https://rancher.com/ logo
Docs
Join the conversationJoin Slack
Channels
academy
amazon
arm
azure
cabpr
chinese
ci-cd
danish
deutsch
developer
elemental
epinio
espanol
events
extensions
fleet
français
gcp
general
harvester
harvester-dev
hobbyfarm
hypper
japanese
k3d
k3os
k3s
k3s-contributor
kim
kubernetes
kubewarden
lima
logging
longhorn-dev
longhorn-storage
masterclass
mesos
mexico
nederlands
neuvector-security
office-hours
one-point-x
onlinemeetup
onlinetraining
opni
os
ozt
phillydotnet
portugues
rancher-desktop
rancher-extensions
rancher-setup
rancher-wrangler
random
rfed_ara
rio
rke
rke2
russian
s3gw
service-mesh
storage
submariner
supermicro-sixsq
swarm
terraform-controller
terraform-provider-rancher2
terraform-provider-rke
theranchcast
training-0110
training-0124
training-0131
training-0207
training-0214
training-1220
ukranian
v16-v21-migration
vsphere
windows
Powered by Linen
epinio
  • n

    nutritious-application-85076

    05/13/2022, 10:24 AM
    Installing epinio is not so simple - https://docs.epinio.io/installation#installation. What should I do if I want to deploy it top of a k3s cluster installed - https://rancher.com/docs/rancher/v2.6/en/quick-start-guide/deployment/quickstart-manual-setup/ ?
    b
    • 2
    • 8
  • n

    nutritious-application-85076

    05/13/2022, 10:46 AM
    I got an error when I try to do
    epinio push
    -->
    epinio push --name sample --path sample-app
    
    🚢  About to push an application with the given setup
    Manifest: <<Defaults>>
    Name: sample
    Source Origin: /home/snowdrop/epinio/assets/sample-app
    Target Namespace: workspace
    
    ⚠️  Hit Enter to continue or Ctrl+C to abort (deployment will continue automatically in 5 seconds)
    
    Create the application resource ...
    2022/05/13 12:46:15 EpinioApiClient: "msg"="request failed" "error"="Post \"/api/v1/namespaces/workspace/applications\": unsupported protocol scheme \"\""
    
    ❌  error pushing app to server: making the request: Post "/api/v1/namespaces/workspace/applications": unsupported protocol scheme ""
    b
    c
    s
    • 4
    • 25
  • n

    nutritious-application-85076

    05/13/2022, 10:57 AM
    Will the Epinio UI be merged within the next version of the Rancher UI?
    c
    s
    h
    • 4
    • 3
  • n

    nutritious-application-85076

    05/13/2022, 10:58 AM
    Can we define which k8s manifests epinio should deploy when a new application is installed ?
    c
    • 2
    • 6
  • f

    freezing-holiday-13112

    05/13/2022, 5:08 PM
    Followed the latest instructions for epinio install on rancher-deskstop Used the paketo project for my source to try out things. The push stalled out on staging. So here are some of the commands I did to try and determine what was wrong
    c
    • 2
    • 10
  • b

    bulky-church-2468

    05/16/2022, 5:29 PM
    Is epinio rio.io successor?
    h
    • 2
    • 3
  • b

    bulky-church-2468

    05/18/2022, 11:00 AM
    Could I just use an image to host an app on epinio? And bypass the buidpack step, is that what --container-image-url provide?
    b
    c
    • 3
    • 19
  • b

    bulky-church-2468

    05/18/2022, 11:51 AM
    Is there a way to change the DNS after epinio installation?
    g
    c
    • 3
    • 15
  • c

    cuddly-holiday-9089

    05/30/2022, 6:46 AM
    Nice blog post from @high-morning-12231: https://www.suse.com/c/rancher_blog/customizing-your-application-with-epinio/
    f
    • 2
    • 5
  • c

