google-kubernetes-engine

Can the local development server be used to only simulate Cloud Datastore?

那年仲夏 提交于 2019-12-11 13:15:34
问题 If I'm developing an application that will run on the google container engine, but still wish for it to use cloud datastore, do I have any options to simulate cloud datastore for local development? Please note for the sake of correctly understanding my question: My application will not be Python, PHP or Java. It will not be running via App Engine, but via Container Engine. 回答1: Have you tried using cloud datastore's local development server? It sounds like exactly what you are looking for. 来源

Google Cloud Logging + google-fluentd Dropping Messages

泪湿孤枕 提交于 2019-12-11 11:46:12
问题 I have a rather small (1-2 node) kubernetes cluster running in GKE with ±40 Pods running. The problem at hand is that it's not logging to the GCE Console properly. I see lots of messages from the fluentd container(s) in the following format: $ kubectl logs fluentd-cloud-logging-gke-xxxxxxxx-node-xxxx 2016-02-02 23:30:09 +0000 [warn]: Dropping 10 log message(s) error_class="Google::APIClient::ClientError" error="Project has not enabled the API. Please use Google Developers Console to activate

Speed of “gcloud docker push”

谁都会走 提交于 2019-12-11 11:10:07
问题 New to Google Container Registry and Docker ecosystem in general. I'm pushing an existing image to gcr.io and I'd expect the time to complete the task to be close to 0 seconds, as all the bits are already on gcr.io. The context is running dev code in the Cloud, on lots of cores at the same time, as opposed to the 4 cores my Mac laptop has. I'm running a no-op to isolate the bottlenecks, the real usage has about 6M new bytes. It is slow, 14 seconds to perform a no-op. Is there a way to cut

Not able to access a Istio enabled GKE service directly from browser but only through curl

北城余情 提交于 2019-12-11 11:03:08
问题 I deployed a node app on cloud run option (GKE Cluster with Istio enabled). I checked the services running using 'kubectl get services -n istio-system' and It shows NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) istio-ingressgateway LoadBalancer 10.4.15.63 34.80.18.249 15020:30228/TCP,80:31380/TCP,443:31390/TCP nodeservice1 ExternalName <none> istio-ingressgateway.istio-system.svc.cluster.local nodeservice1-qdvk6 ClusterIP 10.4.12.102 <none> 80/TCP nodeservice1-qdvk6-metrics ClusterIP 10.4.8.162

Airflow KubernetesPodOperator: pass securityContext parameter

不问归期 提交于 2019-12-11 10:38:23
问题 Anyone could give me an example on passing some parameters as "runAsNonRoot" when creating a pod through KubernetesPodOperator ? I've tried to dig through the documentation but it is not clear. 回答1: At current this does not appear to be supported in the operator. You can see that the KubePodOp has an init that makes a PodGenerator. It then adds all the volumes and mounts to it before generating. This does not at any point call the only method in which you could pass a SecurityContext add_init

How to set up timezones in a GKE Pod

断了今生、忘了曾经 提交于 2019-12-11 08:29:23
问题 I deployed docker Linux to gcloud gke pod. I added the code bellow, trying to set up the time zone in the dockerfile. This code is running correctly in a local docker. But it does not work in gcloud gke pod. The timezones are in local PST, timezones in GKE Pod are still in UTC. Please help! ENV TZ=America/Los_Angeles RUN ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone 回答1: I'm not sure how this is working on your local environment. Looks like you are missing (Ubuntu

Mount two persistent volume claims in one deployment cause error

岁酱吖の 提交于 2019-12-11 08:27:49
问题 I created two PersistentVolumeClaims(one for redis, one for persistent logs) and tried to mount both in a single deployment, but after creating the deployment, I get the following error: nodes are available: 3 node(s) didn't match node selector, 4 node(s) had no available volume zone. However as soon as I remove one PVC from the deployment yaml file, it works fine. I am running it on Google Cloud Platform using Kubernetes engine. pvc1: kind: PersistentVolumeClaim apiVersion: v1 metadata: name

CA Certificate and JWT tokens on kubernetes

僤鯓⒐⒋嵵緔 提交于 2019-12-11 08:07:09
问题 With what CA Certificate are the Kubernetes Service Account JWT tokens signed with? Is there a way to get the public key with which kubernetes service accounts are signed in GKE? 回答1: You have no access to that key in GKE. In general, the Service Account JWT tokens are signed with an RSA key by the controller manager. The key is specified by the --service-account-private-key-file for kube-controller-manager . (The public key is specified by the --service-account-key-file parameter for kube

Kubernetes loadbalancer stops serving traffic if using local traffic policy

拟墨画扇 提交于 2019-12-11 07:58:15
问题 Currently I am having an issue with one of my services set to be a load balancer. I am trying to get the source ip preservation like its stated in the docs. However when I set the externalTrafficPolicy to local I lose all traffic to the service. Is there something I'm missing that is causing this to fail like this? Load Balancer Service: apiVersion: v1 kind: Service metadata: labels: app: loadbalancer role: loadbalancer-service name: lb-test namespace: default spec: clusterIP: 10.3.249.57

petset on GKE: could not find the requested resource

无人久伴 提交于 2019-12-11 07:56:35
问题 I want to experiment with PetSet on GKE. I have a 1.3.5 Kubernetes cluster on GKE, but PetSet does not seem to be activated. > kubectl get petset Unable to list "petsets": the server could not find the requested resource Do I need to activate v1alpha1 feature on GKE ? 回答1: I'm using PetSet in zone europe-west1-d but got the error you're seeing when I tried in zone europe-west1-c . Update: Today, September 1, I got an email from Google Cloud Platform announcing that PetSet was "accidentally