Can someone point me in the right direction as to what I need to change to add a rhel image with podman to an rke1 cluster that is already using rhel images with docker please?

Hi All It is about rancher local-path storage . I want to create a PVC with a different path, and I see that it is possible, but I have to mention the path for every node in the “nodePathMap” In such a situation, when we have 20+ nodes, it will be challenging to make an entry for all the nodes, and we have to keep editing the config map whenever new nodes get added. https://github.com/rancher/local-path-provisioner#storage-classes Can we override the default path used in the config map, nodePath location, via storage class?

Does anyone know if restore from snapshot will recover Default project? Default project suddenly disappeared and namespace in the Default project is still there. Thanks.

hey all, trying to install Rancher Desktop on M2 silicone, and having trouble getting the docker daemon to run. It is stuck in

Waiting for image manager to be ready

after the automated configuration for

moby

after a fresh install. Thoughts?

I have RKE cluster that is reporting following message on Cluster Management screen (Rancher 2.7.3)

Failed to ensure monitoring project name: failed to find "cattle-prometheus" Namespace: Get "<https://10.15.6.80:6443/api/v1/namespaces/cattle-prometheus>": dial tcp 127.0.0.1:6443: connectex: No connection could be made because the target machine actively

However when I am looking at Machines tab all the nodes are Active. Any ideas where to look?

Hey guys, I'm trying to update RKE2's ingress helm chart config to allow the ingress to be served on a LoadBalancer service. Here is my yaml file:

apiVersion: <http://helm.cattle.io/v1|helm.cattle.io/v1>
kind: HelmChartConfig
metadata:
  name: rke2-ingress-nginx
  namespace: kube-system
spec:
  valuesContent: |-
    controller:
      service:
        type: LoadBalancer
        loadBalancerIP: {{ kubernetes_api_floating_ip }}

Once I copied this manifest onto the servers, rke2 applied it and took the existing rke2-nginx-ingress controller pods and service down, but didn't re-deploy anything new. The

rke2-server

logs say:

error syncing 'kube-system/rke2-ingress-nginx': handler on-helm-chart-remove: unable to update status of helm chart to add uninstall job name helm-delete-rke2-ingress-nginx, requeuing

But nothing else. Am I doing something wrong, or missing something?

Hello, New to Rancher as an admin and rancher version very old 2.3.1. I had to rebuild the cluster from scratch and I'm using similar configuration settings from another working cluster minus the clustername and workload names. I have 5 physical servers, centos 7, two are just worker nodes and 3 are etcd/control plane. All "system" nodes are active. The problem is the default workloads of 10 elasticsearch pods, 5 running pods on one physical server and 5 pods on the other physical server. The error I get is from the pod events are "0/5 nodes are available: 1 node(s) had taints that the pod didn't tolerate, 4 node(s) didn't match node selector. I'm at a loss for what is wrong, i assume something with the taints? Any advice appreciated

Hi all, attempting to apply rbac update configs to downstream clusters, but getting errors in rancher like [ERROR] error syncing 'p-6276n/deploy': handler cluster-prtb-sync: couldn't get role template rt-dckbd: roletemplates.management.cattle.io "rt-dckbd" not found, requeuing That role template is indeed not in the cluster, but i'm not certain why its even referencing it versus creating a new one. Using terraform to deploy my crb/cr's

Hi all, I am using Rancher v2.7 which I installed in a K3s on Linux based on the documentation on Rancher’s website. How do I install my tls certificate for Rancher administration UI?

Hello guys, Is there a way for Rancher to pull CD git repo configuration in a repo instead of manual creating them in the dashboard or using the api to push the changes?

Hello! I am new in Rancher. I am using MacOS and have a running Docker Desktop. I simply followed the quick-start guide to spin up Rancher container.

