https://rancher.com/ logo
Join the conversationJoin Slack
Channels
academy
amazon
arm
azure
cabpr
chinese
ci-cd
danish
deutsch
developer
elemental
epinio
espanol
events
extensions
fleet
français
gcp
general
harvester
harvester-dev
hobbyfarm
hypper
japanese
k3d
k3os
k3s
k3s-contributor
kim
kubernetes
kubewarden
lima
logging
longhorn-dev
longhorn-storage
masterclass
mesos
mexico
nederlands
neuvector-security
office-hours
one-point-x
onlinemeetup
onlinetraining
opni
os
ozt
phillydotnet
portugues
rancher-desktop
rancher-extensions
rancher-setup
rancher-wrangler
random
rfed_ara
rio
rke
rke2
russian
s3gw
service-mesh
storage
submariner
supermicro-sixsq
swarm
terraform-controller
terraform-provider-rancher2
terraform-provider-rke
theranchcast
training-0110
training-0124
training-0131
training-0207
training-0214
training-1220
ukranian
v16-v21-migration
vsphere
windows
Powered by Linen
general
  • c

    cuddly-chef-59548

    09/26/2022, 2:40 AM
    For rancher (using harvester), if i provision a few machine pools is there a way I can add an external/generic node manually outside of the pools?
  • c

    careful-alarm-5840

    09/26/2022, 6:25 AM
    #general Does suse provide license support for k3s ?
  • k

    kind-jackal-41845

    09/26/2022, 10:17 AM
    Hey guys, why am I getting 404 not found on Rancher Dashboard? Do I need to like Factory Reset my Rancher Desktop?
    ✅ 1
    w
    • 2
    • 1
  • a

    ancient-mechanic-72639

    09/26/2022, 1:05 PM
    is there a good way to run monte carlo simulations on K3S?
  • b

    better-accountant-38670

    09/26/2022, 1:33 PM
    Good morning. When attempting to connect to a v2.5.8 Rancher cluster using Rancher CLI, like this:
    rancher login https://<fqdn> --token <token>
    I am getting this message:
    FATA[0000] Bad response statusCode [401]. Status [401 Unauthorized]. Body: [message=Unauthorized 401: must authenticate] from [https://<FQDN>/v3]
    Is there something different I need to be doing? Or, is there a way to use a KUBECONFIG file to authenticate (like we do when using kubectl or helm)?
  • b

    better-accountant-38670

    09/26/2022, 1:36 PM
    I think I figured it out. Rancher CLI wants to authenticate the local Rancher cluster, not the Kubernetes cluster.
    h
    • 2
    • 1
  • n

    nutritious-crayon-45180

    09/26/2022, 3:44 PM
    In the Rancher helm chart, is there a way to include custom dashboard-ui instead of using the one that comes with rancher? I went through the rancher helm chart but couldn’t find from where the UI image is being pulled.
    b
    • 2
    • 1
  • a

    aloof-article-40011

    09/26/2022, 4:12 PM
    👋 Hi everyone!
  • a

    aloof-article-40011

    09/26/2022, 4:13 PM
    I'm hoping I can get some help standing up a k3s cluster on bare metal
  • a

    aloof-article-40011

    09/26/2022, 4:16 PM
    I'm using k3sup, and I've setup 3 servers and 3 workers, they all show as ready.
    flannel-backend=host-gw
  • a

    aloof-article-40011

    09/26/2022, 4:17 PM
    All nodes are reachable between each other and from workers, I see the cni0 interface and I can ping pods from the host. On server I cannot ping pods form the host, and there is no cni0 interface
  • a

    aloof-article-40011

    09/26/2022, 4:20 PM
    servers have a
    --node-taint='k3s-controlplane=true:NoSchedule'
    taint, which I assumed meant that non system workloads aren't scheduled, but looks like no workloads are scheduled on workers at all, including coredns, etc. I ran out of places to look for a cause, does anyone have any insight? Thanks in advance
  • q

