Shell (ssh) into Azure AKS (Kubernetes) cluster worker node

I have a Kubernetes cluster in Azure using AKS and I'd like to 'login' to one of the nodes. The nodes do not have a public IP.

Is there a way to accomplish this?

edited Nov 21 '18 at 21:40

Rico

27.9k94966

asked Nov 21 '18 at 21:11

Greg Balajewicz

67321023

You should be able to login to aks with az aks get-credentials --resource-group myAKSResourceGroup --name myAKSCluster

– Hackerman
Nov 21 '18 at 21:23

@Hackerman that logs-in "kubectl" so to speak. I want to shell-in to one of the worker nodes... I want to get into the linux shell of the actual VM

– Greg Balajewicz
Nov 21 '18 at 21:26

Take a look at my answer.

– Hackerman
Nov 21 '18 at 23:59

I deleted my answer, and also thanks for the downvote. The choosen answer has really poor quality, but, it's ok.

– Hackerman
Nov 22 '18 at 14:16

sorry @Hackerman, my down vote was meant to be feedback that you misunderstood my question; if there is a way to take it back, I will do that; maybe restore the answer and I will take my down vote away

– Greg Balajewicz
Nov 26 '18 at 16:44

add a comment |

I have a Kubernetes cluster in Azure using AKS and I'd like to 'login' to one of the nodes. The nodes do not have a public IP.

Is there a way to accomplish this?

edited Nov 21 '18 at 21:40

Rico

27.9k94966

asked Nov 21 '18 at 21:11

Greg Balajewicz

67321023

You should be able to login to aks with az aks get-credentials --resource-group myAKSResourceGroup --name myAKSCluster

– Hackerman
Nov 21 '18 at 21:23

@Hackerman that logs-in "kubectl" so to speak. I want to shell-in to one of the worker nodes... I want to get into the linux shell of the actual VM

– Greg Balajewicz
Nov 21 '18 at 21:26

Take a look at my answer.

– Hackerman
Nov 21 '18 at 23:59

I deleted my answer, and also thanks for the downvote. The choosen answer has really poor quality, but, it's ok.

– Hackerman
Nov 22 '18 at 14:16

sorry @Hackerman, my down vote was meant to be feedback that you misunderstood my question; if there is a way to take it back, I will do that; maybe restore the answer and I will take my down vote away

– Greg Balajewicz
Nov 26 '18 at 16:44

add a comment |

I have a Kubernetes cluster in Azure using AKS and I'd like to 'login' to one of the nodes. The nodes do not have a public IP.

Is there a way to accomplish this?

edited Nov 21 '18 at 21:40

Rico

27.9k94966

asked Nov 21 '18 at 21:11

Greg Balajewicz

67321023

I have a Kubernetes cluster in Azure using AKS and I'd like to 'login' to one of the nodes. The nodes do not have a public IP.

Is there a way to accomplish this?

kubernetes azure-kubernetes azure-aks

edited Nov 21 '18 at 21:40

Rico

27.9k94966

asked Nov 21 '18 at 21:11

Greg Balajewicz

67321023

edited Nov 21 '18 at 21:40

Rico

27.9k94966

asked Nov 21 '18 at 21:11

Greg Balajewicz

67321023

edited Nov 21 '18 at 21:40

Rico

27.9k94966

edited Nov 21 '18 at 21:40

Rico

27.9k94966

edited Nov 21 '18 at 21:40

Rico

27.9k94966

asked Nov 21 '18 at 21:11

Greg Balajewicz

67321023

asked Nov 21 '18 at 21:11

Greg Balajewicz

67321023

asked Nov 21 '18 at 21:11

Greg Balajewicz

67321023

You should be able to login to aks with az aks get-credentials --resource-group myAKSResourceGroup --name myAKSCluster

– Hackerman
Nov 21 '18 at 21:23

@Hackerman that logs-in "kubectl" so to speak. I want to shell-in to one of the worker nodes... I want to get into the linux shell of the actual VM

– Greg Balajewicz
Nov 21 '18 at 21:26

Take a look at my answer.

