Questions tagged [kubernetes]
Kubernetes is an open source orchestration system for Docker containers. It handles scheduling onto nodes in a compute cluster and actively manages workloads to ensure that their state matches the users declared intentions. Using the concepts of "labels" and "pods", it groups the containers which make up an application into logical units for easy management and discovery.
2,826 questions
0
votes
0
answers
30
views
FALCO webhook events not forwarded to sidekick and not visible in sidekick UI
Using the default Falco helm chart i installed Falco and sidekick UI firstly without k8saudit plugin.
After updating the configmaps accordingly to install, configure and load k8saudit, daemonset ...
2
votes
0
answers
109
views
Kubernetes pod unable to create symbolic link on Ubuntu Samba share
My Ubuntu Desktop Ubuntu 24.04 LTS runs a Samba share using this smb.conf:
[global]
allow insecure wide links = yes
unix extensions = no
follow symlinks = yes
wide links = yes
I am running k3s ...
0
votes
0
answers
78
views
Difference in CORS handling between gateway API and Nginx Ingress
I had an issue with TLS configuration with Traefik Gateway API so I switched to Nginx Ingress, but I had problem in configuration.
I have the backend in Spring Boot
And had CORS configuration only ...
0
votes
0
answers
102
views
Kolla OpenStack magnum coe template creation binascii.Error: Incorrect padding
I am trying to create COE kubernetes template in magnum, during creation of template I am using below parameters.
openstack coe cluster template create strategy
--coe kubernetes --public --tls-...
0
votes
0
answers
7
views
dockerhub.io officially removed openjdk:8-jre from thier repository and what is he best alternative for it [migrated]
While building the image for one of our application, i observed that I am unable to pull openjdk:8-jre from official docker.io
error: [ERROR]: [#3 ERROR: docker.io/library/openjdk:8-jre: not found]
i ...
0
votes
0
answers
43
views
Timed out waiting for the condition on pods/argocd... in kubernetes
I have a problem inside my cloud-init that I cannot get over, here is slice of my control plane cloud-init.yml
- curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash
- ...
0
votes
2
answers
211
views
Kubernetes to reschedule pods when cluster changes?
I have a Kubernetes cluster that runs services getting used rarely. For efficiency it runs all pods on a small node - the small node is always up. Every now and then a big node becomes available and ...
0
votes
0
answers
30
views
How can I improve this cloud-init so it will apply CNI in correct order without using sleep
Here is snippet of my controlplane cloud-init I have problem with
- export KUBECONFIG=/etc/kubernetes/admin.conf
- kubectl create -f https://raw.githubusercontent.com/projectcalico/calico/v3.30.3/...
0
votes
0
answers
57
views
What is changing the 200 status code from my /health endpoint to 204?
I am using GKE and Google Cloud Load Balancers. I am deploying pods, services, and an ingress to GKE. The ingress is annotated with kubernetes.io/ingress.class: gce, which triggers the automatic ...
0
votes
3
answers
230
views
Installing Kubernetes on ubuntu server
I'm trying to build a new cluster running on my Raspberry PI 4, each one has 8GB Ram.
Currently rebuilding the cluster from scratch, using Ubuntu Server 22.04
When I try to follow the instructions to ...
0
votes
1
answer
119
views
Tun2proxy in Kubernetes does not work
I am trying to setup tun2proxy as a sidecar VPN for my Kubernetes pod to reroute all traffic through a SOCKS5 ISP.
I use the following Helm-based .yaml deployement:
{{- range .Values.secrets }}
{{- $n ...
1
vote
0
answers
39
views
My last log line is not flushed in the concat filter fluentd k8s operator
I have a Java application in a pod that is spitting out logs straight to stdout.
These logs are fetched by the log-operator which runs a combination of
fluent bit 3.1.8 and fluentd 1.16.1. The ...
0
votes
1
answer
102
views
Is it possible to cross-namespace ALB routing with AWS Load Balancer Controller for eks
I’m trying to expose a service running in the atlantis namespace through an ALB Ingress Controller that’s deployed in the application namespace on AWS EKS. The ALB is being created and reconciled ...
0
votes
0
answers
64
views
Failed to allocate IP
If I set the IP Address in the metallb config file to the Public Floating IP I bought from the Cloud infrastructure provider or the Public IP of the node :
apiVersion: metallb.io/v1beta1
kind: ...
2
votes
2
answers
164
views
Kubernetes for VMs
I want to setup a Kubernetes Cluster, for testing and later for prod purpose. but I am stuck with the concept of VMs running in Kubernetes.
First I want to mention that I don't have a shared storage, ...
1
vote
2
answers
171
views
How can I speed up Kubernetes deployment scaling? Pods take minutes to become Ready
How can I improve the scaling speed of my Kubernetes deployments? When I increase the replica count, it takes multiple minutes until new pods become ready. They are staying for a very long time in ...
