Apt 201

To what end do we seek to acquire knowledge?
If we have been raised in and/or live in the modern Western world, we have tended to maintain a more utilitarian posture toward knowledge: if we have thought about the reasons why we have labored to acquire knowledge at all, the answers have most likely involved the quest for some sort of goal. We were compelled to acquire knowledge in school during childhood in order to make a living in a given profession as adults. We often seek to acquire knowledge so we can accomplish something: to build and finish a project, to achieve some feat, etc.
What reasons lie behind our investigations into our environment, past and present? We want to understand what has happened in the past and what is happening in the present so we can better manipulate our environment to achieve our desired outcomes. Such may seem harsh, but ultimately it is the utilitarian conclusion to our endeavors. We learn about past cultures to understand present cultural dynamics, recognizing if the present does not exactly imitate the past, it at least rhymes. We explore the natural world at both the most miniscule and highest levels to understand how things work with the ultimate view of manipulating them to our own comfort. We want to understand how severe weather works to better forecast it and perhaps even manipulate it so as to be less severe; we explore deep space to understand what dangers it might maintain and to advance our study of physics to allow us ever more powerful technological breakthroughs. Why do various stripes of biologists deeply penetrate what profoundly wild places yet remain? To learn about new species with a view of protecting biodiversity, since perhaps in that biodiversity we will eventually discover chemicals and compounds which may prove beneficial to human health. And much of this provides humanity with the benefit of the doubt, for a lot of investigation, research, and technological development is fueled primarily to make money and gain standing.
We have thus inherited a framework in which knowledge is pursued for our benefit and gain and thus prove useful for humanity. We have seen significant critiques of the discipline of the humanities, with many wondering how such a field of study proves useful in the modern world. Its justification proves just as much a testimony to the power of utilitarianism in the modern world: an appeal to how the humanities can produce a more well-rounded citizen and worker whose creativity can provide material benefit to herself, her employer, and her country.
This utilitarian framework is part of the inheritance we have received from the Enlightenment and its transformation of Western society. The general spirit of the Enlightenment, manifest in the conceit of its name, is the spread of the “light of knowledge” to dispel the “darkness of superstition.” Knowledge deduced from observation and reason provides power in the Enlightenment: the power to overcome superstition, the power to manipulate the environment, the power to maintain influence and standing in society.
While Paul predated the Enlightenment by 1750 years, his observation regarding “knowledge makes arrogant” proves apt (1 Corinthians 8:1). Knowledge has made modern man almost insufferably arrogant. He has convinced himself he is vastly superior to his ancestors because he understands things they do not. He is confident he is better able to stand against the forces of nature and evil because of what his scientific and technological advancements provide him. He is willfully blind to how his attempts at mastery have led to significant exploitation and oppression of the creation and its creatures, and such exploitation and oppression do not take place without consequences and judgment. He remains convinced the solutions to his problems can all be discovered through greater scientific and technological advancement and development. Does this sound completely ridiculous to you? Consider the thoughts and behaviors of the titans of Silicon Valley and how convinced they are of their superiority to the rest of us and their confidence in how technology can solve any and every problem.
Such knowledge has made arrogant because it is all directed to the purpose of mastery. Knowledge gained unto mastery is worldly and demonic in its wisdom (cf. James 3:13-18). Things rarely end well when we seek to gain knowledge in order to control, manipulate, or master the object of our knowledge. In relationships between humans, we consider such abusive; we prove more reticent to recognize how abusive such a purpose is when used in regard to the creation, our condition, and how completely delusional it proves in terms of knowledge of God.
For some indeed seek knowledge of God unto mastery. Some of the ancients were convinced they could compel or coerce a god into doing their will if they knew the god’s secret name. To this day many seek knowledge of God or His will, however consciously or unconsciously, with a view to figuring out how to cajole, manipulate, or otherwise exploit God into accomplishing what they want. Plenty of others, perceiving an opportunity for great gain, seek knowledge in the name of religion to manipulate, control, and coerce people into giving them standing, power, money, and other such worldly benefit.
Yet, in truth, the attempt to learn about God or about His creation unto mastery proves delusional before God’s glorious greatness and majesty. Isaiah wisely made known to Israel how God’s ways and thoughts are higher than our ways and thoughts (Isaiah 55:8-9); Paul confessed how God’s weakness remains stronger than man’s strength, and God’s foolishness remains wiser than man’s wisdom in 1 Corinthians 1:18-31. He is the Creator; we are the creation. No matter how much we think we can try, we will never be able to cajole, manipulate, or coerce God into doing anything for us.
