Questions tagged [sidecar]

107 questions
0
votes
1 answer

TLS security needed between sidecar and main container inside pod

I am working on solution wherein I have one sidecar alongwith main container in one pod , sidecar is working as a proxy for traffic going out of the pod. Do I need any kind of encryption/TLS security between sidecar and main container if yes then…
user2590014
  • 71
  • 1
  • 5
0
votes
2 answers

Issue with Sidecar container log file path in Kubernetes

I have a deployment with 2 containers running in the same Pod in my Kubernetes cluster. One is NGINX and the other is a sidecar (bash image). Following is the definition file :- apiVersion: apps/v1 kind: Deployment metadata: creationTimestamp:…
0
votes
1 answer

Does consul sidecars support websockets upstream?

Is it possible to configure a consul agent sidecar with a websocket upstream? I have tried the following configuration but it doesn't work: { "bind_addr": "172.17.0.2", "data_dir": "/consul/data", "datacenter": "dc1", "node_id" :…
jdialogc
  • 23
  • 2
0
votes
1 answer

Container STDOUT to two separate ELS indexes

I have a containerised app that writes two categories of information to STDOUT as single line JSON. The first category is diagnostic logs (ERR/WARN etc) and the second is content access logs (CONTENT_ID/USER_ID etc). I intend to run a Filebeats…
Myles McDonnell
  • 12,943
  • 17
  • 66
  • 116
0
votes
1 answer

Redirect from http to https, nginx

I am using this configuration down for nginx, i am using it for sidecar in azure, following this link I can't figure it out what to change in the configuration to automatically redirect from http://domain to https://domain # nginx Configuration…
0
votes
1 answer

Azure kubernetes - Azure CNI & Istio, sidecar IP allocation?

Our Azure kubernetes cluster is configured with Azure CNI for networking which uses the subnet with CIDR: /21. As we are planning to deploy Istio service mesh and additional sidecars for log shipping, how would those impact the available IPs? Would…
One Developer
  • 99
  • 5
  • 43
  • 103
0
votes
1 answer

Invalid publish opts format when running sidecar

I want to run docker container with sidecar by this tutorial. For example, i have java spring boot application. Then i made such Dockerfile: # Dockerfile for GitLab CI/CD FROM maven:3.5.2-jdk-8-alpine AS MAVEN_BUILD ARG…
SlandShow
  • 443
  • 3
  • 13
0
votes
2 answers

Envoy sidecar-proxy public listener

I am trying to setup a Service Mesh PoC, I have three micro-services each running with their sidecar-proxy (through envoy). I ran the following command to launch the proxies : consul connect envoy -sidecar-for -admin-bind…
ludps
  • 3
  • 2
0
votes
2 answers

Filter traffic/authorise requests with Kubernetes sidecar

I want to create external authentication for Service A, which listens to traffic on port 8080. What I desire is to have a second container (Service B) running in the same pod as Service A, that intercepts, evaluates and (maybe) forwards the traffic…
0
votes
0 answers

kuma.io demo is failed with status code 503

I have tried kuma.io product which is an open-source project for envoy proxy and security injection to sidecar pod in k8s environment. I installed there is demo after installation with https://kuma.io/docs/0.5.1/quickstart/kubernetes/ I deployed…
Bora Özkan
  • 73
  • 1
  • 1
  • 8
0
votes
1 answer

Can a sidecar container of a pod detect the user of the application container and use the same?

I have defined a sidecar container in a common.tpl file in my helm charts. This sidecar container is included in numerous pods in which different users are used. I was wondering if there is a way to define as user in the sidecar container the user…
0
votes
1 answer

Istio (Envoy-proxy sidecar) is blocking http traffic on port 8088

My application(App2 Namespace=yarn): has the following ports open:8088:31097/TCP,19888:32150/TCP,8042:32604/TCP Without Istio being installed all the pods in my Kubernetes cluster in (Namespace =yarn) are able to connect to this service on port curl…
Linda
  • 78
  • 7
0
votes
1 answer

How do I create a sidecar container in Kubernetes cluster to scan ingress objects and copy file to another container?

Basically, I want a create a sidecar container to scan ingress objects in my cluster and copy the generated file to other containers. How can I achieve this?
0
votes
1 answer

OpenResty: Anonymise query parameter

I'm trying to anonymize email addresses (replace it by a UUID) to avoid keeping them as plaintext in my nginx access log. For now, I could only replace it with ***** by overriding OpenResty's nginx.conf : http { include mime.types; …
Fcmam5
  • 4,888
  • 1
  • 16
  • 33
0
votes
0 answers

Android Graylog Sidecar Integration

This is the setup: An Android Smartphone, constantly running an App and sending HTTP Requests to a Spring Boot Application on an Apache Server. The server is using Graylog Sidecar, which ships the Logs to the Graylog Server. So my question is, is…
AnanasXpress
  • 111
  • 1
  • 12