Hello, I've deployed rancher onprem on a vsphere cluster, and asked our admins to create a local admin user with these rights: Datastore • Allocate space • Browse datastore • Low level file operations • Update virtual machine files • Update virtual machine metadata Global • Manage custom attributes • Set custom attribute Network • Assign network Resource • Assign virtual machine to resource pool vApp • Add virtual machine • Export • Import • Power off • Power on • Pull from URL • View OVF environment Virtual machine • Change Configuration ◦ Acquire disk lease ◦ Add existing disk ◦ Add new disk ◦ Add or remove device ◦ Advanced configuration ◦ Change CPU count ◦ Change Memory ◦ Change Settings ◦ Change Swapfile placement ◦ Change resource ◦ Configure Host USB device ◦ Configure Raw device ◦ Configure managedBy ◦ Display connection settings ◦ Extend virtual disk ◦ Modify device settings ◦ Query Fault Tolerance compatibility ◦ Query unowned files ◦ Reload from path ◦ Remove disk ◦ Rename ◦ Reset guest information ◦ Set annotation ◦ Toggle disk change tracking ◦ Toggle fork parent ◦ Upgrade virtual machine compatibility ◦ privilege.VirtualMachine.Config.Unlock.label • Edit Inventory ◦ Create from existing ◦ Create new ◦ Move ◦ Register ◦ Remove ◦ Unregister • Guest operations ◦ Guest operation alias modification ◦ Guest operation alias query ◦ Guest operation modifications ◦ Guest operation program execution ◦ Guest operation queries • Interaction ◦ Answer question ◦ Backup operation on virtual machine ◦ Configure CD media ◦ Configure floppy media ◦ Connect devices ◦ Console interaction ◦ Create screenshot ◦ Defragment all disks ◦ Drag and drop ◦ Guest operating system management by VIX API ◦ Inject USB HID scan codes ◦ Install VMware Tools ◦ Pause or Unpause ◦ Perform wipe or shrink operations ◦ Power off ◦ Power on ◦ Record session on virtual machine ◦ Replay session on virtual machine ◦ Reset ◦ Resume Fault Tolerance ◦ Suspend ◦ Suspend Fault Tolerance ◦ Suspend to memory ◦ Test failover ◦ Test restart Secondary VM ◦ Turn off Fault Tolerance ◦ Turn on Fault Tolerance • Provisioning ◦ Allow disk access ◦ Allow file access ◦ Allow read-only disk access ◦ Allow virtual machine download ◦ Allow virtual machine files upload ◦ Clone template ◦ Clone virtual machine ◦ Create template from virtual machine ◦ Customize guest ◦ Deploy template ◦ Mark as template ◦ Mark as virtual machine ◦ Modify customization specification ◦ Promote disks ◦ Read customization specifications • Service configuration ◦ Allow notifications ◦ Allow polling of global event notifications ◦ Manage service configurations ◦ Modify service configuration ◦ Query service configurations ◦ Read service configuration • Snapshot management ◦ Create snapshot ◦ Remove snapshot ◦ Rename snapshot ◦ Revert to snapshot But I can't see the available fields (edited) Can someone help what I'm missing

Does live reload is blocked in case on nextjs application on Rancher desktop. What configurations we need to make in app so that rancher will do live reload (When we make change in code that change should reflect on screen).

Hi all. If I upgrade my rke2 cluster, is the rke2-ingress-nginx also updated or I have to manually update and manage the helm chart? Thanks

Hey guys I have problem I using Datadog labels for the version like this `tags.datadoghq.com/version`: in the deployment file, when I want to use the rollback feature in Rancher, it’s given me an error about this label is changing. could you help me

why does /etc/rancher/k3s/registries.yaml gets reset do deafult on worker nodes after reboot?

Hi, we would like to upgrade our Cluster to 1.25 but there is still a PSP from the

rke-network-plugin-deploy-job

Job. The PSP is in the

ConfigMap

rke-network-plugin

. It's an old cluster, been through updates for a few years now. I just don't want to break anything because flannel still references a PSP.

