azure-aks | 易学教程

HTTPS encryption is not active for my domain. My Order certificates is not completed

阅读更多关于 HTTPS encryption is not active for my domain. My Order certificates is not completed

问题 I am working with cert-manager in my kubernetes cluster, in order to get certificates signed by let'sencrypt CA to my service application inside my cluster. I am performing the following steps in the order presented. I've wanted provide the most details as a possible of my process in order to understand the behavior presented. Install the CustomResourceDefinition resources separately ⟩ kubectl apply -f https://raw.githubusercontent.com/jetstack/cert-manager/release-0.7/deploy/manifests/00

How to enable kube-system/metrics-server from status “False (MissingEndpoints)”?

阅读更多关于 How to enable kube-system/metrics-server from status “False (MissingEndpoints)”?

问题 My metrics-server was sudden not working and got below information: $ kubectl get apiservices |egrep metrics v1beta1.metrics.k8s.io kube-system/metrics-server False (MissingEndpoints) I tried to implement below but still not okay: $ git clone https://github.com/kubernetes-incubator/metrics-server.git $ cd metrics-server $ kubectl apply -f deploy/1.8+/ Please advise, thanks. 回答1: in this case the solution was to upgrade kubernetes version for nodes to reapply metrics server 来源： https:/

AKS Created Service Principal Password Expiry

阅读更多关于 AKS Created Service Principal Password Expiry

问题 I created my AKS cluster in the Azure portal using the 'Create Kubernetes cluster' functionality and allowed it to create a new Service Principal. I started to wonder about expiry of the credentials this principal uses. Hoping to avoid an issue with K8s talking to Azure on credential expiry, I started looking at the account which had been created. What I'm seeing if I run: az ad app show --id <app Id> ... is the account manifest apart from the password expiry. I don't need to see the password

How to get client IP address from inside a Azure Kubernetes with a LoadBalancer service

阅读更多关于 How to get client IP address from inside a Azure Kubernetes with a LoadBalancer service

问题 I'm getting the node IP address instead of the client IP. Is it possible to get the client IP with a service of type LoadBalancer ? Or will I need to use a ingress controller? apiVersion: v1 kind: Service metadata: name: app-svc labels: name: app-svc environment: dev spec: type: LoadBalancer loadBalancerIP: XXX.XXX.XXX.XXX ports: - name: http-port port: 80 targetPort: 80 protocol: TCP selector: name: app-deploy 回答1: You do not need any Ingress controller. However it is required to set the

Failed to pull image “xx.azurecr.io/xx:latest”: rpc error: code = Unknown desc = Error response from daemon: unauthorized: authentication required

阅读更多关于 Failed to pull image “xx.azurecr.io/xx:latest”: rpc error: code = Unknown desc = Error response from daemon: unauthorized: authentication required

问题 My ACR and AKS are on same Azure Directory with same subscription. After giving ACR Pull access to my Service Principal, nothing worked and still getting this error. Error :- Failed to pull image "xx.azurecr.io/xx:latest": rpc error: code = Unknown desc = Error response from daemon: Get https://xx.azurecr.io/v2/xx/manifests/latest: unauthorized: authentication required screenshot of dashboard 回答1: From the error message, it shows you do not authenticate to pull the image in your Azure

How to configure an ASP.NET Core multi microservice application and Azure AKS ingress routes so that it doesn't break resources in the wwwroot folder

阅读更多关于 How to configure an ASP.NET Core multi microservice application and Azure AKS ingress routes so that it doesn't break resources in the wwwroot folder

问题 I have two ASP.NET Core apps. One is a Headless CMS (API), and the other one is a Razor Pages blog front-end (with a REST client that communicates with the Headless CMS/API). I then have an Azure AKS cluster. In it I have an ingress resource with the following routes (as per the instructions from the following AKS docs: https://docs.microsoft.com/en-us/azure/aks/ingress-tls#create-an-ingress-route ). Each route is mapped to each of the apps/services mentioned above: spec: rules: - host:

How to configure an ASP.NET Core multi microservice application and Azure AKS ingress routes so that it doesn't break resources in the wwwroot folder

阅读更多关于 How to configure an ASP.NET Core multi microservice application and Azure AKS ingress routes so that it doesn't break resources in the wwwroot folder

I have two ASP.NET Core apps. One is a Headless CMS (API), and the other one is a Razor Pages blog front-end (with a REST client that communicates with the Headless CMS/API). I then have an Azure AKS cluster. In it I have an ingress resource with the following routes (as per the instructions from the following AKS docs: https://docs.microsoft.com/en-us/azure/aks/ingress-tls#create-an-ingress-route ). Each route is mapped to each of the apps/services mentioned above: spec: rules: - host: mydomain.westeurope.cloudapp.azure.com http: paths: - backend: serviceName: headless-cms-svc servicePort: 80

Configure Ingress controller to forward custom http headers

阅读更多关于 Configure Ingress controller to forward custom http headers

We are setting up an AKS cluster on Azure, following this guide We are running 5 .Net Core API's behind an ingress controller, everything works fine, requests are being routed nicely. However, in our SPA Frontend, we are sending a custom http header to our API's, this header never seems to make it to the API's, when we inspect the logging in AKS we see the desired http header is empty. In development, everything works fine, we also see the http header is filled in our test environment in AKS, so i'm guessing ingress is blocking these custom headers. Is there any configuration required to make