rancher-users #general

bored-church-90799

06/27/2023, 4:26 PM

Is longhorn container images are FIPS compliance images ?

busy-photographer-15014

06/27/2023, 4:43 PM

Copy code

Hello Guys!

A question that for me is not clear in the Harvester + Rke documentation:

Should I put up an RKE cluster on top of the Harvester VMs or should the RKE be installed on other bare metal servers so that they are managed by the Harvester?

btw: the above approach is allowed, but I don't know if it's in fact a good practice. I would like the community's opinion.

Grateful!

narrow-honey-55422

06/28/2023, 8:53 AM

Hi i'm creating an EKS with terraform, i want to install rancher on it. I'm using helm_release for rancher. rancher version 2.7.4, EKS version 1.24 but the rancher does not start. the logs from :

eks-config-operator

pod :

Copy code

W0628 08:11:35.689163       1 loader.go:223] Config not found: /root/.kube/config
time="2023-06-28T08:11:35Z" level=info msg="Starting <http://eks.cattle.io/v1|eks.cattle.io/v1>, Kind=EKSClusterConfig controller"
time="2023-06-28T08:11:35Z" level=info msg="Starting /v1, Kind=Secret controller"

is there a way to forward the config to rancher chart and not let it search?

miniature-lock-53926

06/28/2023, 9:50 AM

Does anybody know how the cloud-provider-config is injected on downstream cluster nodes when using cloudprovider harvester?

ancient-pharmacist-94988

06/28/2023, 10:53 AM

Would anyone be so kind to tell me what happened to

<http://apps.project.cattle.io|apps.project.cattle.io>

? It's used for example here, when in fact it does not really exist (anymore?).

some-judge-86614

06/28/2023, 1:38 PM

Hi Team, GE

some-judge-86614

06/28/2023, 1:38 PM

Copy code

msg="cannot access containerd socket \"\\\\\\\\.\\\\pipe\\\\containerd-containerd\": open \\\\.\\pipe\\containerd-containerd: The system cannot find the file specified

some-judge-86614

06/28/2023, 1:39 PM

I'm getting this error in my window machine when I pull image from private repo. Can any body has solution for this?

some-judge-86614

06/28/2023, 1:39 PM

I'm using rancher desktop version: 1.8.1

blue-kitchen-51801

06/28/2023, 2:18 PM

when creating a Kubernetes cluster from Rancher UI, how can we set HTTP_PROXY env variables for all provisioned machines (using Harvester)?

rich-king-88912

06/28/2023, 3:08 PM

Hi everyone! Does any body know whether RKE2-server can be installed on one SLE15/openSUSE docker image? In other words, I want to start a SLE15/openSuse container and then install rke2-server into that container for testing purpose.

acceptable-belgium-2684

06/28/2023, 5:24 PM

I have more or less successfully deployed a Rancher cluster into EKS, did that using a Helm chart using the

2.7.4

stable release. I installed into a different namespace than

cattle-system

The Rancher UI shows nicely but I am unable to login with the provided

bootstrapPassword

When I pass in the correct password I immediately get a 401 error. The secret has been created and contains the password that I have provided. Any hints on how to troubleshoot this issue?

little-smartphone-40189

06/28/2023, 7:48 PM

Is there a way to get into the rke state and remove an old node the cluster thinks is still there? It's stuck trying to clean up a node that is gone

adorable-tiger-9402

06/28/2023, 8:45 PM

Hola buenas tardes

adorable-tiger-9402

06/28/2023, 8:47 PM

please alguien me puede ayudar por favbor, quiero acceder a mi clutsre de kubernetes sin tener que pasar por el servidor de rancher, es decir conectarme al cluster sin depender de rancher

adorable-tiger-9402

06/28/2023, 8:47 PM

please , Can someone please help me, I want to access my kubernetes clutsre without having to go through the rancher server, that is, connect to the cluster without depending on rancher

busy-photographer-15014

06/28/2023, 10:54 PM

Hello! I'm facing difficulties installing harvester latest via .iso in /smb directly on the server's ipmi. Installation freezes and does not throw any kind of error. Has anyone gone through something similar?