We should be able to understand this by considering in what ways our quest to know in order to master flounder. When we are confronted with great tragedy or the evil powers over this present darkness, many are tempted to wonder why this might happen to them, but we all know, deep down, no answer really satisfies. Knowing why a loved one died a horrific death will not bring them back. Understanding the dynamics of a powerful storm will not restore what was devastated. The Preacher wisely understood such questions to be futile, a striving after wind (Ecclesiastes 8:14); when Job pressed such questions before God, he was quickly reminded how he did not understand the ways of the creation. All of our acquired knowledge and technology has not been able to overcome such ancient wisdom.
Knowledge unto mastery does not glorify God. Yet knowledge unto glorifying God can come with great profit.
Consider a romantic relationship: the lover desires to know his or her beloved. We find it abominable for a lover to seek information about the beloved in order to master, control, or manipulate him or her; yet we all have sought, or greatly desire, to know and become known by a lover in order to be more cherished, valued, and honored. Such knowledge is sought by a lover to more greatly honor and glorify the beloved. The Song of Solomon testifies how God finds such good and honorable.
The same ought to be true for our purpose in seeking knowledge about God and His creation. When we seek to master, manipulate, and control on the basis of our knowledge, we presume to be as God and such an impulse for control is the basis of a culture of death and leads to death. Instead we do well to love God and love what God has made as God loves it. When we truly love God, we want to know more about Him, not in order to manipulate or control Him (as if we even could!), but instead to better glorify, honor, and praise Him. When we thus love God, we can look at His creation and learn about it so that we can better see His hand in its operation and glorify, honor, and praise Him.
Note well how the knowledge itself acquired might be quite similar, or even the same; yet the purpose of seeking such knowledge might prove very different, and thus the quest for said knowledge will lead to very different ends. Theology is rightly the queen of all sciences when we pursue it to better honor and glorify God, and all else can rightfully flow from it. We can learn about God’s creation in humility in order to glorify and honor God and be found more effective stewards of the creation by God when He holds us all accountable for how we have used all the gifts He has given us, and to what end.
Knowledge unto mastery is demonic and leads to death; knowledge unto glorifying God in Christ through the Spirit reminds us of our humble station as God’s creation and inspires us to glorify, honor, and praise our Creator. Knowledge of the creation to glorify its Creator provides opportunities to better embody the ways of Jesus, to faithfully serve our fellow man and maintain good stewardship of the creation with which God has entrusted us; knowledge of the creation unto mastery has led to no end of exploitation, oppression, and death. Let us all, therefore, seek knowledge to glorify God in Christ through the Spirit, and not unto mastery, so we might obtain the resurrection of life and be saved!
Ethan

Wisdom, like an inheritance, is a good thing; it benefits those who see the light of day. For wisdom provides protection, just as money provides protection. But the advantage of knowledge is this: Wisdom preserves the life of its owner. Consider the work of God: For who can make straight what he has bent? In times of prosperity be joyful, but in times of adversity consider this: God has made one as well as the other, so that no one can discover what the future holds. During the days of my fleeting life I have seen both of these things: Sometimes a righteous person dies prematurely in spite of his righteousness, and sometimes a wicked person lives long in spite of his evil deeds. So do not be excessively righteous or excessively wise; otherwise you might be disappointed. Do not be excessively wicked and do not be a fool; otherwise you might die before your time. It is best to take hold of one warning without letting go of the other warning; for the one who fears God will follow both warnings (Ecclesiastes 7:11-18).

If you think the Preacher speaks blasphemy, it might well mean you are his intended audience.
Throughout Ecclesiastes 1:1-6:12 the Preacher meditates upon the hevel of life under the sun: all is vain, futile – truly absurd. He compares most human endeavors toward meaning as “chasing after wind”: people pursue pleasure, wealth, wisdom, or other things looking for ultimate purpose and satisfaction and will be disappointed and frustrated by all of them. To rage against such truths is itself futile and striving after wind. God understands better than we do.
In Ecclesiastes 7:1-10 the Preacher seemed to have set forth a series of aphoristic exhortations not unlike the proverbs for which he is well known. Ecclesiastes 7:11-18 somewhat continues in this same trend, covering a series of pericopes which have some relationship to wisdom and exhortations regarding life.
