kind-jackal-41845
09/26/2022, 10:17 AMancient-mechanic-72639
09/26/2022, 1:05 PMbetter-accountant-38670
09/26/2022, 1:33 PMrancher login https://<fqdn> --token <token>
I am getting this message:
FATA[0000] Bad response statusCode [401]. Status [401 Unauthorized]. Body: [message=Unauthorized 401: must authenticate] from [https://<FQDN>/v3]
Is there something different I need to be doing? Or, is there a way to use a KUBECONFIG file to authenticate (like we do when using kubectl or helm)?better-accountant-38670
09/26/2022, 1:36 PMnutritious-crayon-45180
09/26/2022, 3:44 PMaloof-article-40011
09/26/2022, 4:12 PMaloof-article-40011
09/26/2022, 4:13 PMaloof-article-40011
09/26/2022, 4:16 PMflannel-backend=host-gw
aloof-article-40011
09/26/2022, 4:17 PMaloof-article-40011
09/26/2022, 4:20 PM--node-taint='k3s-controlplane=true:NoSchedule'
taint, which I assumed meant that non system workloads aren't scheduled, but looks like no workloads are scheduled on workers at all, including coredns, etc. I ran out of places to look for a cause, does anyone have any insight? Thanks in advancequiet-area-89381
09/26/2022, 5:10 PMquiet-area-89381
09/26/2022, 5:17 PMbillowy-computer-46613
09/27/2022, 6:15 AM$ k describe googlemachines -n fleet-default
...
error setting machine configuration from flags provided: no Google Cloud Project name specified (--google-project)
but on the create cluster dialog I don't see any input where I clould set the projectId (or zone, or instance type)
what do I miss?proud-jewelry-76210
09/27/2022, 7:31 AM#!/bin/sh
/mnt/c/Windows/system32/wsl.exe -d wsl-vpnkit service wsl-vpnkit start
Made sur that the line endings are LF.
If I run the same command through wsl in the rancher-desktop distribution it works, but not with the script.
I couldn't find any logs about the command run either, is it even logged somewhere?
Thankscareful-optician-75900
09/27/2022, 9:47 AM34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
W0926 22:23:16.209414 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
2022/09/26 22:25:17 [INFO] Loaded configuration from <https://releases.rancher.com/kontainer-driver-metadata/release-v2.6/data.json> in [0x74ac4e8]
2022/09/26 22:25:17 [INFO] Loaded configuration from <https://releases.rancher.com/kontainer-driver-metadata/release-v2.6/data.json> in [0x74ac4e8]
W0926 22:33:04.212632 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
W0926 22:39:54.214550 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
W0926 22:48:37.218047 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
W0926 22:58:17.222378 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
W0926 23:06:07.226246 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
W0926 23:13:56.228652 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
W0926 23:22:07.231982 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
W0926 23:29:26.234908 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
W0926 23:38:10.236563 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
W0926 23:45:14.240648 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
W0926 23:51:19.243966 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
W0926 23:58:18.246772 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
W0927 00:04:27.259409 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
W0927 00:13:25.254800 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
W0927 00:21:47.258678 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
E0927 00:25:17.996714 34 gvks.go:69] failed to sync schemas: unable to retrieve the complete list of server APIs: <http://metrics.k8s.io/v1beta1|metrics.k8s.io/v1beta1>: an error on the server ("Internal Server Error: \"/apis/metrics.k8s.io/v1beta1?timeout=15m0s\": the server could not find the requested resource") has prevented the request from succeeding
E0927 00:25:18.058935 34 gvks.go:69] failed to sync schemas: unable to retrieve the complete list of server APIs: <http://metrics.k8s.io/v1beta1|metrics.k8s.io/v1beta1>: an error on the server ("Internal Server Error: \"/apis/metrics.k8s.io/v1beta1?timeout=15m0s\": the server could not find the requested resource") has prevented the request from succeeding
E0927 00:25:18.107718 34 gvks.go:69] failed to sync schemas: unable to retrieve the complete list of server APIs: <http://metrics.k8s.io/v1beta1|metrics.k8s.io/v1beta1>: an error on the server ("Internal Server Error: \"/apis/metrics.k8s.io/v1beta1?timeout=15m0s\": the server could not find the requested resource") has prevented the request from succeeding
