Questions tagged [kubernetes]

Kubernetes is an open source container cluster manager.

Filter by
Sorted by
Tagged with
0 votes
0 answers
42 views

Having trouble with syntax in declaring variables [closed]

I need help in fixing this script, getting too many syntax errors? - hosts: mononode gather_facts: false tasks: - name: wait for pods to come up shell: >- get_total_count = ...
user avatar
  • 1
0 votes
1 answer
22 views

Podman sharing one port with every contianer running in a pod?

On Kubernetes, a typical design paradigm is to share one container on every container running such that they call connect localhost with a given port. Then Kubernetes will route that traffic to the ...
user avatar
  • 22.4k
0 votes
0 answers
155 views

Alpine: How to forceful remove freetype package from OpenJDK Runtime Environment(Alpine 8.302.08-r2) even if it would break dependencies?

I'm trying to setup a docker config for my java spring applicaiton. So appln is running absolutely fine but We found out that there is a apk package called as freetype which is having critical ...
user avatar
  • 101
0 votes
0 answers
13 views

How to allow ServiceAccount list namespaces it has access to within a cluster?

I have a cluster with multiple namespaces. Let's call them: ns1 and ns2 I also have multiple service accounts, lets call them sa1 and sa2, all in one namespace - sa-ns. Both users can access all ...
user avatar
0 votes
0 answers
26 views

Routing outgoing traffic on specific port through specific interface

First of all, I would like to thank you for all the previous answers everywhere? I couldn't get there without them. Learned a lot from the Stackexchange community (both about iptables and more). ...
user avatar
0 votes
0 answers
10 views

How to configure similar to do-ip6 setting (unbound) in coredns of kubernetes

do-ip6 is an option in unbound dns where we can enable or disable whether ip6 queries are answered or issued. do-ip6: yes or no. Default is yes. If disabled, queries are not answered on IPv6, and ...
user avatar
0 votes
0 answers
6 views

how to run K8s pod replicas with few variable values in their conf?

I have to run some containers in K8s, more than 1 replicas for a microservice. I'm using configmaps to load the configuration of the microservice. There are few values that need. to be incrementally ...
user avatar
  • 1,603
0 votes
0 answers
105 views

what does fork/exec : permission denied mean?

I am building a container inside of a container(Gitlab runner kubernetes pod) but it keeps failing. The Dockerfile of the container to build is: FROM ubuntu USER root RUN ["touch", "...
user avatar
  • 201
0 votes
1 answer
142 views

Kubernetes OutOfcpu error when Requests.cpu == Limits.cpu

I'm running Kubernetes Jobs in which I set limits and requests both to the same number of CPUs. In some of these jobs I'm occasionally seeing OutOfcpu errors When I kubectl describe pods PODNAME I see ...
user avatar
  • 1,080
1 vote
0 answers
38 views

SQL output piped to `kubectl exec` crashes, if not replacing TABS with SPACES

The context: I'm generating SQL from a backup dump, inside a subshell, to then pipe it to mysql for execution: ( echo "SET FOREIGN_KEY_CHECKS=0;"; tar --to-stdout -xvjf archive.tar; echo &...
user avatar
1 vote
1 answer
37 views

Linux picking wrong source IP

I have an EC2 instance running on a k8s cluster. The instance has three three interface cards. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 ...
user avatar
2 votes
1 answer
158 views

How can "/sys/class/net/eth0/iflink" have system wide information in a container

I was looking for ways to tcpdump a Kubernetes pod. Each pod creates a virtual interface and it is hard to know which interface belongs to the actual pod. I found a method that helps identify the ...
user avatar
  • 181
0 votes
0 answers
29 views

The platform does not support either IP_TRANSPARENT or IPV6_TRANSPARENT

How to make a Linux host IP_TRANSPARENT or IPV6_TRANSPARENT? Basically, we are trying to install an envoyproxy container in Kubernetes (on-prem). We are getting the error below. But if we remove '...
user avatar
0 votes
1 answer
71 views

How to use the linux top command to get cpu usage metrics inside a pod

I'm currently looking at the solution to get the cpu usage metrics using the linux "top" command. with top command I see that it only gives a momentary cpu stats. How can I get a metrics ...
user avatar
0 votes
0 answers
228 views

How get mobaxterm work with kubectl?

mobaxterm is not able to read kube config setting when using with kubectl. I am using MobaXterm_21.2 installed version. When i run - kubectl version, its woking as expected  kubectl version Client ...
user avatar
  • 554
0 votes
0 answers
52 views

Kubelet fails to pull any image

I tried deploying this image from docker hub onto a pod in my lab. The pod gets stuck on "ContainerCreating" and when I run kubectl describe pod, I see the following in loop Normal ...
user avatar
0 votes
1 answer
27 views

Does the "offical" HAProxy ingress controller provide drain support?

