hi

can anyone give me link for rancher api docs

any idea how to refresh snapshot , as in UI i am not able to see snapshot, while its visible in cli

hi everyone

Is there any official guide how to replace broken etcd member in RKE v1.4 created cluster, there's lots about checking the health of etcd but when it comes to replace procedure there's none, or I'm not seeing it in this stressful time fore me 🙂 Any hint help?.

In Rke2 rancher (snapshotter = "overlayfs"), the worker node is keeping the pod snapshotter folder, even the pod is deleted, Cannot we clean-up all snapshotter of pod after its deletion. Please suggest.

Do RKE and RKE2 support kubevirt add-on ? What CNIs are supported with kubevirt ?

How do I use prometheus and grafana monitor multiple clusters under one pane in Rancher?

Hi everyone, I'd like to upgrade from rke 1.3.3 with k8s 1.24.2 to rke 1.4.4 with k8s 1.24.10 through terraform. I got a rook ceph installed within cluster, is there any step I should go through prior to updating ? I fear to lose any data during the process. I left

max_unavailable_worker

and

max_unvailable_controlplane

untouched thus I expect to have at any time one master and one worker updating at a time (this is a 3 master / 3 worker cluster).

Beside is it possible to do a rolling upgrade of k8s one node at a time with help of label maybe ?

I’m wondering if it’s even possible to upgrade rke node one by one ?

Hi Rancher users, I have a question about an example on GitHub. How do you set the

ClusterValues

on a cluster in Fleet?

Hello ! I created a custom webhook to generate certificates from the LetsEncrypt Staging API for Rancher's web UI. To pass the certificate to Rancher, I used two options:

--set ingress.tls.secretName=secret-name

--set ingress.tls.source=secret.

However, when attempting to add an RKE Downstream cluster, I encountered an error and was unable to proceed.

Doing /etc/rancher/ssl ls: cannot access 'docker-machine-driver-*': No such file or directory downloaded file failed sha256 checksum download of driver from <https://rancher.example.com/assets/docker-machine-driver-outscale> failed

Hello everyone, I am using traefik as the ingress controller for K3S cluster having two master nodes and three worker nodes. When I do kubectl get ingress, the address field has multiple IPs instead of one and don’t know why or how to fix it

Trying to deploy a fresh rancher install on rke2 running in CIS Profile Mode

cis-1.23

. I get a weird error on my deployment that says

pods "rancher-#####-" is forbidden: no PriorityClass with name rancher-critical was found

but I see the

rancher-critical

PriorityClass defined. What am I missing here?

Hello, earlier today I accidentally deleted a rke1 cluster from my rancher instance. I was able to reimport it, however the node registration command/token is no longer present in the UI. Going through terraform I get an error that the token is not a part of the data object as well:

│   on <http://lb.tf|lb.tf> line 11, in resource "paperspace_script" "gradient_lb":
│   11:     rancher_command              = rancher2_cluster.main.cluster_registration_token[0].node_command
│     ├────────────────
│     │ rancher2_cluster.main.cluster_registration_token is empty list of object

Hello Wanted to know the minimum bandwidth requirement for creating and using Kubernetes cluster smoothly using RKE1. Can someone share min value for: 1. Internet Bandwidth. (For pulling images) 2. Intranet Bandwidth. (For internal comminication between kube-apiserver and service to service calls.) 3. DISK IO : (for etcd backup to operate normallu)

