All Questions
Tagged with gcloud google-kubernetes-engine
239 questions
0
votes
0
answers
105
views
Unable to disable the readonly kubelet port in GKE
I've tried to follow this guide in accordance with the email that we have received about the unsecure readonly port exposed by kubelet.
The script I used is pasted below:
#!/bin/bash
echo Please ...
0
votes
2
answers
297
views
Running gcloud from a pod in Kubernetes
I have a cronjob that uses a service account to assume an IAM role to auth to GCP account. However, I can't fully use the K8s service account for it for gcloud command.
apiVersion: v1
kind: ...
0
votes
1
answer
248
views
Grant service account access to a single cluster within a project
Use case
We have a test-only cluster that we want to use as part of a Github Actions pipeline. We want the pipeline to be able to do pretty much whatever it likes within the cluster - create/delete ...
0
votes
0
answers
196
views
How do I configure Workload Identity for Composer 3 (GCP)
I am attempting to follow the documentation found here to enable the KubernetesPodOperator within DAGs running on a Composer 3 Environment. I have done this for Composer 2 and we are looking to ...
2
votes
0
answers
222
views
GKE Workload Identity: Failed to generate federated token using STS: googleapi: got HTTP response code 400
I am observing weird behaviour in applications deployed in our GKE Cluster enabled with workload identity.
Environment: GKE 1.29 Cluster version
Codebase: Java v17
Issue:
Once in a while applications ...
0
votes
2
answers
891
views
Configure Lens with GKE cluster - gke_gcloud_auth_plugin issue
I was able to access my kubernetes cluster using kubectl after authenticating to Google Cloud gcloud auth login --cred-file=sa.json
I installed gke-gcloud-auth-plugin too (gcloud components install ...
0
votes
1
answer
70
views
gcloud `BackendConfig` overwrites cookie key set in load balancer, using `--cache-key-include-named-cookie`
Current BackendConfig
apiVersion: cloud.google.com/v1
kind: BackendConfig
metadata:
name: foobar
spec:
timeoutSec: "{{ timeout_sec }}"
cdn:
enabled: true
cachePolicy:
...
0
votes
1
answer
473
views
How do I get the requestor's IP address inside a container in a google cloud k8 cluster?
When I try printing out the x-forwarded-for value I get the ip address of a Node inside the cluster instead of the requesting client.
I believe my current setup looks something like this:
External LB -...
1
vote
0
answers
83
views
gcloud beta container backup-restore backup-plans update/create supports the --paused option but not --resume/unpaused
I'm using gcloud beta container backup-restore to script my backup setup.
When I disable an environment I would like to simply pause the backup process before deleting all backups.
But it seems once ...
4
votes
1
answer
493
views
Can't connect Google Service Account with Kubernetes Service Account
I've been following this guide to set up a Kubernetes Cluster on GCP with Workload Identity, and I'm completely stuck with service account permissions.
gcloud container clusters create test-cluster \
...
0
votes
0
answers
188
views
gcloud cli gke response does not contain full addons
I have a GKE cluster. When I try to query the cluster using the gcloud CLI I get:
{
"addonsConfig": {
"gcePersistentDiskCsiDriverConfig": {
"enabled": true
...
0
votes
2
answers
2k
views
GKE Cluster hangs while trying to delete it
I do have an GKE Cluster where the node-pool is already deleted, but while deleting the cluster it hangs endless (since 1 month).
Deleting the cluster using gcloud container clusters delete clusername ...
1
vote
2
answers
6k
views
Why cant gke-gcloud-auth-plugin retrieve my credentials?
I am trying to connect to my GKE cluster via Kubectl on Windows 11 but am having problems with the gke-gcloud-auth-plugin.
I have followed the instructions in this article https://cloud.google.com/...
-1
votes
1
answer
202
views
Facing permission error while deploying gke cluster
I'm getting permission error while deploying into a GKe cluster
Error: when creating manifesting :cluster roles. rbac. Authorization. K8s. iris forbidden:user [email protected] cannot create resource ...
0
votes
2
answers
2k
views
How can I list workloads in my GKE cluster?
I have a GKE cluster in my project with several workloads.
How can I list all or search for a specific workload without using the GCP console GUI?
My goal is simple: a programmatical way (api/sdk/...