– Hackerman
Nov 21 '18 at 23:59

I deleted my answer, and also thanks for the downvote. The choosen answer has really poor quality, but, it's ok.

– Hackerman
Nov 22 '18 at 14:16

sorry @Hackerman, my down vote was meant to be feedback that you misunderstood my question; if there is a way to take it back, I will do that; maybe restore the answer and I will take my down vote away

– Greg Balajewicz
Nov 26 '18 at 16:44

add a comment |

You should be able to login to aks with az aks get-credentials --resource-group myAKSResourceGroup --name myAKSCluster

– Hackerman
Nov 21 '18 at 21:23

@Hackerman that logs-in "kubectl" so to speak. I want to shell-in to one of the worker nodes... I want to get into the linux shell of the actual VM

– Greg Balajewicz
Nov 21 '18 at 21:26

Take a look at my answer.

– Hackerman
Nov 21 '18 at 23:59

I deleted my answer, and also thanks for the downvote. The choosen answer has really poor quality, but, it's ok.

– Hackerman
Nov 22 '18 at 14:16

sorry @Hackerman, my down vote was meant to be feedback that you misunderstood my question; if there is a way to take it back, I will do that; maybe restore the answer and I will take my down vote away

– Greg Balajewicz
Nov 26 '18 at 16:44

You should be able to login to aks with az aks get-credentials --resource-group myAKSResourceGroup --name myAKSCluster

– Hackerman
Nov 21 '18 at 21:23

@Hackerman that logs-in "kubectl" so to speak. I want to shell-in to one of the worker nodes... I want to get into the linux shell of the actual VM

– Greg Balajewicz
Nov 21 '18 at 21:26

Take a look at my answer.

– Hackerman
Nov 21 '18 at 23:59

I deleted my answer, and also thanks for the downvote. The choosen answer has really poor quality, but, it's ok.

– Hackerman
Nov 22 '18 at 14:16

sorry @Hackerman, my down vote was meant to be feedback that you misunderstood my question; if there is a way to take it back, I will do that; maybe restore the answer and I will take my down vote away

– Greg Balajewicz
Nov 26 '18 at 16:44

add a comment |

1 Answer
1

active

oldest

votes

This Gist and this page have pretty good explanations of how to do it. Sshing into the nodes and not shelling into the pods/containers.

answered Nov 21 '18 at 22:04

Rico

27.9k94966

Although sometime SSH'ing into a node is necessary, you should be able to do anything you need using a DaemonSet, and this approach is also more scalable (as you scale your cluster, the DaemonSet is applied to every new node). You mount hostPaths from the node (or the whole fs) like in this comment.

– alev
Nov 22 '18 at 8:11

thanks @Rick, I did not yet try this (i found another way of investigating my issue) but read the article and this seems exactly what I wanted to do so thanks for the answer!

– Greg Balajewicz
Nov 22 '18 at 14:04

1

@alev this was just for investigating some networking at the node level. not really a production process

– Greg Balajewicz
Nov 22 '18 at 14:05

add a comment |

Your Answer

StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});

}
});

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Post as a guest

Name

Required, but never shown

StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53420532%2fshell-ssh-into-azure-aks-kubernetes-cluster-worker-node%23new-answer', 'question_page');
}
);

Post as a guest

Name

Required, but never shown

1 Answer
1

active

oldest

votes

1 Answer
1

active

oldest

votes

This Gist and this page have pretty good explanations of how to do it. Sshing into the nodes and not shelling into the pods/containers.

answered Nov 21 '18 at 22:04

Rico

27.9k94966

Although sometime SSH'ing into a node is necessary, you should be able to do anything you need using a DaemonSet, and this approach is also more scalable (as you scale your cluster, the DaemonSet is applied to every new node). You mount hostPaths from the node (or the whole fs) like in this comment.

– alev
Nov 22 '18 at 8:11

thanks @Rick, I did not yet try this (i found another way of investigating my issue) but read the article and this seems exactly what I wanted to do so thanks for the answer!

