Re: [kubernetes-users] [Scheduler] Two taint keys are GA in 1.9 and require manually operation

2017-12-14 Thread 'David Oppenheimer' via Kubernetes user discussion and Q
I guess we should make it clear that in general, you'll only have these taints on your nodes if you enabled the alpha taint-based eviction feature . On Thu, Dec 14, 2017 at 5:45 PM, Harry Zhang

Re: [kubernetes-users] what are differences between hostpath and local volume?

2017-12-14 Thread 'Michelle Au' via Kubernetes user discussion and Q
Hi, Local volumes is an alpha feature currently, so some extra steps are needed to get it working. I would be happy to help you out on slack. It is designed for use with stateful sets and provides data gravity by always scheduling your pod to the correct node. It also works much better than

[kubernetes-users] What is the signal sent to the process running in the container when k8s liveness probe fails? KILL or TERM

2017-12-14 Thread Ramakrishna Shastri
I have a use case to gracefully terminate the container gracefully where i have a script to kill the process the gracefully from within the container by using the command "kill PID".( Which will send the TERM signal ) But i have liveness probe configured as well. Currently liveness probe is

[kubernetes-users] [Scheduler] Two taint keys are GA in 1.9 and require manually operation

2017-12-14 Thread Harry Zhang
In Kubernetes 1.9, two taint keys are GA and may required manually operation during upgrade. - Taint key `unreachable` is now in GA. - Taint key `notReady` is changed to `not-ready`, and is also now in GA. For affected users: - These changes are

Re: [kubernetes-users] Virtual Kubelet Working Group Proposal

2017-12-14 Thread 'Dawn Chen' via Kubernetes user discussion and Q
Serverless is one of the directions for Kubernetes, and Virtual Kubelet could be one of designs / implementations underneath to help us to achieve that. Can we start with a proposal / request with sig-node first, instead of firing a new workgroup? On Thu, Dec 14, 2017 at 2:35 PM, 'Ria Bhatia'

[kubernetes-users] Re: Updating ca.crt in service account secrets

2017-12-14 Thread ask via Kubernetes user discussion and Q
On Monday, December 11, 2017 at 9:50:25 PM UTC-8, Jordan Liggitt wrote: > The `--root-ca-file` parameter passed to kube-controller-manager is what > determines the CA included in the service account token secret Thanks Jordan. I'd changed that before writing, but it didn't work yet (at the

Re: [kubernetes-users] Virtual Kubelet Working Group Proposal

2017-12-14 Thread Jessica Frazelle
Sounds good to me. Just you could also use virtual-kubelet to do literally anything. It’s just an interface. So if someone were to make a “host or bash” one and fill in all the go interfaces for create pod etc, to do os.Exec something on the host, then it would run on the host. “Serverless” is

Re: [kubernetes-users] Virtual Kubelet Working Group Proposal

2017-12-14 Thread Sen Han
How is the multitatency working group differ than the multi--cluster sig? On Thu, Dec 14, 2017 at 7:11 PM, Jessica Frazelle wrote: > I’m not sure it fits there it might be more suited under something with > apps. > > On Thu, Dec 14, 2017 at 19:02 'David Oppenheimer' via

Re: [kubernetes-users] Virtual Kubelet Working Group Proposal

2017-12-14 Thread 'David Oppenheimer' via Kubernetes user discussion and Q
IMO serverless containers (or pods as a service or whatever) falls into multitenancy because that is the underlying technology that is generally used to implement it. I think the discussions of multitenancy and serverless containers will become inextricably linked and we should do handle them in

Re: [kubernetes-users] K8S Go Client: How do you list all the pods associated to a Service?