    cuddly-holiday-9089

    06/08/2022, 8:29 AM
    If you are interested in discussing about Epinio in person, join us today for a chat: https://susecon2022.braindate.com/topics/84175/ . Only a few spots left.
    :epinio: 1
    • 1
    • 2
  • w

    witty-honey-18052

    06/16/2022, 7:46 PM
    hey y'all, having a little bit of trouble understanding the helm install options when installing into a downstream Rancher cluster, and have a few questions API Username: Are we creating this? Or is this an existing username? API Password: Are we creating this? Or is this an existing password? Access control allow origin: Is this the global rancher cluster dashboard or the cluster explorer link? (for example, https://cluster.krum.io/?, https://cluster.krum.io/dashboard/?, https://cluster.krum.io/dashboard/c/c-123456/?)
    b
    c
    • 3
    • 20
  • f

    freezing-holiday-13112

    06/29/2022, 4:05 PM
    I get this right at the deployment stage with epinio Deploying application ... ❌ error pushing app to server: can't deploy app: Internal Server Error: failed to fetch https://github.com/epinio/helm-charts/releases/download/epinio-application-0.1.18/epinio-application-0.1.18.tgz : 401 Unauthorized
    c
    • 2
    • 3
  • c

    clever-sandwich-32307

    07/01/2022, 3:57 PM
    Hello All 👋 I am trying out Epinio for my COmpany’s local development environment. I need help with configuring the Epinio setup into my Local Rancher Desktop. I have followed the steps mentioned in the Docs. However, when I am accessing https://epinio.127.0.0.1.sslip.io I get certificate error in my Chrome. I can see all my services up and running, can you help me with this so that we in our company can start using Epinio ? Thanks in advance !
    ❯ kubectl get pods -A
    NAMESPACE      NAME                                       READY   STATUS      RESTARTS      AGE
    kube-system    helm-install-traefik-crd-zrptx             0/1     Completed   0             29m
    kube-system    helm-install-traefik-z7hb7                 0/1     Completed   2             29m
    kube-system    local-path-provisioner-6c79684f77-qgddd    1/1     Running     1 (18m ago)   29m
    kube-system    svclb-traefik-5rxc4                        2/2     Running     2 (18m ago)   29m
    cert-manager   cert-manager-cainjector-747cfdfd87-9ghhb   1/1     Running     1 (18m ago)   28m
    cert-manager   cert-manager-webhook-67cb765ff6-wr5mb      1/1     Running     1 (18m ago)   28m
    epinio         minio-0                                    1/1     Running     1 (18m ago)   27m
    kube-system    coredns-d76bd69b-mmfbp                     1/1     Running     1 (18m ago)   29m
    cert-manager   cert-manager-5b6d4f8d44-7kf49              1/1     Running     1 (18m ago)   28m
    epinio         epinio-server-997c96b44-8pmgs              1/1     Running     1 (18m ago)   27m
    epinio         kubed-7d7cb55879-hfcqt                     1/1     Running     1 (18m ago)   27m
    epinio         epinio-ui-6958cf6685-btzwk                 1/1     Running     1 (18m ago)   27m
    epinio         registry-55bc9c864b-2ddk7                  2/2     Running     2 (18m ago)   27m
    kube-system    traefik-df4ff85d6-qnc47                    1/1     Running     1 (18m ago)   29m
    kube-system    metrics-server-7cd5fcb6b7-522vz            1/1     Running     1 (18m ago)   29m
    f
    h
    +2
    • 5
    • 16
  • l

    late-monitor-54503

    07/07/2022, 2:51 PM
    Trying Epinio Extension on Docker Desktop Windows 11 with WSL - I have kubernetes installed and running. The extension installed successfully but when trying to install Epinio binaries (Install Button in the extension UI) Getting the following error - What does that mean? and how to get a running Epinio on Windows?
    h
    b
    c
    • 4
    • 15
  • k

