[note: resend due to mailing list outage]
On Thu, 2019-07-18 at 10:09 +0200, Antonio Ojea wrote:
> Glad to hear it!
tldr; Use weave, flannel and cilium don't work properly on kubic.
I spoke to soon ... My (test) cluster is still plagued by connectivity
issues. Notably, DNS connectivity but generally any connection from a
pod to an endpoint _running on another node_.
At this point I became convinced that the problem is with the network
plug-in, not with my setup. I was able to configure weave with zero
problems, using the default instructions.
# kubeadm init
# mkdir $HOME/.kube && cp /etc/kubernetes/admin.conf $HOME/.kube/config
# kubectl apply -f "
https://cloud.weave.works/k8s/net?k8s-version=$(kubectl version |
base64 | tr -d '\n')"
At this point the cluster works just fine, including accessing
services, DNS lookups, ingresses ( via ingress-nginx + metallb ).
Thanks all for the help,
Robert
--
To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org
To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T…https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
ebtables
kernel-firmware (20190618 -> 20190628)
vim (8.1.1600 -> 8.1.1694)
=== Details ===
==== ebtables ====
- fix path (/sbin -> /usr/sbin) in ebtables.systemd [bsc#1140898]
==== kernel-firmware ====
Version update (20190618 -> 20190628)
Subpackages: ucode-amd
- Update to version 20190628:
* linux-firmware: rsi: add firmware image for redpine 9116 chipset
* linux-firmware: Add firmware file for Intel Bluetooth AX201
* iwlwifi: add new firmwares for integrated 22000 series
* iwlwifi: update FW for 22000 to Core45-96
* iwlwifi: update FWs for 9000 series to Core45-96
* iwlwifi: update Core45 FWs for 22260, 9000 and 9260
* iwlwifi: udpate -36 firmware for 8000 series
==== vim ====
Version update (8.1.1600 -> 8.1.1694)
Subpackages: vim-data-common
- Updated to version 8.1.1694, fixes the following problems
* Cannot specify highlighting for popup window scrollbar.
* Missing changes to popup window test file.
* Popup window cannot overflow on the left or right.
* Crash when using unknown highlighting in text property.
* Popup window scroll test is flaky.
* Vim may delay processing messages on a json channel. (Pontus Leitzler)
* On a narrow screen ":hi" output is confusing.
* Popup window scrollbar does not respond to click.
* The evalfunc.c file is too big.
* The user cannot easily close a popup window.
* There is no way to add or load a buffer without side effects.
* Bufadd() reuses existing buffer without a name.
* Cannot show an existing buffer in a popup window.
* Popup window test fails with Athena and Motif.
* 'numberwidth' can only go up to 10.
* Crash when passing buffer number to popup_create(). (Yasuhiro Matsumoto)
* No test for popup window with mask and position fixed.
* Amiga-like systems quickly run out of stack.
* Tests are not run with GUI on Travis.
* No test for popup window with border and mask.
* Amiga: time.h included twice.
* Wrong width if displaying a lot of lines in a popup window.
* Display wrong with signs in narrow number column.
* When testing in the GUI may try to run gvim in a terminal.
* Script line numbers are not exactly right.
* No test for closing a popup window with a modified buffer.
* Header file contains mixed comment style.
* Popup window functions not in list of functions.
* Terminal function help is in the wrong file.
* Various small problems.
* Displaying signs is inefficient.
* Build with EXITFREE but without +arabic fails.
* Cannot generate prototypes with X11 but without GUI.
* Terminal test fails when term_getansicolors() is missing. Diff test
fails without +rightleft. (Dominique Pelle)
* Warnings for unused variables in small version. (John Marriott)
* Crash when popup has fitting scrollbar. (Trygve Aaberge)
* After running tests and clean the XfakeHOME directory remains.
* Running tests leaves some files behind.
* Changing an autoload name into a script file name is inefficient.
* The CursorHold autocommand takes down a balloon. (Paul Jolly)
* Garbage collection may run at a wrong moment. (Trygve Aaberge)
* May use uninitialized variable. (Patrick Palka)
* Sign placement is wrong when 'foldcolumn' is set.
