vfarcic / k8s-specs Goto Github PK

Recently signed up for the Advanced Kubernetes Techniques: Monitoring, Logging, Auto-Scaling course with educative.io and so far really liking the walk through of how to configure more detailed metrics and logging tools. Have ran into a couple of issues so far and just wanted to let you know they are out there.

1. When you are running a local kube cluster, regardless of if I used it with k3s, microk8s, or kubeadm, with a non-public cluster, or with a cluster that is using a self-signed cert (like when deploying with KubeSpray), the metrics-server fails to setup. The issue is in metrics-server itself as it expects that the certs be issued by a valid CA. Adding the --kubelet-insecure-tls flag fixes the issue and is explored here, but took a minute to find and would be confusing for anyone not running on a public cluster. Link to issue where the flag is explained and a walk through to setup certs that will work here.
2. For the next section on Horizontal Auto-Scaling, the first example of the go-demo app (go-demo-5-no-sidecar-mem.yml) fails to setup on a local cluster. The error thrown in logs is:

goroutine 1 [running]:
main.setupDb()
	/home/jenkins/workspace/go-demo-5_master-PUGTP37ZPAXQ7QFVCZOSPGHDUP64R2OHAFU6ZBGYY43JK5YVI5GA/main.go:68 +0x2b4
main.main()
	/home/jenkins/workspace/go-demo-5_master-PUGTP37ZPAXQ7QFVCZOSPGHDUP64R2OHAFU6ZBGYY43JK5YVI5GA/main.go:47 +0x49

Even with the above still really enjoying things and hope to get through the rest of the course soon.

Hello
I'm reading your DevOps 2.3 toolkit book and I came across this Deployment definition.
I was wondering, shouldn't the Deployment port be 27017 since the corresponding Service declares:

    spec:
      ports:
    - port: 27017

?

Thank you

Got following errors while trying some of the jenkins deployments:

$ kubectl logs jenkins-6d778c8bc9-s22v6 -p
touch: cannot touch '/var/jenkins_home/copy_reference_file.log': Permission denied
Can not write to /var/jenkins_home/copy_reference_file.log. Wrong volume permissions?

After some searching, found that the errors were gone after adding following under specs:

      securityContext:
        fsGroup: 1000 
        runAsUser: 0

Version:

$ kubectl version
Client Version: version.Info{Major:"1", Minor:"11", GitVersion:"v1.11.1", GitCommit:"b1b29978270dc22fecc592ac55d903350454310a", GitTreeState:"clean", BuildDate:"2018-07-17T18:53:20Z", GoVersion:"go1.10.3", Compiler:"gc", Platform:"linux/amd64"}
Server Version: version.Info{Major:"1", Minor:"11", GitVersion:"v1.11.1", GitCommit:"b1b29978270dc22fecc592ac55d903350454310a", GitTreeState:"clean", BuildDate:"2018-07-17T18:43:26Z", GoVersion:"go1.10.3", Compiler:"gc", Platform:"linux/amd64"}

Step to reproduce

git pull
minikube start --vm-driver=virtualbox
kubectl config current-context
cat svc/go-demo-2-rs.yml
kubectl create -f svc/go-demo-2-rs.yml

kubectl get -f svc/go-demo-2-rs.yml

replicas never get into READY state.

NAME DESIRED CURRENT READY AGE
go-demo-2 2 2 0 1m

All of the Ingress objects are using outdated syntax that doesn't work with the latest version of kube at the time of this writing.

In particular, the following changes need to be made to all Ingress object configs:

• the value of apiVersion should be changed to networking.k8s.io/v1
• pathType is now required next to path
• serviceName and servicePort are deprecated and should instead be replaced w/ something like this:

service:
    name: foo
    port:
        number: 8080

I am trying the lesson "Creating Ingress Resources Based On Paths" and am on page 29. The curl command (curl -i "http://$IP/demo/hello") just times out. I have confirmed all is up and $IP is set with an ip address. I also confirmed that the "ingress" addon is enabled.

I have done a minikube delete twice now and copy/pasted the code. All works right up to this curl command which takes forever and just returns this finally...

$ minikube addons list|grep ingress
ingress: enabled
$ IP=$(kubectl get ingress go-demo-2
-o jsonpath="{.status.loadBalancer.ingress[0].ip}")
$ echo $IP
10.0.2.15
$ curl -i "http://$IP/demo/hello"
curl: (7) Failed to connect to 10.0.2.15 port 80: Connection timed out

I have pulled the latest changes as well...

$ git pull
Already up to date.

It might be worth a note that when you enable addons, they remain enabled even after you do a minikube delete. It is not at first expected because we are working with minikube. It is easy to get lost and forget that kubectl is local and not in the vm destroyed by "minikube delete".

I only mention this because as someone new to minikube/kubernetes I followed the instructions on page 127 ("minikube addons enable ingress"). All worked as expected but then had to restart these lessons for an unrelated reason. When I got to the "curl" steps just previous to enabling the ingress addon I was expecting a "Connection refused" as seen on page 125/126 (because the book expects it to be disabled) and I was getting 200s. This was confusing at first and caused me to restart the lesson a couple of times until I figured out the issue (or rather what I was missing). A note on this around where you enable the addon on page 127 would have made me expect the 200s and I would have moved on.

I am facing error in step https://www.educative.io/courses/practical-guide-to-kubernetes/3jpxwq1OYEM. It is at section Accessing the Cluster: Adding the Load Balancer

I do
kubectl create
-f https://raw.githubusercontent.com/kubernetes/kops/master/addons/ingress-nginx/v1.6.0.yaml

But I am getting error. I have downloaded v1.6.0 and replaced "rbac.authorization.k8s.io/v1beta1" with "rbac.authorization.k8s.io/v1" and run local yaml file with create command. It is giving error:

Warning Unhealthy 2s (x5 over 20s) kubelet Readiness probe failed: Get "http://100.96.4.20:10254/healthz": dial tcp 100.96.4.20:8080: connect: connection refused

Is it because port 10254 not open?
Can you help me?

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

This repository currently has no open or pending branches.

Detected dependencies

• Check this box to trigger a request for Renovate to run again on this repository