rancher-users #cabpr

rapid-van-91305

03/07/2023, 5:14 AM

Not without changes i'm afraid.

best-microphone-20624

03/09/2023, 6:10 AM

Would you consider testing and providing an example for tinkerbell like you do for metal3?

best-microphone-20624

03/09/2023, 6:38 AM

What is the recommended way for capbr and rancher to coexist at the moment? Also, do you have a roadmap for more tightly integrating capbr with rancher? Our immediate use case is to use a capbr management cluster to manage our Rancher local clusters running on immutable vsphere vms. Periodically upgrading the vm templates for the nodes of our rancher local clusters today is cumbersome to automate. Am I correct that capbr is intended to solve this problem and replace the earlier attempts to solve it using various

rancherd

implementations?

billions-london-49866

03/23/2023, 3:46 PM

@cool-thailand-26552 hi

billions-london-49866

03/23/2023, 3:48 PM

we now rely on your capbr in sylva: https://gitlab.com/sylva-projects/sylva-core/-/issues/70

billions-london-49866

03/23/2023, 3:49 PM

we want to apply CIS 1.6 profiling, so we need to rely on your alpha2 release to get the patch

billions-london-49866

03/23/2023, 3:49 PM

the due date for alphe2 is tomorrow, is it still accurate?

cool-thailand-26552

03/29/2023, 2:08 PM

set the channel topic: CABPR stands for CAPI Bootstrap Provider for RKE2 Github Repo: https://github.com/rancher-sandbox/cluster-api-provider-rke2 🎉 🎉 🎉 version v0.1.0-alpha.2 is here 🎉 🎉 🎉

cool-thailand-26552

03/29/2023, 2:15 PM

Hello Everyone, I am very excited to announce 🎉 🎉 the second pre-version of our ControlPlane/Bootstrap provider for RKE2 🎉🎉 : https://github.com/rancher-sandbox/cluster-api-provider-rke2/releases/tag/v0.1.0-alpha.2 Please let us know about your thoughts !

🙌 8

🎉 7

billions-london-49866

04/04/2023, 12:52 PM

hi @cool-thailand-26552

billions-london-49866

04/04/2023, 12:54 PM

we're using a cis-profile 1.6, but the report is talking about cis-1.23: https://gitlab.com/sylva-projects/sylva-core/-/merge_requests/40#note_1340592541

billions-london-49866

04/04/2023, 2:26 PM

@rapid-van-91305 any clue about this weird report? ^

billions-london-49866

04/05/2023, 5:31 AM

@cool-thailand-26552 @rapid-van-91305 I reported an issue to track this behavior: https://gitlab.com/sylva-projects/sylva-core/-/issues/204

bored-school-93100

05/05/2023, 8:55 AM

hello

👋 1

most-ghost-71898

05/05/2023, 9:27 AM

So i've been poking around trying to find why the need for the CAPD fork and it looks like a tough one to crack. RKE2 imposes

anonymous-auth=false

due to CIS but that means API health checks fail, HAproxy relies on these to signal control plane readiness. Are there any ideas to get around this or since its Docker infra not a big concern atm?

bored-school-93100

05/05/2023, 2:35 PM

we are facing an issue with cluster api provider rke2 when deploying workload cluster on machine with several interfaces

bored-school-93100

05/05/2023, 2:35 PM

getIPAddress function defined here :https://github.com/rancher-sandbox/cluster-api-provider-rke2/blob/c565c8fefe0feed1[…]ontrolplane/internal/controllers/rke2controlplane_controller.go

bored-school-93100

05/05/2023, 2:36 PM

use report only the first internalIPAddress

bored-school-93100

05/05/2023, 2:37 PM

as a result the availableIPAddress defined here https://github.com/rancher-sandbox/cluster-api-provider-rke2/blob/c565c8fefe0feed1[…]ontrolplane/internal/controllers/rke2controlplane_controller.go are not the good one in a multi interface setup

bored-school-93100

05/05/2023, 2:37 PM

we have been able to reproduce it with capo and capm3

bored-school-93100

05/05/2023, 2:39 PM

as a result in the rke2ControlPlanes status the availableIPAddress is not the good as a consequence in the workers in the config.yaml file we have this wrong ipaddress defined for server and the workers are not ab le to join the cluster

bored-school-93100

05/05/2023, 2:39 PM

we should be able to define which IP address to use

bored-school-93100

05/05/2023, 2:41 PM

we have tried to defined an advertiseAddress in the serverConfig of the rke2Controlplane as documented in the corresponding CRD

bored-school-93100

05/05/2023, 2:41 PM

Copy code

advertiseAddress:
                    description: 'AdvertiseAddress IP address that apiserver uses
                      to advertise to members of the cluster (default:node-external-ip/node-ip) .'

bored-school-93100

05/05/2023, 2:42 PM

the advertise_address parameter is properly added in the config.yaml of the ControlPlane but seems not to be taken into account

bored-school-93100

05/05/2023, 2:44 PM

Moreover when selecting the first internalIpAddress the getIPAddress function use the machines.cluster.x-k8s.io/status/addresses list

bored-school-93100

05/05/2023, 2:44 PM

in case of BaremetalHost is list is build during the introspection step

bored-school-93100

05/05/2023, 2:47 PM

it means that is not compliant with what we are defining in networkData of the Metal3DataTemplate of the RKE2ControlPlane

bored-school-93100

05/05/2023, 2:47 PM

I believe you guys had a discussion on that topic with @astonishing-eve-43840?

bored-school-93100

05/05/2023, 2:48 PM

is there any update you can share on it?