Server Fault
Server Fault

Questions tagged [cilium]

21 questions
4
votes
0 answers

Kubernetes setup with different networks for intra and inter-cluster communication

I have this use case: Setup multiple k8s clusters that can communicate with each other. I also have one network per cluster for intra-cluster communication and another network for inter-cluster communication and for external access in general. Like…
Laurentiu Soica
  • 175
  • 1
  • 6
2
votes
0 answers

Readiness probe failed: HTTP probe failed with statuscode: 503 after installing Cilium on Kubernetes cluster

I'm new to Kubernetes world .Followed InstallKubernetesI have installed Kubernetes cluster with 1 master node and 2 worker nodes.I used kubeadm to install on master node on my local machine.After installing CILIUMQuickInstallation,my coredns pod is…
user001
  • 21
2
votes
1 answer

Couldn't load target `NOTRACK':No such file or directory

I am trying to add a IP table rule. iptables -t raw -A PREROUTING -j NOTRACK But when I am executing this I am getting below error: iptables v1.8.4 (legacy): Couldn't load target `NOTRACK':No such file or directory
Bhupendra Nath
  • 121
2
votes
1 answer

How do I completely remove cilium from Ubuntu 18?

I installed cilium with: kubectl create -f https://raw.githubusercontent.com/cilium/cilium/1.7.2/install/kubernetes/quick-install.yaml A couple minutes later the network connectivity on the host went down (could connect out from the host but not in…
Dean Schulze
  • 199
1
vote
1 answer

How to setup multi-host cni communication between containers on hashicorp nomad clusters

So i recently create a nomad cluster with consul as kv store and dns with three nodes to deploy jobs/containers. But i'm unable to use anything that allow communication between containers on diffrent hosts of same clusters and only access ip of…
kunal ghosh
  • 3
1
vote
1 answer

Why does kubeproxy, apiserver and etcd not need CNI plugins to start?

I have initiated a k8s cluster on a server with the below configuration: OS: Ubuntu 2022 LTS Container Runtime: containerd CNI: Absoloutley nothing installed! Cluster initiator: Kubeadm init-settings: apiVersion:…
mmafshari
  • 13
1
vote
1 answer

trace kubernetes users activities in pods

I want to track users activities in a k8s cluster. for example I want to get k8s username of a user that executes a command in a pod. there is a tool named Tetragon. it can uses k8s api. following log is a sample output from Tetragon on a k8s…
Michael Cab
  • 13
0
votes
0 answers

Docker container in bridge network can not access nodeports served by local K8s node

Full disclosure, I tried asking this question here and it was closed as off topic, but I am hoping it will be on topic here. I have gone really deep on this issue, and still have nothing to show for it, so I am hoping there are some…
pooley1994
  • 101
  • 2
0
votes
0 answers

Cilium ingress with dedicated loadbalancer: external access

The issue: I'd like to access an application hosted behind a Cilium ingress in my bare metal cluster. However, I can only access it from the node and not an external system. I am not sure if everything is set up correctly or which IP:PORT…
Melvin
  • 101
0
votes
0 answers

Cilium install breaks node-to-node connectvity on secondary interface

I have a small bare-metal Kubernetes cluster (bootstrapped via kubeadm) which I'm trying to install Cilium on, all of the nodes have two physical network interfaces - a main interface which is a bridge (br0) and a secondary management interface…
playworker
  • 1
0
votes
0 answers

Failed to expose service when use Cilium and Kubernetes Gateway API

I am using Cilium and Kubernetes Gateway API in Amazon EKS. I am trying to expose one of my service (Goldilocks in this case at hm-goldilocks-dashboard.production-hm-goldilocks.svc:80) at https://hm-goldilocks.internal.mydomain.com Here is my…
Hongbo Miao
  • 401
0
votes
1 answer

Cannt create a tenant of minio with network error

I deployed minio via kubernetes but some error for the minio when i create a tenant. I checked the logs, it seems like this INFO: Unable to use the drive http://storage-pool-0-0.storage-hl.minio.svc.cluster.local:9000/export: drive not found, will…
Jerry wang
  • 1
0
votes
0 answers

Packet flow of kubernetes cilium CNI

I have a kubernete cluster with cilium replacing kube-proxy. The nat iptables looks like the following: Chain PREROUTING (policy ACCEPT) target prot opt source destination CILIUM_PRE_nat all -- anywhere …
William
  • 211
0
votes
0 answers

Why can't I schedule more pods even with Ipv4Prefix enabled in my EKS cluster

I am using cilium as my CNI. I have successfully run the cilium connectivity test and all tests pass. My nodegroup schedules a t3.small nodes (3 of them), which allows me to run 11 pods without Ipv4Prefix enabled. Now I have enabled Ipv4Prefix by…
eagercoder
  • 123
0
votes
1 answer

How can i get cilium to pass the failing connectivity test

I am trying to deploy cilium to my eks cluster, for context, this cluster is a private cluster running behind a private subnet, and routed to the internet through a NAT gateway and then an internet gateway. I have been able to follow the cilium…
eagercoder
  • 123
1
2