2017-12-14 Thread Robert Buck
Sweet. Thank you!!! Jumping right on this. On Mon, Dec 11, 2017 at 9:41 PM John Belamaric wrote: > Based on > https://github.com/kubernetes/client-go/tree/master/examples/out-of-cluster-client-configuration > the code below works. > > eps, err := >

[kubernetes-users] Re: Issues configuring network policies

2017-12-14 Thread casey
> The first issue I ran into is with liveness/readiness probes on pods. My > initial policy doesn't seem to allow traffic from the kubelet, I'm guessing > because it runs on the underlying host rather than as a pod. Adding an > allowed CIDR range of 10.0.0.0/8 to the ingress rules fixed the

Re: [kubernetes-users] what are differences between hostpath and local volume?

2017-12-14 Thread Brandon Philips
Both use local disks available on a machine. But! Imagine you have a cluster of three machines and have a Deployment with a replica of 1. If your pod is scheduled on node A, writes to a host path, then the pod is destroyed. At this point the scheduler will need to create a new pod, and this pod

Re: [kubernetes-users] Vagrant/Ansible/VirtualBox Cluster on Mac

2017-12-14 Thread Brandon Philips
FWIW, the Tectonic Sandbox is also using VirtualBox + Vagrant. Just download and `vagrant up`. Brandon On Thu, Dec 14, 2017 at 8:40 AM Kris Dockery wrote: > Matt, > > I'm running three VirtualBox VMs: > >

Re: [kubernetes-users] Vagrant/Ansible/VirtualBox Cluster on Mac

2017-12-14 Thread Kris Dockery
Matt, I'm running three VirtualBox VMs: Master: 1 vCPU, 4 GB RAM, 20 GB HDD Workers: 1 vCPU, 2 GB RAM, 20 GB HDD This should be plenty of CPU, RAM, and HDD space for a test cluster. You can adjust accordingly if you plan on testing any significant workloads. All are running CentOS 7.4 with

Re: [kubernetes-users] Vagrant/Ansible/VirtualBox Cluster on Mac

2017-12-14 Thread Matt Madhavan
Hi Kris, Thanks for the reply. Do you mind sharing the instructions please? Thanks Matt On Dec 14, 2017 9:58 AM, "Kris Dockery" wrote: > Hi Matt, > > I installed my cluster on my Mac using kubeadm. My nodes are Virtualbox > VMs running CentOS 7.4. It was simple and

Re: [kubernetes-users] Vagrant/Ansible/VirtualBox Cluster on Mac

2017-12-14 Thread Kris Dockery
Hi Matt, I installed my cluster on my Mac using kubeadm. My nodes are Virtualbox VMs running CentOS 7.4. It was simple and straightforward. Kris On Thu, Dec 14, 2017 at 5:38 AM, Jay Vyas wrote: > Minikube is easy. > GKE is easy and free to start out. > For a real

[kubernetes-users] Re: Enabling RBAC in K8S v 1.8.1

2017-12-14 Thread sureshelavazhathi
thanks Jiaxi CHEN, I followed the same documentation before, I am able to set up RBAC for dashboard, dns service accounts, I want to know, is it possible to set up RBAC for user account(human), I found to many tutorial regarding that, but nothing works actually -- You received this message

Re: [kubernetes-users] Vagrant/Ansible/VirtualBox Cluster on Mac

2017-12-14 Thread Jay Vyas
Minikube is easy. GKE is easy and free to start out. For a real install you can try kubicorn, kubeadm, kops. > On Dec 14, 2017, at 3:46 AM, 'Rohit Agarwal' via Kubernetes user discussion > and Q wrote: > > Try https://github.com/kubernetes/minikube > >> On

Re: [kubernetes-users] Vagrant/Ansible/VirtualBox Cluster on Mac

2017-12-14 Thread 'Rohit Agarwal' via Kubernetes user discussion and Q
Try https://github.com/kubernetes/minikube On Wed, Dec 13, 2017 at 6:44 PM, wrote: > Hello all, > I have been struggling to get a Kubernetes Cluster on my Mac OsX the past > 3 weeks! No luck. Does any one have a clean solution? There are so many > GitHub solutions but