Skip to main content

Questions tagged [kubernetes]

Kubernetes is an open source orchestration system for Docker containers. It handles scheduling onto nodes in a compute cluster and actively manages workloads to ensure that their state matches the users declared intentions. Using the concepts of "labels" and "pods", it groups the containers which make up an application into logical units for easy management and discovery.

Filter by
Sorted by
Tagged with
1 vote
1 answer
77 views

In kubernetes DNS queries fail between nodes

I have an issue with kubernetes and coreDNS that I am not able to solve. System information 1 master + 2 workers Red Hat Enterprise Linux release 9.3 (Plow) k8s: v1.28.7 flannel: v0.24.2 coreDNS: v1....
Haskind's user avatar
  • 21
0 votes
0 answers
143 views

Restricting Access to Kubernetes Ingress using LDAP and VPN

I'm working on securing access to my Kubernetes cluster, specifically for the domain name xyz.com. Currently, I'm using NGINX Ingress with the nginx.ingress.kubernetes.io/whitelist-source-range ...
adel hamrouni's user avatar
2 votes
2 answers
530 views

K3S: understanding the network model and applying TLS certificates

In order to learn a bit more about K8S I started running a single server/node K3S cluster as a home lab. But I believe I've reached an impasse on my understanding of the network model, maybe specific ...
Jo Colina's user avatar
  • 133
0 votes
2 answers
134 views

Knative On-Premise setup without external IP

I am trying to setup Knative on On-Premise Kubernetes Cluster (without having an external ip). Kubernetes: v1.28 Knative: v1.13 1 master node and 2 workers https://knative.dev/docs/install/yaml-...
Waqar Alamgir's user avatar
0 votes
0 answers
107 views

Terraform, EKS and cluster-autoscaler

I'm trying to deploy cluster-autoscaler to an existing EKS cluster. here's my terraform code: resource "aws_iam_policy" "cluster_autoscaler" { name = "...
Alexey Kiyashkin's user avatar
1 vote
0 answers
47 views

Prometheus CPU consumption after remote_write is enabled

I have problems figuring out why my Prometheus instance starts to chew a lot of CPU after I enable remote_write feature. I have deployed a prometheus and grafana from chart kube-prometheus-stack, ...
Antonio Soldo's user avatar
0 votes
0 answers
43 views

Error "The connection to the server was refused - did you specify the right host or port?"

I'm new to K8s. I'm configuring a K8s cluster on EC2 and I've started by installing docker, then started: systemclt start docker Installed kubeadm on the EC2 instance: (https://v1-28.docs.kubernetes....
M.rob's user avatar
  • 1
0 votes
2 answers
143 views

Azure Istio - Revision asm-1-17 is not supported by the service mesh add-on

I am trying to activate istio in my azure kubernetes cluster, with the following command: az aks mesh enable --resource-group rgtest01 --name akstest01 I am getting the error message: (BadRequest) ...
Marvin Core's user avatar
0 votes
0 answers
73 views

RKE2 in HA cluster

Im trying to learn RKE2 which in some cases is different from classic k8s, and I have an issue with setting up HA cluster. I want to have 3 master nodes / 3 worker nodes and physical LB. Lets say: ...
Indoles's user avatar
0 votes
0 answers
61 views

Spire deployment on kubernetes and certificate retrieval

I am currently trying to deploy spire on my k8s cluster (3 worker nodes). My objective is to successfully deploy spire and use the certificates generated by the spire-server to encrypt the exchanges ...
Grusat's user avatar
  • 1
0 votes
0 answers
50 views

Linkerd multicluster: probe-gateway mirrored from cluster X has no endpoints

I have many clusters running prometheus and I want to use prometheus federation to be able to do aggregations with the metrics in one central grafana dashboard. In order to achieve it, I have added an ...
victor.valencia's user avatar
0 votes
1 answer
146 views

