rancher-users #general

orange-barista-66154

07/12/2022, 5:27 PM

How can I give a user permission to perform actions on all projects on a single cluster? I've tried applying the existing roles to a user but they get limited access or too much access (can create clusters etc)

future-account-50371

07/13/2022, 7:33 AM

We today running rancher v2.6.3 with RKE clusters based v1.21.9, i would like to know if there is any compatibility issue with these versions before we go to production? Thanks!

fast-keyboard-53313

07/13/2022, 10:54 AM

Am using Rancher 2.5.7 with enterprise GitLab (15.x I believe) and my pipelines have stopped working. Apparently the "applications" method of authentication now times out after 2 hours - which is useless. I understand I need to switch to a different method for deploying my packages to our clusters (Fleet?) but the Rancher documentation doesn't appear to match what I'm seeing in Rancher. Does Rancher have to be updated to 2.6.x to use the new method? For example, reading this page, I need to activate the Legacy feature - but that isn't listed (Fleet is list and is enabled) https://rancher.com/docs/rancher/v2.6/en/pipelines/

creamy-policeman-70833

07/13/2022, 10:59 PM

guys i have very weird issue, literally searched everywhere- so I am installing windows version of rancher (1.4.1) and guess what - image manager is not starting, i have to reinstall and sometimes even do 2x install to get it working, its very weird issue!

dazzling-smartphone-16726

07/14/2022, 10:48 AM

Hi all I have Rancher v2.6.6 (upgraded from v2.6.3) installed and I am trying to upgrade the K8s cluster to the latest version. I am following the procedure at https://rancher.com/docs/rancher/v2.6/en/cluster-admin/upgrading-kubernetes/#tested-kubernetes-versions but it does not seem to have the correct steps.

Copy code

In the upper left corner, click ☰ > Cluster Management.
On the Clusters page, go to the cluster you want to upgrade and click ⋮ > Edit Config.
From the Kubernetes Version drop-down, choose the version of Kubernetes that you want to use for the cluster.
Click Save.

When I Edit the config there is no dropdown menu.

glamorous-guitar-96571

07/14/2022, 11:18 AM

Can we setup and manage RKE2 also with Terraform? And second question: Should we from now on for new clusters already use RKE2?

ripe-grass-75099

07/14/2022, 12:34 PM

hi - I'm using Rancher Desktop on windows (1.4.1) and am having weird problems with docker build. It can find google.com from within the container but not api.nuget.org. The ping works fine from the host OS.

Copy code

FROM <http://mcr.microsoft.com/dotnet/sdk:6.0-alpine|mcr.microsoft.com/dotnet/sdk:6.0-alpine>
#RUN ping <http://google.com|google.com>
RUN ping <http://api.nuget.org|api.nuget.org>

and the output

Copy code

C:\temp\docker>docker build .
Sending build context to Docker daemon  2.048kB
Step 1/4 : FROM <http://mcr.microsoft.com/dotnet/sdk:6.0-alpine|mcr.microsoft.com/dotnet/sdk:6.0-alpine>
 ---> 68f959202edb
Step 2/4 : RUN ping <http://api.nuget.org|api.nuget.org>
 ---> Running in 190474634dc2
ping: bad address '<http://api.nuget.org|api.nuget.org>'
The command '/bin/sh -c ping <http://api.nuget.org|api.nuget.org>' returned a non-zero code: 1

A curl in the docker build returns this:

Copy code

% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0* Could not resolve host: <http://api.nuget.org|api.nuget.org>
* Closing connection 0
curl: (6) Could not resolve host: <http://api.nuget.org|api.nuget.org>