Throughout his discourse the Preacher has considered wisdom and has often complained about its deficiencies (cf. Ecclesiastes 1:12-18, 2:12-17, 6:8-9). Most recently the Preacher commended heeding the rebuke of the wise, yet also spoke of how wisdom could be corrupted by oppression or bribery (Ecclesiastes 7:5, 7). In Ecclesiastes 7:11-12 he set forth a more positive perspective on wisdom: like an inheritance, wisdom is good; it provides protection, like money can provide protection; it can preserve the life of its owner.
The Preacher has not thus contradicted himself; instead, he has provided a balanced understanding of wisdom (and, for that matter, money). The Preacher never denied the value or benefit of wisdom; he had previously lamented how wisdom was not the ultimate good, for even the wise perish just like the fool. Wisdom is not the ultimate good, but it is still good. Those who heed wisdom tend to live longer and better lives than those who flaunt it. Wisdom is often communicated precisely because of the dangers lurking in this world from natural and artificial sources. Likewise, money can provide a level of protection, since by it one can obtain access to greater resources and the fruit of the labor of others. The Preacher has done well at showing money is not the ultimate good, cannot deliver on all it promises, and can lead to great anxiety; but it still has its value, as his personal life would attest.
The Preacher will again commend the protection wisdom can provide in Ecclesiastes 7:19, so we can certainly understand the series of observations about life which he set forth in Ecclesiastes 7:13-18 as within the bounds of this wisdom and the protection it can provide.
In Ecclesiastes 7:13-14 the Preacher exhorted his audience to consider God’s work, rhetorically asking who can make straight anything He has bent. He did not leave us wondering to what end we should thus consider God’s work: he exhorted his audience to find joy in the days of prosperity, but to remember in the days of adversity how God has been the Giver (or at least the Facilitator) of both, and none can know what may be in the future.
The Preacher’s observation is apt. As humans we have a tendency to take whatever happens for our benefit or prosperity for granted as the way things should be and prove quite critical whenever we come into any adversity. Perhaps you have heard a person curse or question God on account of some difficulty they have or are experiencing; perhaps you are that person. But have you ever heard anyone cursing or questioning God because they have received some benefit or success in their lives? The very premise seems foolish! But we could also entirely shift our perspective, of course; we could assume everything which we will experience will be awful and terrible, and consider benefits or prosperity as aberrant and unexpected. However we may want to view our lives, the Preacher is right: the same God who is the Giver, or at least Facilitator, of all the good we enjoy, has given or facilitated the challenges and difficulties we encounter. We can tell ourselves all kinds of stories about how it will all turn out in the end, but we do not know how it will turn out in the end; only God does.
The Preacher continued in a similar vein of observation in Ecclesiastes 7:15-18. The Preacher has seen a righteous person die young despite his righteousness and a wicked person live a long, full live despite his wickedness. Thus the Preacher counseled his audience to be neither excessively righteous, excessively wise, excessively wicked, nor foolish: excessive righteousness or wisdom invites disappointment, and excessive wickedness and folly leads to death. The Preacher encouraged his audience to hold firmly onto both sets of these warnings, for thus those who fear God would do.
The Preacher’s observations prove alarming for many; how can he possibly chastise anyone for “excessive” righteousness or wisdom? Is he really commending a “moderate” amount of wickedness?
Those who maintain a superficial façade of piety, ancient and modern, have made absolute the maxims of Proverbs: the righteous are wise, prosper, and live long before God; the foolish are wicked, suffer poverty, and their lives are short. Thus we can tell the difference between the righteous and the wicked based on the quality of their lives, so this viewpoint would maintain, and thus we should seek righteousness and wisdom so we can guarantee not just a high quality of life but salvation here and in the future.
It is not as if the Preacher finds wisdom useless; but the Preacher has observed the maxims of Proverbs cannot be maintained absolutely. Even if we could go so far as to say the rule is that the righteous prosper and the wicked suffer (which the Preacher does not advance; we do so for the sake of argument), the exception still exists. Righteousness is no guarantee of prosperity or long life; the wicked will endure judgment at some point, but their lives on earth might be quite long and comfortable.