We're exploring using the "offical" HARoxy ingress controller (https://www.haproxy.com/documentation/kubernetes/latest/) and require traffic to continue to be sent to a pod that is in a ...
user avatar
2 votes
1 answer
279 views

Backspace in shell moves cursor to the right

There's this remote shell I login into that, when I try to delete a character, instead of visually showing the character being deleted, it remains there and the cursor moves to the right. This shell ...
user avatar
0 votes
2 answers
260 views

multiple schedules for a single task in a k8s cronjob

Warning: k8s greenhorn on this side. I need to run a task that will be set up in a k8s cronjob. I need it to run every 45 minutes. Having this in the schedule does not work: 0/45 * * * * Because it ...
user avatar
  • 495
2 votes
0 answers
527 views

Is setting cgroup_enable=cpuset necessary in this case?

I am setting up a raspberry pi based cluster using kubeadm and containerd as the CRI. I have 8GB nodes and I have installed Ubuntu 20.04 on them. I need to setup cgroups and the various instructions ...
user avatar
1 vote
0 answers
18 views

Maximum open security on NFS export of shared directory

I have a huge problem with Kubernetes and permission problems with PVCs. Here's my NFS export line: /srv/nfs4 192.168.1.0/24(rw,sync,no_subtree_check,crossmnt,fsid=0) /srv/nfs4/k8s ...
user avatar
0 votes
0 answers
14 views

Who should be allowed access to /etc/kubernetes/pki/ca.crt?

Beginners' question. Who would you allow access to /etc/kubernetes/pki/ca.crt? What damage to you cluster if someone is not a cluster administrator has got access (e.g. copying and distributing, ...
user avatar
0 votes
1 answer
196 views

stdin buffer - what is it?

While reading the "Kubernetes in Action" book I saw the following excerpt (p. 124): Listing 5.2 Enabling standard input for a container apiVersion: v1 kind: Pod metadata: name: kiada-...
user avatar
  • 259
2 votes
0 answers
73 views

Make memory.limit_in_bytes ignore file cache

When using cgroups (either standalone or as part of docker or kubernetes) memory.limit_in_bytes counts file cache towards the processes memory usage. This has an unexpected side effect that I'm trying ...
user avatar
  • 121
1 vote
0 answers
158 views

Inodes on /run filesystem is full

Inode on /run is getting full for all our nodes that are being managed by EKS, especially for small instances like t3a.medium below output from df -i. Filesystem Inodes IUsed IFree IUse% Mounted ...
user avatar
  • 11
0 votes
0 answers
82 views

How does DNS work in Kubernetes?

I'm having issue with DNS resolve in Kubernetes. It's quite complex, please be patient to read. ENV: On-premise and private Cloud OS Ubuntu Server 20.04 LTS System Network: VPN s2s Custom DNS (10....
user avatar
  • 1
1 vote
1 answer
106 views

zsh - How to properly create a shortcut for inline expansion of a long command

I'm trying to figure out the best way to create inline expansions of fragments of commands. The "long form" would be like: kubectl get pods --show-labels or kubectl get po -o custom-...
user avatar
  • 11
1 vote
0 answers
132 views

Errors when trying to get kubectl completion working

My question is why do I see this error when trying to get kubectl autocomplete working in my terminal. I really only care about getting the zsh one working. I'm simply using some other examples of ...
user avatar
0 votes
0 answers
43 views

Kubernetes Internal Service IP cannot find pod

I have the following pod definition to run a basic instance of nginx --- apiVersion: v1 kind: Pod metadata: name: basic labels: appName: static-website spec: containers: - image: nginx ...
user avatar
  • 1
-2 votes
1 answer
294 views

error: unable to find container named "container-name" [closed]

When I using this command to update container in kubernetes cluster in GitHub Actions: - name: deploy to cluster uses: steebchen/kubectl@v2.0.0 with: # defaults to latest kubectl binary ...
user avatar
  • 349
1 vote
0 answers
80 views

what privillege should I give to the kubernetes nfs mount path

when I start the postgresql in kubernetes cluster, the log look like this: postgresql 07:00:48.68 postgresql 07:00:48.68 Welcome to the Bitnami postgresql container postgresql 07:00:48.68 Subscribe ...
user avatar
  • 349
1 vote
1 answer
567 views

How to deal with special characters in docker registry credential in new version of kubectl

Today I want to add a docker registry credential in kubernetes v1.21.3 (it works fine in lower version of kubernetes but have problem in new version of kubernetes): kubectl create secret docker-...
user avatar
  • 349
0 votes
1 answer
64 views

invalid subcommand: "upload" when using kubeadm to upload config

When I want to use kubeadm kubeadm version: &version.Info{Major:"1", Minor:"21", GitVersion:"v1.21.3", GitCommit:"ca643a4d1f7bfe34773c74f79527be4afd95bf39", ...
user avatar
  • 349
0 votes
1 answer
41 views