    quiet-area-89381

    09/26/2022, 5:10 PM
    Hello, the documentation says that ARM64 is supported only with Flannel CNI. Rancher uses Canal by default. Would that work (because of Flannel being also under the hood), or it requires CNI to be just Flannel?
    • 1
    • 1
  • q

    quiet-area-89381

    09/26/2022, 5:17 PM
    Follow up question on the ARM64 support above. How experimental is it? I just need a node to compile some Raspberry Pi code once in a while. The only thing I would need that may be missing based on the doc is the monitoring/logging capability. Anybody has experience with ARM64 already on rancher 2.6?
  • b

    billowy-computer-46613

    09/27/2022, 6:15 AM
    Hi, Im using rancher v2.6.6 and trying to create a new cluster with the GKE driver. The creation fails, and this what I see :
    $ k describe googlemachines   -n fleet-default
    ...
    error setting machine configuration from flags provided: no Google Cloud Project name specified (--google-project)
    but on the create cluster dialog I don't see any input where I clould set the projectId (or zone, or instance type) what do I miss?
  • p

    proud-jewelry-76210

    09/27/2022, 7:31 AM
    Hey! I'm trying to automatically run a wsl-vpnkit command when rancher desktop starts up, I tried to create a file in the %AppData%\rancher-desktop\provisioning directory called initvpn.start File content:
    #!/bin/sh
    /mnt/c/Windows/system32/wsl.exe -d wsl-vpnkit service wsl-vpnkit start
    Made sur that the line endings are LF. If I run the same command through wsl in the rancher-desktop distribution it works, but not with the script. I couldn't find any logs about the command run either, is it even logged somewhere? Thanks
  • c

