Questions tagged [kube-apiserver]

The main implementation of a Kubernetes API server is kube-apiserver. kube-apiserver is designed to scale horizontally — that is, it scales by deploying more instances. You can run several instances of kube-apiserver and balance traffic between those instances.

The kube-apiserver validates and configures data for the API objects which include pods, services, replicationcontrollers, and others.

The API Server services REST operations and provides the frontend to the cluster's shared state through which all other components interact.

132 questions
1
vote
1 answer

Inconsistent response from kubernetes api service and getting no route to host error sometimes

I have configured kubernetes cluster using the steps as kubernetes the hard way by kelsey tower Unfortunately i'm seeing inconsistent response when i hit the kubernetes service ip to check the version from worker nodes here are my cluster…
JPNagarajan
  • 802
  • 1
  • 12
  • 32
1
vote
1 answer

How to modify the minikube start parameter setting apiserver from 8443 to 6443

I'm using minikube to test the kompose. I installed k8s using the following minikube command # minikube start --driver=none --kubernetes-version v1.16.0 minikube v1.9.2 on Ubuntu 18.04 ✨ Using the none driver based on user configuration Starting…
moluzhui
  • 1,003
  • 14
  • 34
1
vote
1 answer

kubernetes api server not automatically start after master reboots

I have setup a small cluster with kubeadm, it was working fine and 6443 port was up. But after rebooting my system, the cluster is not getting up anymore. What should I do? Here is some information: systemctl status kubelet ● kubelet.service -…
1
vote
1 answer

Why isn't the request body showing up in the Kubernetes API server audit log?

I have added the following command-line arguments to kube-apiserver to enable audit logging: - --audit-log-path=/tmp/k8s-audit.log - --audit-policy-file=/etc/kubernetes/audit.yaml - --audit-log-maxage=1 - --audit-log-maxsize=100 -…
Robin Green
  • 32,079
  • 16
  • 104
  • 187
1
vote
1 answer

Prometheus targets: server returned HTTP status 403 Forbidden

I have setup prometheus, running in my kubernetes cluster , And I configured the certificate of kubernetes in the configuration file of Prometheus, but for some targets I am getting back a "server returned HTTP status 403 Forbidden". this is part of…
Esc
  • 521
  • 13
  • 30
1
vote
1 answer

cluster doesn't have a stable controlPlaneEndpoint address

When I join a new node as a master to my cluster. I get the error. my cluster version is 1.17.0 . The command I exec on the node is: kubeadm join 192.168.1.120:6443 --token 5hbl78.99jlbgerstlkecss --discovery-token-ca-cert-hash…
Esc
  • 521
  • 13
  • 30
1
vote
2 answers

Service "kube-dns" is invalid: spec.clusterIP: Invalid value: "10.10.0.10": field is immutable

I setup my cluster by kubeadm. At the last step i exec kubeadm init --config kubeadm.conf --v=5. I get the error about the clusterIp value. Here is the part of the output: I0220 00:16:27.625920 31630 clusterinfo.go:79] creating the RBAC rules…
Esc
  • 521
  • 13
  • 30
1
vote
1 answer

Kubernetes loses enhanced range of service ports

I am testing an kubernetes minikube/influxdb/grafana stack under macos 10.15.3. I am working on the command line. System environment: MacOS 10.15.3 /bin/bash (darwin19) Minikube 1.7.2, downloaded via curl -Lo minikube…
1
vote
1 answer

Kubernetes OIDC: Groups are ignored?

currently I’m trying to get the the api server connected with my keycloak. When I use the oidc-information from the user everything works fine, but the groups seem to be ignored The apiserver is running with the parameter …
Heiko
  • 11
  • 2
1
vote
0 answers

Changing Control Plane Load balancer address

We need to change the controlePlaneEndpoint of the k8s HA cluster as the LB Machine need to be replaced. We have setuped k8s HA cluster last year on prem with a load balancer machine in front of the cluster by using kubeadm with config file like…
Jörg Lang
  • 171
  • 1
  • 1
  • 8
1
vote
1 answer

Errors in kube-apiserver and proxy logs

having such errors in kube-apiserver logs: E0528 13:38:38.762192 1 upgradeaware.go:310] Error proxying data from client to backend: read tcp 192.168.2.151:6443->192.168.2.151:35760: read: connection reset by peer Checked proxy pods and…
Oles Rid
  • 125
  • 12
1
vote
1 answer

How to pass gRPC unix socket to Kubernetes api-server

I have implemented a KMS Plugin gRPC server. However, my api-server is not able to connect to Unix socket at path "/opt/mysocket.sock". If I bind my socket to "/etc/ssl/certs/" directory. "api-server" is able to access it and interact with my gRPC…
1
vote
1 answer

What is checked in kube-apiserver healthz call?

I have quite a few failures when starting kube-apiserver in 1.10.11 K8s version. Its health check comes back with poststarthook/rbac/bootstrap-roles failed. Very annoyingly, for security reasons, the reason is "reason withheld" How do I know what…
1
vote
1 answer

Configure the master api server to check cordon node and destroy if it has no jobs running

Team, We need to roll out some drivers on worker nodes of a K8s cluster and our flow is as below: cordon node [no more scheduling] wait for jobs to complete destroy Is there a way I can automate this using K8s options itself instead of writing…
AhmFM
  • 1,552
  • 3
  • 23
  • 53
1
vote
1 answer

kube-apiserver on OpenShift

I'm new to OpenShift and Kubernetes. I need to access kube-apiserver on existing OpenShift environment oc v3.10.0+0c4577e-1 kubernetes v1.10.0+b81c8f8 how do I know kube-apiserver is already installed, or how to get it installed? I checked all the…
Evgeny
  • 51
  • 5
1 2 3
8 9