* Sound test does not work on Travis.
* Cannot use a popup window for a balloon.
* build failure
* Build error with GTK and hangulinput feature, im_get_status() defined
twice. (Dominique Pelle)
* Illegal memory access when closing popup window.
* Warning for using uninitialized variable. (Tony Mechelynck)
* Suspend test is flaky on some systems.
* GUI: popup window doesn't close on mouse movement. (Paul Jolly)
* Ubsan warns for possibly passing NULL pointer.
* GUI: screen updates from 'balloonexpr' are not displayed.
* Popup window border drawn wrong with multi-byte char. (Marcin Szamotulski)
* Popup window width is wrong when using Tabs. (Paul Jolly)
* Terminal: screen updates from 'balloonexpr' are not displayed.
* Debug statements included in patch.
* Popup window "mousemoved" values not correct.
* Assert_fails() does not fail inside try/catch.
* Cannot build with +textprop but without +balloon_eval.
* Cannot build uninstal.exe with some version of MinGW.
* Compiler warning for using size_t.
* GUI resize may cause changing Rows at a bad time. (Dominique Pelle)
* Crash when popup window with mask is below the screen.
* Click in popup window scrollbar with border doesn't scroll.
* Flags for Ex commands may clash with other symbols.
* Popup window test is a bit flaky on some systems.
* Travis: test results section is closed even when some tests failed.
* Sign column not always properly aligned.
* Copying a blob may result in it being locked.
* "make cmdidxs" doesn't work.
* Cannot easily find the popup window at a certain position.
* Script to check a colorscheme can be improved.
* Listener list not correctly updated on listener_remove().
* "maxwidth" of popup window does not always work properly.
* Tests get stuck when running into an existing swapfile.
* When using popup_menu() does not scroll to show the selected line.
* Test using SwapExists autocommand file may fail.
* The command table is not well aligned.
* Insert stray "{" when listener gets buffer line. (Paul Jolly)
* Placing a larger number of signs is slow.
* Dictionary with string keys is longer than needed.
* Profiling functionality is spread out.
* Missing file in distributed file list.
* "*" of "*{" is recognized as multipy operator. (Yasuhiro Matsumoto)
* The evalfunc.c file is too big.
* Old makefiles are no longer useful.
* Profiling code is spread out.
* Default padding for popup window menu is too much.
* Diff test fails on some systems. (Elimar Riesebieter)
* Using *{} for literal dict is not backwards compatible. (Yasuhiro
Matsumoto)
* Syntax coloring and highlighting is in one big file.
* The RUN_VIM variable is longer than needed.
--
To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org
To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
kernel-firmware (20190618 -> 20190628)
vim (8.1.1600 -> 8.1.1694)
=== Details ===
==== kernel-firmware ====
Version update (20190618 -> 20190628)
Subpackages: ucode-amd
- Update to version 20190628:
* linux-firmware: rsi: add firmware image for redpine 9116 chipset
* linux-firmware: Add firmware file for Intel Bluetooth AX201
* iwlwifi: add new firmwares for integrated 22000 series
* iwlwifi: update FW for 22000 to Core45-96
* iwlwifi: update FWs for 9000 series to Core45-96
* iwlwifi: update Core45 FWs for 22260, 9000 and 9260
* iwlwifi: udpate -36 firmware for 8000 series
==== vim ====
Version update (8.1.1600 -> 8.1.1694)
Subpackages: vim-data-common
- Updated to version 8.1.1694, fixes the following problems
* Cannot specify highlighting for popup window scrollbar.
* Missing changes to popup window test file.
* Popup window cannot overflow on the left or right.
* Crash when using unknown highlighting in text property.
* Popup window scroll test is flaky.
* Vim may delay processing messages on a json channel. (Pontus Leitzler)
* On a narrow screen ":hi" output is confusing.
* Popup window scrollbar does not respond to click.
* The evalfunc.c file is too big.
* The user cannot easily close a popup window.
* There is no way to add or load a buffer without side effects.
* Bufadd() reuses existing buffer without a name.