Hello, Anyone can help with a basic issue with the system-upgrade-controller? 😁

Hi We are facing the below issue and the Rancher nodes is stuck in Waiting for registering with kubernetes Kubelet failed to get node info: failed to get instance ID from cloud provider: Retriable: false, RetryAfter: 0s, HTTPStatusCode: 401, RawError: Retriable: false, RetryAfter: 0s, HTTPStatusCode: 401, RawError: azure.BearerAuthorizer#WithAuthorization: Failed to refresh the Token for request to https://management.azure.com/subscriptions/1797627d-40da-4b11-ad4b-e6015a9692a4/resourceGroups//providers/Microsoft.Compute/virtualMachines/prod-4?%24expand=instanceView&api-version=2019-07-01: StatusCode=401 -- Original Error: adal: Refresh request failed. Status Code = ‘401’. Response body: {“error”“invalid client”,“error description”“AADSTS7000215: Invalid client secret provided. Ensure the secret being sent in the request is the client secret value, not the client secret ID, for a secret added to app ‘4fc4e74d-6e9c-4058-aae2-7772ca6b16a5’.\r\nTrace ID: 1b4fb5ca-4776-4f9b-8e71-a01dff0e5800\r\nCorrelation ID: 2198d06b-136a-493c-9228-caded4325d7d\r\nTimestamp: 2023-05-19 085324Z”,“error_codes”[7000215],“timestamp”“2023-05-19 085324Z”,“trace_id”“1b4fb5ca 4776 4f9b 8e71 a01dff0e5800”,“correlation id”“2198d06b-136a-493c-9228-caded4325d7d”,“error_uri”:“https://login.microsoftonline.com/error?code=7000215"} We have also created appropriate subscription in Azure Steps followed: 1. Created app registration 2. Azure added client secret 3. Assigned contributor role to subscription 4. Added cloud credential in Rancher with the secret value 5. Node has appropriate NSG assigned 6. The secrets is valid Somehow the Rancher is still taking the old secret and not fetching the updated one

Hi, With RKE1 we had some proxy containers (squid) running. We use them to prefilter traffic to the internet (only allowed client ips can forward traffic to the internet gateway). With RKE1 we exposed the host port. If we do the same with RKE2 there is a source NAT active. In the proxy logs we can see only the host ip. Is there way to disable source NAT for host ips or is there a better way to access the squid from outside the K8S cluster (default ingress does not work with squid)?

Hello good morning team, i have an problem while creating rancher LB, and deploy my workload on url. My LB7 is stuck in initializing screen all time. I am using local cluster single node, buy VM from EC2 amazon , install rancher on it and then using local node cluster. Please help me.to solve this ingress thanks

hi folks, quick question regarding the following scenario: 1. We create projects in clusters using API calls from our self-service platform 2. After project creation, we add the requesting user as a project owner by creating a

ProjectRoleTemplateBinding

referencing their

userId

as well as the

ProjectRoleTemplate/project-owner

, also via API. 3. The requesting user can access their project, create namespaces etc. BUT cannot add other users to their project. Is this intended behaviour? Does that mean that only cluster admins are able to add members to any given project, but

project-owners

are not, unless they are ALSO cluster/gobal admin at the same time?

Hello , I have this problem

image.png

how could i solve it?

Hi Team, getting below alert, any info how to rectify it. description = 16 Pods of DaemonSet cattle-logging-system/rancher-logging-rke-aggregator are running where they are not supposed to run. runbook_url = https://github.com/kubernetes-monitoring/kubernetes-mixin/tree/master/runbook.md#alert-name-kubedaemonsetmisscheduled summary = DaemonSet pods are misscheduled.

Is there a way to manage the cluster definitions from the rancher UI as code? We'd like to try to do gitops even with our cluster definitions

Hi, I'm trying to figure out how to get local images deployment on k3s working: I have a single node on a RPi and I have k3s installed and working and I've recently set up nerdctl and buildkit (not Rancher Desktop though) and I can build images but I can't deploy them as local images in k3s. I get ErrImageNeverPull. I've set them to Never pull as they are local. I've tried building them into the k8s.io namespace and that doesn't help. I can see them in nerdctl as images but not in crictl. On Rancher Desktop (another machine) I don't have to do anything extra after build to deploy. What am I missing here? Note that if I nerctl save and import the image using k3s ctr, then it all works but I didn't think I should have to do that for local images. Rancher Desktop doesn't require additional steps so I am trying to figure this out. Anyone have any ideas?

I've also tried messing around with /etc/buildkit/buildkitd.toml and the namespace but that doesn't seem to help either.