Comments (10)
Could possibly be an extension of problem #176
from coil.
Also manual deletion of an addressblock fails without errors in the coil-controller pods and coild pods
from coil.
Is there a way I can force delete(/free) some blocks by hand? As all (re)scheduled pods fail at this point.
Also, the total amount of pods running on this cluster is 109.
from coil.
Is there a way I can force delete(/free) some blocks by hand?
Try rebooting the coild running on the master node with kubectl delete pod
. Coild frees unused blocks when it starts.
Can you reproduce this issue with Kind or something? If you can, please tell me how to do that.
from coil.
Can confirm that this clears the unused blocks
from coil.
I think all that's needed is the default IP address pool as mentioned in the documentation, as well as this coredns yaml:
apiVersion: apps/v1
kind: Deployment
metadata:
annotations:
deployment.kubernetes.io/revision: "1"
labels:
k8s-app: kube-dns
name: coredns
namespace: kube-system
spec:
progressDeadlineSeconds: 600
replicas: 3
revisionHistoryLimit: 10
selector:
matchLabels:
k8s-app: kube-dns
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 1
type: RollingUpdate
template:
metadata:
annotations:
egress.coil.cybozu.com/webserver-internet: nat
creationTimestamp: null
labels:
k8s-app: kube-dns
spec:
containers:
- args:
- -conf
- /etc/coredns/Corefile
image: k8s.gcr.io/coredns/coredns:v1.8.6
imagePullPolicy: Always
livenessProbe:
failureThreshold: 5
httpGet:
path: /health
port: 8080
scheme: HTTP
initialDelaySeconds: 60
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 5
name: coredns
ports:
- containerPort: 53
name: dns
protocol: UDP
- containerPort: 53
name: dns-tcp
protocol: TCP
- containerPort: 9153
name: metrics
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /ready
port: 8181
scheme: HTTP
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources:
limits:
memory: 170Mi
requests:
cpu: 100m
memory: 70Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
add:
- NET_BIND_SERVICE
drop:
- all
readOnlyRootFilesystem: true
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /etc/coredns
name: config-volume
readOnly: true
dnsPolicy: None
dnsConfig:
nameservers:
- 1.1.1.1
- 8.8.8.8
nodeSelector:
kubernetes.io/os: linux
priorityClassName: system-cluster-critical
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
serviceAccount: coredns
serviceAccountName: coredns
terminationGracePeriodSeconds: 30
tolerations:
- key: CriticalAddonsOnly
operator: Exists
- effect: NoSchedule
key: node-role.kubernetes.io/master
- effect: NoSchedule
key: node-role.kubernetes.io/control-plane
volumes:
- configMap:
defaultMode: 420
items:
- key: Corefile
path: Corefile
name: coredns
name: config-volume
Would have to try to replicate this behavior in Kind, never used it before.
from coil.
Thanks, will look into that.
from coil.
We couldn't reproduce this issue.
Could you provide me with more details on how you encountered this?
from coil.
I will try to reproduce this issue using Kind myself this weekend. It all came down to CoreDNS trying to schedule on a master node, which failed due to invalid CNI version. This resulted in a crash-loop that created lots of address blocks.
from coil.
Feel free to reopen this issue if you still have a problem.
from coil.
Related Issues (20)
- [BUG] When using the following DualStack Pool I cannot create an interface with IPs for the pod. HOT 29
- Support Kubernetes 1.23 and update dependencies
- Coil-egress accidentally deletes a peer
- Enhance CNI delete delay implementation HOT 1
- Create PDB for Egress NAT pods
- Enhance the graceful termination for Egress NAT HOT 2
- Support Kubernetes 1.25 and update dependencies
- Fix the IP address allocation logic from AddressBlock HOT 3
- Support Kubernetes 1.26 and update dependencies
- useless replace usage left in go.mod HOT 1
- Coil egress has downtime due to the timing of updating coild and coil controller HOT 7
- Use encap-sport auto in FOU tunnel setting for coil-egress HOT 1
- Support Kubernetes 1.27 and update dependencies
- Remove the unnecessary code block for v1 migration
- CNI issue in kind-created cluster HOT 5
- Unable to delete AddressPool
- Rename the CRD's finalizer name
- Two AddressBlocks are created when coil-controller is temporarily down HOT 5
- Standalone Egress NAT HOT 7
- Fix not to allocate addresses from pools while its pools are deleting
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from coil.