E0927 00:25:18.176601 34 gvks.go:69] failed to sync schemas: unable to retrieve the complete list of server APIs: <http://metrics.k8s.io/v1beta1|metrics.k8s.io/v1beta1>: an error on the server ("Internal Server Error: \"/apis/metrics.k8s.io/v1beta1?timeout=15m0s\": the server could not find the requested resource") has prevented the request from succeeding
E0927 00:25:18.448782 34 gvks.go:69] failed to sync schemas: unable to retrieve the complete list of server APIs: <http://metrics.k8s.io/v1beta1|metrics.k8s.io/v1beta1>: an error on the server ("Internal Server Error: \"/apis/metrics.k8s.io/v1beta1?timeout=15m0s\": the server could not find the requested resource") has prevented the request from succeeding
2022/09/27 00:25:18 [ERROR] Failed to read API for groups map[<http://metrics.k8s.io/v1beta1:an|metrics.k8s.io/v1beta1:an> error on the server ("Internal Server Error: \"/apis/metrics.k8s.io/v1beta1?timeout=15m0s\": the server could not find the requested resource") has prevented the request from succeeding]
E0927 00:25:18.618230 34 gvks.go:69] failed to sync schemas: unable to retrieve the complete list of server APIs: <http://metrics.k8s.io/v1beta1|metrics.k8s.io/v1beta1>: an error on the server ("Internal Server Error: \"/apis/metrics.k8s.io/v1beta1?timeout=15m0s\": the server could not find the requested resource") has prevented the request from succeeding
W0927 00:25:19.365353 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
2022/09/27 00:25:21 [INFO] Updating TLS secret for cattle-system/tls-rancher-internal (count: 2): map[<http://field.cattle.io/projectId:local:p-v5fsk|field.cattle.io/projectId:local:p-v5fsk> <http://listener.cattle.io/cn-10.100.212.117:10.100.212.117|listener.cattle.io/cn-10.100.212.117:10.100.212.117> <http://listener.cattle.io/fingerprint:SHA1=F66FDBCDF677741CEEA4BDFFEBBFF42EF448B7E6|listener.cattle.io/fingerprint:SHA1=F66FDBCDF677741CEEA4BDFFEBBFF42EF448B7E6>]
2022/09/27 00:25:21 [INFO] Updating TLS secret for cattle-system/serving-cert (count: 7): map[<http://field.cattle.io/projectId:local:p-v5fsk|field.cattle.io/projectId:local:p-v5fsk> <http://listener.cattle.io/cn-127.0.0.1:127.0.0.1|listener.cattle.io/cn-127.0.0.1:127.0.0.1> <http://listener.cattle.io/cn-192.68.102.115:192.68.102.115|listener.cattle.io/cn-192.68.102.115:192.68.102.115> <http://listener.cattle.io/cn-192.68.102.208:192.68.102.208|listener.cattle.io/cn-192.68.102.208:192.68.102.208> <http://listener.cattle.io/cn-192.68.102.22:192.68.102.22|listener.cattle.io/cn-192.68.102.22:192.68.102.22> <http://listener.cattle.io/cn-localhost:localhost|listener.cattle.io/cn-localhost:localhost> <http://listener.cattle.io/cn-rancher.cattle-system:rancher.cattle-system|listener.cattle.io/cn-rancher.cattle-system:rancher.cattle-system> <http://listener.cattle.io/fingerprint:SHA1=229A4E9BA347B7D28CE3DA11785A787FB24DE0A1]|listener.cattle.io/fingerprint:SHA1=229A4E9BA347B7D28CE3DA11785A787FB24DE0A1]>
W0927 00:27:04.262048 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
W0927 00:32:57.264854 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
W0927 00:41:52.270559 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
W0927 00:49:04.272743 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
W0927 00:57:10.275272 34 warnings.go:80] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
clever-hair-3563
09/27/2022, 12:11 PMReady False 55 mins ago [Disconnected] Cluster agent is not connected
fierce-house-36494
09/27/2022, 4:22 PMmammoth-dentist-35106
09/27/2022, 4:29 PMmysterious-telephone-75425
09/27/2022, 5:28 PMabundant-horse-74503
09/27/2022, 6:02 PMagreeable-solstice-4598
09/27/2022, 6:07 PMstraight-horse-87868
09/27/2022, 7:37 PMancient-energy-15842
09/27/2022, 8:05 PMfailed to set s3 server: failed to check s3 bucket:etcd-backup, err:Access Denied
I already tried to change the IAM Policy, I'm trying with
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:*"
],
"Resource": [
"arn:aws:s3:::*",
"arn:aws:s3:::*/*"
]
}
]
}
And it still failsbland-painting-61617
09/27/2022, 10:22 PMkubeconfig-generate-token
to false
. Now that Rancher supports time limited tokens - would it be possible to add AAD integration to Rancher CLI?
Similar post was raised on the forum some time ago.fancy-solstice-28980
09/27/2022, 10:23 PMcreamy-pencil-82913
09/27/2022, 11:19 PMfierce-elephant-30846
09/28/2022, 12:10 AMsticky-artist-14452
09/28/2022, 5:35 AMbig-judge-33880
09/28/2022, 9:15 AMproject-owner
in updated when adding new api resources to the cluster? Is manually updating them a potential issue later on?straight-horse-87868
09/28/2022, 11:07 AM