    kind-pilot-18955

    08/04/2022, 12:46 PM
    Hello everyone, my name is David Vollath and I'm studying computer science at the Nuremberg Institute of Technology. I'm currently writing (or rather beginning to write) my bachelor's thesis about adding multi-cluster support to epinio. I hope to get help if needed and eventually feedback once my work has progressed far enough for that. Cheers, David
    🙌 4
    :epinio: 4
    ❤️ 2
    :rancher_employee: 2
    👍 1
    b
    c
    +2
    • 5
    • 4
  • b

    busy-teacher-96897

    08/05/2022, 11:16 PM
    Looks like a start-up from Rancher roots trying to address the same problem https://www.itprotoday.com/containers/acorn-labs-rancher-co-founders-new-kubernetes-startup
    c
    • 2
    • 1
  • b

    busy-teacher-96897

    08/05/2022, 11:18 PM
    BTW, anybody here who needs help with getting epinio into AWS with ALB + WAF, let me know... with the help of @cuddly-holiday-9089, we made good progress and should be able to write a good instruction set in the community documentation.
    c
    • 2
    • 4
  • b

    broad-dream-81849

    08/11/2022, 7:36 PM
    just as a workaround, does it work with the
    --skip-ssl-verification
    flag?
    c
    • 2
    • 2
  • b

    busy-teacher-96897

    08/12/2022, 2:08 AM
    any consideration for this 😉 https://github.com/epinio/epinio/issues/1681
    c
    • 2
    • 2
  • c

    cuddly-holiday-9089

    08/29/2022, 5:34 AM
    Hi @strong-glass-25362 I was looking on how to send you an invitation when I noticed you managed to join already, so welcome ! After creating the services, the command you want to run in order to "bind" it to the application is
    epinio service bind
    but this assumes the application is already created. The
    -b
    flag of the
    push
    command is there to bind existing configurations but the service configurations are only created the first time the service is bound to an application. So there is a chicken-egg problem here. The solution I think is: •
    epinio service create...
    •
    epinio app create...
    (beware, this is "create" not "push") •
    epinio service bind
    (now the application exists, so this is possible) •
    epinio push
    let me give it a try myself to save some back an forth between timezones if this doesn't work.
    ✅ 1
    👍 1
    s
    • 2
    • 3
  • b

    broad-dream-81849

    09/13/2022, 8:59 PM
    hi all, tomorrow we are going to have an online meetup about Epinio! Join us to see a demo, and ask any questions about it! https://more.suse.com/global_online_meetup_epinio_developer_platform.html 🚀 :epinio:
    ✅ 3
  • c

    clever-analyst-23771

    09/15/2022, 6:23 PM
    Who here made it to our Epinio Global Online meetup this week?
  • c

    cuddly-holiday-9089

    09/21/2022, 6:41 AM
    @busy-teacher-96897 this is how I usually setup my development environment (moving our conversation here):
    #!/bin/bash
    
    # Checkout a branch
    git checkout 1571-re-dex-spike
    
    # Sync git submodule
    # NOTE: This will cleanup dangling files inside the submodule too (because of `git clean -dffx`).
    # Adapt this command if necessary
    git submodule sync --recursive && git submodule update --init --recursive && git submodule foreach --recursive "git co . && git reset --hard && git clean -dffx"
    
    # Prepare a dev cluster
    make acceptance-cluster-setup
    
    # Configure KUBECONFIG to talk to the dev cluster
    export KUBECONFIG=$PWD/tmp/acceptance-kubeconfig
    
    # Install cert-manager
    make install-cert-manager
    
    # Install Epinio from the checked out commit
    make prepare_environmnet_k3d
    
    # You should now be able to use Epinio
    b
    • 2
    • 6
  • c

    cuddly-holiday-9089

    09/21/2022, 6:55 AM
    I was talking with @busy-teacher-96897 and we think it may be useful to have a
    community
    repository in Epinio where people can contribute their scripts or other tooling around Epinio. We can start with a README that explains what's in each directory and each directory (tool/script/whatever) can have its own README. If a tool becomes popular it could be extracted to its own repo but for now, keeping them in one place should be a good start. What do you all think? Fred already has some useful Makefiles and scripts to help deploy Epinio in AWS.
    b
    b
    +2
    • 5
    • 5
  • c

