ovh/kubernetes

Let's talk about our Kubernetes As a Service Product #OVH

monsio

@kaizokun

I guess that I ll be able to target the old pv from the new pvc

Guillaume

@dracorpg

you'll have to hack your spec.volumeName in the chart template

monsio

@kaizokun

ok I just tried to modify the pvc config but It doesn't work :)

Guillaume

@dracorpg

once the PVC is created and a new PV has been dynamically provisioned for it, I'm not suuure you can un-bind the PVC and change its definition to bind it to another pre-existing PV instead

yeah, you'll have to do the hack in the original yml that is applied to create the PVC (for a Helm chart I guess it's somewhere in templates ?)

monsio

@kaizokun

probably there is a pvc.yalm in the templates folder but it uses variables

I don't know where the vars are declared

it seems more tricky than I thought I'll find an easier way ^^

Guillaume

@dracorpg

you don't really need to care about the variables Helm injects, just add your line in the template and it should work - but yeah, not absolutely trivial

Ghost

@ghost~5c9cbe70d73408ce4fbc18e2

probably you can change variables in values.yaml, you can find this file in repository of your chart, I think that you have to create pvc on your own, attach there old pv and configure values.yaml to use your pvc insted of dynamically provisioned

arduinio

@arduinio

Is there any way to allow a comunication between container inside OVH kubernetes and virtual machine inside on private cloud OVH ?

Chaya56

@Chaya56

Hello,
Do we have an incident currently in managed kubernetes service ?

alt

Joël LE CORRE

@jlecorre_gitlab

Hello @Chaya56
I will check that with you in private if you want.

Joël LE CORRE

@jlecorre_gitlab

Problem solved for @Chaya56.
And for your information, we haven't any on going outage on our platform.

Chaya56

@Chaya56

fyi, problem is due to have multiple cluster, with node having the same name

Guilhem30

@Guilhem30

Hello, I'm trying to get the client real ip in the ingress controller and in my applications logs but it seems i'm only able to retrieve private ip addresses

even in the ingress controller (nginx) logs all the ip are in 10.110.X.Y

i modified my loadblancer to "externalTrafficPolicy: Local" but i'm still getting only private ip

Chaya56

@Chaya56

@Guilhem30 what kind of ingress controller are you using ? nginx-ingress-controller ?

Guilhem30

@Guilhem30

yes i'm using this https://github.com/kubernetes/ingress-nginx

deployed with helm

Chaya56

@Chaya56

you have to create a configmap with following values:

use-proxy-protocol: "true"
proxy-real-ip-cidr: "0.0.0.0/32"
use-forwarded-headers: "false"
log-format-upstream: '$proxy_protocol_addr etc...'
http-snippet: |
  geo $realip_remote_addr $is_lb {
    default       0;
    10.108.0.0/14 1;
  }
server-snippet: |
  if ($is_lb != 1) {
    return 403;
  }

Joël LE CORRE

@jlecorre_gitlab

Hi guys, you can follow this documentation to get the source IP behind your LoadBalancer:
https://docs.ovh.com/gb/en/kubernetes/getting-source-ip-behind-loadbalancer/

Chaya56

@Chaya56

you create config map in same namespace as your ingress controller, and you give it the name of your ingress controller, by example mine is named: app-proxy-nginx-ingress-controller

Guilhem30

@Guilhem30

okay, thank you i will try this right away

Chaya56

@Chaya56

@Guilhem30 and on my chart i've used this parameters:

helm install stable/nginx-ingress --namespace arx-dev --name app-proxy \
    --set rbac.create=true \
    --set controller.service.externalTrafficPolicy=Local \
    --set controller.service.annotations."service\.beta\.kubernetes\.io/ovh-loadbalancer-proxy-protocol"=v1

Guilhem30

@Guilhem30

okay, i'm missing the annotation

Guilhem30

@Guilhem30

thank for the help @Chaya56 and @jlecorre_gitlab , took me a moment but i'm able to get the source ip now

Chaya56

@Chaya56

@Guilhem30 you're welcome

thomasboni

@thomasboni

Hello guys, do you have any news about k8s load balancer cost ? It was planned to September (if I remember well)

arduinio

@arduinio

Good Morning to all

Is there any way to allow a comunication between container inside OVH kubernetes and virtual machine inside on private cloud OVH ?

Nicolas Steinmetz

@nsteinmetz

Interesting to avoid passwords in CI scripts & co :-)
https://blog.docker.com/2019/09/docker-hub-new-personal-access-tokens/

Bmagic

@bmagic

I think what you're looking for is the vrack. It doesn't seem to me that it's available yet. Otherwise you can always use the public network.

Otherwise I'm looking for a way to configure the ovh DNS automatically via a tool like this (to generate certificates with lets-encrypt): https://github.com/kubernetes-incubator/external-dns
For the moment ovh is not available in the providers of this tool, has anyone ever had this problem and a solution?

