Questions tagged [google-kubernetes-engine]

Google Kubernetes Engine is a cluster manager and orchestrator for running Docker containers. It schedules your containers into the cluster and manages them automatically based on requirements you define (such as CPU and memory). It's built on the open source Kubernetes system, giving you the flexibility to take advantage of on-premises, hybrid, or public cloud infrastructure. It was formerly called Google Container Engine.

553 questions
1
vote
0 answers

Is it possible to have multiple ingress paths under the same host that point to the same backend service

I'm trying to restrict access to certain paths on my service how can I accomplish this on kubernetes? I have a service that runs a basic API but it also runs an admin service. Is it possible to use multiple paths under the same host as an ingress…
1
vote
1 answer

GKE pods to other VPC peered instance not reachable

I've created a VPC-native GKE private cluster. My Pod address range is 10.20.0.0/16 and my Service address range is 10.26.1.0/16. GKE is setup on vpc-8 private subnet (100.17.8.0/24). I need to connect from pod to remote instances which are on…
1
vote
1 answer

Restore one protected application in GKE Kubernetes cluster in namespace with multiple apps

In a Kubernetes cluster I have several apps deployed in the same namespace called "default". An app consist of a webserver pod and a database pod. How to restore one single app in the original cluster from a backup plan from Backup for GKE? In the…
Ametad
  • 131
  • 3
1
vote
1 answer

kubectl not getting all pods

I am using Google Cloud Platform, and I have two different kubernetes clusters running on GKE. Now these clusters are zonal clusters, and are running on different zones. the issue is when I am using the cloud shell, kubectl get pods is getting pods…
1
vote
0 answers

kube-dns not resolving external urls with missing endpoints

I am trying to find out why my kube-dns does not resolve external urls and it seems it is caused by missing endpoints as described in: (I am using Google Kubernetes engine and the cluster was created with the Google Cloud…
Vojtěch
  • 285
  • 3
  • 13
1
vote
1 answer

Security context in Kubernetes

Under the K8s component Statefulset as shown below, the security context works fine for Kubernetes 1.21 version, but when I tried with new versions it did not work fine. I understand this is due to the fact that there is 'PodSecurityPolicy…
RockyCool
  • 11
  • 3
1
vote
1 answer

Low IOPS on GKE

We are installing a MongoDB in Kubernetes Engine and it performs very poorly. We have installed it using Helm with 3 replicas (in a replicaset) and storage-class=premium-rwo (pd-ssd) with 500GB on each. It takes many seconds to just insert 500…
1
vote
1 answer

How to trigger GKE autoscaling decision on demand?

The GKE autoscaling process makes what they call "decisions" about whether or not to autoscale. The logs will include details explaining why the process decided not to do anything (noDecisionStatus), which is cool. Search bait: This can also be seen…
1
vote
1 answer

Kubernetes Cert-Manager Expired Certificates

I inherited a GKE Kubernetes environment and have been trying to figure this out for days but unfortunately just don't know what to try next. The cluster is setup to use cert-manager (installed via helm) to apply Let's Encrypt certificates to the…
1
vote
0 answers

GKE Node auto-provisioning not scaling up with limits defined

I want to use GKE node auto-provisioning to create a node-pool with GPU on demand (that is when I start a Job that needs GPU resources). Going with the GCP tutorial I've set up a cluster with enabled cluster autoscaling and node auto-provisioning.…
przemys
  • 11
  • 2
1
vote
0 answers

GCP Adding Private Service Connection IP range to master authorized network throws error

I followed this this GCP guide to be able to reach a Kubernetes Cluster private endpoint with Cloud Build jobs. I have set up everything (using Terraform). The final step in the guide is adding the (cloud build) private pool network range to the…
1
vote
2 answers

DNS problems on pool of preemptible-only nodes on GKE: endpoints of kube-dns service keeps failed pods

I do have a GKE k8s cluster (k8s 1.22) that consists of preemptible nodes only, which includes critical services like kube-dns. It's a dev machine which can tolerate some broken minutes a day. Every time a node gets shut down which hosts a kube-dns…
lena_punkt
  • 111
  • 2
1
vote
1 answer

How to use ManagedCertificate in namespaced Ingress

I tried to use Google Managed Certificate (not through k8s) in Ingress. If Ingress is in default namespace, everything works fine using ingress.gcp.kubernetes.io/pre-shared-cert: my-cert-name annotation. However, if Ingress is in a namespace, it…
1
vote
1 answer

Issues starting Kube-scheduler [ Kubernetes the hard way ]

I am trying to setup kubernetes cluster the hardway by following guide from Kelsey Hightower's Kubernetes The Hard Way After setting up the kube-scheduler, when I start the scheduler I am seeing the following error: Jan 20 10:20:01 xyz.com…
Amit
  • 113
  • 4
1
vote
1 answer

Create ingress firewall rule for GKE API

For testing purposes I want to make the GKE API endpoint publicly available. However, I can't seem to be able to create a firewall rule to allow this. I receive the error "source_ranges": conflicts with destination_ranges with the following…