busy-photographer-15014

06/28/2023, 10:54 PM

image.png

breezy-umbrella-46432

06/29/2023, 6:23 AM

Hello, I want to deploy rancher using helm on a K3s cluster. I'm trying to make an SSL Termination with a privateCA but after installing the rancher with certmanager and using haproxy on layer 4, but for some reason the HAPROXY is ignored and the TRAEFIK selfsigned certs are respected. Here's my deployment command: # "helm install rancher rancher-stable/rancher --namespace cattle-system --set hostname='some.domain.com' --set replicas=3 " I tried couple of things: 1. Disable the traefik installation during the k3s deployment. This broke my k3s deployment 2. I tried adding the options --set ingress.tls.source=external --set privateCA=true", but with these options the helm installation failed. Can someone tell me what is the best way to complete the SSL Cert Installation?

bulky-family-44999

06/29/2023, 8:47 AM

Hi, I'm trying to find the best practices for certificate rotations. It appears that the expired/expiring certificates are only renewed when k3s is started. So if k3s hasn't been restarted for over a year the certificates expire and then things start to have problems. Am I supposed to schedule a restart of k3s on each node regularly just to renew certificates? Like every ~30 days?

jolly-helmet-62017

06/29/2023, 9:20 AM

does anyone know what generates the machine names (e.g.

metadata.name = custom-936e634a6f12

)? i would like to customize/rename them to be more meaningful. i found

CATTLE_NODE_NAME

system-agent-install.sh

which let me say

<http://metadata.labels.rke.cattle.io/node-name|metadata.labels.rke.cattle.io/node-name> = kube-sv4-dev-controlplane-qncg9

, i'm wondering if can also do that with

metadata.name

Name

is meaningful like

Node

abundant-waitress-4577

06/29/2023, 2:26 PM

Hi everyone! I am new to kuberenetes, and would like to build a cluster with k3s on a single node for MongoDB. Anyone has some useful guides for me? Thanks!

little-cat-5317

06/29/2023, 3:23 PM

Hi folks, I am new to Rancher and trying to host Rancher on my AWS Linux EC2 Instance. I have running Drone CI using docker configured with nginx, letsencrypt and my domain. Installed Rancher following this docs, but after that I couldn't access my previous nginx configured domains and can only access rancher (having SSL problems) Can anyone help me to host Drone and Rancher on same instance with nginx?

nutritious-umbrella-66954

06/29/2023, 8:17 PM

Is there a channel for discussion about Canal/Calico and how to manage Network Policy through Rancher?

wide-book-96534

06/29/2023, 10:58 PM

I recently made the transition to Rancher v2 logging, and I must say it appears to be more complex compared to v1. One noticeable difference is the absence of the convenient UI testing feature we had before. I have a couple of questions regarding this upgrade: 1. Previously, we were able to configure logging at a project level, but now it seems that setting up logging is done at a namespace level. Could you confirm if my understanding is correct? 2. Another observation is that my logs now take several minutes to be flushed to my OpenSearch instance, despite having set the Output flush_interval to 30 seconds. Is there any additional configuration I need to adjust for this to work properly?

melodic-planet-23258

06/30/2023, 9:17 AM

Hi, not sure this is the right channel. I am (quite new to kubernetes and) trying to configure deny/allow-rules for the nginx-ingress-controller. When I try to configure

ingress-nginx-controller-admission

Service in order to set

spec.externalTrafficPolicy="Local"

, Rancher reports the error

Service "ingress-nginx-controller-admission" is invalid: spec.externalTrafficPolicy: Invalid value: "Local": ExternalTrafficPolicy can only be set on NodePort and LoadBalancer service

which I am unable to understand. Where are the NodePort/LoadBalancer-Services to be found? I.e. I have not set any such services up...

important-petabyte-50139

06/30/2023, 12:39 PM

I'm trying to understand the extend and limitations of Rancher backups and hope someone can help with some questions 1. Does the Rancher Backup Operator only backup the Rancher app, i.e., the admin cluster? 2. What does a cluster snapshot of a downstream cluster include? Does it also include the existing namespaces, apps, etc or only the cluster configuration?

millions-potato-56216

06/30/2023, 5:56 PM

A mensagem tem elementos interativos.

nutritious-umbrella-66954

06/30/2023, 10:11 PM

Has anyone here done much in terms of using Calico/Canal for creating Network Policies? I'd like to do some things like have a rule activate on traffic to a node with a specific selector associated with it. It seems the Rancher interface is a bit limited on this front, but maybe I'm just not aware of how it should be used. Or should I be using yaml and a cli to create network policies?

plain-dream-7776

07/02/2023, 6:51 PM

Hi guys, I shifted to Rancher Desktop (for Windows) from Docker Desktop. I am trying to run docker-compose build. But while building has error like bellow. Checked network settings, firewall, seems to be ok. Ping to deb.debian.org works Ok. Should I configure Rancher for it? Thanks a lot!