Questions tagged [kubernetes]

Kubernetes is an open source orchestration system for Docker containers. It handles scheduling onto nodes in a compute cluster and actively manages workloads to ensure that their state matches the users declared intentions. Using the concepts of "labels" and "pods", it groups the containers which make up an application into logical units for easy management and discovery.

Kubernetes is an open source orchestration system for Docker containers. It handles scheduling onto nodes in a compute cluster and actively manages workloads to ensure that their state matches the users declared intentions. Using the concepts of "labels" and "pods", it groups the containers which make up an application into logical units for easy management and discovery.

For more details, visit the official Kubernetes page.

2352 questions
0
votes
1 answer

How to get kubeadm to complete and launch the static pods defined in etc kubenertes manifests with containerd

Im working on fedora 30 (also tried fedora 29) and im unable to get past kubeadm init, this is the error i get: kstarter]# kubeadm init --ignore-preflight-errors=Swap,Service,Docker,SystemVerification,NumC PU --config=/root/con/cc.yaml [init]…
user22866
  • 151
  • 6
0
votes
2 answers

Upgrading Kubernetes from 1.8 -> 1.14

I have a number of kubernetes clusters running on version 1.8 for kubeadm, kubectl, kubelet and associated containers. I need to make a plan to get these clusters upgraded to 1.14. I see that the official recommendation is to go one version at a…
rvabdn
  • 245
  • 4
  • 11
0
votes
0 answers

Setting environment variable in kubernetes before pulling an image

Is there a way to set the environment variables in kubernetes before it pulls the container image? For some context, I'm looking for alternatives to what I've asked in ECR IAM policy document for EKS node access. According to the kubernetes docs…
Ai Su
  • 21
  • 1
0
votes
1 answer

IBM HttpServer the configured certificate chain contains a signature that is not compatible with peers TLS Signature Algorithm requirements

I have a kubernetes ingress service, forwarding traffic to an SSL port on an IBM HTTP Server, but the connection fails with SSL0280E: SSL Handshake Failed, the configured certificate chain contains a signature that is not compatible with peers TLS…
Soraz
  • 225
  • 1
  • 4
  • 11
0
votes
0 answers

Configuring TCP services with nginx ingress on minikube/k8s

I'm new to k8s/minikube (and to some extent, unix networking in general) so if I ask something that seems to make no sense, I'll be happy to clarify! Goal I want to configure a port-based TCP ingress, as described briefly in the nginx-ingress docs.…
Ben
  • 251
  • 1
  • 3
  • 11
0
votes
1 answer

kube-system pods in private GKE cluster can't make internet connections

After migrating all our Kubernetes workloads to private clusters, we've found that the SD metrics explorer is no longer receiving any data. Although we have cloud NAT setup to work with all subnets, pods in kube-system are unable to connect to the…
0
votes
3 answers

Allow outbound traffic on an Azure Kubernetes cluster

I created a AKS cluster following the documentation procedure. I created pod inside the cluster and when getting a tty into them (kubectl exec -it pod-name -- /bin/bash), realized that the containers don't have access to resources outside Azure: I…
dbourcet
  • 185
  • 1
  • 2
  • 11
0
votes
1 answer

Virtual Switching Sanity Check - NFS, BGP & Kubernetes

I have a home Kubernetes cluster that runs in 4 VMs on top of Proxmox. Proxmox is tagged to VLAN 20, the Kubernetes VMs are tagged to VLAN 40. The Kubernetes VMs are BGP neighbors of my router so that I can tag pods to then run on one of two other…
TJ Zimmerman
  • 251
  • 6
  • 18
0
votes
1 answer

Can't delete instance group in GCP

We have kubernetes running on a cluster in google cloud. Something happened to the cluster, and all of the nodes had the status node.kubernetes.io/unreachable:NoSchedule. We attempted to delete the cluster, but it is not working. The instance groups…
0
votes
1 answer

OpenShift Spanning Cluster: Distribute Replicas evenly between datacenters

I have an OpenShift Cluster which is spanned between two physical separated datacenters for georedundancy. The nodes are labeled according to their location. Now i'm searching for a way to configure the scheduler in such a way that if a pod is…
simonszu
  • 373
  • 7
  • 14
0
votes
1 answer

Is it possible to restrict kubernetes dns resolution to return instance on same node as pod?

I have a setup where we're running telegraf and the pod is configured as a daemon set in rancher (so instance per node.) Now when doing nslookup over the alias in any container, dns resolution returns all ips of all instances on all nodes. Is it…
Nim
  • 101
  • 3
0
votes
1 answer

How to create kubernetes horizontal pod autoscaler with specific name?

I tried to create a kubernetes horizontal pod autoscaler with specific name (ttt), but it didn't work as expected: $ kubectl autoscale deployment hello-web --cpu-percent=50 --min=2 --max=10 --name=ttt horizontalpodautoscaler.autoscaling/hello-web…
Everton
  • 113
  • 6
0
votes
1 answer

Kubernetes nginx ingress session affinity

TL;DR: I can't get session affinity in Kubernetes work using the official nginx ingress helm chart. I've tried these instructions: Sticky Sessions - nginx ingress controller Using Session Affinity on Kubernetes I've also tried to read up on the…
0
votes
1 answer

Kubernetes & OpenVPN: Inbound routing from wider network

We are trying to set up an OpenVPN remote access server within a Kubernetes cluster, to replace a service previously hosted on an on-prem firewall. Our wider network is partly on GCP/GCE, with dynamic BGP routing to our on-prem sites over…
0
votes
1 answer

GKE private loadbalancer / ingress service with path based routing?

I want to create one private ingress / service of type LoadBalancer, and use it with multiple PODs with path-based routing. Is this possible? I know that Ingress with public endpoint supports path-based routing, but I'm looking for a loadbalancer…