$ sudo docker run --privileged -d --restart=unless-stopped -p 80:80 -p 443:443 rancher/rancher

I can see my container is running :

~ docker ps
CONTAINER ID   IMAGE             COMMAND           CREATED        STATUS        PORTS                                      NAMES
871b54fb1003   rancher/rancher   "entrypoint.sh"   1 hours ago   Up 1 hours   0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp   youthful_villani

But when I access localhost on browser via the port 80 or using https, I get this page. Why is that? What could be the problem?

I've lost access to Rancher in one of our managed clusters. I have the Rancher-generated kubeconfig file (that relies on the rancher service) so that's of no use to me to get access to the k8s cluster I was controlling. I have access to all the cluster nodes but the config does not give me direct access to the cluster it was managing. If we assume I cannot restore Rancher, is it possible get out of this mess and manufacture a kubeconfig file that will let me can access the managed cluster directly? One that bypasses the original Rancher service?

Hello guys, maybe someone knows if I can use Autoscaler -- > https://github.com/kubernetes/autoscaler/blob/master/cluster-autoscaler/cloudprovider/rancher/README.md for rke1 which was created by Terraform provider rancher/rke on Nutanix ?

Hello. I am trying to import existing GKE cluster on Rancher (installed via Docker). But I am getting HTTP 403 error. I rechecked the permission and it seems fine. Things I have tried: • Create another service account with recommended roles and using it import clusters • Create service account with Project Owner privilege and using it to import clusters • Reinstalling Rancher Error that I have seen on logs and UI are as follows:

2023/05/09 14:47:46 [ERROR] [gke-handler] error getting clusters: googleapi: got HTTP response code 403 with body: <!DOCTYPE html>
<html lang=en>
  <meta charset=utf-8>
  <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">
  <title>Error 403 (Forbidden)!!1</title>
  <style>
    *{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7%!a(MISSING)uto 0;max-width:390px;min-height:180px;padding:30px 0 15px}* > body{background:url(//www.google.com/images/errors/robot.png) 100%!p(MISSING)x no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0%/100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100%}}#logo{display:inline-block;height:54px;width:150px}
  </style>
  <a href=//www.google.com/><span id=logo aria-label=Google></span></a>
  <p><b>403.</b> <ins>That's an error.</ins>
  <p>Your client does not have permission to get URL <code>/v1/projects/my-project-id/locations/europe-west3/clusters</code> from this server.  <ins>That's all we know.</ins>

In our test environment, there are three nodes clustered with the control plane, master, etcd roles respectively. We intend to use traefik and Metallb for ingress and internal load balancing. Furthermore, Rancher management for this cluster is desired. One nginx external load balancer will be utilized for the k3s cluster and another for the Rancher management cluster. Are we on the right track? If not, help us in setting up the environment.

Does rancher support Xen Hypervisor

Hi everyone, could some one point me in the right direction? I want to know how to add domains & SSL to a deployment. Preferably i want to add a domain inside the label of the deployment. Something like this: labels: domains: domain1.com, domain2.com domaintarget: 80 Not sure if this is possible, please let me know 🙂

Guys can you advice me on how do I build the ISO with the latest commit for harvester?

Hi. Does anyone have any recommendations for good training material for Rancher? I haven't found much on Pluralsight or Udemy. Currently browsing Youtube now.

