Hi Everyone, Can anyone let me know how can we do compare with the Kubernetes 1.26 with the below components. Falco Kubernetes-cni kubeadm kubectl kubelet cri-tools containerd

Cluster agent certificate problem Supporting doc: https://ranchermanager.docs.rancher.com/getting-started/installation-and-upgrade/resources/update-rancher-certificate#method-1-forc[…]rancher-agents I get the following error in the cattle-cluster-agent log on the (first!) cluster I am trying to import:

# kubectl logs cattle-cluster-agent-78fdfb84b5-qq6ms -n cattle-system | tail -1
time="2023-09-14T13:58:55Z" level=fatal msg="Certificate chain is not complete, please check if all needed intermediate certificates are included in the server certificate (in the correct order) and if the cacerts setting in Rancher either contains the correct CA certificate (in the case of using self signed certificates) or is empty (in the case of using a certificate signed by a recognized CA). Certificate information is displayed above. error: Get \"<https://rancher.example.com>\": x509: certificate signed by unknown authority"

I have installed Rancher using a internal/non-public CA. The Rancher web interface SSL is working just fine in my browser since I have the public certificate chain installed in the certificate store on my computer. Helm chart config:

% helm get values rancher -n cattle-system -o yaml
ingress:
  tls:
    source: secret
privateCA: true

Output of https://rancher.example.com/v3/settings/cacerts, I can see that the value field is empty:

{
  "baseType": "setting",
  "created": "2023-08-16T13:59:48Z",
  "createdTS": 1692194388000,
  "creatorId": null,
  "customized": false,
  "default": "",
  "id": "cacerts",
  "links": {
    "remove": "…/v3/settings/cacerts",
    "self": "…/v3/settings/cacerts"
  },
  "name": "cacerts",
  "source": "default",
  "type": "setting",
  "uuid": "8ddd830d-36b3-41fc-8651-f7a693f60ee9",
  "value": ""
}

Also empty values for the checksum in ReplicaSet and Deployment on the cluster I want to join:

# kubectl get deployment cattle-cluster-agent -n cattle-system -o go-template='{{ range .spec.template.spec.containers }}{{ range .env }}{{ if eq .name "CATTLE_CA_CHECKSUM" }}{{ .name }}: {{ .value }}{{ end }}{{ end }}{{ end }}'
CATTLE_CA_CHECKSUM: <no value>

kubectl get rs cattle-cluster-agent-78fdfb84b5 -n cattle-system -o go-template='{{ range .spec.template.spec.containers }}{{ range .env }}{{ if eq .name "CATTLE_CA_CHECKSUM" }}{{ .name }}: {{ .value }}{{ end }}{{ end }}{{ end }}'
CATTLE_CA_CHECKSUM: <no value>

Not sure where to proceed to go further with this issue.

Welcome!

stale-motherboard-51225

joined #general. Also,

broad-honey-25129

joined.

Hi Team. I created Standard User, and assign that user to be Project Owner of a Project in Rancher. That user can create Namespace in the Project through Rancher UI. But he cannot create Namespace in the Project through kubectl with his kubeconfig. The error is: User cannot get resource “namespace” in API Group in the namespace: RBAC: clusterrole.rbac.authorization.k8s.io not found. How can I fix that? Thank you. My yaml file to create ns:

apiVersion: v1
kind: Namespace
metadata:
  name: test-namespace
  annotations:
    <http://field.cattle.io/resourceQuota:|field.cattle.io/resourceQuota:> >-
      {"limit":{"limitsCpu":"12m","limitsMemory":"100Mi","persistentVolumeClaims":"5"}}
    <http://field.cattle.io/containerDefaultResourceLimit:|field.cattle.io/containerDefaultResourceLimit:> '{}'
    <http://field.cattle.io/projectId:|field.cattle.io/projectId:> c-m-rbd52wfb:p-p8mrq
  labels:
    <http://field.cattle.io/projectId:|field.cattle.io/projectId:> p-p8mrq

Anybody know why rancher desktop

docker run hello-world

doesn't give stdout? same with other containers

This message contains interactive elements.

Hello any guide to create a certificate using lestscript ??

I'm not sure which repo I would add a feature request to as it involves so many of the Rancher Labs assets. I'd really like to see rancher desktop include or merged with rancher manager to be an interface to other RKE/RKE2 clusters but also integrate tinkerbell do be able to deploy harvester nodes. Think of it like a jumpstart host for an entire data center.

