Questions tagged [kubernetes]

Kubernetes is an open source orchestration system for Docker containers. It handles scheduling onto nodes in a compute cluster and actively manages workloads to ensure that their state matches the users declared intentions. Using the concepts of "labels" and "pods", it groups the containers which make up an application into logical units for easy management and discovery.

Kubernetes is an open source orchestration system for Docker containers. It handles scheduling onto nodes in a compute cluster and actively manages workloads to ensure that their state matches the users declared intentions. Using the concepts of "labels" and "pods", it groups the containers which make up an application into logical units for easy management and discovery.

For more details, visit the official Kubernetes page.

2075 questions
2
votes
3 answers

How to delete all namespaces except the kube-system in K3s cluster

I have a K3s cluster with system pods (i.e. kube-system namespace) and my application pods: kube-system pod/calico-node-xxxx kube-system pod/calico-kube-controllers-xxxxxx kube-system …
solveit
  • 255
  • 2
  • 11
2
votes
1 answer

Why does kube-proxy authenticate to the kube-api-server using service account instead of tls certificate

I am digging down into the Kubernetes PKI. I noticed that mostly all the control-plane components, including kubelet authenticate to the api-server using TLS certificates. Only kube-proxy & flannel running as Daemonsets authenticate using a service…
alixander
  • 151
  • 6
2
votes
1 answer

Kubernates CoreDNS direct a public url to a internal server

I have an app running in Kubernetes clusters which is accessing to a public API URL for e.g. api.server123.com. The app is accessing it within its code itself I want to resolve that public UZRL to an internal IP like how we can do it in /etc/host…
Ruster
  • 21
  • 2
2
votes
1 answer

Kubernetes: How can I get which pod schedule GPU?

I have three Nvidia GPUs in my cluster, and so many pods are running in my cluster. How can I find which one of these pods schedule GPU and how many GPUs they schedule? I use this link to enable the GPU schedule in my cluster for Nvidia…
nader
  • 33
  • 7
2
votes
2 answers

What's necessary for a bare metal dual stack kubernetes setup?

We are about to start setting up a new kubernetes cluster on bare metal at our own datacenter. The documentation for the k8s moduls and services is great, however I was not able to find any comprehensive top view documentation on the components…
2
votes
1 answer

Kubernets 1.21.3 The recommended value for "clusterCIDR" in "KubeProxyConfiguration"

I am trying to join new node to existing v1.21.3 cluster with Calico CNI. join command giving clusterCIDR warning. How to fix this subnet warning message? # kubeadm join master-vip:8443 --token xxx --discovery-token-ca-cert-hash…
sfgroups
  • 193
  • 3
  • 13
2
votes
1 answer

How can I restart or reset the K3s cluster pods

I have a k3s (v1.21.1+k3s1) cluster with following pods: kube-system pod/calico-node-xxxx kube-system pod/calico-kube-controllers-xxxxxx kube-system pod/metrics-server-xxxxx kube-system …
solveit
  • 255
  • 2
  • 11
2
votes
1 answer

Guarantee ResourceQuota in a Namespace

I'm running a cluster that is shared across teams and I'd like to guarantee each team a minimum amount of resources, especially memory. Following the instructions I've tried using the following on their namespace: apiVersion: v1 kind:…
Mark
  • 165
  • 1
  • 5
2
votes
0 answers

Kubernetes V1.19.13 - kubeapi servers not able connecting to different etcd database

I have upgraded Kubernets cluster ( 3 master, 3 etcd servers database) from 1.18 to v1.19.13 and ETCD to 3.4.13. since than API servers are not stable, keep switching different etcd server, because of this cluster is not working properly. these…
sfgroups
  • 193
  • 3
  • 13
2
votes
2 answers

How to move kubernetes to a different subscription in azure?

I have two subscriptions under my account. When I check today, the balance is low in my subscription where I deployed the cluster. So, I click on change subscription option and selected the second subscription in my account. But, getting below…
uday
  • 257
  • 2
  • 21
2
votes
1 answer

How to limit root disk space for pod

I have pod deployed on a node with 100gb volume. I only want a pod to have 50gb root disk space. So I have such config in deployment.yaml: resources: requests: ephemeral-storage: "50G" limits: …
user3908406
  • 143
  • 1
  • 4
2
votes
0 answers

Calico node remains not ready when a new node with a 192.168.178.x IP joins a K8s cluster

kube-system pod/calico-node-9czgm 0/1 Running 3 42d kube-system pod/calico-node-msfjk 0/1 Running 0 5m37s ...is what I get when a let "moon" to…
Alex
  • 131
  • 4
2
votes
1 answer

Calico network policy in Kubernetes based on Domain name Regex Matching

I have a application running with kubernetes orchestrator. I want to implement calico network policy based on domain name Regex matching. I am seeing in calico doc that they are using ip range(CIDR) to control incoming and outgoing calls. Can same…
solveit
  • 255
  • 2
  • 11
2
votes
3 answers

How can I find which kubernetes certificate has expired?

I have a kubeadm installed kubernetes cluster. Recently it stopped working. kubelet is running but seems stuck in initialization phases. I think the root cause is this recurring log in kube-apiserver: 1 authentication.go:63] "Unable to authenticate…
Antoine
  • 281
  • 3
  • 8
2
votes
3 answers

Getting "x509: certificate signed by unknown authority" in GKE on pulling image (a private registry) when a pod is created

I generated a CA certificate, then issued a certificate based on it for a private registry, that located in the same GKE cluster. Put the server certificates to the private registry and the CA certificate to all GKE nodes and…