Thus the Preacher would shatter the superficial façade of piety which attends to an absolutist view of Proverbs. The pursuit of righteousness and wisdom cannot deliver from the trials of life. What happens when a person thus single-mindedly pursues such a pretense of righteousness and wisdom? Greater and greater frustration at the ways of the world, how the “real” very much falls short of the “ideal.”
Note well the Preacher did not condemn pursuing righteousness and wisdom; he warned about going to excess. Likewise, the Preacher did not commend a little bit or a moderate form of wickedness. Yet the Preacher is being realistic; the righteous and wise should not wait to watch for the inevitable downfall of the moderately wicked. Excessive wickedness and folly certainly put a person on the trajectory to death; cirrhosis of the liver, for instance, is the likely result of excessive alcohol consumption, and the “Darwin Award” concept exists to describe people perishing in their folly. But moderate wickedness, which would not commend a person to God, and still leaves a person liable to eternal condemnation in hellfire, on a practical level is very unlikely to lead to death in life. To continue our examples: the liver can manage a moderate level of alcohol and even the occasional drunkenness; we can all probably think of something foolish we did which had consequences but did not kill us.
And such is why the Preacher commended balance for those who fear God, holding onto both warnings at the same time. To not be excessively righteous and wise is not an invitation to wickedness and folly; to not be excessively wicked or a fool is not an invitation to presume salvation comes from righteousness and wisdom. In fact, the fear of God generally requires believers to hold onto two sets of warnings or exhortations at the same time. Many, in their quest to understand, seek to flatten out the wisdom of God manifest in His creation and revealed in Christ and in Scripture, myopically focusing on one set of doctrines or dangers and thus neglecting other doctrines and falling prey to other dangers. To fear God requires us to respect the multi-dimensional nature of His ways and truth and resist flattening it out in order to make it seem more comprehensible or controllable.
We do well to view any kind of extremism with great skepticism. Truth is rarely found at any kind of extreme; Jesus, fully God and fully man, rarely exhibited any kind of extremes. While Jesus was always holy and righteous, it was the Pharisees who seemed the most committed to zeal for holiness and righteousness, and in that zeal they dishonored God by imposing their own traditions to define righteousness and by separating themselves from and reckoning themselves as superior to the other children of Abraham whom they deemed the “sinners” or “unclean.” Jesus, the true embodiment of all that was righteous and holy, ate food, drank wine, dined with sinners and tax collectors, and scandalized the religious establishment by His association and connection with those defiled by the world. In this way we do well to understand the Preacher’s wisdom, and ourselves avoid the excessive righteousness and wisdom which ironically leads us away from God, not toward Him, and in all things seek to embody the wisdom and faithfulness of God manifest in Jesus His Son.
Ethan

One of the more common questions on this sub is when a young new investor asks something like: “I just opened my first retirement account. What fund should I buy?” Experienced investors know this is a loaded question because fund selection is really the end of the multi-stage process of financial planning, and in some ways the easiest part after you have done the work of articulating your goals, risk tolerance, timeline, and asset allocation. But the question doesn’t require a complicated answer because we also know that, somewhat ironically, fund selection doesn’t make a whole heckuva lot of difference when you are a young adult as long as you can stick with it. That’s because, with 40+ years until retirement, almost any diversified index fund has about as good an expected return as any other, and your macro allocation (stocks vs bonds) will be responsible for 94% of the variation in returns.
I believe it’s best for a new investor to just pick one fund and stick to it. It’s easy to get confused with all the options out there, to get bogged down in asset allocation analysis paralysis, and to construct complicated or arbitrary portfolios that will be obsessed over and later altered on impulse. Much better would be to pick a single good index fund and hold just that one fund in your account, thinking of it as your retirement fund. But the question remains - what fund should a new investor buy?
Here I took some popular funds and attempted to rank them for the best one-fund portfolios to use in a (non-taxable) retirement account:
10. QQQ This tech-heavy stock fund is the darling of many starry-eyed young investors who often mistakenly conflate the grand future prospects of revenue growth in the “innovation sector” with better stock returns (we know this isn’t necessarily the case thanks to overvaluation and dilution). QQQ is only 100 relatively volatile stocks, tilted to large cap growth, excluding financials, and only incorporating companies that trade on the NASDAQ - a fairly random screening if you ask me. Yes, you could do worse because, after all, it is an index fund and that is far better than stock picking. But given its inherent lack of broader diversification, its popularity is mostly just hype and performance chasing. Whether this outperforms or underperforms the market in your timeline will come down to the luck of when you invest relative to its typical boom and bust cycles. Pro tip: don’t invest in a fund that spends marketing dollars from your expense ratio on sponsoring college basketball tournaments.