* Cannot show an existing buffer in a popup window.
* Popup window test fails with Athena and Motif.
* 'numberwidth' can only go up to 10.
* Crash when passing buffer number to popup_create(). (Yasuhiro Matsumoto)
* No test for popup window with mask and position fixed.
* Amiga-like systems quickly run out of stack.
* Tests are not run with GUI on Travis.
* No test for popup window with border and mask.
* Amiga: time.h included twice.
* Wrong width if displaying a lot of lines in a popup window.
* Display wrong with signs in narrow number column.
* When testing in the GUI may try to run gvim in a terminal.
* Script line numbers are not exactly right.
* No test for closing a popup window with a modified buffer.
* Header file contains mixed comment style.
* Popup window functions not in list of functions.
* Terminal function help is in the wrong file.
* Various small problems.
* Displaying signs is inefficient.
* Build with EXITFREE but without +arabic fails.
* Cannot generate prototypes with X11 but without GUI.
* Terminal test fails when term_getansicolors() is missing. Diff test
fails without +rightleft. (Dominique Pelle)
* Warnings for unused variables in small version. (John Marriott)
* Crash when popup has fitting scrollbar. (Trygve Aaberge)
* After running tests and clean the XfakeHOME directory remains.
* Running tests leaves some files behind.
* Changing an autoload name into a script file name is inefficient.
* The CursorHold autocommand takes down a balloon. (Paul Jolly)
* Garbage collection may run at a wrong moment. (Trygve Aaberge)
* May use uninitialized variable. (Patrick Palka)
* Sign placement is wrong when 'foldcolumn' is set.
* Sound test does not work on Travis.
* Cannot use a popup window for a balloon.
* build failure
* Build error with GTK and hangulinput feature, im_get_status() defined
twice. (Dominique Pelle)
* Illegal memory access when closing popup window.
* Warning for using uninitialized variable. (Tony Mechelynck)
* Suspend test is flaky on some systems.
* GUI: popup window doesn't close on mouse movement. (Paul Jolly)
* Ubsan warns for possibly passing NULL pointer.
* GUI: screen updates from 'balloonexpr' are not displayed.
* Popup window border drawn wrong with multi-byte char. (Marcin Szamotulski)
* Popup window width is wrong when using Tabs. (Paul Jolly)
* Terminal: screen updates from 'balloonexpr' are not displayed.
* Debug statements included in patch.
* Popup window "mousemoved" values not correct.
* Assert_fails() does not fail inside try/catch.
* Cannot build with +textprop but without +balloon_eval.
* Cannot build uninstal.exe with some version of MinGW.
* Compiler warning for using size_t.
* GUI resize may cause changing Rows at a bad time. (Dominique Pelle)
* Crash when popup window with mask is below the screen.
* Click in popup window scrollbar with border doesn't scroll.
* Flags for Ex commands may clash with other symbols.
* Popup window test is a bit flaky on some systems.
* Travis: test results section is closed even when some tests failed.
* Sign column not always properly aligned.
* Copying a blob may result in it being locked.
* "make cmdidxs" doesn't work.
* Cannot easily find the popup window at a certain position.
* Script to check a colorscheme can be improved.
* Listener list not correctly updated on listener_remove().
* "maxwidth" of popup window does not always work properly.
* Tests get stuck when running into an existing swapfile.
* When using popup_menu() does not scroll to show the selected line.
* Test using SwapExists autocommand file may fail.
* The command table is not well aligned.
* Insert stray "{" when listener gets buffer line. (Paul Jolly)
* Placing a larger number of signs is slow.
* Dictionary with string keys is longer than needed.
* Profiling functionality is spread out.
* Missing file in distributed file list.
* "*" of "*{" is recognized as multipy operator. (Yasuhiro Matsumoto)
* The evalfunc.c file is too big.
* Old makefiles are no longer useful.
* Profiling code is spread out.
* Default padding for popup window menu is too much.
* Diff test fails on some systems. (Elimar Riesebieter)
* Using *{} for literal dict is not backwards compatible. (Yasuhiro
Matsumoto)
* Syntax coloring and highlighting is in one big file.
