Events
Product Updates

5 Essential Tips for Maximizing Your Experience at Nutanix .NEXT for Bloggers

3 days ago

Community
Search

Replies posted by Anibal Ulisses

23 Replies

Newest first

Oldest first

Anibal UlissesTrailblazer

asked in Nutanix Kubernetes Engine

Use internal ca certificate chain on Karbon

Hi @AnishWalia20 Problem solved… On my notebook docker installation I already configured the certificate like you described: 1) On master and worker nodes create $URL directory at /etc/docker/certs.d/ where $URLis replaced with their registry hostname and port: sudo mkdir /etc/docker/certs.d/example.com:5000 Copy (scp or download) registry.crt to /etc/docker/certs.d/example.com:5000/registry.crt But I found two problem that after I understand I have success to configure the certificate chain: Need to run this command to reload the new settings: systemctl daemon-reload && systemctl restart docker Need to install the certificate on all Master and Worker nodes, and run step 1 on each one. Another point that I faced, unfortunately I have a proxy between my server and internet. When the karbon are deployed they didn’t get the “whitelist” configure at Prism Element to include on the NO_PROXY variable, they only get the PROXY_HTTP(S) information. I need to adjus

Anibal UlissesTrailblazer

asked in Nutanix Kubernetes Engine

Use internal ca certificate chain on Karbon

Hi @AnishWalia20 Great, I need to restart the cluster or they identify the new certificates and restart automatic?

Anibal UlissesTrailblazer

asked in Nutanix Kubernetes Engine

Manually adjust the kube-apiserver?

thank you @crisj code hacking ;-) I think that this topic can be closed

Anibal UlissesTrailblazer

asked in Nutanix Kubernetes Engine

Manually adjust the kube-apiserver?

Hello @crisj , yes I can share. Basically are needed to adjust 2 files. First file located at /opt/gitlab/embedded/service/gitlab-rails/lib/gitlab/kubernetes/helm.rb Original file: # frozen_string_literal: true module Gitlab module Kubernetes module Helm HELM_VERSION = '2.16.6' KUBECTL_VERSION = '1.13.12' NAMESPACE = 'gitlab-managed-apps' NAMESPACE_LABELS = { 'app.gitlab.com/managed_by' => :gitlab }.freeze SERVICE_ACCOUNT = 'tiller' CLUSTER_ROLE_BINDING = 'tiller-admin' CLUSTER_ROLE = 'cluster-admin' end end end Adjusted file: # frozen_string_literal: true module Gitlab module Kubernetes module Helm HELM_VERSION = '2.16.6' KUBECTL_VERSION = '1.13.12' HTTP_PROXY= 'http://<proxy-ip>:3128' HTTPS_PROXY= 'http://<proxy-ip>:3128' NO_PROXY= "172.19.0.0/16, 172.20.0.0/16, <my-network-ip-range>/16, localhost, 127.0.0.1" NAMESPACE = 'gitlab-managed-apps' NA

Anibal UlissesTrailblazer

asked in Nutanix Kubernetes Engine

Manually adjust the kube-apiserver?

I solved the issue with code adjusting at gitlab, by my self, that worked fine.

Anibal UlissesTrailblazer

asked in Nutanix Kubernetes Engine

Manually adjust the kube-apiserver?

@crisj the enforce to configure it’s really high, I trying to do my best but almost cases are to enable proxy for pods communication, I didn’t see any example or use case like my, that I need to pass a variable into the pod just to enable then to get internet access and finish the installation.. podpreset are really more simple.

Anibal UlissesTrailblazer

asked in Nutanix Kubernetes Engine

Manually adjust the kube-apiserver?

hi @JoseNutanix / @crisj nothing worked for me. basically helm tiller installation, from gitlab CI/CD integration, are not getting the proxy information, due this I can’t have a success installation. @JoseNutanix on the second link that you send to me, it’s work fine to integrate gitlab with the proxy, but doesn’t enable the helm tiller pod installation to get internet access into the proxy. @crisj workaround doesn’t work, offline approach are not informed by gitlab… mutatingwebhook are not accepting the proxy information.