9. SCHD On the other end of the hype spectrum is the darling dividend fund, SCHD. I wrote about how this fund is a lot like QQQ in terms of its popularity among novices, except that it’s style is dividend-payers (large cap value) instead of large cap growth. Once again, at least it’s an index fund and at least it tilts to a style with better expected returns, but it’s still just 100 US stocks which is pretty mediocre diversification given all the alternatives.
8. VEGN I figured any list of top ten funds for new investors ought to include at least one ESG fund since that is often desired by younger generations. I may be cynical about ESG, but I don’t think excluding the returns of some public companies from your portfolio and leaving those returns for other investors in the market to obtain (potentially at a lower cost) does much for the world, and many of these funds seem to be marketing gimmicks to prey on the good-minded. I also think that the screenings can be fairly arbitrary and may distract investors from focusing on doing actual, impactful good in the world, while making more money for the fund providers (who often use it to do less good). Even the most rigorous ESG funds still include numerous companies I don’t particularly care for so for this list I chose VEGN because, in addition to screening for fossil fuels, weapons, tobacco, child labor, and other typical exclusions in the ESG world, it also screens for humane treatment of animals (a cause near and dear to my heart) by excluding companies which use animal products including factory farming. What you are left with is half the S&P 500, 250 stocks, ending up tilted to growth, and seriously overweight in tech, communications, and financials. Like many vegan alternative products, it’s mainly just more expensive and unfulfilling.
7. VOO/VFIAX This the OG index fund tracking the S&P 500, recommended as a sole holding for the average American investor by both Jack Bogle and Warren Buffet. It contains numerous blue chips stocks and household names which can give new investors confidence that their wagon is hitched to the stars of corporate America. I’ll quote White Coat Investor because I like his take: “Don't laugh. I know a very successful two-physician couple who invest in nothing but this, are 7 years out of residency, and have a net worth in the $1-2 Million range. [6 years later, I'm sure this couple is now financially independent as their plan has worked out spectacularly over those years.] Their investment plan is working fine. Every investment dollar, whether in a retirement account or a taxable account, goes into this single fund. It is simple, very low cost, diversified among 500 different companies, and has a long track record of exceptional returns.”
6. VTI/VTSAX Improving on the S&P 500 is a total US stock market fund. The returns are about the same, but you get the added diversification of small caps so why wouldn’t you take that instead? This is a favorite of JL Collins and Mr Money Mustache of the FIRE movement which gave birth to the phrase “VTSAX and chill”. For US-only investing, this is all you need.
5. VT/VTWAX This I would describe as the most “agnostic” of all the equities funds, and the one that most embodies the Boglehead ethos of buying the entire haystack, including global companies. Buy just this one fund in your account and you own all the stonks, at cap weight, and you get the returns of the total global market. Deviating from this weighting for equities implies you know better than the collective wisdom of all the investors in the market about how to best price and weight stocks, which is almost certainly not the case if you are brand new to investing.
4. AVGE What, owning all the stocks in the world isn’t good enough for you? Ok, well howabout subscribing to Fama-French informed, mean-variance optimized, and slightly US-biased global equities with Dimensional pedigree multi-factor screening from Avantis? If what I just wrote doesn’t make sense to you, this probably isn’t the fund for you because of its added cost, internal complexity, active management, and potential for tracking error. Most people should probably stick with cap-weighted index investing like VT/VTWAX. Personally, this is now the one fund I hold in my Roth IRA and I love it, but I didn't really understand factor investing until I was in my 40's.
3. Target Date Fund TDFs get a bad rep for being basic, but really what’s so basic about owning a 90/10 ratio of all the stocks and all the bonds in the world, automatically-balanced, with a professionally-designed bond glide path that is calibrated to your age, (hopefully) at a minimal cost? These are a phenomenal choice for anyone, and there is a reason that 80% of retirement plans offer one, and most of them serve as the qualified default investment alternative (QDIA) mandated by Congress for enrollees in new plans. JL Collins aptly calls them “the simplest path to wealth of all.”