Thomas Coudert

@thcdrt

@bmagic I confirm that vrack is not available for now

arduinio

@arduinio

thaks @bmagic and @thcdrt

Jawher Moussa

@jawher_twitter

@SystemZ Hello ! Did you manage to get the fluent-bit grep filter to work to exclude canal pods logs ? I added this bloc to the end of my filter-kubernetes.conf entry in the configmap:

    [FILTER]
        Name    grep
        Match   *
        Exclude kubernetes_container_name calico-node|wormhole

and I still keep getting canal logs sent to graylog

Guilhem30

@Guilhem30

Is there a way to ban/blacklist an ip address from connecting to a loadbalancer k8s service ?

or the opposite, whitelist and allow only some ip to connect

Guilhem30

@Guilhem30

found a way to whitelist but not blacklist

Guillaume

@dracorpg

@bmagic do you need to be using the DNS challenge? The ACME protocol supports 2 other challenge types that don't require editing the DNS zone. But if you need to, traefik does support it for its automatic/dynamic certificate generation feature (and supports many registrars' API, including OVH)

Dennis van der Veeke

@MrDienns

since ReadWriteMany volumes aren't possible yet, how can I host an elasticsearch cluster that spands across several nodes?

Jawher Moussa

@jawher_twitter

Every elastic node would get its own pv.

Here's an example ES 2 node cluster using version 7.3.1 + 1Gi of storage per node: https://gist.github.com/jawher/db9973ccafc8fa7ba379e603d90e6681

Dennis van der Veeke

@MrDienns

ah okay, so it's possible that each replicate creates its own volume per node?

Jawher Moussa

@jawher_twitter

right, cf. the volumeClaimTemplates:

bcarriou

@bcarriou

Hi all, I have upgrade my k8s cluster to 1.14 and now, I have some problem.
For example, some pods failed to started with this messag

Events:
  Type     Reason                  Age                  From               Message
  ----     ------                  ----                 ----               -------
  Normal   Scheduled               3m12s                default-scheduler  Successfully assigned cattle-system/rancher-84955df7bc-czmn7 to worker-3
  Warning  FailedCreatePodSandBox  3m9s                 kubelet, worker-3  Failed create pod sandbox: rpc error: code = Unknown desc = failed to set up sandbox container "7e376e706e0dc527138ceaefcbf92410a716c5dd95661e0e72e8d3deb48e7a78" network for pod "rancher-84955df7bc-czmn7": NetworkPlugin cni failed to set up pod "rancher-84955df7bc-czmn7_cattle-system" network: stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/
  Warning  FailedCreatePodSandBox  3m                   kubelet, worker-3  Failed create pod sandbox: rpc error: code = Unknown desc = failed to set up sandbox container "8f215886b17a1160bb5835d5a6650e70c03cb661d2a623a542e1e97b5de7a09c" network for pod "rancher-84955df7bc-czmn7": NetworkPlugin cni failed to set up pod "rancher-84955df7bc-czmn7_cattle-system" network: stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/
  Warning  FailedCreatePodSandBox  2m50s                kubelet, worker-3  Failed create pod sandbox: rpc error: code = Unknown desc = failed to set up sandbox container "0ed4c2c8dd092b318f9639c823330fa4dd8fd14fc5bc5ffe7017bf9f21b9668d" network for pod "rancher-84955df7bc-czmn7": NetworkPlugin cni failed to set up pod "rancher-84955df7bc-czmn7_cattle-system" network: stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/
  Warning  FailedCreatePodSandBox  2m29s                kubelet, worker-3  Failed create pod sandbox: rpc error: code = Unknown desc = failed to set up sandbox container "b13a56e92a7ed8848008334211c47d36f471b06b5d4f51e5315426e4032843fa" network for pod "rancher-84955df7bc-czmn7": NetworkPlugin cni failed to set up pod "rancher-84955df7bc-czmn7_cattle-system" network: stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/
  Warning  FailedCreatePodSandBox  2m18s                kubelet, worker-3  Failed create pod sandbox: rpc error: code = Unknown desc = failed to set up sandbox container "4aa951d441f9171b37d2d5f7c6b96912a69393602e7997aaf6f289222f247039" network for pod "rancher-84955df7bc-czmn7": NetworkPlugin cni failed to set up pod "rancher-84955df7bc-czmn7_cattle-system" network: stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/
  Warning  FailedCreatePodSandBox  2m2s                 kubelet, worker-3  Failed create pod sandbox: rpc error: code = Unknown desc = failed to set up sandbox container "7ab8ac00e5b0ba941d6e37464fff93d0639432a993032ddcd300f5dda62b0d8e" network for pod "rancher-84955df7bc-czmn7": NetworkPlugin cni failed to set up pod "rancher-84955df7bc-czmn7_cattle-system" network: stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/
  Warning  FailedCreatePodSandBox  104s                 kubelet, worker-3  Failed create pod sandbox: rpc error: code = Unknown desc = failed to set up sandbox container "dcbb4d39e804fb011e341f40e6b3de467945440586c18acb4d4c961687a44009" network for pod "rancher-84955df7bc-czmn7": NetworkPlugin cni failed to set up pod "rancher-84955df7bc-czmn7_cattle-system" network: stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/
  Warning  FailedCreatePodSandBox  94s                  kubelet,
̀

bcarriou

@bcarriou

my cluster ID 1aa61333-b08c-4ea9-abc0-82f8b39b5cb2

Where communities thrive

People

Repo info

Activity