Can I install extensions programmatically?

Hello, I’m trying to create a rancher-machine UI Driver for Proxmox VE. The driver UI reads some data from the Proxmox API like auth realms available, storage location, etc. I’m using the meta/proxy endpoint available in Rancher to avoid CORS issues but there’s no way to import a self signed cert or skip TLS verification for the Rancher Reverse proxy Any suggestions??? I’ve considered the following options: • Somehow make Rancher trust the CA of the custom cert so

meta/proxy

is happy about it • I open a feature request for the rancher team to add Insecure TLS in their reverse proxy maybe could be on the same UI where whitelist for the driver are defined • I do the code myself and I ask the Rancher team to approve the PR with insecure TSL support • I do as a requirement to use the driver to have a valid cert in the Proxmox • I make it so that to use the driver you have to somehow disable https to your Proxmox (do not want to do this for obvious reasons)

ooh also if this is not the right channel for these questions please feel free to point to the right one

Hi, Guys can you tell me how to use such matchers in route for alertmanager?

- matchers:
      name: severity
      matchType: '=~'
      value: 'warning|critical'
    receiver: 'email'
    continue: true

It seams there is some odd logic to transform this

alertmanager-rancher-monitoring-alertmanager

secret, but this secret is not used by alertmanager, instead the another secret is created under the name

alertmanager-rancher-monitoring-alertmanager-generated

but hit one is only cretead from the first one if the first one is somehow valid. There is no error or anything like that but the content is like below:

route:
  receiver: "null"
receivers:
- name: "null"
templates: []

If I use match like that:

- match:
      alertname: CPUThrottlingHigh
    receiver: email

then the generated secret is fine and I got my alert. So is anyone here who know how this secret logic works about alerting, and can provide some example for using matchers as it seams its very unclear how to update it in proper way in rancher.

Hello, Can anyone help me how to get the user email id of the user in Rancher dashboard, when someone login rancher server with either GitHub, google, or another Identity service provider account

Hello everybody, I am trying to understand the relationships among the different resources used by Rancher. Is there some developer documentation that details the relations among the different types of resources that describes the downstream clusters? for instance in rancher 2.7.0 I can see the following CRD: clusters.cluster.x-k8s.io clusters.fleet.cattle.io clusters.management.cattle.io clusters.provisioning.cattle.io clusters.rancher.cattle.io Can I read somewhere why we have all these, and how are they related? Thank you?

@orange-airplane-98016 has left the channel

Hello, I am looking for an answer to the way the Admin can find the user email IDs of the logged-in users in the Rancher dashboard, when someone login rancher server with either GitHub, google, or another Identity service provider account, I know the option is not there, but what’s the right way to implement it? I want to enhance the user management on another web page so that users can self-serve after login and still Admin has more control over the information about the users. Is there a 3rd party tool I can integrate to provide a self-service functionality for rancher users?

We have a custom plugin we have been using with Rancher Dashboard 2.6.7 and later 2.6.8 without issues. When we move to 2.7.1, for whatever reason, when I open a new browser and log in, our plugin is no longer visible. However, if I use Shift-reload (in Firefox), the plugin appears. Was there some sort of behavior change in 2.7.1 that would cause a custom plugin not to be displayed immediately after login?

Sup, B?

Trying to build from source on macos, I eventually get

For this generation to compile you need to have some packages in your GOPATH:

        * <http://github.com/go-openapi/runtime|github.com/go-openapi/runtime>
        * <http://github.com/jessevdk/go-flags|github.com/jessevdk/go-flags>

You can get these now with: go get -u -f ./...

I'm not that familiar with golang, but I cloned the above two repos, and did

cd runtime
go install  <http://github.com/go-openapi/runtime|github.com/go-openapi/runtime>
# wierd, no output

cd ../go-flags
go install <http://github.com/jessevdk/go-flags|github.com/jessevdk/go-flags>
# also no output

I rerun

npm install

and get same missing package output.

Hello, after enabling google Authentication on the rancher, it allows only the domain users with GSuite to authenticate, how do you enable the Gmail users to log in to the Rancher? Is it Normal that only private domain users can log in, and public domain like gmail.com users can’t?

Has anyone run into this issue when starting up? /private/etc/sudoers.d/zzzzz-rancher-desktop-lima: No such file or directory

Can anyone please help?

Hi all, we are going to migrate our platform to Rancher using Rancher Lunched AKS clusters and we have a few concerns that we would like to address: • When is Rancher 2.7.1 going to be released? The Rancher support matrix for 2.7.1 shows k8s v1.24.6 as the highest supported version and Azure will drop AKS v1.24 in a few months... Should this be a concern for us? What could happen if we create our cluster with Rancher for an unsupported K8s version? 1.25 for example. • If we move to AKS imported clusters, in case we add node pools, and upgrade the cluster, will those changes be reflected in the Rancher Platform? • If we face some issues by running an unsupported K8s version on Rancher Launched K8s clusters, is it possible to remove it from Rancher, do stuff we need and then import it into the platform? • It looks like AKS is faster than Rancher regarding supported Kubernetes versions... We would like to know if Rancher will always be on track with AKS regarding the removal of K8s version support and new versions. • What are exactly the big differences between imported AKS and Rancher-launched AKS? What should we look at, and what issues can we face when using one or another? Thanks! 🙂

Guys, I came across the setting up the test env document in developer wiki, it seems out of date, can anyone provide a new document? Posted in #general

I am struggling to debug an environment where cross-cluster communication seems to not be working (requests from the Rancher Dashboard aren’t working). I have noticed that the Cluster Agent pods status are in Crash Backoff. I am trying to understand the role of the cluster agent on a managed cluster that causes the Dashboard requests to a managed cluster to fail.

hello team, i have a custom node driver based on this https://github.com/TritonDataCenter/docker-machine-driver-triton which was working fine with earlier versions of rancher.But now while trying to provision using UI now its stuck waiting to provide cloud credentials

any suggestions how i can make it work

another question.Is there a way i can add/activate node driver through a REST API call or can i bake it along with a image etc?