2. NTSX Deviating from the Boglehead script a little more here, this is another “multi-asset” fund (including both stocks and bonds), but with a twist - using a modest amount of leverage, exclusively on the bonds side. It combines 90% S&P 500 - all the holdings in number 7 on this list - with 10% 6x leveraged treasury futures for an effective 90/60 allocation (or 1.5x 60/40). This should produce relatively the same volatility as a 100% stocks portfolio, but with lower downside thanks to the bond diversification, and thus overall higher long-term returns than the market (with exceptions being rare years like 2022 where stocks and bonds have a significant correlated decline). Futures contracts are a great way to obtain leverage because they don’t use overnight reset borrowing which is subject to “volatility decay”, and they minimize counterparty risk. Futures are even a great way to hold bonds in a taxable account because their yield is earned as a capital gain by being embedded in a contract as opposed to received as a taxable distribution. This may all sound a bit exotic but “you would be forgiven for thinking U.S. Treasury futures are an obscure corner of finance. Surprisingly, they are the main event. Trading volume in them is the highest of any category of futures contract. Also, U.S. Treasury futures have been around for a long time, trading now for 41 years.” Wisdom Tree also offers developed markets (NTSI) and emerging markets (NTSE) versions of this construction which you could use to create a 3-fund portfolio, and RSSB is a more expensive global version set to launch soon. I hold NTSX/I/E at cap weighting in my taxable account.
1. VASGX or AOA Overall I think this is the best single fund any average investor can hold for an indefinite time period (including through retirement if they wish). These two are 80% global stocks 20% global bonds, or another option from Fidelity, FFNOX, is 85/15, giving you a 3-fund portoflio all-in-one fund. That’s 10,000 stocks and 20,000 bonds, globally-diversified and automatically balanced, for just a 0.14% fee - possibly the most reliable passive wealth-producing instrument in the history of mankind. No matter what we think about how stocks or bonds will perform in the future, I firmly believe the portfolio of any new investor with a yet unestablished risk tolerance should include bonds for a variety of reasons. 20% is a reasonably low amount for accumulation phase, but incidentally is also enough to give you a relatively good safe withdrawal rate even in retirement. It is the preferred choice of retirement expert Mike Piper and would be my first suggestion as well.
What do you think- did I miss the mark or leave something out? I’m planning to link to this whenever someone asks so please drop some knowledge in the comments.
[Edits: fixed link to SCHD post, added note than I am long AVGE, and updated SWR link for 80/20]

Kubernetes
I'm trying to ping the kube-dns service from a dnstools pod using the cluster IP assigned to the kube-dns service. The ping request times out. From the same dnstools pod, I tried to curl the kube-dns service using the exposed port, but that timed out as well.
Following is the output of kubectl get pods --all-namespaces -o wide
NAMESPACE NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODEdefault pod/busybox 1/1 Running 62 2d14h 192.168.1.37 kubenode default pod/dnstools 1/1 Running 0 2d13h 192.168.1.45 kubenode default pod/nginx-deploy-7c45b84548-ckqzb 1/1 Running 0 6d11h 192.168.1.5 kubenode default pod/nginx-deploy-7c45b84548-vl4kh 1/1 Running 0 6d11h 192.168.1.4 kubenode dmi pod/elastic-deploy-5d7c85b8c-btptq 1/1 Running 0 2d14h 192.168.1.39 kubenode kube-system pod/calico-node-68lc7 2/2 Running 0 6d11h 10.62.194.5 kubenode kube-system pod/calico-node-9c2jz 2/2 Running 0 6d12h 10.62.194.4 kubemaster kube-system pod/coredns-5c98db65d4-5nprd 1/1 Running 0 6d12h 192.168.0.2 kubemaster kube-system pod/coredns-5c98db65d4-5vw95 1/1 Running 0 6d12h 192.168.0.3 kubemaster kube-system pod/etcd-kubemaster 1/1 Running 0 6d12h 10.62.194.4 kubemaster kube-system pod/kube-apiserver-kubemaster 1/1 Running 0 6d12h 10.62.194.4 kubemaster kube-system pod/kube-controller-manager-kubemaster 1/1 Running 1 6d12h 10.62.194.4 kubemaster kube-system pod/kube-proxy-9hcgv 1/1 Running 0 6d11h 10.62.194.5 kubenode kube-system pod/kube-proxy-bxw9s 1/1 Running 0 6d12h 10.62.194.4 kubemaster kube-system pod/kube-scheduler-kubemaster 1/1 Running 1 6d12h 10.62.194.4 kubemaster kube-system pod/tiller-deploy-767d9b9584-5k95j 1/1 Running 0 3d9h 192.168.1.8 kubenode nginx-ingress pod/nginx-ingress-66wts 1/1 Running 0 5d17h 192.168.1.6 kubenode In the above output, why do some pods have an IP assigned in the 192.168.0.0/24 subnet whereas others have an IP that is equal to the IP address of my node/master? (10.62.194.4 is the IP of my master, 10.62.194.5 is the IP of my node)
