rancher-users #general

bulky-animal-18539

10/11/2022, 12:14 AM

HI , I currently have a rancher(v2.6.8) cluster (k8s version: v.1.24.2) running on a docker container on a CentOS Linux 7 (core) machine with the ingress class defined as below -

Copy code

apiVersion: <http://networking.k8s.io/v1|networking.k8s.io/v1>
kind: IngressClass
metadata:
  annotations:
  creationTimestamp: "2022-09-02T08:29:41Z"
  generation: 1
  labels:
    <http://app.kubernetes.io/component|app.kubernetes.io/component>: controller
    <http://app.kubernetes.io/instance|app.kubernetes.io/instance>: ingress-nginx
    <http://app.kubernetes.io/name|app.kubernetes.io/name>: ingress-nginx
    <http://app.kubernetes.io/version|app.kubernetes.io/version>: 1.2.0
  managedFields:
  name: nginx
  resourceVersion: "340"
  uid: 34bbbd2e1-jjh-asdfas-asdfa-sdf
spec:
  controller: <http://k8s.io/ingress-nginx|k8s.io/ingress-nginx>

I see the readiness/liveness probes failing for the nginx-ingress controller pods when you describe the pod

Copy code

Readiness probe failed: Get <http://10.xxx.x.x:10254/healthz>: dial tcp 10.xxx.x.x:10254: getsockopt: connection refused

Liveness probe failed: Get <http://10.xxx.x.x:10254/healthz>: dial tcp 10.xxx.x.x:10254: getsockopt: connection refused

Any pointers to check for the reasons of the failing readiness/liveness probes and the fix for the same and also not sure how can I restore the nginx-ingress controller daemonset which got accidentally deleted when trying to debug from the kubectl shell option on the rancher UI.

wooden-scooter-10112

10/11/2022, 8:06 AM

How do we set proxy in rancher desktop?

colossal-translator-19092

10/11/2022, 10:03 AM

anyone got this error ? Observed a panic: runtime.boundsError{x:1, y:0, signed:true, code:0x0} (runtime error: index out of range [1] with length 0) let me know steps to resolve

straight-spoon-36826

10/11/2022, 1:20 PM

Hey All, Upgrade question. We are running Rancher version 2.5.8 (v1.18.18 local cluster k8s version) and want to bring the env up to the most recent 2.6.x version. We seen advice in the past that we should only increment 1 minor version at a time (also seen possibly skipping 2 minor versions is acceptable). Given we have so many versions between us and current is this really the best approach? What are other users experiences? Would jumping to the latest 2.5.x then latest 2.6.x in 2 steps sound reasonable?

quiet-cpu-11420

10/11/2022, 2:00 PM

Has anyone been able to manage Rancher project/user/user RBAC resources with a standard K8S CD tool like ArgoCD, Spinnaker, Flux CD? Seems like there's a disconnect here when it comes to Rancher, as things have to now go through API calls to Rancher itself, and not K8S CRDs. Curious if anybody solved this issue in a uniform way. Trying to manage a bunch of clusters and now having to write CRUD operations to handle it (or use the Rancher CLI) goes away from the K8S declarative approach and is getting VERY hairy.

➕ 2

👀 1

little-smartphone-40189

10/11/2022, 2:11 PM

When scaling up the management plane on a large cluster, what are some other back-end settings that might normally be changed to improve performance? Should we increase the number of cattle-cluster-agents? We notice that in a large cluster (15000+ workloads) that the API gets overwhelmed, even with 4 high end controlplane instances and ETCD just grows until it hits its size cap (so far, with no matter what size limit we make it) which repeatedly results in a NOSPACE error

bulky-sunset-52084

10/11/2022, 6:26 PM

Might have better luck asking in #rancher-desktop

nutritious-crayon-45180

10/11/2022, 8:11 PM

Anyone found a solution for below? unable to install Rancher agent on Raspberry pi running ARM32 running K3s. While registering Rancher with existing K3s cluster, Rancher throws following error Failed to pull image “rancher/rancher-agentv2.6.8” rpc error: code = NotFound desc = failed to pull and unpack image “docker.io/rancher/rancher-agent:v2.6.8”: no match for platform in manifest: not found

