future-truck-59205
04/28/2022, 6:01 PMcurved-lifeguard-39360
04/28/2022, 7:34 PMcurved-lifeguard-39360
05/03/2022, 5:37 PM[ERROR] error syncing 'cattle-fleet-system/helm-operation-gg8n6': handler helm-operation: an error on the server ("container not found (\"proxy\")") has prevented the request from succeeding (get pods helm-operation-gg8n6), requeuing
Another pod is showing this error:
[ERROR] error syncing 'rancher-rke2-charts': handler helm-clusterrepo-ensure: git -C /var/lib/rancher-data/local-catalogs/v2/rancher-rke2-charts/675f1b63a0a83905972dcab2794479ed599a6f41b86cd6193d69472d0fa889c9 fetch origin 107ecb60ed851ebd2b4a54a0859c8d8edc046c9c error: exit status 128, detail: error: Server does not allow request for unadvertised object 107ecb60ed851ebd2b4a54a0859c8d8edc046c9c
, requeuing
And there is also this error:
2022/05/03 16:55:54 [ERROR] Failed to connect to peer <wss://10.50.224.213/v3/connect> [local ID=10.50.193.244]: EOF
2022/05/03 16:55:54 [ERROR] Failed to connect to peer <wss://10.50.215.200/v3/connect> [local ID=10.50.193.244]: EOF
curved-lifeguard-39360
05/03/2022, 8:35 PMhelm upgrade --install \
ingress-nginx ingress-nginx/ingress-nginx \
--namespace ingress-nginx \
--set controller.service.type=LoadBalancer \
--version 3.12.0 \
--create-namespace
boundless-dog-9864
05/04/2022, 8:39 PMadorable-ghost-62021
05/10/2022, 8:03 AMrich-address-13891
05/13/2022, 9:22 AMworried-rain-56725
05/13/2022, 6:28 PMWaiting for API to be available
, in conditions there are Cluster agent is not connected
event. At the same time AWS console shows that EKS cluster is in Active
, so basically it means that EKS cluster is running and ready to use. What can the reason of this issue? I understand that Waiting for API to be available
is to generic issue, but I have no idea where I need to look for the problem. The interesting thing that there is no rancher agents on any of worker nodes. Rancher is accessible from downstream nodes, so connection shouldn’t be an issue here.little-arm-91919
05/17/2022, 5:51 PMFailed to communicate with cluster: Post "<https://XXXXXX.gr7.us-east-1.eks.amazonaws.com/api/v1/namespaces>": cluster agent disconnected
On the private cluster there are no rancher pods running. So I went through the instructions to run a command manually to install cattle-cluster-agent, but it is also stuck at the following:
time="2022-05-17T16:59:31Z" level=info msg="Connecting to proxy" url="<wss://xxx.com/v3/connect/register>"
Also, this exact set of steps, but creating an EKS cluster with a public endpoint, works perfectly fine, I don't even need the vpc peering.
Any insight as to why the rancher server and this cluster cannot communicate would be greatly appreciated.clean-painting-58815
06/28/2022, 9:32 PMboundless-dog-9864
07/11/2022, 5:31 PMambitious-motherboard-40337
07/18/2022, 2:08 PMorange-barista-66154
08/10/2022, 10:03 AMancient-energy-15842
08/10/2022, 6:37 PMrancher-nodes
security group, I see a few rules that give access to 0.0.0.0/0
TCP 30000 - 32767
TCP 80
TCP 443
TCP 6443
TCP 2376
Are those rule safe to modify with my VPN server IP ? or are there more steps to it? thanksambitious-motherboard-40337
08/11/2022, 9:02 AMhelpful-ability-85939
08/12/2022, 11:54 PMhelpful-ability-85939
08/12/2022, 11:54 PMcareful-optician-75900
08/18/2022, 3:05 AMcareful-optician-75900
08/18/2022, 3:24 AMclever-napkin-33058
08/25/2022, 6:40 PMv1.6.30
and am looking at configuring a few sysctl
params for our docker containers, what is the best way to do this in the legacy rancher? any clues/ideas?careful-optician-75900
08/29/2022, 2:27 PMwebsocket: close 1006 (abnormal closure): unexpected EOF
That Websocket error is from rancher containers.careful-optician-75900
09/02/2022, 9:45 AMannotations:
<http://field.cattle.io/projectId|field.cattle.io/projectId>: ""
Updating local copy of SSL certificate to classic load balancer every 1 mins. How to troubleshoot these issues ?
Nginx-ingress logs:
8 controller.go:177] Configuration changes detected, backend reload required.
8 backend_ssl.go:189] Updating local copy of SSL certificate "cattle-system/tls-rancher-ingress" with missing intermediate CA certs
I0830 050732.859819 8 controller.go:195] Backend successfully reloaded.A
Any ideas for SSL Uploading every 1 mins ? Many thanksorange-barista-66154
09/08/2022, 3:59 PM--max-pods=110
to the kubelet-extra-args. Anyone know how to make that work? I've tried adding it as user data but it seems to be ignoredworried-rain-56725
09/09/2022, 10:12 AMRancher version: 2.6.8
Installation method: Helm
Helm repo: <https://releases.rancher.com/server-charts/stable>
After installing rancher, I tried to bootstrap it, using rancher terraform provider and next tf configuration:
resource "rancher2_bootstrap" "admin" {
provider = rancher2.bootstrap
initial_password = "Password1"
password = local.rancher_bootstrap_password
telemetry = false
}
For some reason after few minutes, creating of this process fails with the following error log:
│ **Error:** **[ERROR] Updating token: Bad response statusCode [403]. Status [403 Forbidden]. Body: [baseType=error, code=Forbidden, message=<http://settings.management.cattle.io|settings.management.cattle.io> "k8s-version" is forbidden: User "user-bfkj6" cannot get resource "settings" in API group "<http://management.cattle.io|management.cattle.io>" at the cluster scope] from [<https://rancher-internal.foo.bar.com/v3/settings/k8s-version]**>
│
│ with rancher2_bootstrap.admin,
│ on <http://main.tf|main.tf> line 48, in resource "rancher2_bootstrap" "admin":
│ 48: resource "rancher2_bootstrap" "admin" {
That user has GlobalBindingRole to admin role, so it should has access to Setting CRD.
Also there are a lot of such error messages in rancher pod:
2022/09/09 09:07:41 [ERROR] Failed to connect to peer <wss://10.0.3.184/v3/connect> [local ID=10.0.1.59]: websocket: bad handshake
I’ve also tried to bootstrap rancher via UI, but after entering bootstrap password the only thing I see is the white screen.
Any ideas? (edited)curved-lifeguard-39360
09/14/2022, 8:19 PMcurved-lifeguard-39360
09/15/2022, 8:18 PMflaky-shampoo-86024
10/17/2022, 7:31 PMrough-london-41454
10/18/2022, 12:10 PMnarrow-rose-64653
10/21/2022, 3:32 PMWaiting for API to be available
error. I have completed all networking between both clusters, not sure what's happening. Any guidance would be greatly appreciated.worried-rain-56725
10/25/2022, 8:18 AM