[kubernetes-users] Re: Is it possible to pool resources across hosts/nodes like VMware does

2018-02-14 Thread Warren Strange
AFAIK you can not split a pod between more than one node. I know nothing about VMware, but I am guessing they can split VM processes across nodes, which is pretty much equivalent to what Kubernetes does with pods (VM process == a pod, roughly speaking). On Wednesday, February 14, 2018 at 8:

[kubernetes-users] Is it possible to pool resources across hosts/nodes like VMware does

2018-02-14 Thread chez
Folks, Looks like VMware with vsphere (and vcenter?) is able to allocate resources (vcpu for instance) across hosts for a single VM ? Is this possible with kubernetes for containers ? Can kubernetes pool vcpu between multiple hosts/nodes for one container ? https://pubs.vmware.com/vsphere-4-esx-v

Re: [kubernetes-users] How to update ssl certificate for ingress https load balancer

2018-02-14 Thread
If you update the secret with the new cert, the GCP ingress controller should pick that up and update the certificate on GCP. I use this to automate certificate renewal using cert-manager . On Thu, Feb 15, 2018 at 2:06 AM wrote: > Hi, > I have to update

Re: [kubernetes-users] NAT for outgoing traffic

2018-02-14 Thread
Currently the only way to get a static egress IP is to install your own proxy VM(s) - either L7 or L4 (NAT). On Tue, Feb 13, 2018 at 1:17 PM, wrote: > Hi, > > I've got an RDS Database running on AWS, and I want to access it from > Kubernetes, running on GKE. > > My cluster is set up for auto-sc

[kubernetes-users] Re: How do containerPorts work?

2018-02-14 Thread
The description in https://v1-8.docs.kubernetes.io/docs/api-reference/v1.8/#container-v1-core might help: " Exposing a port here gives the system additional information about the network connections a container uses, but is primarily informational. Not specifying a port here DOES NOT prevent th

[kubernetes-users] Re: Are Secrets encrypted at rest in Google Kubernetes Engine?

2018-02-14 Thread
Hi Mark, No, the application-layer secrets encryption in Kubernetes is not used in Google Kubernetes Engine. Note that all customer content in GKE, including secrets, are already encrypted at rest by default: https://cloud.google.com/security/encryption-at-rest/default-encryption/ If that's no

[kubernetes-users] How to update ssl certificate for ingress https load balancer

2018-02-14 Thread mderosa83
Hi, I have to update my ssl certificate for my (ingress) https load balancer. When I created the cluster I executed these commands: > kubectl create secret tls mysecret --key mykey.key --cert mycert.crt > kubectl apply -f ./ingress.yaml apiVersion: extensions/v1beta1 kind: Ingress metadata: nam

[kubernetes-users] Create Persistent Volumes

2018-02-14 Thread Juan Manuel Gómez Velasquez
Hi there! i’m looking for some guide to include from yml file un Kubernetes persistent volumes in my Deployments for log storage and static data management in AWS EBS and local Paths if possible. I will be grateful with your answers. Best Regards!!! -- Este mensaje es confidencial. Pu