0
votes
1
answer
144
views
Kubernetes Flannel default CIDR 10.244.0.0/16 and real network IP 10.244.128.11
I have Kubernetes cluster set up on SLES using Flannel network plugin with standard 10.244.0.0/16 CIDR for a few years.
I need to connect to an external LDAPS server that is using an overlapping IP ...
1
vote
1
answer
203
views
Filtering Deployments in Promtail and K8S
My problem: I am only using promtail to send logs from my Kubernetes cluster to my Grafana cloud instance. It works, my logs arrive perfectly. My problem is that I don't want to send logs from the ...
0
votes
0
answers
36
views
Identify a container uniquely even if it is moves to a different node in a Kubernetes Cluster
Is there a way to identify a container uniquely even if it moves to another node in a Kubernetes cluster? I know this can be achieved through statefulsets. But is there a way to achieve this for other ...
1
vote
2
answers
169
views
Blocking curl and similar programs from accessing a url
I have the following url:
https://www.mysite_sample.net/api
I want to block curl and similar programs from reaching this link. When this link is accessed by curl or similar programs then the response ...
1
vote
0
answers
145
views
Building Kubernetes cluster lab on Incus system containers [closed]
I am trying to build a lab Kubernetes cluster in a Linux host, using Incus system containers as nodes. I want to do it in an automated way using Terraform and Ansible.
The current status of the work ...
0
votes
0
answers
33
views
Why does kubectl create secret fail with an error stating it is not logged in?
When I try to run kubectl create secret generic from my pipeline it fails with the error:
error: You must be logged in to the server (the server has asked for the client to provide credentials)
Here ...
0
votes
0
answers
118
views
Ingress-nginx health check failure after applying network policy (port 10254)
I have a self-hosted kubernetes cluster running. I have NGINX Ingress Controller set up to expose apps externally. I'm trying to set up its network policy, but health check fails after applying the ...
2
votes
0
answers
155
views
ZMQ apps deployed on k8s consistently seeing socket disconnects randomly
At work, we run ZMQ apps on several computers in the lab, these apps are deployed into K8s. The ZMQ pretty much, just sends cmd and receive status, not heavy traffic app like video.
During daytimes ...
1
vote
0
answers
138
views
Prestashop 8/9 behind reverse proxy with SSL
I'm trying to deploy Prestashop e-commerce platform in either v8 or v9 (I tried both) on my on-site hardware. The architecture looks like this:
PUBLIC INTERNET -> NGINX PROXY MANAGER -> TRAEFIK ...
2
votes
3
answers
327
views
How does kube-api-server certifcate rotation work?
Cluster on-premise information:
Kubernetes and kubeadm version: v1.33.1
Host OS: Ubuntu 22.04.2 LTS
CNI: Calico:3.30.1
CRI: containerd://1.7.21
When I do an upgrade of k8s cluster on-prem created ...
0
votes
1
answer
130
views
Custom routing rules for specific Kubernetes services
In our K3S cluster hosted on Hetzner we have a service that produces outbound traffic to reach an external Postgres DB. The database server expects that the IP will stay the same for whitelisting ...
2
votes
0
answers
68
views
Kubernetes readiness probe failed [closed]
What can cause this error?
7m47s Normal Created pod/awx-operator-controller-manager-58b7c97f4b-w6flh Created container: awx-manager
13m Warning Unhealthy ...
0
votes
0
answers
44
views
Guarantee resource quota per availability zone
After OS and node pool upgrades of Azure AKS I have a problem where at least one pod with a LRS disk attached is not scheduled due to unfulfilled CPU or memory requests. The overall node pool (one ...
0
votes
0
answers
117
views
kubeadm/crictl not able to use credential for private docker registry
I am trying to install kubernetes v1.30 from a local docker registry "snd-image-repo:5000". I am running containerd as runc. Now I am facing issue for downloading images when I run kubeadm ...
0
votes
1
answer
59
views
Lab nginx pod "this site is inaccessible"
I have deployed pod on my lab ( workstation - vcenter - esxi - rancher - rke2 )
I have create pod with nginx and created ingress with metallb.
I can curl nginx from cluster but not from my windows ...
0
votes
1
answer
147
views
Rancher Waiting for at least one control plane, etcd, and worker node to be registered
I'm using Rancher with rke2r1 on my lab (vsphere) and I'm trying to create new K8s cluster with separated machine pool.
In default mode I must select all 3 roles (etcd, control plane, worker) to have ...
4
votes
2
answers
187
views
Digital Ocean - TLS traffic does not end at Load Balancer
I have setup my website infrastructure on Digital Ocean, below are some details of infra
HTTPS traffic from Internet going to Load Balancer
Kubernetes cluster with 2 nodes, running application pods ...
