Kubernetes

websphere application server behind ingress redirects to dns:port

☆樱花仙子☆ 提交于 2021-02-11 13:19:44
问题 I am trying to run websphere behind ingress. I have successfully configured the ingress for it and I am able to access the console. The ip on which I am able to access the console is https://mydomain/ibm/console/logon.jsp Note: I have a domain , for which I created a A record. When I login into the console , I am redirected to https://mydomain:9043/ibm/console/ This page does not exist. If I explicitly run the URL https://dns/ibm/console/login.do?action=secure . My application works fine. Can

Reverse proxy a site with SNI support using kubernetes nginx-ingress

爷,独闯天下 提交于 2021-02-11 13:01:44
问题 I am setting a reverse proxy using kubernetes nginx-ingress, but I don't know how to add nginx parameters to the configuration, specifically: proxy_ssl_server_name. How do I set ingress parameters in yaml configurations? I already tried using the server-snippet annotation, but it seems like it's not adding the parameter to the nginx.conf file in the cluster pods. Here is the current code for the reverse proxy: kind: Service apiVersion: v1 metadata: name: formstack namespace: serves spec: type

404 when trying to get CRD using python client

只谈情不闲聊 提交于 2021-02-11 12:53:48
问题 What happened I am trying to create custom object in kubernetes using kubernetes python client, but i am unable to do so, it would be helpful if someone can explain what i am doing wrong here Traceback (most recent call last): File "/home/talha/PycharmProjects/doosra/tasks/cluster_tasks.py", line 585, in <module> main() File "/home/talha/PycharmProjects/doosra/tasks/cluster_tasks.py", line 574, in main resource = api.get_namespaced_custom_object( File "/home/talha/PycharmProjects/venv/lib

GKE Cluster autoscaler profile for older luster

社会主义新天地 提交于 2021-02-11 12:41:55
问题 Now in GKE there is new tab while creating new K8s cluster Automation - Set cluster-level criteria for automatic maintenance, autoscaling, and auto-provisioning. Edit the node pool for automation like auto-scaling, auto-upgrades, and repair. it has two options - Balanced (default) & Optimize utilization (beta) cant we set this for older cluster any work around? we are running old GKE version 1.14 we want to auto-scale cluster when 70% of resource utilization of existing nodes. Currently, we

Why am I getting this “unauthorized” error when trying to mirror OKD installation images from Quay.io?

岁酱吖の 提交于 2021-02-11 12:41:12
问题 I have been working on an installation of OKD on an air-gapped environment. The first major step has been mirroring the OKD images so that they can be moved over to the new environment and pulled locally. I've been following a combination of the OpenShift documentation and this article, as well as this resource for getting my certificates set up. I have been making slow but consistent progress. However, I am now having trouble when attempting to actually mirror the files using oc adm -a $

External OAuth authentication with Nginx in Kubernetes

Deadly 提交于 2021-02-11 12:36:41
问题 Having trouble setting up external authentication for a web application behind nginx ingress. When i try to access the URL https://site.example.com from external i get no redirection to Github login, and direct access to web application happens. Running Pods for my environment: NAME READY STATUS nginx-ingress-68df4dfc4f-wpj5t 1/1 Running oauth2-proxy-6675d4b57c-cspw8 1/1 Running web-deployment-7d4bd85b46-blxb8 1/1 Running web-deployment-7d4bd85b46-nqjgl 1/1 Running Active Services: NAME TYPE

How to programmatically modify a running k8s pod status conditions?

生来就可爱ヽ(ⅴ<●) 提交于 2021-02-11 12:01:40
问题 I'm trying to modify the running state of my pod, managed by a deployment controller both from command line via kubectl patch and from the k8s python client API. Neither of them seem to work From the command line, I tried both strategic merge match and JSON merge patch, but neither of them works. For e.g. I'm trying to patch the pod conditions to make the status field to False kubectl -n foo-ns patch pod foo-pod-18112 -p '{ "status": { "conditions": [ { "type": "PodScheduled", "status":

Pass json string to environment variable in a k8s deployment for Envoy

时光毁灭记忆、已成空白 提交于 2021-02-11 09:52:15
问题 I have a K8s deployment with one pod running among others a container with Envoy sw. I have defined image in such way that if there is an Environment variable EXTRA_OPTS defined it will be appended to the command line to start Envoy. I want to use that variable to override default configuration as explained in https://www.envoyproxy.io/docs/envoy/latest/operations/cli#cmdoption-config-yaml Environment variable works ok for other command options such as "-l debug" for example. Also, I have

Read-only-port 10255 on Kubernetes node didn`t exist

谁都会走 提交于 2021-02-11 08:01:57
问题 I have a problem, I need to collect metric data from read-only-port located on 10255, but unfortunately by using netstat I found that such port don't exists at all. Can somebody help with advise, how could I create such port on kubelet or how can I avoid this port for data collection? 回答1: The kubelet requires a parameter to be set: --read-only-port=10255 (read more about kubelet) If you are using kubeadm to bootstrap the cluster, you can use a config file to pass in for the kubelet (look for

Expose service on custom port via `https` on GKE

﹥>﹥吖頭↗ 提交于 2021-02-11 06:56:38
问题 I am new to Kubernetes (GKE to be specific), this is my third week, so bare with me. I've been tasked to expose a statefulset via https like this: - https://example.com/whateva -> service:8080 (+Google Cloud CDN) - https://example.com:5001 -> service:9095 I have been trying for a week now. It was under the impression that this requirement was pretty straight forward? Can anyone point me in the right direction? Questions: I would like to use the managedcertificate from the google cloud but it