Failing to authenticate with GHCR after kubernetes upgrade to 1.24

I’ve upgraded my AWS EKS to 1.24, and since then authentication with github docker registry fails. I’m running the following Ansible task in Jenkins: - name: Login to github docker registry ...
Supertwister's user avatar
0 votes
1 answer
289 views

Cannot add Kubernetes metadata as label to Loki container logs in FluentBit

I am trying to gather container logs in Kubernetes environment using FluentBit, Loki and Grafana. I would like to append Kubernetes Pod name as label so when I query the logs in Grafana, it would be ...
Balint Laszlo's user avatar
0 votes
0 answers
30 views

Velero backup PV freezes whole server

I am facing an issue while trying to backup a namespace with PV in it: after running command velero backup create nginx-example-with-pv --include-namespaces nginx-example i am unable to execute velero ...
MODifikaTOR's user avatar
0 votes
0 answers
229 views

Kubernetes Cluster Initialization Fails with Kubeadm and CRI-O on Ubuntu 22.04

I am setting up a Kubernetes cluster on Ubuntu Server LTS 22.04 using Vagrant, with Kubernetes version 1.28.7 and CRI-O 1.28.2 as the container runtime. I'm encountering an issue when initializing the ...
Mile Stanislavov's user avatar
1 vote
1 answer
106 views

Filtering logs sent by opentelemetry-agent to Coralogix

I'm trying to figure out how to configure this filterprocessor to filter some kind of logs. I've created for myself playground in minikube with app that randomly generates logs and installed otel ...
Anatoly's user avatar
  • 152
0 votes
1 answer
176 views

Expose kubernetes to wireguard peers

I have a DO VPS serving as WireGuad server. I have a few devices in that network (10.252.1.0/24) and one computer runs Kubernetes (my home server) with node IP 172.18.0.2 and VPN IP 10.252.1.3 I have ...
Erik Kubica's user avatar
0 votes
0 answers
218 views

Kubernetes won't pick up new certificate, x509 certificate expired

kubectl version Client Version: v1.20.4 Server Version: v1.20.15 At the end of January we renewed our external certificates that we use for the applications on the system (as opposed to the kubeadm ...
Stuckinthemud's user avatar
1 vote
0 answers
190 views

In K8s network, why UDP packets are dropped by kernel?

In Azure I have two k8s services: serviceA and serviceB. serviceA's type is LoadBalancer, and set externalTrafficPolicy=Local Client sends UDP packets to serviceA, serviceA transfer them to serviceB ...
feiyu_guo's user avatar
0 votes
1 answer
81 views

CrashLoopBackOff for whatever Alpine Image used

I am trying a simple deployment with an alpine image (built by myself as well as using vandot/alpine-bash). Deployment gets created then I have 0/1 ready and see CrashLoopBackOff in the pod details. ...
eliassal's user avatar
  • 101
0 votes
0 answers
107 views

Cors issue when deploying a mernstack app on minikube

I have a mern stack app (react vite + nodejs) web app that is working fine as i enabled cors middleware to allow my frontend to send requests to the backend but the problem is when i tried to deploy ...
Achref's user avatar
  • 1
0 votes
1 answer
201 views

GKE Autopilot - consume reservation

I had some issues creating GKE deployment with nvidia t4 GPU (Node scale up in zones europe-west1-b associated with this pod failed: GCE out of resources. Pod is at risk of not being scheduled.) so I ...
Noskol's user avatar
  • 101
0 votes
0 answers
40 views

Data written to PVC using job pod is not available in main POD

I have a job pod with a bash script that executes and writes data to the PVC, however, the same data is not available when I check in from the main POD, both the deployment & job use the same PVC, ...
Naveen Naidu's user avatar
0 votes
1 answer
48 views

How to Configure vcluster to Use Internal Docker Registry Certificates?