– Greg Balajewicz
Nov 22 '18 at 14:04

1

@alev this was just for investigating some networking at the node level. not really a production process

– Greg Balajewicz
Nov 22 '18 at 14:05

add a comment |

This Gist and this page have pretty good explanations of how to do it. Sshing into the nodes and not shelling into the pods/containers.

answered Nov 21 '18 at 22:04

Rico

27.9k94966

Although sometime SSH'ing into a node is necessary, you should be able to do anything you need using a DaemonSet, and this approach is also more scalable (as you scale your cluster, the DaemonSet is applied to every new node). You mount hostPaths from the node (or the whole fs) like in this comment.

– alev
Nov 22 '18 at 8:11

thanks @Rick, I did not yet try this (i found another way of investigating my issue) but read the article and this seems exactly what I wanted to do so thanks for the answer!

– Greg Balajewicz
Nov 22 '18 at 14:04

1

@alev this was just for investigating some networking at the node level. not really a production process

– Greg Balajewicz
Nov 22 '18 at 14:05

add a comment |

This Gist and this page have pretty good explanations of how to do it. Sshing into the nodes and not shelling into the pods/containers.

answered Nov 21 '18 at 22:04

Rico

27.9k94966

This Gist and this page have pretty good explanations of how to do it. Sshing into the nodes and not shelling into the pods/containers.

answered Nov 21 '18 at 22:04

Rico

27.9k94966

answered Nov 21 '18 at 22:04

Rico

27.9k94966

answered Nov 21 '18 at 22:04

Rico

27.9k94966

answered Nov 21 '18 at 22:04

Rico

27.9k94966

Although sometime SSH'ing into a node is necessary, you should be able to do anything you need using a DaemonSet, and this approach is also more scalable (as you scale your cluster, the DaemonSet is applied to every new node). You mount hostPaths from the node (or the whole fs) like in this comment.

– alev
Nov 22 '18 at 8:11

thanks @Rick, I did not yet try this (i found another way of investigating my issue) but read the article and this seems exactly what I wanted to do so thanks for the answer!

– Greg Balajewicz
Nov 22 '18 at 14:04

1

@alev this was just for investigating some networking at the node level. not really a production process

– Greg Balajewicz
Nov 22 '18 at 14:05

add a comment |

Although sometime SSH'ing into a node is necessary, you should be able to do anything you need using a DaemonSet, and this approach is also more scalable (as you scale your cluster, the DaemonSet is applied to every new node). You mount hostPaths from the node (or the whole fs) like in this comment.

– alev
Nov 22 '18 at 8:11

thanks @Rick, I did not yet try this (i found another way of investigating my issue) but read the article and this seems exactly what I wanted to do so thanks for the answer!

– Greg Balajewicz
Nov 22 '18 at 14:04

1

@alev this was just for investigating some networking at the node level. not really a production process

– Greg Balajewicz
Nov 22 '18 at 14:05

Although sometime SSH'ing into a node is necessary, you should be able to do anything you need using a DaemonSet, and this approach is also more scalable (as you scale your cluster, the DaemonSet is applied to every new node). You mount hostPaths from the node (or the whole fs) like in this comment.

– alev
Nov 22 '18 at 8:11

thanks @Rick, I did not yet try this (i found another way of investigating my issue) but read the article and this seems exactly what I wanted to do so thanks for the answer!

– Greg Balajewicz
Nov 22 '18 at 14:04

@alev this was just for investigating some networking at the node level. not really a production process

– Greg Balajewicz
Nov 22 '18 at 14:05

add a comment |

draft saved

draft discarded

Thanks for contributing an answer to Stack Overflow!

Please be sure to answer the question. Provide details and share your research!

But avoid …

Asking for help, clarification, or responding to other answers.

Making statements based on opinion; back them up with references or personal experience.

To learn more, see our tips on writing great answers.

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Post as a guest

Name

Required, but never shown

Post as a guest

Name

Required, but never shown

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Post as a guest

Name

Required, but never shown

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Post as a guest

Name

Required, but never shown

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Post as a guest

Name

Required, but never shown

Name

Required, but never shown

Name

Required, but never shown

This page is only for reference, If you need detailed information, please check here

搜尋此網誌

Argthtjtr