Hello I am fairly new to this and would like some help. I host a minecraft server and would like to upgrade it with my old computers. My thinking was that they resources are joined together to work in harmony. After further research i came upon two concept Beowolf and Kubernetes clustering. Which leads me to my first question 1. What is the difference between Beowolf and Kubernetes and which would be better for hosting a minecraft server. As i dug more into Beowolf i found a nice article describing how to start a Beowolf cluster in 13 steps [1] using mpich. What the article didnt say is how I can start a specific task such as a minecraft server and how i can allocate resources Next I decided to dig more in to Kubernetes. I found a youtube video of someone using 8 rasberry pi and using rancher to host a minecraft server [2] I have now decided that if I were to build a cluster, i would probably go about with Rancher. 2. What is a docker 3. Where would I install rancher? Would I install it on a another computer away from the cluster or on the computer in the cluster. 3a. If I were to install rancher on a computer in the cluster, would the rancher computer still be used for other loads for the cluster or would I just take up the entire computer 4. How do I install a main node and the worker nodes 5. I notice that there is high availability option, is there a way i can disable that? (I want all my computers sharing the load of the minecraft server) 6. Do all the computers have to be identical? 7. Is this free? 8. What is a pod 9. What version of Kubernetes would reccomend? IE k8s, k3s, etc 10. Do i have to create a nfs 10a. If so, can i just plug in a external hhd and call it a day or can i do some RAID on the existing hardrives within the computer, OR do something fancy and do a RAID on certain partitions of the existing harddrives within the computer [1] https://www.linux.com/training-tutorials/building-beowulf-cluster-just-13-steps/ [2]

11. Does the main node have to be the strongest computer or can it just be any computer

Hi All, one query, Can I create child cluster without local clusters in Rancher. If yes then How I can find the API token for that cluster

aero - you can't just take a bunch of physical servers and put them in a cluster and make it a single large minecraft server. Your minecraft server is mapped 1:1 to a physical server. If you were running multiple minecraft servers and wanted a way to manage them failing over between the physical servers that would be do-able.

We recently upgraded to RKE 1.25.9. Since we upgraded we started getting the error “"PLEG is not healthy: pleg was last seen active 18h50m17.324752357s ago; threshold is 3m0s " when checking the kubelet logs we found the below logs E0209 212839.416074 1071258 remote_runtime.go:1134] "ReopenContainerLog from runtime service failed" err="rpc error: code = Unknown desc = docker does not support reopening container log files" containerID=....

Question about support matrix: https://www.suse.com/suse-rancher/support-matrix/all-supported-versions/rancher-v2-7-5/ I see support for RHEL is 8.7 or 9.0 (for rancher 2.7.5) However as per RH its better to be at 8.6 based on life cycle: https://access.redhat.com/support/policy/updates/errata (see RHEL 8 Planning Guide on above page). So, my question is... is RHEL 8.6 supported for Rancher 2.7.5?

Can someone give me a leg up here please: I am building a helm chart. Said helm chart has a config file that contains DB Creds in the file (Yeah, I know, nothing I can do about it right now). What is the best way to generate this Cred file from values, while also keeping said DB Creds as a proper secret? IE:

option={{ .Values.options.option1}}

un={{ Secret Value }}.

Hi , wondering if anyone knows how to replace self signed certificate in rancher desktop installation on mac os?

Hi, is there a way to stop rancher from trying to delete a node? The node controller is stuck and stops anything else from happening which keeps us from fixing the underlaying issues with the cluster..

I am following option A to install rancher on my local PC but the container does not run, cannot get any logs from docker logs, if I install using helm, the first pod failed with error Readiness probe failed: Get "http://10.42.0.122:80/healthz": dial tcp 10.42.0.12280 connect: connection refused, the second pod is pending with warning 0/1 nodes are available: 1 node(s) had untolerated taint {node.kubernetes.io/disk-pressure: }. preemption: 0/1 nodes are available: 1 Preemption is not helpful for scheduling. What should I do, thanks in advance.

Hello folks, I newly setup an RKE2 cluster using server & agent scripts ...But i see dns isnt running & stuck in containercreating state , likewise for nginx .... How to troubleshoot RKE2 cluster in general , any pointers? TIA!

Hi all stupid question, but unable to find answers (or maybe I'm looking wrong place) Trying to use RKE CLI 1.4 and a private registry My OS owns a file

.docker/config.json

with some

credHelpers

settings and at OS I'm able to pull/push as usual when using RKE with private registry, do I need to explicit pass an username/password? My expectation was that RKE was able to understand and work as OS layer

Hey guys I updated my EKS through the AWS platform and now Rancher is sending the following message Controller.FailureMessage{ClusterName:“cluster-dev”, Message_:“Unsupported Kubernetes minor version update from 1.24 to 1.22", NodegroupName:“”} Has anyone seen anything or know how to treat it?

