Questions tagged [kube-apiserver]

The main implementation of a Kubernetes API server is kube-apiserver. kube-apiserver is designed to scale horizontally — that is, it scales by deploying more instances. You can run several instances of kube-apiserver and balance traffic between those instances.

The kube-apiserver validates and configures data for the API objects which include pods, services, replicationcontrollers, and others.

The API Server services REST operations and provides the frontend to the cluster's shared state through which all other components interact.

132 questions
1
vote
0 answers

kubernetes cluster is down after updating image on master node

Team, any hint on how can i fix this? Entire cluster went down after upgrading master image. Logs state: 10.3.0.9-37d77862 docker[5521]: error querying kubernetes version: Get https://127.0.0.1/version: dial tcp 127.0.0.1:443: getsockopt: connection…
AhmFM
  • 1,552
  • 3
  • 23
  • 53
1
vote
1 answer

Kubernetes setup in different network

Is it possible to setup cluster with a different network?means master holds different ip and node holds different network ip.we will run kubeadm init on one network with host ip x.x.x.x and want to join using kubeadm join command on a node with host…
1
vote
1 answer

Can't run kube-apiserver --enable-admission-plugins=DefaultStorageClass

After installation three node cluster https://kubernetes.io/docs/setup/independent/create-cluster-kubeadm/ I've entered into ApiServer container using sudo docker exec --user root -it 1ea54fd4cd683 /bin/sh and executed kube-apiserver…
vladbrk
  • 93
  • 10
1
vote
1 answer

kube-apiserver high RAM usage

Upgraded recently from v1.9.1 to v1.9.6 of kubernetes. Everything is running fine but the kube-apiserver memory usage has hugely increased and is sitting just over 900mb as standard. It's not a huge issue as there is available RAM for it to do so…
Olly W
  • 347
  • 3
  • 10
0
votes
0 answers

scheduler cannot start if apiserver has no `--requestheader-client-ca-file`

I found intresting thing, when i run kube-apiserver without --requestheader-client-ca-file args, then kube-scheduler will failed to start and the error message is kube-system/extension-apiserver-authentication failed with : missing content for CA…
0
votes
1 answer

How to create client-cert and key from K8s config file

I have created a cluster using K3s and I have gotten config file below apiVersion: v1 clusters: - cluster: certificate-authority-data: XX_REPLACE_WITH_YOUR_CERTIFICATE_AUTHORITY_DATA_XX server:…
0
votes
1 answer

How to disable TLS handshake errors

I'm getting lots of TLS handshake errors in my pods: 2023/04/19 05:06:38 http: TLS handshake error from 10.21.152.134:36134: EOF as a result of a known issue introduced in go…
0
votes
1 answer

Get Pod details about itself from a container (without using downwardAPI or env variables approach)

Is it possible for an app running inside a pod to get details/metadata about its own pod. I know this can be easily achieved using downwardAPI or env variables. Is there a third way? I want to find out the service account and namespace of the pod…
G13
  • 75
  • 1
  • 1
  • 5
0
votes
1 answer

Find service owner of a kubernetes endpoints

I have an endpoints that I can see via (for example) : kubectl get endpoints busybox-service This endpoints is "backed" by a service: kubectl get services busybox-service Is there a way for me via the endpoints object, to find the "backing"…
Eugene
  • 117,005
  • 15
  • 201
  • 306
0
votes
0 answers

How to update/renew kube-api server certificate for API server Endpoint of AWS EKS Cluster

We need to update/renew the API server endpoint (https://****************.__7.region-name.eks.amazonaws.com) for our EKS Cluster due to some security reason and not able to see any option to do that. We have created EKS Cluster back in 2021 and…
0
votes
1 answer

Discovering the 'audit-log-path' for a kubernetes cluster kube-apiserver

I am reviewing my rke installation: https://docs.rke2.io/security/cis_self_assessment123#1219 The instruction works, makes sense, but shouldn't I be able to check this by running a kubectl describe po -n kube-system kube-apiserver-{my-ip}. I did a…
smuggledPancakes
  • 9,881
  • 20
  • 74
  • 113
0
votes
0 answers

Delayed Unauthorized responses from AKS

We use AKS's kube-apiserver for leader-election from a VM, external to k8s cluster but in the same VNET. We use a k8s client from the client-go package. The client tries to get/update the lease object every 2 sec. We observe occasional failures…
0
votes
0 answers

GKE kube-API (failed to list *v1.ConfigMap: Client.Timeout exceeded while awaiting headers)

Most of the pods on our GKE clusters fail with the below error. It is timing out when it connects Kube API server. time="2022-09-08T13:57:49Z" level=info msg="Starting configmap/secret informers" W0908 13:58:21.205161 1 reflector.go:324]…
0
votes
2 answers

How can I remotely call the kube-apiserver command via REST operations?

There is a command kube-apiserver --feature-gates=APIPriorityAndFairness=true --runtime-config=flowcontrol.apiserver.k8s.io/v1beta1=true,flowcontrol.apiserver.k8s.io/v1beta2=true. But it seems like run on the master machine. Now I want to remotely…
0
votes
1 answer

How to create a k8s custom pod with a specific configuration?

i have to say that my question is a little confusing but i'll try to be as clear as possible: in docker there is a command to run a container and make it use another container's network the command is : docker run --net=container so basically, i…
Youva
  • 13
  • 2
1 2 3
8 9