platform · inferred from evidence
GKE
Google Kubernetes Engine, a managed Kubernetes service.
- Lacework agent daemonset fails on GKE Autopilot with GKE Warden constraint violations
Deploying the Lacework agent to GKE Autopilot fails admission with GKE Warden constraints violations, even with cloudservice.gke.autopilot set. The daemonset spec pulls the image from a registry path the Warden does not accept, and the pod
- Cloud SQL Proxy v2: "failed to connect to instance: Dial error: failed to dial ... i/o timeout"
After upgrading the Cloud SQL Auth Proxy from v1 to v2 (2.2.0) as a GKE sidecar, the proxy logged many "failed to connect to instance: Dial error: failed to dial (connection name = ...): dial tcp ...:3307: i/o timeout" errors across multipl
- CockroachDB on Kubernetes with Istio: "connection refused" — how to run insecure statefulset with istio mTLS
Running CockroachDB (insecure mode) as a StatefulSet on GKE with Istio injected, cockroach sql --insecure failed with connection refused even though the pods were running. The root cause discussed in the thread: the install manifests name t
- How to run kubectl after docker push in Google Cloud Build
How to run kubectl after pushing an image in a Cloud Build pipeline? The goal: build an image, test/push it to GCR, then deploy it into a GKE cluster, all in one cloudbuild.yaml. Without this, the pipeline could not do end-to-end CI/CD.