* The RUN_VIM variable is longer than needed.
--
To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org
To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org
Hi,
we made some layout changes to the kubernetes package, which got into
the devel:kubic project today and it's on the way to openSUSE Kubic now.
What did we change and why?
Currently, we use the upstream kubernetes container images for the
containerized control plane. But of course, we want to provide our own.
Additional, we use currently the fat hyperkube binary. This made sense
when we didn't had the containerized control plane, but today, this is
only a waste of disk space.
E.g., with the changes, we reduced the by kubernetes required disk space
by 25%. And if you want to install kubectl on openSUSE Tumbleweed to
maintain a remote kubernetes cluster, we are down from 200MB to about
40MB.
The second reason is, that this makes building of the required
kubernetes container images much easier.
If you want to test or use our own control plane already, here is the
config file you need for kubeadm with flannel:
apiVersion: kubeadm.k8s.io/v1beta1
kind: InitConfiguration
---
apiVersion: kubeadm.k8s.io/v1beta1
kind: ClusterConfiguration
dns:
type: CoreDNS
imageRepository: k8s.gcr.io
imageTag: 1.2.6
etcd:
local:
imageRepository: k8s.gcr.io
imageTag: 3.3.10
imageRepository: registry.opensuse.org/devel/kubic/containers/container/kubic
kubernetesVersion: v1.15.0
networking:
podSubnet: 10.244.0.0/16
And yes, coredns and etcd container images will follow the next days ;)
Regards,
Thorsten
--
Thorsten Kukuk, Distinguished Engineer, Senior Architect SLES & MicroOS
SUSE Linux GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany
GF: Felix Imendoerffer, Mary Higgins, Sri Rasiah, HRB 21284 (AG Nuernberg)
--
To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org
To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org
On Thu, Jul 18, Robert Munteanu wrote:
> That works, thank you. I tried to spot the relevant differences with a
> diff, but they were too large.
I think it's the new PodSecurityPolicy
> Should I file a bug for this?
I submitted a fix.
Thorsten
--
Thorsten Kukuk, Distinguished Engineer, Senior Architect SLES & MicroOS
SUSE Linux GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany
GF: Felix Imendoerffer, Mary Higgins, Sri Rasiah, HRB 21284 (AG Nuernberg)
--
To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org
To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
device-mapper
gpg2 (2.2.16 -> 2.2.17)
grub2
hwdata (0.324 -> 0.325)
iputils (s20190515 -> s20190709)
irqbalance (1.4.0 -> 1.6.0+git20190711.f7fdebb)
libpciaccess (0.14 -> 0.15)
patterns-containers
permissions (1550_20190521 -> 1550_20190711)
rsync
sqlite3 (3.28.0 -> 3.29.0)
zlib
=== Details ===
==== device-mapper ====
Subpackages: libdevmapper-event1_03 libdevmapper1_03
- Fix unknown feature in status message (bsc#1135984)
+ bug-1135984_cache-support-no_discard_passdown.patch
==== gpg2 ====
Version update (2.2.16 -> 2.2.17)
- Update to 2.2.17 [bsc#1141093]
* gpg: Do not try the import fallback if the options are already used.
* gpg: Fix regression in option "self-sigs-only".
* gpg: With --auto-key-retrieve prefer WKD over keyservers.
* gpg: Add "self-sigs-only" and "import-clean" to the keyserver options.
* gpg: Avoid printing false AKL error message.
* gpg: New command --locate-external-key.
* gpg: Make the get_pubkey_byname interface easier to understand.
* gpg: Fallback to import with self-sigs-only on too large keyblocks.
* gpg: New import and keyserver option "self-sigs-only"
* gpg: Make read_block in import.c more flexible.
* dirmngr: fix handling of HTTPS redirections during HKP.
* dirmngr: Avoid endless loop in case of HTTP error 503.
* dirmngr: Do not rewrite the redirection for the "openpgpkey" subdomain.
* dirmngr: Support the new WKD draft with the openpgpkey subdomain.
* wkd: Change client/server limit back to 64 KiB.
