Questions tagged [calico]

68 questions
1
vote
1 answer

Disable Source NAT for Calico

The default settings that kubeadm + calico use is to NAT any incoming connection that is not from a pod_ip. I have calico publishing the service network to my outside LAN, and would rather the service pods utilize the actual client IPs and not a…
Matt Ruge
  • 11
  • 2
1
vote
1 answer

Pods on a k8s node are unaccessible, kube-proxy or CNI failed

I have add a new node to my k8s cluster, but I found some allocated to this node cannot show logs like this: $ kubectl logs -n xxxx xxxxx-6d5bdd7d6f-5ps6k Unable to connect to the server: EOF Using Lens gives error logs like this: Failed to load…
Andy Huang
  • 121
  • 5
1
vote
1 answer

kubeadm based kubelet 1.24.2 calico CNI issues

I have installed a kubeadm based kubernetes cluster (v1.24.2) on Centos7. I have attempted to install calico CNI as per the instructions at "https://projectcalico.docs.tigera.io/getting-started/kubernetes/quickstart". The "/etc/cni/net.d/" and…
Allan K
  • 151
  • 6
1
vote
0 answers

Why is access to Kubernetes lost if I turn on the IPVS mode?

The problem is that after enabling the IPVS mode in the kube-proxy, everything works fine for me. But as soon as I install Traefik, I immediately lose connection with Kubernetes. OS: CentOS 7.9 $ uname -rs Linux…
Maksim
  • 11
  • 3
1
vote
2 answers

How to do live migration from flannel to calico on single node kubernetes cluster?

I am trying to migrate from flannel to calico in k8s cluster. I am able to do it successfully in 3 node cluster. Live migration from flannel to calico is working as described in the documentation. But migration from flannel to calico on single node…
Siddharood
  • 61
  • 5
1
vote
1 answer

Pods on two different nodes communicate very slow, any idea why?

I am learning k8s and I have 3 nodes k8s cluster. I have just recently deployed k8s with kubeadmin and so far it is working great. everything working perfectly but the only problem that I am facing is network throughput. my three nodes and replica…
Yousuf
  • 35
  • 2
  • 6
1
vote
1 answer

Why does bgp OPEN message get Connect Socket: Connection reset by peer when node is on a different subnet/gateway

My network setup: Kubernetes network setup With this setup, only nodes on same subnet can establish bgp connection. Other nodes (that do a full 3 way tcp handshake), responds to hte OPEN message with [FIN, ACK] then a [RST] hence the Connection…
tFlolo
  • 11
  • 3
1
vote
1 answer

How to fix "Failed to apply 'Node' resource: [update conflict: Node(...)]" while trying to apply Calico node config?

I'm playing with Kubernetes and got two VirtualBox machines - master and worker. Every one has two network interfaces - one for Internet and other for communication between each other VM and host machine. And I got troubles with Calico setup because…
1
vote
0 answers

How to enable ipv6 for ingress-controller services when installing using Helm nginx-ingress chart?

I have a baremetal K8 cluster setup using Kubespray (Calico as CNI) and have dual stack enabled. I can see that all the pods that get deployed get both IPv4 and IPv6 addresses but when I try to install nginx-ingress controller using nginx helm chart…
mickey9
  • 11
  • 2
1
vote
1 answer

Only have connectivity to nginx pod from the node its running on

I've installed kubernetes master and one node v 1.20. I deployed nginx with kubectl run nginxpod --image=nginx $ kubectl get pods -o wide NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS…
Dean Schulze
  • 199
  • 1
  • 3
  • 9
1
vote
1 answer

Kubernetes: migrate from flannel to canal or install calico network policy alongside flannel

I installed flannel as a CNI for my Kubernetes cluster. Now I want to add a network policy to my cluster. After searching I find Canal (Calico for policy and flannel for networking). How I can migrate from flannel to canal? Or is there any way to…
Nader
  • 153
  • 8
1
vote
1 answer

Calico network policy in Kubernetes based on Domain name & Wildcard char

I have an application running with kubernetes orchestrator. I want to implement calico network policy based on domain name or wildcard characters so that domain names (FQDN/DNS) can be used to allow access from a pod or set of pods (via label…
solveit
  • 265
  • 1
  • 4
  • 12
1
vote
0 answers

CoreDNS pod unable to reach the primary DNS server

We are seeing the COREDNS pod is unable to lookup for primary DNS server which is resulting in readtimeout. Connectivity to primary DNS server work fine. Tried deploying Flannel/Calico/CANAL CNI but we still see the problem persist. nameresolution…
cks cks
  • 11
  • 2
1
vote
2 answers

Kubernetes trouble - /var/lib/calico/nodename: no such file or directory

I'm following guide from Linux Foundation "Kubernetes Administrator" course and stuck on deploying simple app. I think trouble is even earlier than with app deployment. I've created master and worker, seems that they are ok: $ kubectl get nodes NAME…
1
vote
0 answers

Network performance with Kubernetes

I am running a small real time bidder application in Docker Swarm using host mode for networking. I found that other networking modes were giving much higher latency. Soon I plan to switch from Docker Swarm to unmanaged Kubernetes on dedicated…