Questions tagged [calico]

Project Calico is an open-source networking and security solution for Kubernetes. Use this tag to mark questions related to the project.

Project Calico

Project Calico is an open source networking and network security solution for containers, virtual machines, and native host-based workloads. Calico supports a broad range of platforms including Kubernetes, OpenShift, Docker EE, OpenStack, and bare metal services.

207 questions
2
votes
1 answer

Kubernetes 1.18 Caclico CNI CIDRNotAvailable message

I have Kubernets 1.18 cluster with Calico CNI (v3.13.2). I was able to schedule to workload. but in the events I see CIDRNotAvailable message, coming from all nodes in the default name space. my CIDR range is -cluster-cidr=10.236.0.0/16 in…
sfgroups
  • 18,151
  • 28
  • 132
  • 204
2
votes
3 answers

How to do i get rid of this error "network: stat /var/lib/calico/nodename: no such file or directory" on Kubernetes

I uninstalled calico using: 'kubectl delete -f calico.yaml' and installed weave using: 'export kubever=$(kubectl version | base64 | tr -d '\n')' 'kubectl apply -f "https://cloud.weave.works/k8s/net?k8s-version=$kubever"' When i deploy my pods they…
2
votes
4 answers

Calico: networkPlugin cni failed to set up pod, i/o timeout

I have got an issue with deploy some pods on my k8s node. The error is following: Failed create pod sandbox: rpc error: code = Unknown desc = failed to set up sandbox container "7da8bce09dd6820a65754073b1b4e52e640291dcb82f1da87ae99570c6964d1b" …
Mariyo
  • 486
  • 7
  • 15
2
votes
0 answers

Pods not getting schedueld/assigned ip address on the new node added to k8s cluster using kubespray

Used kubespray to add worker node to existing cluster. The node joined to the cluster but new pods schedueld on the nodes are failing with error "get https://10.233.0.1 : dial tcp 10.233.0.1: 443 connection refused" Network plugin -…
Pushpa
  • 21
  • 1
2
votes
2 answers

How can a Kubernetes pod connect to database which is running in the same local network (outside the cluster) as the host?

I have a Kubernetes cluster (K8s) running in a physical server A (internal network IP 192.168.200.10) and a PostgreSQL database running in another physical server B (internal network IP 192.168.200.20). How can my Java app container (pod) running in…
Wuahaha
  • 93
  • 1
  • 2
  • 10
2
votes
0 answers

Network issue on kube pods

first of all, I know about k8s and how it works with all their stuff; second, I need to tell about my app and how it works on k8s 3rd, I gonna ask my question: this app consist of three pods which each one has their own services: 1. nginx with…
alireza71
  • 339
  • 1
  • 3
  • 14
2
votes
1 answer

pod-to-pod communication issues on k8s cluster created with kubeadm

I created a 2 node k8s cluster with kubeadm (1 master + 2 workers), on GCP, and everything seems to be fine, except the pod-to-pod communication. So, first thing first, there are no visible issues in the cluster. All pods are running. No errors, no…
suren
  • 7,817
  • 1
  • 30
  • 51
2
votes
3 answers

Kubernetes: unreachable backend: read udp 10.200.0.9:46159->183.60.83.19:53: i/o timeout

I use kubernetes v12, my system is ubuntu 16. I use the followed command to create DNS resource. wget https://raw.githubusercontent.com/coredns/deployment/master/kubernetes/coredns.yaml.sed wget…
yang yang
  • 39
  • 1
  • 1
  • 4
2
votes
0 answers

OpenVPN stops working after Calico enabled (networkpolicy for nodes option in GKE)

I've enabled networkpolicy for nodes to manage traffic inside my cluster and noticed, that OpenVPN stops working after I applied this option, other things works fine, same as if I login to openvpn pod and try to access external network, applying…
2
votes
1 answer

Pods failed to start after switch cni plugin from flannel to calico and then flannel

I install kubernetes v1.11.5 from kubeadm with cni plugin flannel and everything is ok. But I after try to switch to calico I found that the cross machine pod communication is broken. So I switch back to flannel. But got error message when creating…
aisensiy
  • 1,460
  • 3
  • 26
  • 42
1
vote
0 answers

Kubernetes - connection timeout on one node with Istio

I have something really strange in my Kubernetes cluster running on prem, and I can t find it out why ... I have a 7 nodes cluster running (5 Linux/Debian 11 and 2 Windows 2022 node) ; Calico seems to be correctly installed and working see below…
Fred
  • 67
  • 8
1
vote
0 answers

Kubernetes: curl works on physical node but NOT in pod

I installed kubernetes (1 controller node and 4 worker nodes). O.S. Ubuntu 22.04.1 kubernetes v1.26.1 Calico v3.25.0 From a POD I need to get authenticate to an external server. The request works perfectly when running on the node itself (NOT inside…
Pentolone
  • 31
  • 2
1
vote
1 answer

Kubectl delete PDB gets recreated

I have an issue where I need to delete a calico-typha poddisruption budget resource and it keeps on respawning. So far I've tried kubectl delete pdb calico-typha kubectl delete pdb calico-typha --grace-period=0 --force I even edit it kubectl edit…
harlandgomez
  • 490
  • 4
  • 15
1
vote
1 answer

Kubernetes Network Policy Egress to pod via service

I have some pods running that are talking to each other via Kubernetes services and not via the pod IP's and now I want to lock things down using Network Policies but I can't seem to get the egress right. In this scenario I have two pods: sleeper,…
Jurgy
  • 2,128
  • 1
  • 20
  • 33
1
vote
2 answers

What is the difference between CNI calico and calico tigera?

I am unsure what the difference between "plain calico" kubectl apply -f https://docs.projectcalico.org/manifests/calico.yaml and the "calico tigera" (operator) is. helm repo add projectcalico https://projectcalico.docs.tigera.io/charts helm…
humanityANDpeace
  • 4,350
  • 3
  • 37
  • 63