* tools: gpgconf: Killing order is children-first.
* Return better error code for some getinfo IPC commands.
* po: Update Russian translation.
==== grub2 ====
Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi
- Fix iteration of FCP LUNs (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).
* Refresh grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch
==== hwdata ====
Version update (0.324 -> 0.325)
- Update to version 0.325:
* Updated pci, usb and vendor ids.
==== iputils ====
Version update (s20190515 -> s20190709)
- Update to version s20190709
- Removed patches included in this upstream release:
ping-Fix-unwanted-bell-on-unreachable-address.patch
0001-build-sys-doc-Fix-the-dependency-on-xsltproc.patch
meson-remove-setcap-setuid.sh.patch
- Add libcap-progs as a build dependency (setcap is needed)
==== irqbalance ====
Version update (1.4.0 -> 1.6.0+git20190711.f7fdebb)
- Add git hash tag and date in version as source is derived from
master/HEAD branch. Thanks to namtrac.
This is done via _service file.
Also add an example how to get back to a stable release version
- Update to latest git master version:
git commit f7fdebbaa4dbc27fcdeb7
- Use noun phrase in summaries.
- Update to version 1.6.0 (b47eea84cbb93f533b0cba2f1aa):
* fix balancing when numa information isn't available
* Refine document about IRQBALANCE_BANNED_CPUS
* Fix string truncation issues detected by GCC 8
* fix socket path creation
* Update document for option --banmod and --deepestcache
* Fix ambiguous parsing of *node* entries in /sys.
* procinterrupts: check xen-dyn-event more flexible
* misc: Add an example for policy script
* policyscript: ignore non-executable files when specifying a directory
remove because already mainline:
D fix_buffer_overflow_compiler.patch
==== libpciaccess ====
Version update (0.14 -> 0.15)
- Update to version 0.15
* Updates for FreeBSD and Hurd support
* Fixed multifunction bridge enumeration
* Fixed a crash when no PCI bus exists
==== patterns-containers ====
- Add Rook manifest files to Kubic
==== permissions ====
Version update (1550_20190521 -> 1550_20190711)
Subpackages: chkstat permissions-config
- Update to version 20190711:
* iputils: Add capability permissions for clockdiff (bsc#1140994)
- Update to version 20190710:
* iputils/ping: Drop effective capability
* iputils/ping6: Remove definitions
==== rsync ====
- Remove SuSEfirewall2 service since SuSEfirewall2 has been
replaced by firewalld (which already provides a rsyncd service).
==== sqlite3 ====
Version update (3.28.0 -> 3.29.0)
- Update to version 3.29.0
* Added the SQLITE_DBCONFIG_DQS_DML and SQLITE_DBCONFIG_DQS_DDL
actions to sqlite3_db_config() for activating and deactivating
the double-quoted string literal misfeature. Both default to
"on" for legacy compatibility, but developers are encouraged
to turn them "off", perhaps using the -DSQLITE_DQS=0
compile-time option.
* -DSQLITE_DQS=0 is now a recommended compile-time option.
* Improvements to the query planner:
+ Improved optimization of AND and OR operators when one or
the other operand is a constant.
+ Enhancements to the LIKE optimization for cases when the
left-hand side column has numeric affinity.
* Added the "sqlite_dbdata" virtual table for extracting raw
low-level content from an SQLite database, even a database
that is corrupt.
* Enhancements to the CLI:
+ Add the ".recover" command which tries to recover as much
content as possible from a corrupt database file.
+ Add the ".filectrl" command useful for testing.
+ Add the long-standing ".testctrl" command to the ".help" menu.
+ Added the ".dbconfig" command
==== zlib ====
- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
conform to usage
bsc#1141059
--
To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org
To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org
Hi,
I have set up a minimal Kubic cluster using KVM VMs. I have been using
the
openSUSE-MicroOS.x86_64-16.0.0-Kubic-kubeadm-kvm-and-xen-Build3.60.qcow2
base image.