2
votes
1
answer
221
views
Kafka Debezium Connectors aurora DB lost connection, taking 14 minutes exactly to recover
I am using strimzi kafka setup in kubernetes production. I have 5 connect pods, 1 strimzi operator and ~9 connectors distributed across these 5 pods.
Some pods display the below error when connection ...
0
votes
0
answers
31
views
self managed worker nodes can't register to control plans
I am working with eks self managed worker nodes, the control plans are managed by aws, the ENIs are in 2 AZ in Paris in "wavelength_vpc", and the worker nodes are self managed in Casablanca ...
1
vote
2
answers
3k
views
Alternative to replace the Bitnami Kubectl Docker image?
I use the Bitnami Kubectl image (https://hub.docker.com/r/bitnami/kubectl) in some probes to automatically restart pods. However, due to recent changes in the BITNAMI's policies, I'm looking for ...
0
votes
2
answers
468
views
Kubernetes OOMKill due to Page Cache: Is there a solution?
If this question has been answered before, please link it, but I did not find any answer. AI answers are inconclusive and sometimes contradictory.
See also Edits for further updates!
I keep getting ...
0
votes
0
answers
86
views
How can I configure Mosquitto on kubernetes to auto-restart when cert-manager obtains a new Let's encrypt certificate automatically?
Is there an example configuration of eclipse-mosquitto 2.x (docker container) on Kubernetes to restart automatically the pod when cert-manager obtains a new Let's encrypt certificate automatically (...
0
votes
0
answers
62
views
kubernetes nodes's IP address is not matching with any of the available network interfaces
I am trying to setup kubernetes cluster using kind. I am following this video.
After deplying the Metallb when i was about to start configuring it, i noticed that my nodes shows IP 172.18.0.x where as ...
1
vote
1
answer
82
views
What is the common ingress type when scaling nodes via nlb in aws eks?
I'm configuring a system using AWS EKS, NLB, and the nginx ingress controller. NLB is configured separately, and the nginx ingress controller is configured as a nodeport type using Helm. However, due ...
1
vote
1
answer
223
views
Harvester Failing to Connect to Rancher due to tls Certificate Signed by Unknown Authority
Ahoy all, I am currently running a Harvester machine I would like to connect to rancher's Virtualization Management services. I followed the instructions here: https://docs.harvesterhci.io/v1.2/...
0
votes
0
answers
62
views
Is it possible to restrict Custom Calico DaemonSet deployment to a single node pool in GKE (Dataplane V1)
I’m running a large Google Kubernetes Engine GKE cluster (Dataplane V1, 100+ nodes, ~800 services over 3 node pools). For better security for critical service, I need to strictly isolate a single ...
0
votes
0
answers
35
views
Kubernetes on Openstack | Gateway API not working
Overview
I am trying to set up kubernetes on an openstack cloud infrastructure.
Using kubeadm I now have a cluster with two nodes available and want to expose the first app. A simple flask server.
To ...
0
votes
0
answers
51
views
Kubernetes startup probe fails with EOF in init container, but endpoint is reachable from ephemeral container
I'm facing an issue in a local Kubernetes cluster created using kind. I have an initContainer with a startupProbe defined like this:
startupProbe:
httpGet:
path: /graceful_startup
port: ...
0
votes
0
answers
34
views
Kubernetes 1.29 Swap Not Utilized on AL2023 (cgroupv2) with Default Kubelet Config
Cluster Info
Kubernetes Version: 1.29
Host OS: Amazon Linux 2023
Cloud: EKS
Comparison Host OS: Amazon Linux 2
Problem
We have observed a behavioral difference in swap memory usage between ...
0
votes
0
answers
28
views
Running Kubernetes on Openstack | Cannot expose app
Context
I have installed a kubernetes cluster with kubeadm on two openstack instances ( one control and one worker).
I am at the point where I can start a deployment and see the app is running by ...
0
votes
0
answers
67
views
Nginx Ingress Controller Transforming successful API calls into 500s
Directed here from SO.
Currently have an application hosted in Kubernetes on AWS, that is integrated with API Gateway via VPC Link. We have 3-6 Nginx pods spread throughout 3 availability zones, about ...
0
votes
0
answers
72
views
Why does my RKE2 leader keep failing and being replaced? (Single-node setup, not HA yet)
I’m deploying an RKE2 cluster where, for now, I only have a single server node acting as the leader. In my /etc/rancher/rke2/config.yaml, I set:
server: https://:9345
However, after a while, the ...
0
votes
0
answers
33
views
Kubernetes pods not resolving with service.namespace subdomains
I am running 2 pods busybox and nginx in the namespace called webcn
have exposed the nginx pod as a service
i am trying to understand working of name resolution in kubernetes within a namespace from ...
1
vote
0
answers
23
views
Why the contents of terminationMessage file created in a shared volume are not accessible from a sidecar container?
I have two containers redis and fluent-bit in a single pod.
The relevant portion of their stripped out manifest is as given below:
- name: redis
...
securityContext:
...