rancher-users #general

wonderful-judge-81095

05/11/2023, 6:41 PM

Hello, i rebooted my physical server with the rancher gui container and now port 8443 is not running on my server and the gui keep restarting over and over. rancher/rancher-agent:v2.3.1 "run.sh --server https://192.168.29.54:8443 --token cvvcj9fv68657ftb5c8qnmdlb5sh7tnlrgkx8bhbns42qbxrxj226 --ca-checksum cb 084998bd1cbcfa772bc513a3d7be868b87fec0da954c1d788995072212424 --no-register --only-write-certs" Any idea's on how to get this up and running? The original install of the container from a fresh install was docker run -d --restart=unless-stopped -p 8080:80 -p 8443:443 --privileged rancher/rancher:v2.3.1, this worked fine until the reboot and now port 8443 is not up.

elegant-candle-74808

05/11/2023, 8:51 PM

Hi all, does anyone know if it normal or not for imported clusters to not have available the global helm chart repositories and when trying to create/add one, the repo is remaining in state “In Progress” forever ?

busy-library-8150

05/12/2023, 12:50 AM

Error creating Cloud Credentials for Azure: Authentication test failed, please check your credentials

busy-library-8150

05/12/2023, 12:57 AM

Error creating Cloud Credentials for Azure: Authentication test failed, please check your credentials Azure App Registration created by: az ad sp create-for-rbac \ --name="<Rancher ServicePrincipal name>" \ --role="Contributor" \ --scopes="/subscriptions/<subscription Id>" I have Rancher in Docker. I have tried 2.6.12 and 2.7.3 I am using AzurePublicCloud. Is there any trick to this?

millions-gold-16761

05/12/2023, 3:58 AM

The Helm install of Rancher uses Traefik by default. Does the Istio Helm chart replace it, or do I need to specifically attach it to a free IP address to use Istio as a replacement ingress?

loud-smartphone-32412

05/12/2023, 4:45 AM

Hi everyone. I have a 5 node cluster that is stuck in the upgrade phase for almost 24 hours now.

loud-smartphone-32412

05/12/2023, 4:46 AM

This seems to be the issue:

loud-smartphone-32412

05/12/2023, 4:46 AM

kubectl get nodes NAME STATUS ROLES AGE VERSION sr650-01 Ready control-plane,etcd,master 220d v1.24.7+rke2r1 sr650-02 Ready control-plane,etcd,master 220d v1.24.7+rke2r1 sr650-03 Ready,SchedulingDisabled <none> 220d v1.24.7+rke2r1 sr650-04 Ready control-plane,etcd,master 220d v1.24.7+rke2r1 sr650-05 Ready <none> 220d v1.24.7+rke2r1 sr650-01:~ # kubectl get upgrades.harvesterhci.io -n harvester-system --selector=harvesterhci.io/latestUpgrade=true NAME AGE hvst-upgrade-l647v 22h sr650-01:~ # kubectl get jobs -n harvester-system --selector=harvesterhci.io/upgrade=hvst-upgrade-l647v NAME COMPLETIONS DURATION AGE hvst-upgrade-l647v-apply-manifests 0/1 22h 22h sr650-01:~ # kubectl logs -f -n harvester-system jobs/hvst-upgrade-l647v-apply-manifests Found 2 pods, using pod/hvst-upgrade-l647v-apply-manifests-8pkld Wait for upgrade repo ready... Wait for upgrade repo ready... Wait for upgrade repo ready... Wait for upgrade repo ready...

loud-smartphone-32412

05/12/2023, 4:58 AM

This is an upgrade from v1.1.1 to v1.1.2

modern-waitress-72260

05/12/2023, 7:09 AM

Hello, new to rancher. I installed rancher desktop on mac m1 pro. And when I run

k logs xxx

,I get

Error from server: Get "<https://192.168.5.15:10250/containerLogs/default/nginx-deployment-57d84f57dc-f7r9l/nginx>": EOF

. The problem is my IP is 10.100.x.x, not starts with 192. Would anyone help me?

adorable-engine-54231

05/12/2023, 10:07 AM

Hello all, we're using rancher 2.7.1 on eks. we're trying to register self hosted k3s clusters using cattle-agent. this is working like a charm on vanilla k3s. when configuring custom signing keys via k3s parameters (service-account-key-file and service-account-signing-key), the cattle registration fails. Rancher ui is stuck at cluster status "waiting for api to be available". In the rancher server, the rancher pod shows the following errors: "stopping cluster agent for the cluster abc" "failed to start cluster controllers for the cluster abc context is cancelled"

melodic-engine-6726

05/12/2023, 11:02 AM

Hello, Getting this error while pulling the image Error response from daemon: Get "https://orgURL/v2/": context deadline exceeded (Client.Timeout exceeded while awaiting headers). Any help is apreciated.

square-fish-4786

05/12/2023, 11:09 AM

Hello, I’ve a 1.18 cluster built with RKE, and the ingress-controller deployed by RKE without any specific configuration. It seems that the

/etc/resolv.conf

file in the ingress-controller pods is just a mount of the host node, and it’s not setup to do any internal resolve like

search ingress-nginx.svc.cluster.local svc.cluster.local cluster.local

(I have this in a ingress-controller deployed by the official ingress-nginx helm). is it the expected behaviour? Is there a way to setup the ingress controller to resolve internal dns records too? Thank you

worried-fireman-66348

05/12/2023, 2:28 PM

Having a issue with newly created cluser stuck updating. The following messages is displyed on Rancher Gui Updating 1st-cluster Custom RKE2 v1.25.9+rke2r1 — — — Configuring bootstrap node(s) custom-a6b945c6f164: waiting for agent to check in and apply initial plan. Anyone run into this issue?