Welcome!

proud-action-3596

joined #general.

is someone using rke 2 and had a high io disk usage. i am running rke2 on my virtual machine tha ti ceated on my underlying server and i see a high disk io usage that is leading to disk thrashing and probably will wear out the life of my underlying 4 hdd disks. I calculated the disk io and it is writing about 3mbits/second x 4 disks and that is about 42.2gigabytes of data daily. And all the writing is coming from the running single node master kubernetes cluster.

Hello, by any chance is someone able to help with an upgrade issue from version 2.7.3 to 2.7.5 more details in https://github.com/rancher/rancher/issues/42845 Or if someone had clusters that went in ready(False) state after an upgrade to this version 🙏

I have RKE2 (v1.26.6) cluster created from Rancher UI... have setup a Project and namespace There is a need to terminate/delete any pod that has run time of greater than 12 hours... Just wondering if this is possible from UI or I should just write a script that checks pod run times and delete pods with >12 hours ?

I have 2 rancher servers, and I want to move downstream clusters from one to another. What would the steps be to disassociate a downstream cluster with server A and register it with server B, while retaining the deployed applications in the cluster?

Hi, we have been running into some pain points with installing RKE2 in an air gapped environment on SELinux for Red Hat. Is there any guidance on how this should be done? We need the RKE2 rpms associated with the version of the tarballed container images. E.g. if I am using RKE2 v1.25.12, I need to make sure I also tarball those image versions. Additionally,

install.sh

errors with a method conflict when RPMs are downloaded, but we need the images and the other settings in install.sh, such as

fapolicyd

rules.

Has anyone built any terraform code for deploying rancher into AWS other than the quick start. Our environment doesn't use route 53 but we must use our own internal ACM certs. I'm a bit at a lost, and could use some help

Welcome!

bright-painting-5437

joined #general.

Morning @channnel

it is my first day with Rancher

🙂

who can please guide me where to start , i'm Infrastructure systems and hypervisor

Hi guys, on providing a downstream rke2 cluster using Rancher I actually struggle with the data-dir on the rke2 Nodes. How can I configure the data-dir on the downstream cluster nodes on building a cluster using Rancher?

Hi guys. I am interested in the rancher1.6 approach (docker but no kubernetes) for some deployments. rancher 2 (afaik) seems only support using kubernetes. Is the "docker/containerd only" approach going to be deprecated forever?

k8s is good some some things, but simple docker is also great.

Welcome!

gorgeous-thailand-32105

joined #general.

Hi all, we have a downstream RKE cluster provisioned by Rancher that is stuck in an error state after failing to add 2 new etcd/control plane nodes. One of these nodes did register with Kubernetes, but caused havoc with etcd as it appears to have been a node of the same name and IP as one from years ago. We had to manually remove this node from the etcd member list to get the cluster back up and running, but now the cluster config thinks this node is still there, despite being deleted through the UI. Given the error state, Rancher will not allow me to edit the YAML through the UI, but the save button is still enabled at the bottom. Would this safely refresh the cluster config and update the etcd members as appropriate? Thanks

hello, when i do kubectl, he take lot of minutes kubect get pod --v=9 : (part of some log) GET https://xxxxxxxxxxxxxxxx/k8s/clusters/x-xxxxx/apis/autoscaling/v2beta1?timeout=32s in 32000 milliseconds GET https://xxxxxxxxxxxxxxxx/k8s/clusters/x-xxxxx/apis/networking.k8s.io/v1?timeout=32s in 32000 milliseconds

Can anyone list out the major differences between the Rancher v2.7.5 vs v2.7.6

Is there anyway (not in one step necessarily) to move a downstream cluster from one rancher server to another? Could be disassociate/associate or whatever, just trying to find any solution so apps don't need to be re-deployed. Even if it is the same version of rancher. I haven't been able to find anything, and I don't care if it is officially supported... just an alternative to complete redeployment

Not sure if this is the correct channel, but I am trying to install the gcc compiler in SLE Micro, but seem to hit a wall on dependencies. How can I easily install the gcc compiler and all required dependencies? I tried using

transaction-update

but I seem to hit a wall on the

binutils

.

FYI - https://rancher-users.slack.com/archives/C013PSE4BPT/p1695181426348439