Hey guys, we are using Rancher with RKE2 Guest cluster on Harvester. We need the information where which harvester cluster and namespace the guest cluster is running. In which Rancher custom resources we can find this information?

Hi everyone, I started using Rancher Desktop instead of Docker Desktop, and I’m facing the following scenario: The owner of the files inside the container is not respective I set on Dockerfile:

RUN _useradd_ %USERNAME% _-u_

1500

-g

%GROUP%

RUN _mkdir_

_`/var/www/project_name`_

RUN chown -R %USERNAME%:_%GROUP%_ /var/www/_project_name_

But another on it’s being defined… Is someone facing the same scenario?

Hello, can somebody help me I get 503 Service Temporarily Unavailable when I try to access my domain. I run my cluster using RKE2 on ubuntu 22.04 vps here's my configuration

apiVersion: <http://networking.k8s.io/v1|networking.k8s.io/v1>
kind: Ingress
metadata:
  name: tickets-service-api
spec:
  ingressClassName: nginx
  rules:
  - host: <http://tickets-api.mydomain.com|tickets-api.mydomain.com>
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: tickets-service-api
            port:
              number: 80

apiVersion: v1
kind: Service
metadata:
  name: tickets-service-api
  labels:
    name: tickets-service-api
spec:
  ports:
  - port: 80
    targetPort: 80
  selector:
    name: tickets-service-api

apiVersion: apps/v1
kind: Deployment
metadata:
  name: tickets-service-api-deployment
  labels:
    name: tickets-service-api-deployment
spec:
  replicas: {{ .Values.replicaCount }}
  selector:
    matchLabels:
      app: tickets-service-api
  template:
    metadata:
      labels:
        app: tickets-service-api
    spec:
      containers:
        - name: tickets-service-api
          image: {{ .Values.image.repo }}:{{ .Values.image.tag }}
          ports:
            - containerPort: 80
          env:
            - name: ASPNETCORE_ENVIRONMENT  
              value: "Production"
      imagePullSecrets:
        - name: regcred

From what I see everything is up and running corrrectly I really don't know why I can get this message, please help me

nvm I fixed

Hi Team, I am looking to upgrade my Rancher version from 2.6.8 to 2.7.5. Can we jump to latest version directly or we have to upgrade first to minor versions? We are managing our EKS cluster with Rancher and it is being used by importing the AWS EKS cluster to Rancher.

Hi all I am unable to get the permissions to docker in rancher-desktop. When I am composing up my file using docker-compose file it's saying in some files that operation not permitted. Can anyone help?

Hello, do you guys know how I can disable Fleet auto updates? I'm running Rancher

2.7.4

and it was installing

rancher/fleet-agent:v0.6.0

but now out of suddenly it's installing

rancher/fleet-agent:v0.7.0

Good morning! I am trying to get some information on SCAP scanning Harvester, is there a STIG available or documentation on this?

Hi guys There's a way to leave the configmap passwords in rancher opaque, so that the devs don't see passwords from databases and other tools

Hello, I am getting the following log line spammed about 120 times per seconds on a few of my clusters

k3s[2740186]: E0705 16:26:42.964091 2740186 authentication.go:70] "Unable to authenticate the request" err="[x509: certificate has expired or is not yet valid: current time 2023-07-05T16:26:42-07:00 is after 2023-06-14T23:49:53Z, verifying certificate SN=209369791103342885, SKID=, AKID=98:B3:30:8B:D6:CD:D6:14:A5:E0:DC:88:DB:00:B5:59:BC:BD:B8:58 failed: x509: certificate has expired or is not yet valid: current time 2023-07-05T16:26:42-07:00 is after 2023-06-14T23:49:53Z]"

The cluster is working fine, I tried to update to the 1.27 version, I followed all the certificate rotation methods that I could find on any issues nothing helped so far. I would appreciate some help. Things I have tried:

# Stop K3s
systemctl stop k3s

# Rotate certificates
k3s certificate rotate

# Start K3s
systemctl start k3s

kubectl delete secret -n kube-system k3s-serving
rm -f /var/lib/rancher/k3s/server/tls/dynamic-cert.json
systemctl restart k3s

In rancher v1 you could view the status of pods running on each server in a sort of cluster overview…does anything similar exist in v2? It was very useful to be able to see at a glance if a single node was having an issue, and drill down into the services running on a node