Hello, I just spent a few days rebuilding my rancher cluster. I had access to the Rancher GUI. I had to restart the physical server and now I can't connect to the GUI. The rancher/rancher-agent:v2.3.1 keeps restarting over and over and the logs say [root@ca819-elastic01 containers]# tail -f 8bca33f6570d6c5a3997fef812ab1fe07ee5875f70a7ee2731ec2eebd3c6d4ca/8bca33f6570d6c5a3997fef812ab1fe07ee5875f70a7ee2731ec2eebd3c6d4ca-json.log {"log":"INFO: Using resolv.conf: search cert.scrub.com nameserver 192.168.140.10\n","stream":"stderr","time":"2023-05-09T231152.170719473Z"} {"log":"ERROR: https://192.168.29.54:8443/ping is not accessible (Failed to connect to 192.168.29.54 port 8443: Connection refused)\n","stream":"stderr","time":"2023-05-09T231152.203669229Z"} {"log":"INFO: Arguments: --server https://192.168.29.54:8443 --token REDACTED --ca-checksum cb084998bd1cbcfa772bc513a3d7be868b87fec0da954c1d788995072212e396 --no-register --only-write-certs\n","stream":"stderr","time":"2023-05-09T231252.548637034Z"} {"log":"INFO: Environment: CATTLE_ADDRESS=192.168.29.54 CATTLE_AGENT_CONNECT=true CATTLE_INTERNAL_ADDRESS= CATTLE_NODE_NAME=ca819-elastic01 CATTLE_SERVER=https://192.168.29.54:8443 CATTLE_TOKEN=REDACTED CATTLE_WRITE_CERT_ONLY=true\n","stream":"stderr","time":"2023-05-09T231252.573724965Z"} {"log":"INFO: Using resolv.conf: search cert.scrub.com nameserver 192.168.140.10\n","stream":"stderr","time":"2023-05-09T231252.581117382Z"} {"log":"ERROR: https://192.168.29.54:8443/ping is not accessible (Failed to connect to 192.168.29.54 port 8443: Connection refused)\n","stream":"stderr","time":"2023-05-09T231252.614896096Z"} {"log":"INFO: Arguments: --server https://192.168.29.54:8443 --token REDACTED --ca-checksum cb084998bd1cbcfa772bc513a3d7be868b87fec0da954c1d788995072212e396 --no-register --only-write-certs\n","stream":"stderr","time":"2023-05-09T231352.987246922Z"} {"log":"INFO: Environment: CATTLE_ADDRESS=192.168.29.54 CATTLE_AGENT_CONNECT=true CATTLE_INTERNAL_ADDRESS= CATTLE_NODE_NAME=ca819-elastic01 CATTLE_SERVER=https://192.168.29.54:8443 CATTLE_TOKEN=REDACTED CATTLE_WRITE_CERT_ONLY=true\n","stream":"stderr","time":"2023-05-09T231353.005510284Z"} {"log":"INFO: Using resolv.conf: search cert.scrub.com nameserver 192.168.140.10\n","stream":"stderr","time":"2023-05-09T231353.011405915Z"} {"log":"ERROR: https://192.168.29.54:8443/ping is not accessible (Failed to connect to 192.168.29.54 port 8443: Connection refused)\n","stream":"stderr","time":"2023-05-09T231353.032803305Z"}

Hi all, If I restart the k3s service on single node, how will it affect the running pods and services? We have few this backend api thats running inside deployment. Just wanted to know if it will be inaccessible during the restart.

Hello guys, Is it possible to access the fleet manager cluster if you are using racher cloud?

Hello everyone. I wanted to ask if there is any official documentation for rancher API. As I can see, the GitHub repo has been archived.

I want programmatically control Rancher server via RestAPI calls if possible

👋 Hi everyone!

Hello, new to rancher (and k8s) here, having quite a time trying to set up my first cluster (using vSphere) following various guides and blogs and youtube videos around the interwebs. I've been able to solve a few things and make some progress, but currently stuck here when trying to create the cluster:

admission webhook "rancher.cattle.io.clusters.provisioning.cattle.io" denied the request: creatorID annotation does not match user

I don't really understand any of the Google results. I could previously try to create a cluster (but was unsuccessful for other reasons due to an improperly configured vSphere template), but now I just get this error. Any ideas?

hi, how do I add add

extra_arg

in RKE2 cluster? I'm running Rancher 2.7.1 with RKE2 1.24.9 I've found this link https://rke.docs.rancher.com/config-options/services/services-extras#extra-args but it is not clear where/how to add these options. I've check in

Cluster management

and went to edit YAML but that does not look like a right place. Any pointers? Thank you

Hi Team,

We can't see monitoring in rancher

image.png