    cuddly-holiday-9089

    10/06/2022, 6:30 AM
    @broad-dream-81849 do you have any docs around the test you did with dex and GitHub connector? @busy-teacher-96897 might find it useful
    🙌 1
    👍 1
  • b

    busy-teacher-96897

    10/06/2022, 6:32 AM
    yeah, thanks!
  • b

    broad-dream-81849

    10/06/2022, 7:04 AM
    not really, because it was something more Dex/Github related, and they provide their docs around it. But I can help you on this 🙂 Maybe we could think about adding this as a tutorial/how-to/example if it's useful. After have installed Epinio you need to create a Github application, so go to your Profile > Developer Settings > Oauth Apps > New Oauth App. Name: "Whatever", Homepage: "https://auth.myepiniocluster.com", Authorization callback URL: "https://auth.myepiniocluster.com/callback" (probably for the homepage you can define the "epinio.xxxx.yy" or something else). Then take note of the ClientID and the ClientSecret. With those you need to edit the
    config.yaml
    inside the
    dex-config
    secret in the
    epinio
    namespace, adding a Github connector:
    connectors:
    - type: github
        id: github
        name: GitHub
        config:
        clientID: my-client-id
        clientSecret: my-secret
        redirectURI: "<https://auth.myepiniocluster.com/callback>"
    Then you can restart Dex to get the configuration, and you are good to go! You can probably tweak also the helm-chart values to push the dex configuration instead of manually update them, but I haven't tried it.
    🙏 1
  • c

    cuddly-holiday-9089

    10/06/2022, 9:04 AM
    btw, Epinio version
    1.3.0
    is now released: https://github.com/epinio/epinio/releases/tag/v1.3.0 including external authentication with dex, self-updating cli and other improvements and fixes. Everybody's feedback is welcome!
    🎊 1
    🎉 1
  • c

    careful-piano-35019

    10/06/2022, 1:22 PM

    https://youtu.be/2BPEUNis0v0?t=2300▾

    Epinio is discussed between 38:20 & 42:35
    :epinio: 1
    b
    c
    • 3
    • 3
  • b

    busy-teacher-96897

    10/06/2022, 5:37 PM
    HI @cuddly-holiday-9089 @broad-dream-81849 Not sure if this is really a bug on dex, but here u go: https://github.com/epinio/epinio/issues/1781
    👍 1
    b
    c
    • 3
    • 22
Powered by Linen
Title
b

busy-teacher-96897

10/06/2022, 5:37 PM
HI @cuddly-holiday-9089 @broad-dream-81849 Not sure if this is really a bug on dex, but here u go: https://github.com/epinio/epinio/issues/1781
👍 1
b

broad-dream-81849

10/06/2022, 7:44 PM
Hi Fred, thanks for testing and reporting this. I'm just guessing but I'm pretty sure that is a DNS issue, with the Epinio pod not able to resolve correctly the local IP address. I didn't hit in my tests because k3d use a different IP. I'll try tomorrow with Rancher Desktop, I'm pretty sure it will occur.
b

busy-teacher-96897

10/06/2022, 8:18 PM
no problem... glad i can help to improve the product
c

cuddly-holiday-9089

10/07/2022, 6:35 AM
I replied on the ticket. I had the same problem yesterday
b

broad-dream-81849

10/07/2022, 6:37 AM
Yes, I was actually thinking the same. It doesn't make sense of reaching Dex from the outside world. We should fix it going through the dex k8s service directly.
c