Quick SAML/Role question: Currently if any user comes in through SAML those users appear to be mapped to the underlying user that was used to setup the saml connector - notably if downloading the kube config file. Is there a way to map SAML users to a local user if one exists with the same ID or some way to auto-create users on login (think the OAuth google connector)? This is a HUGE HUGE HUGE security hole that we are trying to fix. Using LDAP and OAuth are not an option for us and OIDC appears to be just as broken as well 😕

Hi all, i make a bug report of installation of rancher (start from 2.7.5-rc2) on GKE last week, and made a PR as possible solution. Could someone talk a look at it, or perhaps review it? Thanks! (here is the PR https://github.com/rancher/rancher/pull/41874)

@bored-painting-68221 has left the channel

Hello, what’s the right way to build the latest rancher code, I tried with “DRONE_TAG=2.7.5 make” but it fails .

actually it is “DRONE_TAG=v2.7.5 make” which fails

hello all. i have a bad master node (was a 9 node cluster, 3 masters, 3 linux workers, and 3 windows workers) and one of my masters had a disk issue. so i'm trying to replace it, but i keep getting this when i try to join it to the cluster. note, i did delete the bad node out, and i'm trying to join w/ the same node name / ip. it seems like it's timing out downloading "something" it's a custom rancher cluster (rke2 1.24.10) i'm using the "Registration" link on a ubuntu box to join the cluster. i still have 2 health master nodes, i'm trying to replace the failed 3rd master node. my windows node gets the same error, this is what i see in event log: failed to run server: unable to parse connection info file: error gathering file information for file C/var/lib/rancher/agent/rancher2 connection info.json CreateFile C/var/lib/rancher/agent/rancher2 connection info.json The system cannot find the file specified. here's the full output:

[INFO]  Label: <http://cattle.io/os=linux|cattle.io/os=linux>
[INFO]  Role requested: etcd
[INFO]  Role requested: controlplane
[INFO]  Using default agent configuration directory /etc/rancher/agent
[INFO]  Using default agent var directory /var/lib/rancher/agent
[INFO]  Determined CA is necessary to connect to Rancher
[INFO]  Successfully downloaded CA certificate
[INFO]  Value from <https://rancher.mk8s.mydomain.com/cacerts> is an x509 certificate
[INFO]  Successfully tested Rancher connection
[INFO]  Downloading rancher-system-agent binary from <https://rancher.mk8s.mydomain.com/assets/rancher-system-agent-amd64>
[INFO]  Successfully downloaded the rancher-system-agent binary.
[INFO]  Downloading rancher-system-agent-uninstall.sh script from <https://rancher.mk8s.mydomain.com/assets/system-agent-uninstall.sh>
[INFO]  Successfully downloaded the rancher-system-agent-uninstall.sh script.
[INFO]  Generating Cattle ID
[INFO]  Cattle ID was already detected as 3f4f57f4efdc465df1d3ed41e2ebe063806dccf8bf554196c1a38073aff47ef. Not generating a new one.
curl: (28) Operation timed out after 60000 milliseconds with 0 bytes received
[ERROR]  000 received while downloading Rancher connection information. Sleeping for 5 seconds and trying again

looks like it's this command that's timing out. any ideas?

+ curl --connect-timeout 60 --max-time 60 --write-out %{http_code}\n --cacert /tmp/tmp.kjGYl1D9Pr -sS -H Authorization: Bearer xz2tpjw6m8pvrpmrvs96sldpjxd4zvh8l2mt8dcfk4zzlmqwwlcrkq -H X-Cattle-Id: 3f4f57f4efdc465df1d3ed41e2ebe063806dccf8bf554196c1a38073aff47ef -H X-Cattle-Role-Etcd: true -H X-Cattle-Role-Control-Plane: true -H X-Cattle-Role-Worker: false -H X-Cattle-Node-Name:  -H X-Cattle-Address:  -H X-Cattle-Internal-Address:  -H X-Cattle-Labels: <http://cattle.io/os=linux|cattle.io/os=linux> -H X-Cattle-Taints:  <https://rancher.mk8s.mydomain.com/v3/connect/agent> -o /var/lib/rancher/agent/rancher2_connection_info.json

大家好，我想尝试梳理rancher 的代码流程，但是资料很少，只能通过代码一点点的去啃，但是这个过程很慢，请问有相关资料吗? 代码框架，设计模式之类的

Hi, Looking for ways to create projects with project name and namespaces. Can someone please help?

@astonishing-toddler-94422 has left the channel