
1
answer
2k
views
How to launch a sql file on kubernetes pod creation?
We have our database either in aws rds or azure postgres or even on a different online server based on customer.
But our product will be running in azure kubernetes as a pod and service with database ...
- 156
1
vote
1
answer
914
views
How to expose services in private AKS cluster?
I've created a private cluster on AKS and deployed some workloads to it, but I'm not sure how to connect to the services. They are all NodePort services, both TCP & UDP.
Initially, I thought that ...
- 21
0
votes
2
answers
2k
views
Kubernetes NGINX Ingress Controller Failure using Helm on AKS
When going through the setup of a K8 ingress controller, which is documented here
I am unable to get past the step of "Create an Ingress Controller"
During the Helm command step and placing ...
- 153
1
vote
2
answers
2k
views
What is the right way to assign Network Contributor Role to an AKS cluster via ARM / Bicep template?
I'm trying to configure a Load Balancer for my AKS server using Bicep/ARM. I am using the NGinx Ingress Controller in kubernetes and it does seem to work but when I first spin things up I am ...
- 113
0
votes
1
answer
230
views
Use fwmark in iptables on a container running in Azure K8S
I have a weird use case, where a pod running in Azure Kubernetes needs to route traffic from specific ports to specific targets through a dedicated VPN tunnel. But those targets are private IPs and ...
- 11
0
votes
1
answer
2k
views
AKS with Azure Key Vault - env variables don't load
I'm trying to use secrets from Azure Key Vault in my Kubernetes deployment as env variables and I'm struggling to do so. I'm using Azure pod identity and the secrets get mounted to the file and that ...
- 160
0
votes
1
answer
303
views
How to install Consul on azure kubernetes with policies enabled?
I have installed azure kubernetes with azure policy enabled.
I followed the steps in the getting started guide of consul as is: link
But when the consul is deployed, the pods are not deployed.
When I ...
- 531
0
votes
0
answers
201
views
Kubernetes Load balancer on Azure via kubeadm
We have created a Kubernetes cluster ( 1 master, 2 workers VMs) using kubeadm on Azure. The master and worker VMs have private IPs only.
We are bringing up an nginx pod of service type - Load balancer ...
- 139
1
vote
1
answer
243
views
Consul containers are creating as privileged containers, how to change that?
With the azure policy addon enabled(as per organization policy), we can’t create privileged containers on the aks, azure kubernetes.
Our application is set to security context as below.
...
- 412
0
votes
1
answer
703
views
Limit exceeded for cluster creation on Azure Kubernetes, where to cleanup?
I have deleted the old clusters by deleting the resource group completely.
But when I try to create a new cluster, I am getting error as limit exceeded.
As you can see in the below error.
{"code&...
- 412
0
votes
1
answer
1k
views
How to convert configmap to azure keyvault
I have a configmap like below.Which I will link to a config file in our application.
apiVersion: v1
kind: ConfigMap
metadata:
name: database-configmap
data:
config: |
dbport=5432
dcname=
...
- 412
0
votes
1
answer
588
views
How to use acr secret saved in azure vault for image pull?
With azure vault and csi driver, able to create secrets and access them as single files in container.
I followed this approach to create basic secrets.
Can accessible the secrets from the container as ...
- 412
0
votes
1
answer
2k
views
Azure key vault volume not accessible, how to fix that?
I have followed the walkthrough provided in this link
And at step 6, I have tried to create a pod with the volume linked to the keyvault.
But it is not able to access the volume.
kubectl get pods
NAME ...
- 412
3
votes
2
answers
2k
views
How to move kubernetes to a different subscription in azure?
I have two subscriptions under my account.
When I check today, the balance is low in my subscription where I deployed the cluster.
So, I click on change subscription option and selected the second ...
- 412