I am attempting to forward UDP connections from one container in a Kubernetes cluster to another container, specifically redirecting traffic from port 1000 in the source container to port 2000 in the destination container. My initial approach was to use iptables for port forwarding, but I encountered a permission error indicating that the NET_ADMIN capability was required, which cannot be granted by the Kubernetes cluster provider. Given this limitation, is there an alternative method or solution to achieve port forwarding between containers within the Kubernetes cluster without the need for N ..read more

I deployed a Kubernetes deployment with 3 pod replicas using the following yaml: apiVersion: apps/v1 kind: Deployment metadata: name: nginx labels: app: nginx spec: replicas: 3 selector: matchLabels: app: nginx template: metadata: labels: app: nginx spec: containers: - name: nginx image: nginx ports: - containerPort: 80 The command I used was kubectl create -f nginx-deployment.yaml I then deployed a NodePort service using the following yaml: apiVersion: v1 kind: Service metadata: name: ngnix-service spec ..read more

Context New to DevOps and GitOps. Suppose that I have decoupled development from deployment. The application code (a machine learning web app) is in the application repository and the Kubernetes manifest (yaml files) to deploy it are in the manifest repository (both on GitLab). My understanding was ArgoCD is typically used to pull the latest yaml files from manifest and kubectl apply them. But recently, I got some vague instructions from a new boss saying something along the line of Configure ArgoCD to monitor the application repository for changes. Configure ArgoCD to the manifest repository ..read more

I have a spring boot microservice which is using JPA and Hibernate to interact with the DB. For only 2 tables sometimes, it is saving duplicate records with a different foreign key. Its code is same as other tables and there I'm not getting this problem. What I have noticed is somehow same multiple requests are getting executed in parallel during the execution of a request but duplicates are only getting saved to 2 tables and not for any other. And one of these tables is outside of any loop but still data is getting persisted multiple times. I'm not able to recreate this scenario in my local i ..read more

Problem statement: I want to visualize granular kubernetes pod boot events, ideally in Gantt-like format, in order to help users debug why their pod is slow to transition from the Pending phase to Running phase, but have not yet formulated a strategy with my current toolkit. Greetings! I've noticed significant variance pod boot time in one of my applications, by nearly 30+s between some pods. I am also a Prometheus user, and a user of the popular kube-state-metrics package. kube-state-metrics provides a very helpful metric called kube_pod_status_phase, which I can use in PromQL/Grafana to visu ..read more

I have created a keyclock deployment/pod using the below yaml in my EKS kubernetes cluster. The keycloak is connected to external postgres rds database. I created the admin user and password during initial setup using kubernetes secrets. Now if someone updates the admin password from keycloak console/UI , what will be the impact of - The pod get deleted and restarted . The keycloak deployment gets deleted and recreated using the same yaml having same database configs. Updating the password value in secret and rerun the same deployment yaml. Can login from new password? In the above cases wil ..read more

I have been trying to deal with this issue for days, but I still can't figure out what I am doing wrong. I am trying to set up a health check with GKE. I am using the GKE for my cluster as well. I've set up my backendconfig for a health check, but when I look in the console, the health check is never registered. Within my springboot application, the endpoint definitely exists. I am also using github actions to push my changes to code/manifest files to github -> my GKE cluster. apiVersion: apps/v1 kind: Deployment metadata: name: backend spec: replicas: 2 selector: matchLabels ..read more

I have a laravel aplication that needs to comunicate with mysql, and I also have phpmyadmin to look at the db, but I always get connection refused. Here are the codes: .env (only the part that I think is relevant): DB_CONNECTION=mysql DB_HOST=laravel-container DB_PORT=3306 DB_DATABASE=laravel_electron DB_USERNAME=root DB_PASSWORD=root configmap.yaml: apiVersion: v1 kind: ConfigMap metadata: name: db-config labels: app: mysql data: DB_NAME: laravel_electron DB_USERNAME: root DB_PASSWORD: root MYSQL_ROOT_PASSWORD: root php.yaml: apiVersion: v1 kind: Pod metadata: name: php ..read more

Argo CD Not Detecting Changes in Ingress Annotations Problem: I'm managing an Ingress resource with Argo CD. I recently made changes to the Ingress annotations within my Git repository, but Argo CD doesn't seem to be reflecting these updates. Question: Is this the expected behaviour of Argo CD when it comes to Ingress annotations? How to configure Argo CD to respect mentioned changes ..read more

I have 2 separate properties files which contain secrets. I would like to use secretGenerator and merge them into a single property (i.e. app_properties). Here's the code I'm using but it's not working: apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization secretGenerator: - name: my-secret files: - app_properties=app-default.properties - app_properties=app-dev.properties generatorOptions: disableNameSuffixHash: true This obviously fails with an error: error: configmap my-secret illegally repeats the key `app_properties` I seem to be missing something, but not sure what ..read more