sticky-jewelry-7454

05/13/2023, 8:36 AM

Ingress-nginx is not able to get Metallb load balancer IP.

crooked-cat-21365

05/13/2023, 8:59 AM

There are frequent messages in Rancher 2.7.1 telling me Pod Security Policies are deprecated. I cannot remember having touched any of these, so how comes that Rancher doesn't leave me alone and starts using the new Pod Security Standards and Admissions under the hood?

boundless-crowd-74052

05/14/2023, 7:23 AM

Good morning collegues, maybe someone knows if I can implement Autoscaler on Nutanix ? https://github.com/kubernetes/autoscaler/blob/master/cluster-autoscaler/cloudprovider/rancher/README.md I already realized deploy rke1 with terraform provider and just want know if I can to do some autoscaler for my app and add nodes automatically to cluster via Nutanix ?

late-house-94518

05/14/2023, 7:41 AM

Hello, how i can communicate with Harvester HCI team?

big-jordan-45387

05/14/2023, 7:56 PM

hi, I'm new to rancher, I am trying to deploy an rke2 cluster with cillium cni, rancher keeps

waiting for cluster agent to connect

I am creating a custom cluster. This is the first node with all the roles (etcd, control plane, worker) Any hint?

microscopic-knife-52274

05/15/2023, 6:50 AM

Hello everyone 🙂 we deployed a downstreamcluster with container-log-max-size and container-log-max-files parameters, but those are not working. We used the same Logger from the first post in this issue and the logs size is over 2GB: https://github.com/kubernetes/kubernetes/issues/110630 May there is something wrong with this part from the yaml? spec: rkeConfig: machineSelectorConfig: - config: kubelet-arg: - container-log-max-size=50Mi - container-log-max-files=3 Any help is appreciated 🙂 Thanks and regards Fabio

agreeable-barista-99354

05/15/2023, 8:06 AM

Hello, I've got a question about

rancher-cli

(on rancher 2.6.x and 2.7.x) - can you tell me why the catalogs are not the same than in the Rancher instance ? And why

rancher app

doesn't see installed helm charts ?

agreeable-barista-99354

05/15/2023, 8:06 AM

I wanted to help my teams to upgrade application via CI/CD using the CLI but it seems impossible...

shy-beach-29482

05/15/2023, 8:30 AM

Hi All, i have installed RKE2 on a baremetal machine, yesterday i was doing load testing on the machine and server was unresponsive, i had to forefully restart it, not sure why the node is in Not ready state, since this is POC setup, so i have one node. I am using Rook ceph as storage and metallb for load balancer when i describe the node, i get this as the response, can someone please help me

adorable-engine-54231

05/15/2023, 9:33 AM

has anyone managed to get aws irsa working? if i just look strange at the k3s singing key parameter, i cannot use rancher anymore

gorgeous-alarm-2311

05/15/2023, 9:48 AM

Can I use environment variable expansion in an RKE

cluster.yml

file? I’m thinking specifically of the

etcd->backup_config

where I’d like to use AWS credentials but I also want the cluster config in revision control. Can I use environment variables?

lively-hospital-24301

05/15/2023, 10:13 AM

Hi guys, I somehow disabled ingress-nginx controller on one of my test clusters. Now I need to turn it on again. But I don't remember how I disabled it. I read the docs about how to deploy ingress controller in RKE2 cluster. According to the docs on the master node I have

Copy code

/var/lib/rancher/rke2/server/manifests/rke2-ingress-nginx.yaml

HelmChart manifest. I tried to restart rke2-server.service to trigger helm chart installation process but nothing had happened. Then I tried to delete rke2-ingress-nginx addon object this didn't help either. How can I trigger rke2-ingress-nginx installation process on already running cluster? Thank you!

eager-nail-58642

05/15/2023, 10:56 AM

Hello, there are still people trying to use the Rancher in single container setup. From my POV that is unmaintained path and should be removed.

gorgeous-alarm-2311

05/15/2023, 11:08 AM

I’ve used rke (1.2.7) to remove old (broken) etcd nodes. They are gone and the kube-apiserver on the control plane “appears” to have a new

--etcd-servers

command-line argument with the functional etcd machines but

kubectl get no

still shows the old etcd nodes! At the moment there is only one etcd node: -

Copy code

$ docker exec 04 etcdctl member list -w table
+------------------+---------+---------------------+-----------------------------+-----------------------------+------------+
|        ID        | STATUS  |        NAME         |         PEER ADDRS          |        CLIENT ADDRS         | IS LEARNER |
+------------------+---------+---------------------+-----------------------------+-----------------------------+------------+
| 9d7b6280a957bef4 | started | etcd-192.168.253.47 | <https://192.168.253.47:2380> | <https://192.168.253.47:2379> |      false |
+------------------+---------+---------------------+-----------------------------+-----------------------------+------------+

gorgeous-alarm-2311

05/15/2023, 11:08 AM

So why is

kubectl get no

still listing the old etcd nodes…?

gorgeous-alarm-2311

05/15/2023, 11:09 AM

Copy code

$ kubectl get no
NAME              STATUS     ROLES          AGE      VERSION
<http://xxx.xxx.xxx.xxx|xxx.xxx.xxx.xxx>   Ready      controlplane   2y361d   v1.19.9
192.168.253.14    NotReady   etcd           2y361d   v1.19.9
192.168.253.166   Ready      controlplane   24m      v1.19.9
192.168.253.30    NotReady   etcd           2y361d   v1.19.9
192.168.253.36    Ready      worker         2y30d    v1.19.9
192.168.253.47    Ready      etcd           2y361d   v1.19.9
192.168.253.64    Ready      worker         2y332d   v1.19.9