This is the config.yml I used to initialize the cluster using kubeadm init --config=config.yml
apiServer:certSANs:- 10.62.194.4extraArgs: authorization-mode: Node,RBACtimeoutForControlPlane: 4m0sapiVersion: kubeadm.k8s.io/v1beta2certificatesDir: /etc/kubernetes/pkiclusterName: dev-clustercontrollerManager: {}dns:type: CoreDNSetcd:local: dataDir: /valib/etcdimageRepository: k8s.gcr.iokind: ClusterConfigurationkubernetesVersion: v1.15.1networking:dnsDomain: cluster.localpodSubnet: 192.168.0.0/16serviceSubnet: 10.96.0.0/12scheduler: {} Result of kubectl get svc --all-namespaces -o wide
NAMESPACE NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE SELECTORdefault service/kubernetes ClusterIP 10.96.0.1 443/TCP 6d12h default service/nginx-deploy ClusterIP 10.97.5.194 80/TCP 5d17h run=nginxdmi service/elasticsearch ClusterIP 10.107.84.159 9200/TCP,9300/TCP 2d14h app=dmi,component=elasticsedmi service/metric-server ClusterIP 10.106.117.2 8098/TCP 2d14h app=dmi,component=metric-sekube-system service/calico-typha ClusterIP 10.97.201.232 5473/TCP 6d12h k8s-app=calico-typhakube-system service/kube-dns ClusterIP 10.96.0.10 53/UDP,53/TCP,9153/TCP 6d12h k8s-app=kube-dnskube-system service/tiller-deploy ClusterIP 10.98.133.94 44134/TCP 3d9h app=helm,name=tiller The command I ran was kubectl exec -ti dnstools -- curl 10.96.0.10:53
EDIT:
I raised this question because I got this error when trying to resolve service names from within the cluster. I was under the impression that I got this error because I cannot ping the DNS server from a pod.
Output of kubectl exec -ti dnstools -- nslookup kubernetes.default
;; connection timed out; no servers could be reachedcommand terminated with exit code 1 Output of kubectl exec dnstools cat /etc/resolv.conf
nameserver 10.96.0.10search default.svc.cluster.local svc.cluster.local cluster.local reddog.microsoft.comoptions ndots:5 Result of kubectl get ep kube-dns --namespace=kube-system
NAME ENDPOINTS AGEkube-dns 192.168.0.2:53,192.168.0.3:53,192.168.0.2:53 + 3 more... 6d13h EDIT:Ping-ing the CoreDNS pod directly using its Pod IP times out as well:
/ # ping 192.168.0.2PING 192.168.0.2 (192.168.0.2): 56 data bytes^C--- 192.168.0.2 ping statistics ---24 packets transmitted, 0 packets received, 100% packet loss EDIT:I think something has gone wrong when I was setting up the cluster. Below are the steps I took when setting up the cluster:

1. Edit host files on master and worker to include the IP's and hostnames of the nodes
2. Disabled swap using swapoff -a and disabled swap permanantly by editing /etc/fstab
3. Install docker prerequisites using apt-get install apt-transport-https ca-certificates curl software-properties-common -y
4. Added Docker GPG key using curl -fsSL https://download.docker.com/linux/ubuntu/gpg apt-key add -
5. Added Docker repo using add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable"
6. Install Docker using apt-get update -y; -get install docker-ce -y
7. Install Kubernetes prerequisites using curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg apt-key add -
8. Added Kubernetes repo using echo 'deb http://apt.kubernetes.io/ kubernetes-xenial main' sudo tee /etc/apt/sources.list.d/kubernetes.list
9. Update repo and install Kubernetes components using apt-get update -y; apt-get install kubelet kubeadm kubectl -y

Configure master node:

1. kubeadm init --apiserver-advertise-address=10.62.194.4 --apiserver-cert-extra-sans=10.62.194.4 --pod-network-cidr=192.168.0.0/16
2. Copy Kube config to $HOME: mkdir -p $HOME/.kube; sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config; sudo chown $(id -u):$(id -g) $HOME/.kube/config
3. Installed Calico using kubectl apply -f https://docs.projectcalico.org/v3.1/getting-started/kubernetes/installation/hosted/rbac-kdd.yaml; kubectl apply -f https://docs.projectcalico.org/v3.1/getting-started/kubernetes/installation/hosted/kubernetes-datastore/calico-networking/1.7/calico.yaml

On node:On the node I did the kubeadm join command using the command printed out from kubeadm token create --print-join-command on the master
Answer link : https://codehunter.cc/a/kubernetes/kubernetes-pods-cant-ping-each-other-using-clusterip

