Questions tagged [kube-proxy]

kube-proxy is a component of kubernetes that is responsible for `service` and load balance.

The Kubernetes network proxy runs on each node. This reflects services as defined in the Kubernetes API on each node and can do simple TCP,UDP stream forwarding or round robin TCP,UDP forwarding across a set of backends.

161 questions
2
votes
2 answers

How to restore accidentally deleted a kube-proxy DaemonSet in a Kubernetes cluster?

I accidentally deleted kube-proxy daemonset by using command: kubectl delete -n kube-system daemonset kube-proxy which should run kube-proxy pods in my cluster, what the best way to restore it? That's how it should look
2
votes
1 answer

Kubernetes node firewall

The self-managed bare-metal Kubernetes worker node is using NodePort (there is a reason for using NodePort) for ingress traffic. I need to allow incoming connections only to NodePort port. This is what I did and it is working but it is not ideal as…
Jonas
  • 4,683
  • 4
  • 45
  • 81
2
votes
0 answers

intermittent 502 bad gateway error in Kubernetes pods

We are using Kubernetes in AWS, deployed using kops. We are using Nginx as our ingress controller it was working fine for almost 2 years. but recently we started getting 502 bad gateway issues in multiple pods randomly. ingress log shows…
2
votes
1 answer

Kube-Proxy-Windows CrashLoopBackOff

Installation Process I am all new to Kubernetes and currently setting up a Kubernetes Cluster inside of Azure VMs. I want to deploy Windows containers, but in order to achieve this I need to add Windows worker nodes. I already deployed a Kubeadm…
2
votes
1 answer

Kubernetes: kafka pod rechability issue from another pod

I know the below information is not enough to trace the issue but still, I want some solution. We have Amazon EKS cluster. Currently, we are facing the reachability of the Kafka pod issue. Environment: Total 10 nodes with Availability zone…
NIrav Modi
  • 6,038
  • 8
  • 32
  • 47
2
votes
1 answer

Unable to persist KUBE-FORWARD custom iptables rule in kubernetes

I am running kubernetes 1.11.6 and having connection reset issue. For this fix below blog recommend to add iptables rule. When I try to add the rule. it flushed automatically. I assume this is done by…
2
votes
3 answers

How does kube-proxy behave when it can't reach the master?

From what I've read about Kubernetes, if the master(s) die, the workers should still be able to function as normal (https://stackoverflow.com/a/39173007/281469), although no new scheduling will occur. However, I've found this to not be the case when…
bcoughlan
  • 25,987
  • 18
  • 90
  • 141
2
votes
2 answers

using kube-proxy for load balancing

The official kubernetes docs clearly state that kube-proxy "will not scale to very large clusters with thousands of Services", however when a LoadBalancer type Service is created on GKE the externalTrafficPolicy is set to Cluster by default (meaning…
morgwai
  • 2,513
  • 4
  • 25
  • 31
2
votes
2 answers

How do I create an Endpoint for an external service running on the same localhost outside of K8s cluster?

I am using Docker for Windows (docker-desktop) which ships with a small single node kubernetes instance. I have a scenario where my pods needs to communicate with some external services running on the same localhost(windwos 10 machine), but outside…
2
votes
1 answer

In K8S, does every kube-proxy (running on every node) have the same implementation?

I am new to K8S and I am trying to understand the exact role of kube-proxy running on each node in a cluster. The documentation mentions that "kube-proxy reflects services as defined in the Kubernetes API on each node and can do simple TCP, UDP, and…
adi
  • 143
  • 11
2
votes
0 answers

Pods not getting schedueld/assigned ip address on the new node added to k8s cluster using kubespray

Used kubespray to add worker node to existing cluster. The node joined to the cluster but new pods schedueld on the nodes are failing with error "get https://10.233.0.1 : dial tcp 10.233.0.1: 443 connection refused" Network plugin -…
Pushpa
  • 21
  • 1
2
votes
1 answer

IP Blacklisting in Istio

The IP whitelisting/blacklisting example explained here https://kubernetes.io/docs/tutorials/services/source-ip/ uses source.ip attribute. However, in kubernetes (kubernetes cluster running on docker-for-desktop) source.ip returns the IP of…
2
votes
1 answer

kubernetes DNS - Let service contact itself via DNS

Pods in a kubernetes cluster can be reached by sending network requests to the dns of a service that they are a member of. Network requests have to be send to [service].[namespace].svc.cluster.local and get load balanced between all members of that…
Aki
  • 1,644
  • 12
  • 24
2
votes
1 answer

How does the failover mechanism work in kubernetes service?

According to some of the tech blogs (e.g. Understanding kubernetes networking: services), k8s service dispatch all the requests through iptable rules. What if one of the upstream pods crashed when a request happened to be routed on that pods. Is…
George Liang
  • 131
  • 1
  • 10
2
votes
1 answer

Source IP address translation for intra-cluster traffic

I'm trying to dive into K8s networking model and I think I have a pretty good understanding of it so far, but there is one thing that I can't get my head around. In the Cluster Networking guide, the following is mentioned: Kubernetes imposes the…
Arian Motamedi
  • 7,123
  • 10
  • 42
  • 82
1 2
3
10 11