Anibal UlissesTrailblazer

asked in Nutanix Kubernetes Engine

Manually adjust the kube-apiserver?

@vshuguet RFE case open, let’s see.

Anibal UlissesTrailblazer

asked in Nutanix Kubernetes Engine

Manually adjust the kube-apiserver?

@vshuguet I’m using the GitLab with support, and I also open a ticket with GitLab and installation without internet access are not supported. They can only point the PodPreset that can solve my problem. I really didn’t understand why on this case https://next.nutanix.com/karbon-kubernetes-service-30/istio-service-mesh-on-nutanix-karbon-32639 are suggested to adjust the kube-api, restart it and works. and If I try didn’t work for me. unfortunately I think that I need to move away from Karbon and If I start with another solution will be hard to move back.

Anibal UlissesTrailblazer

asked in Nutanix Kubernetes Engine

Manually adjust the kube-apiserver?

@vshuguet Basically I’m trying to deploy it from the GitLab, they try to deploy Helm Tiller and a pod need to access the internet and it’s comes do be my problem. If you take a look I already post some questions about it. Ok, I can open a RFE, but I need to fix the integration between GitLab and Karbon, over proxy, in 2 weeks, I’m not sure if a RFE will be solved in this time.. Without any way I really need to think about to move out from Karbon, and I really didn’t want to do it...

Anibal UlissesTrailblazer

asked in Nutanix Kubernetes Engine

Manually adjust the kube-apiserver?

@Tapati basically I only want to use PodPreset (https://kubernetes.io/docs/concepts/workloads/pods/podpreset/) It’s needed for the GitLab integration, due they need to deploy few pod that need to access internet and I need to conect to internet over a proxy. @vshuguet If need to to move to Calm I need to think about to user also another solutions, like OpenShift or Suse CaaS plataform, and I want to keep with Karbon until now...

Anibal UlissesTrailblazer

asked in Nutanix Kubernetes Engine

Enable PodPreset

no, because I didn’t know yet how to do it and also didn’t know if gitlab get from it

Anibal UlissesTrailblazer

asked in Nutanix Kubernetes Engine

Enable PodPreset

no. gitlab didn’t provide, just informed that I need to use podpreset or install manually.. nothing more.

Anibal UlissesTrailblazer

asked in Nutanix Kubernetes Engine

Enable PodPreset

I try to install helm but helm init didn’t work for me helm init --service-account=tiller --history-max 300 Error: unknown command "init" for "helm"

Anibal UlissesTrailblazer

asked in Nutanix Kubernetes Engine

Enable PodPreset

@AnishWalia20 no success until now.. still stopped on it.

Anibal UlissesTrailblazer

asked in Nutanix Kubernetes Engine

Enable PodPreset

Hey @AnishWalia20 Great, thank you about your reply, but I see a problem to use internal container repository due I’m tring to implement gitlab integration with karbon and Gitlab wants to install helm… not sure if I can install helm without from gitlab to get it working… The recommendation for the proxy comes from the gitlab support, i’ll try to ask if I can use container repository… If you have any another idea I’ll appreciate it.

Anibal UlissesTrailblazer

asked in Nutanix Kubernetes Engine

Karbon integration with GitLab

with few proxy adjustment it’s solved. helm pod are installed, but stoped on this topic: 2020-06-22T16:05:06.707958812Z + helm init --tiller-tls --tiller-tls-verify --tls-ca-cert /data/helm/helm/config/ca.pem --tiller-tls-cert /data/helm/helm/config/cert.pem --tiller-tls-key /data/helm/helm/config/key.pem --service-account tiller 2020-06-22T16:05:06.790705506Z Creating /root/.helm 2020-06-22T16:05:06.790762263Z Creating /root/.helm/repository 2020-06-22T16:05:06.790850492Z Creating /root/.helm/repository/cache 2020-06-22T16:05:06.790889064Z Creating /root/.helm/repository/local 2020-06-22T16:05:06.790924529Z Creating /root/.helm/plugins 2020-06-22T16:05:06.79097286Z Creating /root/.helm/starters 2020-06-22T16:05:06.790981726Z Creating /root/.helm/cache/archive 2020-06-22T16:05:06.791085951Z Creating /root/.helm/repository/repositories.yaml 2020-06-22T16:05:06.791096249Z Adding stable repo with URL: https://kubernetes-charts.storage.googleapis.com 2020-06-22T16:07:14.33197