I'm setting up a vcluster instance and I want it to use images from an internal Docker registry available at docker-registry.docker-registry:5000. On regular Kubernetes nodes, I usually configure this ...
Fabrice Jammes's user avatar
0 votes
0 answers
274 views

Readiness probe warning: Probe terminated redirects, Response body:

an HTTP healthcheck with Healthcheck. As you can see, it is redirected to the outside. root@wordpress-848c85d8d6-8cb15:/# curl HTTP/1.1 301 Moved Permanently http://10.42.3.26 -I Server: nginx Date: ...
콜라맛홍삼's user avatar
0 votes
0 answers
331 views

How to access a docker-compose container running with Minikube?

I used to setup and run some containers in my local machine with docker-compose with the Docker daemon running via Docker Desktop. I uninstalled Docker Desktop (due to licensing issues) and installed ...
blackgreen's user avatar
0 votes
0 answers
181 views

NodePort not accessible on all nodes in a k3s cluster

I've got a 3 node k3s cluster, installed using the following commands on fresh Ubuntu server 22.04 installs: # first server curl -sfL https://get.k3s.io | sh -s - server --cluster-init # other two ...
jamzsabb's user avatar
  • 111
1 vote
1 answer
148 views

Questions on Openstack networking (Neutron) configuration

newbie here who's trying to understand Openstack networking topic. My setup: I have 3 physical machines with Openstack installed and running: - controller (with Keystone, Glance, Placement, Neutron, ...
Pybubb's user avatar
  • 13
0 votes
1 answer
166 views

kubeProxy unable to get node ip

I currently running a k8s cluster setup where I have 3 master nodes and 3 worker nodes installed with Kubeadm. Each one of the master nodes is responsible for managing a worker node. In one of my ...
user2643892's user avatar
0 votes
0 answers
20 views

Issue with Kubespray Overwriting Sysbox Modifications in kubelet.service

Description I'm encountering a challenge during the deployment of a Kubernetes cluster (v1.28.6) using Kubespray (release-2.24) while integrating Sysbox. The Sysbox integration was performed with the ...
Ottobus's user avatar
0 votes
0 answers
409 views

Pods getting restarted after containerd and kubelet service restarts

As part of configuration changes take place, both containerd and kubelet serivces need restart. Upon restarting services, all the pods running on the node getting restarted. I've checked the events ...
Rama's user avatar
  • 87
0 votes
0 answers
10 views

K8 Dual stack one master and multiple worker nodes - centos7

I have k8 dual stack one master and multiple worker node(oci-centos7). how I can failover if my master nodes goes down or whether it will impact running pods on worker nodes?
Shubham Jain's user avatar
1 vote
0 answers
87 views

Postfixadmin Kubernetes Debian 12

I have setup a kubernetes cluster on debian 12(first time), and i used the docker mailserver project to install the pods. So far so good, but now I can't seem to expose the 80 or 443 to a network that'...
Turdie's user avatar
  • 2,664
0 votes
0 answers
92 views

Kubernetes monitoring with Prometheus

I need a little bit of help here. I have a Kubernetes cluster up and running and I have a dedicated machine for monitoring with Prometheus running on it. I already have node exporters running and ...
skylar's user avatar
  • 1
0 votes
1 answer
379 views

How to monitor multiple Kubernetes clusters using single Grafana?

I would like to use a single Grafana instance to monitor multiple Kubernetes cluster (pods resources consumption, rabbitmq queues info) provided by Prometheus. I have two Kubernetes cluster - one used ...
FN_'s user avatar
  • 273
0 votes
1 answer
254 views

Kubernetes API returns 403 Forbidden from inside a pod with seemingly correct ClusterRole bound to pod Service Account

I have a Python script that runs inside a k8s pod (Google Kubernetes Engine 1.25) and queries K8S API to create VaultStaticSecret's resources. I'll paste Helm Chart templates for brevity: apiVersion: ...
Dima Medvedev's user avatar
0 votes
1 answer
297 views

Kubernetes namespaces vs Docker namespaces

Linux kernel offers a feature called namespaces. Docker containers are isolated with this feature. There is also a "namespace" feature on kubernetes. Does it rely on Linux kernel namespaces ...
Bob5421's user avatar
  • 429
1 vote
1 answer
420 views