$ kubectl get nodes
NAME STATUS ROLES AGE VERSION
master Ready master 16m v1.15.0
worker-1 Ready <none> 13m v1.15.0
I've used the 'standard' steps to set up the cluster
- kubeadm init --pod-network-cidr=10.244.0.0/16 on master
- set up ~/.kube/config on master
- kubectl apply -f /usr/share/k8s-yaml/flannel/kube-flannel.yaml on
master
- kubeadm join on worker-1
I noticed that DNS resolution does not work for cluster-local services,
which is quite problematic.
The basic test I am running is
$ kubectl apply -f https://k8s.io/examples/admin/dns/busybox.yaml
$ time kubectl exec -ti busybox -- nslookup kubernetes.default
This always fails within a minute
Server: 10.96.0.10
Address 1: 10.96.0.10
nslookup: can't resolve 'kubernetes.default'
command terminated with exit code 1
real 1m0.203s
user 0m0.100s
sys 0m0.025s
I have started looking at the usual suspects:
1. dns pods are up
$ kubectl -n kube-system get pods -ls
NAME READY STATUS RESTARTS AGE
coredns-5c98db65d4-r8ck8 1/1 Running 0 17m
coredns-5c98db65d4-wpjc4 1/1 Running 0 17m
2. The DNS service is available
$ kubectl -n kube-system describe svc
Name: kube-dns
Namespace: kube-system
Labels: k8s-app=kube-dns
kubernetes.io/cluster-service=true
kubernetes.io/name=KubeDNS
Annotations: prometheus.io/port: 9153
prometheus.io/scrape: true
Selector: k8s-app=kube-dns
Type: ClusterIP
IP: 10.96.0.10
Port: dns 53/UDP
TargetPort: 53/UDP
Endpoints: 10.244.0.2:53,10.244.0.3:53
Port: dns-tcp 53/TCP
TargetPort: 53/TCP
Endpoints: 10.244.0.2:53,10.244.0.3:53
Port: metrics 9153/TCP
TargetPort: 9153/TCP
Endpoints: 10.244.0.2:9153,10.244.0.3:9153
Session Affinity: None
Events: <none>
3. I noticed that trying to run queries against the endpoints
themselves fails as well, e.g.
$ kubectl -n default exec -ti busybox -- nslookup kubernetes.default 10.244.0.2
4. As the coredns pods are always scheduled on master, I tried to ping
the address from the worker-1 node, but that does not work
master:~ # ip r
default via 10.24.0.1 dev eth0 proto dhcp
10.24.0.0/16 dev eth0 proto kernel scope link src 10.24.0.70
10.244.0.0/24 dev cni0 proto kernel scope link src 10.244.0.1
10.244.1.0/24 via 10.244.1.0 dev flannel.1 onlink
worker-1:~ # ip r
default via 10.24.0.1 dev eth0 proto dhcp
10.24.0.0/16 dev eth0 proto kernel scope link src 10.24.0.71
10.244.0.0/24 via 10.244.0.0 dev flannel.1 onlink
10.244.1.0/24 dev cni0 proto kernel scope link src 10.244.1.1
5. I have tried to use cilium, but then the pod is stuck in
'ContainerCreating'.
I'm a bit at a loss here to be honest, any ideas about debugging this
are more than welcome. Things usually work, I can access the internet
from containers, the VMs can ping each other - it's just the 'virtual'
IP access that does not work.
Thanks,
Robert
--
To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org
To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org
Hi,
as some of you may have already seen, we added some especially for RBAC
usefull utilities to our distribution. You can find a
"Utilities to manage kubernetes" pattern on Kubic and Tumbleweed
containing new tools like rakkess, kubectl-who-can and rbac-lookup.
We have also packaged rbac-manager, the container image is currently
only available in the devel/kubic/containers namespace of our registry.
rbac-manager-k8s-yaml contains the manifest to deploy it.
If you know more usefull tools, please speak up or add them to the
pattern.
Thorsten
--
Thorsten Kukuk, Distinguished Engineer, Senior Architect SLES & MicroOS
SUSE Linux GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany
GF: Felix Imendoerffer, Mary Higgins, Sri Rasiah, HRB 21284 (AG Nuernberg)
--
To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org
To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org