    careful-optician-75900

    09/27/2022, 9:47 AM
    Hello, I m creating my cluster with k8s version 1.22, AMI Version 1.22.12-20220914, but i can't install all deployment easily. Cos, most of the API Version are deprecated etc. I am also installed rancher-2.6.8 and can't use. So, which rancher version should i need to use ? Or do i need to downgrade eks version ?
    34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    W0926 22:23:16.209414      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    2022/09/26 22:25:17 [INFO] Loaded configuration from <https://releases.rancher.com/kontainer-driver-metadata/release-v2.6/data.json> in [0x74ac4e8]
    2022/09/26 22:25:17 [INFO] Loaded configuration from <https://releases.rancher.com/kontainer-driver-metadata/release-v2.6/data.json> in [0x74ac4e8]
    W0926 22:33:04.212632      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    W0926 22:39:54.214550      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    W0926 22:48:37.218047      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    W0926 22:58:17.222378      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    W0926 23:06:07.226246      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    W0926 23:13:56.228652      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    W0926 23:22:07.231982      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    W0926 23:29:26.234908      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    W0926 23:38:10.236563      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    W0926 23:45:14.240648      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    W0926 23:51:19.243966      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    W0926 23:58:18.246772      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    W0927 00:04:27.259409      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    W0927 00:13:25.254800      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    W0927 00:21:47.258678      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    E0927 00:25:17.996714      34 gvks.go:69] failed to sync schemas: unable to retrieve the complete list of server APIs: <http://metrics.k8s.io/v1beta1|metrics.k8s.io/v1beta1>: an error on the server ("Internal Server Error: \"/apis/metrics.k8s.io/v1beta1?timeout=15m0s\": the server could not find the requested resource") has prevented the request from succeeding
    E0927 00:25:18.058935      34 gvks.go:69] failed to sync schemas: unable to retrieve the complete list of server APIs: <http://metrics.k8s.io/v1beta1|metrics.k8s.io/v1beta1>: an error on the server ("Internal Server Error: \"/apis/metrics.k8s.io/v1beta1?timeout=15m0s\": the server could not find the requested resource") has prevented the request from succeeding
    E0927 00:25:18.107718      34 gvks.go:69] failed to sync schemas: unable to retrieve the complete list of server APIs: <http://metrics.k8s.io/v1beta1|metrics.k8s.io/v1beta1>: an error on the server ("Internal Server Error: \"/apis/metrics.k8s.io/v1beta1?timeout=15m0s\": the server could not find the requested resource") has prevented the request from succeeding
    E0927 00:25:18.176601      34 gvks.go:69] failed to sync schemas: unable to retrieve the complete list of server APIs: <http://metrics.k8s.io/v1beta1|metrics.k8s.io/v1beta1>: an error on the server ("Internal Server Error: \"/apis/metrics.k8s.io/v1beta1?timeout=15m0s\": the server could not find the requested resource") has prevented the request from succeeding
    E0927 00:25:18.448782      34 gvks.go:69] failed to sync schemas: unable to retrieve the complete list of server APIs: <http://metrics.k8s.io/v1beta1|metrics.k8s.io/v1beta1>: an error on the server ("Internal Server Error: \"/apis/metrics.k8s.io/v1beta1?timeout=15m0s\": the server could not find the requested resource") has prevented the request from succeeding
    2022/09/27 00:25:18 [ERROR] Failed to read API for groups map[<http://metrics.k8s.io/v1beta1:an|metrics.k8s.io/v1beta1:an> error on the server ("Internal Server Error: \"/apis/metrics.k8s.io/v1beta1?timeout=15m0s\": the server could not find the requested resource") has prevented the request from succeeding]
    E0927 00:25:18.618230      34 gvks.go:69] failed to sync schemas: unable to retrieve the complete list of server APIs: <http://metrics.k8s.io/v1beta1|metrics.k8s.io/v1beta1>: an error on the server ("Internal Server Error: \"/apis/metrics.k8s.io/v1beta1?timeout=15m0s\": the server could not find the requested resource") has prevented the request from succeeding
    W0927 00:25:19.365353      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    2022/09/27 00:25:21 [INFO] Updating TLS secret for cattle-system/tls-rancher-internal (count: 2): map[<http://field.cattle.io/projectId:local:p-v5fsk|field.cattle.io/projectId:local:p-v5fsk> <http://listener.cattle.io/cn-10.100.212.117:10.100.212.117|listener.cattle.io/cn-10.100.212.117:10.100.212.117> <http://listener.cattle.io/fingerprint:SHA1=F66FDBCDF677741CEEA4BDFFEBBFF42EF448B7E6|listener.cattle.io/fingerprint:SHA1=F66FDBCDF677741CEEA4BDFFEBBFF42EF448B7E6>]
    2022/09/27 00:25:21 [INFO] Updating TLS secret for cattle-system/serving-cert (count: 7): map[<http://field.cattle.io/projectId:local:p-v5fsk|field.cattle.io/projectId:local:p-v5fsk> <http://listener.cattle.io/cn-127.0.0.1:127.0.0.1|listener.cattle.io/cn-127.0.0.1:127.0.0.1> <http://listener.cattle.io/cn-192.68.102.115:192.68.102.115|listener.cattle.io/cn-192.68.102.115:192.68.102.115> <http://listener.cattle.io/cn-192.68.102.208:192.68.102.208|listener.cattle.io/cn-192.68.102.208:192.68.102.208> <http://listener.cattle.io/cn-192.68.102.22:192.68.102.22|listener.cattle.io/cn-192.68.102.22:192.68.102.22> <http://listener.cattle.io/cn-localhost:localhost|listener.cattle.io/cn-localhost:localhost> <http://listener.cattle.io/cn-rancher.cattle-system:rancher.cattle-system|listener.cattle.io/cn-rancher.cattle-system:rancher.cattle-system> <http://listener.cattle.io/fingerprint:SHA1=229A4E9BA347B7D28CE3DA11785A787FB24DE0A1]|listener.cattle.io/fingerprint:SHA1=229A4E9BA347B7D28CE3DA11785A787FB24DE0A1]>
    W0927 00:27:04.262048      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    W0927 00:32:57.264854      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    W0927 00:41:52.270559      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    W0927 00:49:04.272743      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
    W0927 00:57:10.275272      34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
  • c