Centos Resolve conflicts

i am trying to install kubernetes and docker on Centos 8 but i have package conflicts how do i fix them? [root@master-node ~]# yum install kubeadm docker -y Ultima verifica della scadenza dei metadati:...
user avatar
0 votes
1 answer
706 views

kubectl get pod READY 0/1 state

I am following a lab on Kubernetes and Mongodb but all the Pods are always in 0/1 state what does it mean? how do i make them READY 1/1 [root@master-node ~]# kubectl get pod NAME ...
user avatar
1 vote
0 answers
285 views

Enabling the memory controller on cgroup v2 on fedora 34

I am trying to install kubernetes on a fedora34 machine. The preflight fails with the following error: [ERROR SystemVerification]: missing required cgroups: memory I have been trying to find out ...
user avatar
0 votes
0 answers
15 views

kubernetes network interfaces in the settings

I've recently been studying docker, kubernetes and dev-ops stuff and also started some online courses.. I am using elementary OS 5.1 and installed docker and microk8s.. but after following some stuff ...
user avatar
0 votes
0 answers
46 views

Could it be possible to throttle IOs using LD_PRELOAD?

I have a job on a managed Kubernetes cluster that is a bit IO intensive. Nothing crazy, it downloads about 1gb of data, writes it on /tmp folders, does some minor edits, compress and encrypts it, and ...
user avatar
0 votes
1 answer
67 views

Kuberenets on CentOS 8 steam, is systemd-resolved.service required

We have converted kubernets 1.19 cluster node OS from CentOS 8 to CentOS Steam 8 after upgrade node become Ready status, but PODs not starting on the node. getting this message kubelet open /run/...
user avatar
  • 310
0 votes
0 answers
22 views

kubectl start after reboot using service

I need your help. I want to execute this command after reboot of the server with delay as a service. I am using SUSE linux on this machine. The command I need to run works well kubectl --namespace ...
user avatar
0 votes
0 answers
21 views

Newly added node is not available in ceph pool

Absolute newbie in Ceph and down with a problem. Added 3 new nodes to my K8's setup and its available and in Ready state - as per kubectl get nodes. But, cant see the same in my ceph pool, while ...
user avatar
  • 13
0 votes
0 answers
18 views

why only the old replica response with deployment in kubernetes

I am using kubernetes v1.15.x to manage my service. Today I found only old replica sets response with kubernetes deployment, when I increment or decrement the deployment pod number, the old replica ...
user avatar
  • 349
2 votes
1 answer
337 views

Output: Running scope as unit run-2863.scope. mount.nfs: access denied by server while mounting

when I mount a nas in kubernetes pod, shows this error: MountVolume.SetUp failed for volume "nfs-hades-mysql-pv1" : mount failed: exit status 32 Mounting command: systemd-run Mounting ...
user avatar
  • 349
-1 votes
1 answer
511 views

How to use the awk command in oc exec (openshift command line)

I am trying to get the process names from POD's thorug oc exec command line. I need to grab first filed of each row in the output. I am getting following error. but this ps -ef|grep NIM| awk '{print $...
user avatar
0 votes
0 answers
72 views

Running tar -xvf with busybox:1.28 image

I am trying to copy and extract the content of a .tar file into a minikube container, the copy part is working correctly, but not the extraction: deployment.yaml volumeMounts: - mountPath: /...
user avatar
0 votes
1 answer
57 views

Sysdig doesn’t record events inside Kubernetes pods

I use Microk8s kubectl. I tried to record events inside a pod (named e.g., mypod) using sysdig by setting a filter k8s.pod.name=mypod (specifically through $sysdig k8s.pod.name=mypod). But sysdig does ...
user avatar
  • 3
0 votes
1 answer
352 views

Certificate signed with custom CA in Kubernetes not Valid

I am attempting to setup the following process. Pod starts and generates a private key and csr Submits csr to password protected service for signing and ip verification Service returns valid crt that ...
user avatar
0 votes
1 answer
19 views

Kubernetes check port opened

My container use tomcat application server and take about less than 10 second to open port 8080 . is there any way on kubernetes LoadBalancer to check port opened before forward requests to that ?
user avatar
  • 247
0 votes
2 answers
52 views

kubernetes replicaSet shutdown policy

Kubernetes use TERM signal on count down replicaSet . this is so dangerous for my application . I use Tomcat application server and this application server has own shutdown mechanism for terminating ...
user avatar
  • 247
1 vote
1 answer
190 views

Kubernetes node error sync pod

I installed kubernetes on Ubuntu server 20.04 . Master configured with flannel network without any problem . Initialize command: kubeadm init --pod-network-cidr=10.10.10.0/24 --apiserver-advertise-...
user avatar
  • 247