Anibal UlissesTrailblazer

asked in Nutanix Kubernetes Engine

Karbon integration with GitLab

Hi.. I hope that I used wrong, with the token access gitlab can reach the karbon cluster.. but I facing a problem to install Helm from gitlab.. I have a proxy between the server and the internet.. running kubectl from a linux machine I can deploy the kubernets dashboard without any problem, they download the images and deploy.. but the helm I see few problem to deploy. At the PC and PE I changed the proxy settings to use one proxy over a linux machine to by pass my proxy authentication, normally works fine.. but on this case not: m48s Normal Pulling pod/install-helm Pulling image "registry.gitlab.com/gitlab-org/cluster-integration/helm-install-image/releases/2.16.3-kube-1.13.12" 3m48s Warning Failed pod/install-helm Failed to pull image "registry.gitlab.com/gitlab-org/cluster-integration/helm-install-image/releases/2.16.3-kube-1.13.12": rpc error: code = Unknown desc = Error response from daemon: Get https://registry.gitlab.com/v2/: Proxy Authenticati

Anibal UlissesTrailblazer

asked in Nutanix Kubernetes Engine

Karbon integration with GitLab

Hi, now I have time to put the hands over the keyboard at start to implement the gitlab CI/CD integration with Karbon. Following the gitlab kubernets integration document I stopped at token/gitlab-admin account. I included the kubeconfig at my linux running inside my win10, I can reach the karbon showing the cluster info without any problem and also connected directly to the karbon with .sh scripts, but for both I can’t add the user and get: kubectl apply -f gitlab-admin-service-account.yaml serviceaccount/gitlab-admin unchanged clusterrolebinding.rbac.authorization.k8s.io/gitlab-admin unchanged I supposed that this kind of access are like admin, but it’s not. Exist any tip that I need to do to be abble to create this user? Anibal

Anibal UlissesTrailblazer

asked in Nutanix Kubernetes Engine

Karbon integration with GitLab

Hi Jose, Great to know, I want to do it today or at last tomorrow, let me cross the fingers and see ;-)

alucianiChevalier

posted in Welcome

What are you working on?

Starting to use Karbon

Anibal UlissesTrailblazer

asked in Move Application Migration

Error to install VirtIO on Windows Server 2016 Standard

To help all, thiis steps solved the problem and Works fine for me (2 VM Win 2016 migrated to Nutanix/AHV) this commands enable the unsigned driver installation: Installing VirtIO drivers fails during migration with Exit Code 1603. This workaround will allow the migration to complete. Solution Fix can be found in the external Microsoft KB: [url=https://docs.microsoft.com/en-us/windows-hardware/drivers/install/the-testsigning-boot-configuration-option][u]https://docs.microsoft.com/en-us/windows-hardware/drivers/install/the-testsigning-boot-configuration-option[/u][/url] The steps are: Open the console to the VM Open a cmd prompt as administrator Enter the command: bcdedit /set testsigning on Restart the VM Verify that you can install the VirtIO 1.1.3 driver

Anibal UlissesTrailblazer

asked in Move Application Migration

Error to install VirtIO on Windows Server 2016 Standard

Hi, this solution doesn't solve the problem. Its related with the digital driver signature.. with this off it's possible to install the virtio and migrate the machine..

Badges

simonphhas earned the badge Courteous
Jan_Grimmhas earned the badge Neighborly
M_Fhas earned the badge Courteous
Gurdeep Sandhuhas earned the badge Courteous
RajeshBhas earned the badge Courteous

Show all badges

Powered by Gainsight

Terms & Conditions

Sign up

Already have an account? Login

Login with your account

Login to the community

Login with your account

Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.

Username or e-mail

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

OK

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

OK