Really not sure what is going on as other addresses appear to work fine so it shouldn't be a networking issue, but everything suggests it is

enough-furniture-17909

07/14/2022, 5:26 PM

hi, we upgraded rancher from 2.5.12 to 2.6.6 today and are noticing a significant decrease in the new UI's performance when viewing one of our larger clusters ( v1.20 on 40 nodes, with 1400 deployments across 7 namespaces) for example, it takes 20seconds just to view the list of nodes and chrome's task manger is showing mem usage of 4,700,00K and 100 cpu. Does anyone have any suggestions on any settings we can tweak to improve the ui's responsiveness?

freezing-caravan-50378

07/14/2022, 6:39 PM

[ warn] [net] getaddrinfo(host='rancher-logging-root-fluentd.cattle-logging-system.svc', err=4): Domain name not found

little-autumn-44758

07/14/2022, 6:44 PM

Hello. I have created some namespaces using kubectl and moved them into a project using the Rancher UI, but those namespaces don't seem to have inherited the permissions from the project. I've given some users Owner permissions of the project, but they still cannot see the namespaces I moved into the project. Any thoughts?

gentle-church-5694

07/14/2022, 8:29 PM

Hi all, I've been looking for a compatibility matrix for 2.6.6 just to make sure downstream k8s 1.19.x is still supported, but I guess I'm a little quick on this. Does anyone happen to know if the matrix changed between 2.6.5 and 2.6.6? 2.6.5 matrix link for ref https://www.suse.com/suse-rancher/support-matrix/all-supported-versions/rancher-v2-6-5/

fast-keyboard-53313

07/15/2022, 8:39 AM

On Rancher v2.5.7, from the Global view, if I try to select Continuous Delivery from the Tools menu I get either a blank screen or a page saying: HTTP Error 403: clusters.management.cattle.io "local" is forbidden: User "<my user ID>" cannot get resource "clusters" in API group "management.cattle.io" at the cluster scope. Is it only a Cluster Owner who can access this page? I appear to be a Cluster Member.

high-soccer-95747

07/15/2022, 10:42 AM

Hello everybody, We are planning maintenance on our cluster rancher. We have several worker nodes hosting different deployments with different replicas. So some have replica 1 and some have 2 and so on. We also use longhorn for the storage part. What is the correct procedure to shut down a Rancher cluster and restart it at the end of the maintenance? Thanks in advance

bland-painting-61617

07/15/2022, 12:54 PM

Oops, I wanted to move the local cluster from fleet-local to fleet-default (using the change workspace button) to try deploying things to all clusters and it just disappeared. Can't see the cluster in cluster management any more. How can I restore/recreate it? The

spec.fleetWorkspaceName: fleet-default

shows under the corresponding management.cattle.io/v3 resource

helpful-beard-54962

07/15/2022, 1:45 PM

Did anyone every manage to filter deployments by a label? Seems silly not to have this feature and have to list all deployments within a namespace just to find what you're looking for

limited-eye-27484

07/15/2022, 7:35 PM

is it possible to register a new node against an RKE cluster and apply a node label as part of the registration?

future-account-50371

07/17/2022, 10:05 AM

Hi, is there a way to reset pod restart counter?

bland-painting-61617

07/17/2022, 4:09 PM

Hello, quick question, in rancher backups,

insecureTLSSkipVerify: true

is configured, yet I'm seeing

Failed to check if s3 bucket [rancher-backups] exists, error: Head "<https://xxx/rancher-backups/>": x509: certificate signed by unknown authority

, what am I missing? I'm trying this because I can't get rancher backups to even deploy when specifying the custom CA certificate, PEM format results in

error converting YAML to JSON: yaml: line 22: could not find expected

melodic-london-92561

07/18/2022, 2:08 PM

How do you disable CTRL+C showing you YAML in Rancher? This is very annoying to have enabled by default...

powerful-tomato-39840

07/18/2022, 4:13 PM

Hi, I've got a Rancher cluster (v2.6.0) and one rke2 cluster (v1.21.4+rke2r2) and I'm trying to find ways to rotate certificates. I found this in the docs but I do not see the "Rotate Certificates" option in my GUI, any ideas?