Velero Web UI for kubernetes

Does Velero supports Web UI or is it just CLI, I have seen couple of Github repos with the SC. https://github.com/winnieoursbrun/velero-ui https://github.com/hsmade/velero-ui
Uday Sriramadas's user avatar
0 votes
0 answers
83 views

how to grant network access to mongo atlas to a EKS deployment

problem: I have an app running on a EKS cluster that needs to connect with a mongodb atlas database. I must grant the app running on the EKS cluster network access by entering its IP address. I do not ...
Bear Bile Farming is Torture's user avatar
0 votes
1 answer
1k views

installed metrics server in kubernetes cluster but getting 'ServiceUnavailable' error for ''kubectl top nodes"

I have a 3 master kubernetes cluster with kubernetes version v1.25.0 NAME STATUS ROLES AGE VERSION master21.server Ready control-plane 77d v1.25.0 master22.server ...
kaushal47's user avatar
0 votes
0 answers
83 views

Kubernetes pods Can't connect to local MySQL server through socket

I have a problem with MariaDB (mysqld.sock) I have the next architecture: Deployment for APP1 Deployment for MariaDB1 PV11 and PVC11 (/var/lib/mysql/), PV12 and PVC12 (/run/mysql/) NFS1 server. ...
Bob's user avatar
  • 1
0 votes
1 answer
238 views

All cluster resources were brought up, but: 1 nodes out of 1 are unhealthy

Unable to create a gke autopilot cluster using shared vpc . The same shared vpc works fine with standard private cluster . Repeated this multiple times with the same error. Followed google ...
Mujeeb Sayed's user avatar
1 vote
0 answers
271 views

In a multi-container Pod, how does the restart of a single container (caused by liveness probe failure) affect the whole Pod

Consider a multi-container Pod where some of the containers have only the 'liveness probe' configured, some have "liveness and readiness" both probes configured, some have only "...
P Gupta's user avatar
  • 11
1 vote
2 answers
246 views

How to use wget with headers in liveness probe in a yaml file in kubernetes?

I am trying to use wget in my liveness probe in Kubernetes. Here is the code: apiVersion: v1 kind: Pod metadata: namespace: test labels: test: liveness name: liveness-exec spec: containers:...
Edgar Peixoto's user avatar
0 votes
0 answers
139 views

Created an ingress, not getting address from Metallb address range

I'm trying to set up a bare-metal kubernetes (RKE2) cluster. I installed metallb following the instructions in the documentation using helm by creating an IP address pool and l2 advertisement. ...
Saksham's user avatar
1 vote
0 answers
175 views

How to initialize kubeadm in a non-default network interface?

I have been trying to set-up Kubernetes in my university server which has two network interface. The default interface (10...*) is connected to my university network and there is another interface (...
Sadman Amin's user avatar
0 votes
0 answers
100 views

Access to Metallb IPs is not possible

I have a k8s cluster with 3 masters and 7 workers. I have many services on it and I want to expose some of them. I used Metallb for this task and with layer 2 configuration I can get IPs from IP pool ...
sunrise's user avatar
  • 21
0 votes
0 answers
63 views

unable to delete kubeflow - stuck namespaces "terminating"

I am trying to deploy the kubeflow cluster on premise (using virtual machines). A bit of background information first: I followed the official guideline, with one exception - I piped the kubectl ...
user3002166's user avatar
0 votes
0 answers
108 views

Kasten k10 dashboard 504 error

I Have installed the Kasten k10 on AWS k8, trying to access the dashboard from service port forward. Dashboard has an network error with error logs on dashboard-svc pod and Gateway pod. Below are the ...
Uday Sriramadas's user avatar
1 vote
0 answers
129 views

Why NodePort service is not accessible on Kubernetes Master node?

I have Kubernetes (1.28.2) cluster installed on baremetal VMs. One master and 2 worker nodes. I am using Calico pod network. I have deployed a Traefik ingress with NodePort accessibility. Also ...
bkk's user avatar
  • 111

1
3 4
5
6 7
55