Questions tagged [kubernetes]

Kubernetes is an open source orchestration system for Docker containers. It handles scheduling onto nodes in a compute cluster and actively manages workloads to ensure that their state matches the users declared intentions. Using the concepts of "labels" and "pods", it groups the containers which make up an application into logical units for easy management and discovery.

Kubernetes is an open source orchestration system for Docker containers. It handles scheduling onto nodes in a compute cluster and actively manages workloads to ensure that their state matches the users declared intentions. Using the concepts of "labels" and "pods", it groups the containers which make up an application into logical units for easy management and discovery.

For more details, visit the official Kubernetes page.

2075 questions
0
votes
1 answer

Pods stuck at terminating stage and the PVC, how to fix that?

My kubernetes cluster got stuck at terminating state. below is the current state. pods: kubectl get po NAME READY STATUS RESTARTS AGE dashboard-0 1/1 Terminating 0 3h12m data-cruncher-0 1/2 …
0
votes
0 answers

Kubernetes. I cannot curl https url after Kube-Proxy applies iptables rules on node. Can curl successfully prior to rules being applied

When kube-proxy iptables rules are NOT applied, I can, for example, run: curl -k https://kibana.default.svc.cluster.local:443/api/status (IP address of kibana is 10.233.74.67) But, as soon as the kube-proxy rules automatically apply on my node, I…
Jeff M
  • 1
0
votes
1 answer

A service runs inside a pod in the pod’s network

This document states that: "A service runs inside a pod in the pod’s network". It also states that: "A service resides in a pod or several pods" Is that a contradiction or is it true? I have always thought of a services is it own entity, and just a…
Chris G.
  • 157
  • 5
0
votes
0 answers

kube-apiserver logs that certificate has expired but it's not

kube-apiserver pod print following log: authentication.go:104] Unable to authenticate the request due to an error: x509: certificate has expired or is not yet valid I already renewed all certs renew certs admin.conf copied to ~/.kube/config I…
RedBluff
  • 1
  • 2
0
votes
0 answers

thousands of systemctl unit named "/run/docker/runtime-runc/moby/....../runc....." in system

We are running k8s on SUSE. In some node, I found thousands of system units like this: sudo systemctl list-units --all | egrep "run-docker-runtime.*loaded.*inactive.*dead" …
caclp
  • 1
0
votes
0 answers

terraform destroy failing for kubernetes provider with pvc in aws eks, how to fix that?

We have done kubernetes deployment using terraform kubernetes provider, while creating the cluster eks itself. When we try to destroy after that, didn't use the product yet, just testing the destroy. Got below error with terraform…
0
votes
1 answer

Multi-Master K8S cluster fails when half of the masters are down

i have a 4 masters HA K8S cluster , (accross 2 datacenters , 2 in each site) , but the kubectl command stops working after shuting down 2 masters , is this the expected behaviour? I want the cluster to survive a Datacenter crash. PS : I am using 2…
Kratozz
  • 3
  • 1
0
votes
0 answers

Kubernetes Ingress controller dual authorization header for oauth proxy

I have the following use case: An http backend application running behind an oauth proxy An OAuth proxy that authenticates users before authorizing access to the backend application In some cases the application behind the proxy has another…
0
votes
0 answers

EKS: kubectl exec does not respect streamingConnectionIdleTimeout

Using EKS with Kubernetes 1.21, managed nodegroups in a private subnet. I'm trying to set the cluster up so that kubectl exec times out after inactivity regardless of the workload being execed into, and without any client configuration. I'm aware of…
0
votes
1 answer

Kubernetes Nodes are not reachable and cannot reach local network after installing cilium

Little bit of an Introduction, Im pretty new to kubernetes so i'm a bit rough on it. Lets me sketch my problem. TLDR: After installing cilium on kubernetes I cannot acces from and to any other machine on my local networks I got two…
0
votes
1 answer

Pod assigned node role instead of service account role on AWS EKS

First some info about the setup: EKS version: 1.21 eksctl version: 0.77.0 AWS Go SDK verion: v1.44.28 Deploying using kubectl I have a k8s cluster on AWS EKS on which I am deploying a custom k8s controller for my application. Using instructions…
asr9
  • 111
  • 5
0
votes
0 answers

Setting up Kubernetes on LXC: Kubeadm init times out, cannot connect to API server

Situation: I am trying to create a Kubernetes cluster running on Linux containers, however Kubeadm init fails by timing out (four minutes pass). I have done the same on Ubuntu VMs before with no issue, and that cluster is running happily. The…
Paradoc
  • 101
  • 2
0
votes
1 answer

Kubernetes Cluster on CentOS 7 with kubeadm 1.24 - calico => coredns stuck in ContainerCreating

In order to install a master kubernetes node on centos7 with containerd and calico : I followed this steps : https://computingforgeeks.com/install-kubernetes-cluster-on-centos-with-kubeadm/ After the kubeadm init --pod-network-cidr=192.168.0.0/16 …
awot83
  • 31
  • 1
  • 5
0
votes
1 answer

Restart kubernetes pod if a log line exists

Is there a built-in or elegant way to automatically restart a kubernetes pod if a certain log line is seen in the logs?
Nate Houk
  • 111
  • 2
0
votes
0 answers

User not found in /etc/passwd error while installing kubernetes cluster with kubespray

I am trying to deploy a Kubernetes cluster using kubespray, however, when I run the command: ansible-playbook -i inventory/mycluster/hosts.ini --become --become-user=root cluster.yml It displays the following error on all nodes: fatal: [node1]:…