stocky-honey-25227

07/18/2022, 7:47 PM

Hi everyone, I am a new user of Rancher. How can I create a kube config for read-only user, K8S: v1.18.20 and Rancher: v2.4.9 If you can share the link, it will be very useful for me

stale-actor-21884

07/19/2022, 12:04 AM

Hello Everyone, My Mac and Fedora computers both have Rancher desktop installed and kuberenets enabled. My MacBook could ping the internal IP address of the kubectl node, but Fedora was unable to. Am I overlooking any Fedora configurations? Can someone assist me in getting ping to function on my Fedora computer? Thank you so much for your help in advance.

helpful-beard-54962

07/19/2022, 10:18 AM

Did anyone even notice that when you have Prometheus installed using the recommended Rancher configs, clicking on the metrics tab in the Deployment, the graphs belong to other random dockers and NOT the one you clicked on?

cuddly-appointment-26831

07/19/2022, 10:46 AM

Hey everyone, can anybody tell me a good blog for rancher upgrade....

calm-coat-38633

07/19/2022, 11:02 AM

anyone managed to get rancher to provision clusters in Vmware VCloud Director?

best-oil-69865

07/19/2022, 2:46 PM

Copy code

0s          Warning   Failed              pod/after-sales-97d857d8d-ccwxc     Failed to pull image "<http://eu.gcr.io/xxxxxx/xxxx-dev-after-sales:latest>": rpc error: code = Unknown desc = Error response from daemon: pull access denied for <http://eu.gcr.io/xxxxxx/xxxx-dev-after-sales:latest>, repository does not exist or may require 'docker login': denied: Permission denied for "latest" from request "/v2/xxxxxx/xxxx-dev-after-sales:latest".

But if I try docker login I able to pull the images even I tried the base node of kubernetes directly it works it fails while deploying via secret All my production images are now failing please any help will really appreciated

gifted-breakfast-73755

07/19/2022, 3:13 PM

Hi, can someone explain to me the difference between defining a

Private Registry

on the RKE template and using

imagePullSecrets

in the k8s YAML file to pull an image from a private registry?

enough-airport-11075

07/19/2022, 11:51 PM

Hi, I am having an issue when I try to launch Rancher Desktop. I am running Ubuntu version 18.04.6 LTS. I have a suspicion the error is because I need a newer Ubuntu version but I am not sure. Also, my CPU has virtualization enabled (checked BIOS) so I am not sure why it is doing this.

Copy code

Error: virtualization does not appear to be supported on your machine

bugs: cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds swapgs itlb_multihit srbds bogomips: 6820.02 clflush size: 64 cache_alignment: 64 address sizes: 43 bits physical, 48 bits virtual power management: 2022-07-19T233447.202Z: Error starting lima: Error: Virtualization does not appear to be supported on your machine. at Qe.ensureVirtualizationSupported (/opt/rancher-desktop/resources/app.asar/dist/app/background.js17179719) at processTicksAndRejections (nodeinternal/process/task queues96:5)

future-account-50371

07/20/2022, 8:24 AM

Hi, we have a cluster (running on rke engine ) with 4 worker nodes All 4 nodes are Ready free resources. it looks that Pods are not being assigned to ALL nodes only on specific node. any reason?

colossal-petabyte-46557

07/20/2022, 9:33 AM

I have switched from Docker Desktop to Rancher. Now I have the problem that when I start a container via docker-compose, I get the following error: "Error response from daemon: create \\wsl$\Ubuntu\home\david\projects\test\.configuration\docker\test.linux.dev \docker-data\mysql: "\\\\wsl$\\Ubuntu\\home\\david\\projects\\test\\.configuration\\docker\\test.linux.dev\\do cker-data\\mysql" includes invalid characters for a local volume name, only "[a-zA-Z0-9][a-zA-Z0-9_.-]" are allowed. If you intended to pass a host directory, use absolute path" Can I start the container from windows even though the volumes are in wsl?