    clever-hair-3563

    09/27/2022, 12:11 PM
    I have created a Racher cluster with 2 master servers. spec: RKE 1.3.14 version started a K8s version: v1.24.4 Using Helm installed 2 Racher masters with version 2.6.8 OS: CentOS 7.9 Running VMs in Scaleway. while creating a custom K8s cluster with one master node. I am getting the following error.
    Ready	False	55 mins ago 	[Disconnected] Cluster agent is not connected
  • f

    fierce-house-36494

    09/27/2022, 4:22 PM
    On the Workloads > Pods view, what determines which container image is displayed? There are 3 containers in the pod, but we only see the istio proxy listed.
  • m

    mammoth-dentist-35106

    09/27/2022, 4:29 PM
    Hello
  • m

    mysterious-telephone-75425

    09/27/2022, 5:28 PM
    👋 Hi everyone! Can the api workload rancher be used for bulk input? so I can make multiple workloads in one post request
  • a

    abundant-horse-74503

    09/27/2022, 6:02 PM
    Hi all, ... I need to configure fleet imageScan when using image name into helm chart values.yaml instead of raw kubernetes manifests. Someone could give me some example ? Thanks ;)
  • a

    agreeable-solstice-4598

    09/27/2022, 6:07 PM
    Hi all. Can anyone suggest that multi cluster environment can be handled by rancher or not??
  • s

    straight-horse-87868

    09/27/2022, 7:37 PM
    Hi, does anyone know if there is a way to "propagate labels and annotations defined at Rancher Project to underlying namespaces" ?
  • a

    ancient-energy-15842

    09/27/2022, 8:05 PM
    Anyone having problems with S3 etcd backup in 2.6.6? I get
    failed to set s3 server: failed to check s3 bucket:etcd-backup, err:Access Denied
    I already tried to change the IAM Policy, I'm trying with
    {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "s3:*"
          ],
          "Resource": [
            "arn:aws:s3:::*",
            "arn:aws:s3:::*/*"
          ]
        }
      ]
    }
    And it still fails
  • b

    bland-painting-61617

    09/27/2022, 10:22 PM
    Rancher already generates a kubeconfig file invoking the Rancher CLI when setting
    kubeconfig-generate-token
    to
    false
    . Now that Rancher supports time limited tokens - would it be possible to add AAD integration to Rancher CLI? Similar post was raised on the forum some time ago.
  • f

    fancy-solstice-28980

    09/27/2022, 10:23 PM
    hi all
  • c

    creamy-pencil-82913

    09/27/2022, 11:19 PM
    You're out of memory
    f
    • 2
    • 3
  • f

    fierce-elephant-30846

    09/28/2022, 12:10 AM
    Hi everyone! I'm getting stucked when try register a cluster on my RKE HA Rancher. A continuous message "Waiting for node to register. Either cluster is not ready for registering, cluster is currently provisioning, or etcd, controlplane and worker node have to be registered" is present when I apply the command on the vm to be provisioned. I'm using this proxy configuration on my Rancher HA instance: https://docs.ranchermanager.rancher.io/how-to-guides/new-user-guides/infrastructure-setup/nginx-load-balancer Seems like it's a proxy problem, because if I change my DNS to the RKE node where Rancher is deployed, ignoring the Load Balancer, the cluster is deployed normally. I'm using RKE v1.3.10 (v1.22.9) and Rancher 2.6.8. Anyone could help me? Thanks very much!
    q
    c
    a
    • 4
    • 10
  • s

    sticky-artist-14452

    09/28/2022, 5:35 AM
    Hey, what it takes to call sonarqube apis from inside the aks. Right now, I am passing client id and secret and api key in the headers but it is giving me 401. Any help will be really appreciate! Note: I am having cloud flared as a firewall in between aks and sonarqube...
Powered by Linen
Title
s

sticky-artist-14452

09/28/2022, 5:35 AM
Hey, what it takes to call sonarqube apis from inside the aks. Right now, I am passing client id and secret and api key in the headers but it is giving me 401. Any help will be really appreciate! Note: I am having cloud flared as a firewall in between aks and sonarqube...
View count: 4