Questions tagged [kube-apiserver]

The main implementation of a Kubernetes API server is kube-apiserver. kube-apiserver is designed to scale horizontally — that is, it scales by deploying more instances. You can run several instances of kube-apiserver and balance traffic between those instances.

The kube-apiserver validates and configures data for the API objects which include pods, services, replicationcontrollers, and others.

The API Server services REST operations and provides the frontend to the cluster's shared state through which all other components interact.

132 questions
0
votes
1 answer

Can I query kube-apiserver from kube-proxy pod?

I've got no access to kube-apiserver pod directly, but I do have an access to kube-proxy pod. Can I run curl https://localhost:6443/healthz as a healthness probe to kube-apiserver or something?
0
votes
1 answer

kubernetes get endpint in the containers

on kubernetes vm Im running for example : kubectl get endpoints how can I get the same output inside the pod , what should I run within a pod? I understood there is a kubeapi but Im new to kubernetes can someone explain how can I use it this is my…
NoamiA
  • 521
  • 4
  • 19
0
votes
1 answer

Deleting kube-apiserver from kubernetes-master (just for testing and understanding)

Deleting kube-apiserver from kubernetes-master does not prevent kubectl from querying pods. I always understand, kube-apiserver is responsible for communication with the master. My question: how can kubectl still able to query pods while…
kaleb
  • 41
  • 9
0
votes
1 answer

how to restart kube apiserver without loosing cluster data

I need to add below in kube apiserver.yaml . --service-account-signing-key-file=/etc/kubernetes/pki/sa.key --service-account-issuer=kubernetes.default.svc How k8s will take these changes ? Do i need to restart the kube apiserver ? If it restart…
0
votes
1 answer

k8s api-server - providing user account authorization

I'm currently working with Minikube and the k8s api-server. I'm able to authorize HTTP requests using the default service account (decode default token into base64 and provide as authorization header), but I am struggling to do the same with my…
ionush
  • 323
  • 2
  • 6
  • 12
0
votes
1 answer

kube-apiserver[4073]: Error: "kube-apiserver" does not take any arguments, got ["\\"]

when restarting kubernetes master node. I'm getting below error Sep 13 21:32:22 master-1 kube-apiserver[4073]: Error: "kube-apiserver" does not take any arguments, got ["\\"] Sep 13 21:32:22 master-1 systemd[1]: kube-apiserver.service: Main process…
AMendis
  • 1,346
  • 4
  • 18
  • 34
0
votes
1 answer

how to update openshift kube-apiserver component with a new container image?

Openshift provides update way which updates the whole platform in a live way. while i (perhaps others also)have needs to just update some specific components. It's ok to update component such as console, openshift-apiserver with new container image…
0
votes
1 answer

Inquiring pod and service subnets from inside Kubernetes cluster

How can one inquire the Kubernetes pod and service subnets in use (e.g. 10.244.0.0/16 and 10.96.0.0/12 respectively) from inside a Kubernetes cluster in a portable and simple way? For instance, kubectl get cm -n kube-system kubeadm-config -o yaml…
rookie099
  • 2,201
  • 2
  • 26
  • 52
0
votes
1 answer

Encrypt & Decrypt data between Kubernetes API Server and Client

I have two kubernetes cluster setup with kubeadm and im using haproxy to redirect and load balance traffic to the different clusters. Now I want to redirect the requests to the respective api server of each cluster. Therefore, I need to decrypt the…
0
votes
1 answer

How Kubespray provision the /etc/kubernetes/manifests/kube-apiserver.yaml file on k8s master node

I'm fixing pentest issues on a k8s bare metal infrastructure, deployed with ansible playbooks. I've found that most of the modification to be done lay on the /etc/kubernetes/manifests/kube-apiserver.yaml file on the k8s master node. I'm not really…
nixmind
  • 2,060
  • 6
  • 32
  • 54
0
votes
1 answer

How to run Kubernetes without SSL network

I want to start develop for Kuberntes project. I wanted to debug the netwrok between the master and the worker. Currently they are using x509 certificates for SSL communication and I need to see this communication. I installed Kubernetes cluster…
E235
  • 11,560
  • 24
  • 91
  • 141
0
votes
0 answers

After configuring the aggregator, the kubeapiserver failed to start

The official website of kubernetes suggests that the aggregator should be better configured different ca certificate; credential. Therefore, I followed the advice of the official website, regenerated a ca certificate, and signed the certificate to…
Esc
  • 521
  • 13
  • 30
0
votes
1 answer

error "No nodes are available that match all of the predicates: MatchNodeSelector (7), PodToleratesNodeTaints (1)" for kube-state-metrics

I am getting an error "No nodes are available that match all of the predicates: MatchNodeSelector (7), PodToleratesNodeTaints (1)" for kube-state-metrics. Please guide me how to troubleshoot this issue admin@ip-172-20-58-79:~/kubernetes-prometheus$…
0
votes
1 answer

How kube-apiserver knows where is kubelet service/process running in worker node?

I have bootstraped (kubernetes the hard way by kelseyhightower) a k8s cluster in virtual box with 2 master(s) and 2 worker(s) and 1 LB for 2 master's kube-apiserver. BTW, kubelet is not running in master, only in worker node. Now cluster is up and…
0
votes
1 answer

How do I increase log verbosity in Docker for Windows Kubernetes API server?

When running Docker for Windows, the level of detail in the logs for kube-apiserver is relatively low. Since the k8s node is hosted in a VM it is not obvious where to make changes to the default configuration.
1 2 3
8
9