cuddly-holiday-9089

10/07/2022, 6:38 AM
I have a feeling that there is some validation that requires the provider url to match the one that was used when the token was issued. I may be wrong though
b

busy-teacher-96897

10/07/2022, 3:48 PM
Just one additional clarification. If we are using the host IP address, would this work ? Sounds like it would. If so, i believe this is an
invalid
test. If so, we should not need to fix it... and i can change my way of testing it.
let me verify later if i can run it using a real DNS with SSL. We have a script for that too. Just that i need to do manual step of creating entries in route53 (cannot run on local) Or, do you mean... the slip.io would also work if we use the non-localhost IP address.
i just verify... if i use a proper domain... it worked!
c

cuddly-holiday-9089

10/10/2022, 5:54 AM
yes, the problem is that dex needs to be accessible on that domain both from the cli and from the epinio server side, so localhost "resolves" to a different thing in these 2 cases. Still, localhost is useful in some cases so we will still try to find a workaround if possible
b

busy-teacher-96897

10/10/2022, 5:22 PM
hmm, i am not sure if auth or epinio.127.0.0.1.sslip.io would ever work in this case since it will resolve to localhost especially if this is a call from inside a pod...
not sure what u can do... I can try if i use the dockerip to see if it works
b

broad-dream-81849

10/10/2022, 6:04 PM
We need to have a look and play a bit with it. The unfortunate thing is that the verification of the jwt is done checking the same address, so probably we cannot use easily the internal k8s dns
b

busy-teacher-96897

10/11/2022, 4:27 PM
i saw the PR ! Thanks
b

broad-dream-81849

10/11/2022, 4:29 PM
Aha, you're welcome. I hope to merge it tomorrow
✅ 1
b

busy-teacher-96897

10/25/2022, 4:41 AM
Just test the latest 1.4 using the default settings and oidc with slip.io now works good. However, if i install epinio and change the password.. i was not able to login. Below is the code, i was not able to login via epinio login (with -oidc flag)
helm install epinio -n epinio --create-namespace --version ${EPINIO_SERVER_VERSION} epinio/epinio \
		--set global.domain=${DOMAIN} \
		--set global.tlsIssuer=${TLS_ISSUER} \
		--set api.users[0].role=admin \
		--set api.users[0].username=${ADM_USR} \
		--set api.users[0].passwordBcrypt="$(echo ${ADM_PWD_ENCRYPT})" \
		--set api.users[1].role=user \
		--set api.users[1].username=${DEV_USR} \
		--set api.users[1].passwordBcrypt="$(echo ${DEV_PWD_ENCRYPT})"
		
	kubectl rollout status deployment epinio-server -n epinio --timeout=480s
does something changed ? do i need to add new parameters ?
b

broad-dream-81849

10/25/2022, 6:47 AM
No, nothing new. Could you write down exactly the steps to reproduce the issue, and which is the error? I guess that the problem is about some "dirty" credentials, you should try to delete your Epinio settings file
just to add one more insight if you login with the --oidc flag you will have the jwt token in your settings file, and it has priority over the user/pass in it (if any) 🙂
b

busy-teacher-96897

10/26/2022, 4:30 AM
I think you could be right... i just redo it again... and now it works fine.
We figure out the issue on the user creation side. It used to worked when we pass 'HASHPASSWORD' (with single quote) but now it is not. We need to remove the single quote
b

broad-dream-81849

10/27/2022, 8:35 PM
🤦‍♂️ and now that you tell me I know what this is about. There was a bugfix in the helm chart, that added the quoting to the username/passwords that were failing when they were numbers.. I'm sorry but I really haven't linked the two..
b

busy-teacher-96897

10/28/2022, 6:10 AM
no worries... i remember i read that issue... so that make sense. It should be apparent to me when i was transferring code for the Makefile (for u to test)... it is one of the stuff that i changed... it was not apparent to me as well! So that make both of us ;-)
View count: 2