So I got a delivery to a hotel an hour before the clock sprung forward. It says to deliver to such and such address, room 113. So that's what I did. Took picture with room number, knocked on door quietly to let them know and marked as delete. A minute later walking towards my car, get s call. Stupidly I answered. So, idiot sounding kind of wasted asks where am I. I told him I'm just leaving the building as I just dropped off his order. He said I'm standing on front of the hotel. I know of no other entrance I'm like ok. He asked how I got in. I said through the entrance. I was tired and I didn't remember the name of the hotel I just said I delivered to the location on the order. I was so shocked of such a stupid question. Eventually I've remembered that this was an extended stay America and said the address. I think the man was confused. So I reiterated that I delivered to the address on the order. I thought for a moment that he realized that he sent it to the wrong place. So this went back-and-forth and I'm not wanting to stay on a call with the stoned person or something who sounds like it's good about 2 brain cells. And said let me call you back doordash's calling me. Told them the situation. I said hes kind of being pushing belligerent and hes probably gonna mark me as not having delivered it. I said you need to fix this. You need to talk to the guy. So they put me on hold for a minute and walled I was on hold idiot calls back and he gets really belligerent and threatening me. He gets very belittleing. So I told him that. I said you know this guy keeps calling back I said I don't feel safe. So you know they don't give a f. They said will handle it not to worry. So obviously I wasn't satisfied with that answer and I said you know you guys have not handled situations for me before. So eventually got off the call and went to sleep. I wake up to a contract violation and I'm like what the h. I called them and said not only you're not protecting your doordashers but you're punishing them. After being pushy with them they finally looked at And saw my picture of the address it was up and saw that the guy called multiple times. They finally fixed it and I told them they need to block the person in reverend because hes an abusive jerk. I get tired of their assurances. You know when this is the only not delivered order in over 2500 orders. I'm still I'm worried about being abused and doordash literally leaving me out to to dry unless i called and asked for a suprervisor. So today a dumb b**** puts in the right building but the wrong apartment. But I didn't know that until way after the fact. She put in building 43 apt. 102. Delivered to locationd. Took a picture of the apartment number 102 Knock to the door and what's on my merry way about ready to take off and deliver the 2nd half of this stacked order. Old b**** Karen comes out And said whose order is this? So I had already delivered it and it disappeared from my app. I said I can't see it anymore I said but I delivered it to the location that was listed. She was like I didn't order it and basically shoved it back at me. So I called doordash and they finally told me who it was. So I knocked on the ladies door and set up yeah this was a for Charra and apparently Karen knew a Charra in 201. So Karen was hostile when I asked for clarification. And I told her I'd appreciate not being abused and Of course to an abuser that just triggers them. So I dropped it off at 2:01 knocked on the door and walked off. I called doordash and explain the situation I said I dropped it off. Told them about hostile neighbor Karen. Told them I am tired of taking abuse for customer screwups. Told them I'd better not get a violation because the customer put in the wrong apt. numbe. Asked them how they were better going to shield their drivers from abuse. Blah, blah, blah they said. So i check back later and sure enough another contract violation. I called back and b**** and said you have the evidence that it was delivered. I said the lady puts in the wrong address her neighbor abuses me And I take it to where the stupid old lady (Karen) said the address was. So I said she's lying she got her order. So they said we'll have someone review this. Maybe I should be grateful that I have only had 2 jerks that claim that I didn't deliver in 2500 plus orders. It's pretty sad you do your job, give evidence and still have to deal with stupid customers and stupid help staff think it ok to be abusive and can't or won't help.