Questions tagged [kubernetes]
Kubernetes is an open source container cluster manager.
209 questions
0 votes
1 answer
33 views
How to block network access for a specific command in a limited K8s container (no CAP_NET_ADMIN / iptables)?
I need to safely run open-source tools inside a Linux container that may contain sensitive data. To prevent any potential data exfiltration, I want to block only this specific tool from accessing the ...
- 1
14 votes
1 answer
1k views
How does the Linux kernel decide whether to deny memory allocation or invoke the OOM killer when a cgroup exceeds its memory limit?
This question comes from my curiosity about how Kubernetes handles resource requests and limits, especially memory constraints defined for pods. I understand that Kubernetes uses cgroups under the ...
- 143
0 votes
0 answers
23 views
Upgraded k8 worker node from ubuntu 20.04 to 22.04. DNS resolution inside pods doesn’t work & pods keep crashing/restarting. openebs also crashed
We are facing the issue. Here I mentioned our setup. We have 5 clusters like application clustes, ingestion clusters, MySQL clusters, file server clusters. Each clusters working with 2 masters and ...
0 votes
0 answers
28 views
plugin type=portmap failed (add): unable to create chain CNI-HOSTPORT-SETMARK
Trying to run kind cluster in linux mint with nerdctl. It was working previously, may be upgrading some packages causing this. I am able to run other containers like postgres. Error $ sudo kind create ...
- 131
0 votes
0 answers
44 views
Is there a way to get the PID information for the host network namespace?
I am writing a script that gathers information about containers running within kubernetes that utilize network namespaces to write a CSV with the following information: "Network Namespace", &...
0 votes
1 answer
131 views
microk8s on rocky linux 9 problem
I installed microk8s on rocky linux version 9.5. To do that I did the following. # installing snapd sudo dnf install epel-release -y sudo dnf install snapd -y sudo systemctl enable --now snapd.socket ...
- 101
0 votes
0 answers
54 views
WSO2 API Manager 4.4.0 – How to Properly Sync APIs Across Multiple All-in-One Pods in Kubernetes?
I'm deploying WSO2 API Manager 4.4.0 on Kubernetes with the goal of scaling horizontally. My current setup is: 5 replicas of all-in-one pods, each running the full WSO2 API Manager stack (Control ...
- 1
0 votes
0 answers
44 views
Unexpected network namespace inode when accessing /var/run/netns/ from pod in host network namespace
I'm running a Kubernetes cluster with RKE2 v1.30.5+rke2r1 on Linux nixos 6.6.56 amd64, using Cilium CNI. Here's the setup: I have two pods (yaml manifests at the bottom): Pod A (xfrm-pod) is running ...
- 1
-1 votes
1 answer
79 views
Is a multi-machine Vagrant a good choice to simulate a Kubernetes cluster?
I am in front of a book to teaching myself Kubernetes. It has many chapters about handling a Kubernetes cluster, and it urges the reader to create an account on a cloud server, if he can. Else to ...
- 2,467
2 votes
1 answer
132 views
How does one run cron jobs in one container that does stuff in another?
I am on Kubernetes. I need to be able to write and run cron jobs in a pod. I can't use the CronJob workload. The solution I found is to run cron jobs from a cron sidecar container. I write cron jobs ...
- 41
0 votes
0 answers
75 views
creating VM snapshot using Virsh inside Kubevirt
I have a running virtual machine inside Kubevirt, Inside the virt-launcher of this VM I ran virsh to create a snapshot . virsh snapshot-create-as \ --domain default_my-test-vm \ --diskspec vda,file=/...
0 votes
2 answers
128 views
Why are my network connections being rejected and the ping command between server does not work?
Cluster information: kubectl version Client Version: v1.29.14 Kustomize Version: v5.0.4-0.20230601165947-6ce0bf390ce3 Server Version: v1.29.14 Cloud being used: bare-metal Installation method: Host OS:...
- 101
0 votes
1 answer
180 views
Upgraded k8 worker node from ubuntu 20.04 to 22.04. DNS resolution/networking inside pods doesn’t work & pods keep crashing/restarting
I have a k8 cluster based on Ubuntu 20.04 1 master and 3 worker nodes. I drained one of the worker node. Put kubectl,iptables, kubeadm, kubelet & containerd packages on hold. OS upgrade to 22.04, ...
0 votes
0 answers
41 views
SSL status: PROVISIONING for more then 2 hours
I've created certificate, but it's status: PROVISIONING for more than 2 hours. gcloud compute ssl-certificates describe mcrt-94a7195a-ffff-ffff-ffff-fb16fda2bf5f creationTimestamp: '2025-02-24T03:17:...
0 votes
1 answer
48 views
simple svc and endpoint not working using curl
I have issue with simple po svc and endpoints. Curl work fine when I connect in nginx pod and do curl 127.0.0.1 But when I try externaly from pod bu still in my cluster using Ip of svc it doesn't ...
- 11