Stack Overflow
Stack Overflow

Questions tagged [kubernetes-apiserver]

201 questions
2
votes
2 answers

Are Kubernetes API calls secret update and configmap update atomic calls?

Is client.Secrets(namespace).Update(secret) an atomic call? If this call fails somehow, does the original secret stored in Kubernetes API server get…
JimmyCYJ
  • 771
  • 1
  • 5
  • 12
2
votes
1 answer

Where is kube-apiserver.yaml?

I would like to add a flag to the kube-apiserver. So I logged in the docker container of the kube-apiserver on the master node and went on a mission to find kube-apiserver.yaml. I heard reports that it was located in…
Doctor
  • 7,115
  • 4
  • 37
  • 55
2
votes
1 answer

CPU/Memory requests and limits per node

kubectl describe nodes gives information on the requests and limits for resources such as CPU and memory. However, the api endpoint api/v1/nodes doesn't provide this information. Alternatively, I could also hit the api/v1/pods endpoint to get this…
not_again_stackoverflow
  • 1,285
  • 1
  • 13
  • 27
2
votes
1 answer

Filter Kubernetes API by pod name

I have a Kubernetes cluster running in minikube, I want to filter out all Logstash pods via Kubernetes API. Kubernetes API documentation is a bit confusing, I did some research and found out that I can use something like this, but I have been…
0_o
  • 487
  • 4
  • 14
1
vote
0 answers

How to call kubernetes API server using curl and certificate authority

I have created EKS cluster using the IAM user. So now the system:creator is my own IAM user. I have configured the aws CLI and kubectl command line tools to use the credentials properly and both the comand line tools , aws and kubectl are working…
user2315104
  • 2,378
  • 7
  • 35
  • 54
1
vote
0 answers

How do you retrieve pod logs by labelSelector when using the k8s HTTP API?

I would like to collect the logs from one or more related pods using a labelSelector and the kubernetes HTTP API. However, I don't see any way to do this without first knowing all the pods names,…
Ryan Riley
  • 11
  • 2
1
vote
1 answer

Kubernetes REST API - how to get pod logs when more than one container is running?

Forgive me for asking a stupid question but I can't seem to find anywhere in the Kubernetes API reference how to query logs via the REST API if there's more than one container running inside the pod? cURL -k -H Authorization: Bearer…
Joel
  • 135
  • 9
1
vote
0 answers

How many GET/LIST Requests skip API Server Cache

I understand that LIST/GET requests that specify the revision number as 0 in the request are served from the api server watch cache. This avoids calls to etcd. Kubernetes also now dynamically resizes this cache. I'd like to understand if there is an…
beer_coder
  • 203
  • 1
  • 4
  • 10
1
vote
1 answer

How can i access a k8s worker node from a master node without ssh?

I want to build a python script that accesses a kubernetes worker node, lists the network interfaces and captures the traffic of the choosen interface (with tcpdump for exemple) and then store the pcap file somewhere on the master node. I want to…
Youva
  • 13
  • 2
1
vote
0 answers

In Kubernetes new users have all permissions to do anything although they are not assigned any Roles or ClusterRoles

RBAC is enabled (checked with kubectl api-versions, and got rbac records in the output). So as I assume, the normal users that are not bound with any Roles and ClusterRoles should have the most limited access to the cluster. I create the…
Coding_Cat
  • 21
  • 2
1
vote
1 answer

Accessing Kuberentes API using x509 certificate

I have created private key and certificate signed by the CA of the Kubernetes API server. I have configured the user, cluster and context in the ~/.kube/config file. Using this context where the user has client certificate and key, what is the…
praddy26
  • 97
  • 1
  • 1
  • 5
1
vote
1 answer

Kubernetes Service Account Token has super power?

I accidentally was checking if my pod had the right ServiceAccount and its Bindings. Out of curiosity I wanted to check if the token created from this service account is bound with the certain ClusterRole and ClusterRoleBinding which are read only.…
chaosguru
  • 1,933
  • 4
  • 30
  • 44
1
vote
1 answer

kubernetes force service to use https

I want to expose k8s api's using a service. My issue is that the api only respond on port 6443 on https. Any attempt on http return status 400 bad request. How can I "force" the service to user https ? apiVersion: v1 kind: Service metadata: name:…
user3907939
  • 89
  • 8
1
vote
0 answers

Expose kubernetes api within ingress

So I exposed my kubernetes api through service using the following command. kubectl -n kube-system expose pod kube-apiserver-master-node --name=apiserver --port 6443 When I describe the service I get this Name: apiserver Namespace: …
user3907939
  • 89
  • 8
1
vote
1 answer

Update Kubernetes Service Endpoint IP

I uses a Kubernetes application with a Service that has a single Endpoint. If using curl I retrieve it, I got something like this: { "kind": "Endpoints", "apiVersion": "v1", "metadata": { ... "subsets": [ { "addresses": [ …
Salvatore D'angelo
  • 1,019
  • 3
  • 14
  • 39
1 2 3
…
13 14