flaky-angle-45699

10/11/2022, 8:53 PM

could someone tell me the reason why the metric-server does not capture the CPU? k3s v 1.24.4 + k3s1 on raspberry pi 3 model B {"kind":"APIGroup","apiVersion":"v1","name":"metrics.k8s.io","versions":[{"groupVersion":"metrics.k8s.io/v1beta1","version":"v1beta1"}],"preferredVersion":{"groupVersion":"metrics.k8s.io/v1beta1","version":"v1beta1"}}

glamorous-painting-54907

10/12/2022, 6:33 AM

To my understanding Gatekeeper, exposes metrics for Prometheus. I assume I have to configures some additional scrape config? Any help would be appreciated

broad-pencil-13342

10/12/2022, 6:36 AM

Hey everyone, our rancher platform was down yesterday, I am not sure why this is gone. Does anyone know how to resolve this? https://rancher.drekke.be/

clever-mechanic-71254

10/12/2022, 10:25 AM

when configuring rancher active directory integration with terraform I found everything I need but no terraform way to configure the "_Authorized Users & Groups_" section or the "_Configure who should be able to login and use Rancher_" section; anyone already did that?

clever-analyst-23771

10/12/2022, 3:47 PM

All, we have a new site that archives our Rancher Community Slack conversations. I booked marked this in this channel. Here is the direct url https://slack-archive.rancher.com/ We had to change the url. Sorry for the confusion!

👍 1

thousands-application-96497

10/12/2022, 8:46 PM

So I have an odd issue with GKE cluster stuck in a updating status In rancher it shows

Copy code

This cluster is currently Updating.

Googleapi: Error 400: Master version "1.20.12-gke.1500" is unsupporte" is unsupported., badRequest

Looks like Google updated it to a supported version

v1.21.14-gke.2700

already but I am unable to update the version in rancher. Tried to update it via terraform but I am just getting the error

Copy code

Error: [ERROR] waiting for cluster (c-cx868) to be updated: timeout while waiting for state to become 'active, provisioning, pending' (last state: 'updating', timeout: 30m0s)

Not sure how to clear the status and to stop rancher trying to downgrade the cluster. Anyone seen this before?

salmon-rain-85703

10/12/2022, 9:02 PM

I'm working on transferring ownership of a project to another team and they are now configured as the owner, but when they try to apply the manifests they get a permissions error that they can't patch the object. This is to apply an update to an object created from a CRD. Is there something I need to do to ensure that Rancher grants permissions to CRDs?

full-painter-23916

10/13/2022, 12:59 AM

👋 1

acoustic-bird-20495

10/13/2022, 7:46 AM

👋 Hi everyone!

acoustic-bird-20495

10/13/2022, 7:47 AM

I have installed rancher desktop as alternative to docker desktop

acoustic-bird-20495

10/13/2022, 7:48 AM

and tried to connect my host service with ip address of host from docker container... but couldn't proceed?

acoustic-bird-20495

10/13/2022, 7:48 AM

can anyone suggest solution for it

👀 1

best-accountant-61831

10/13/2022, 8:22 AM

Have been running (mannually) a rancher instance for a couple of years, and am now looking at doing a new setup, in the best way possible. First thing I'm trying to find out, is how to configure it in a gitops way (we're using FluxCD). Installing rancher itself is pretty simple, with the helm chart. However I can't seem to find info on how to write yaml manifests for specific configurations, e.g starting with adding a cluster. AFAIK, most of not all configurations somehow translate to specifc CRD objects, which makes me wonder to what extent I can make configs by creating those myself?

👀 2

echoing-ability-7881

10/13/2022, 11:31 AM

Hi guys i there is any way to check nginx logs in rancher workerload _ issue is service like gateway is running smooth and after 4 or 5 hrs nignx stopped working. idk what is the problem

ancient-energy-15842

10/13/2022, 2:34 PM

Did anyone managed to add a Loki query under PrometheusRules with Rancher monitoring stack?

blue-florist-78333

10/13/2022, 2:40 PM

Hi all, I have enabled ACE on RKE2 cluster however I am not sure where to point ACE Load Balancer .. should I point it to kube api server of the downstream cluster running on 6443?

blue-florist-78333

10/13/2022, 2:56 PM

Ok I have made some progress but getting this error on ACE

blue-florist-78333

10/13/2022, 2:56 PM

Copy code

time="2022-10-13T14:54:35Z" level=info msg="Processing v1Authenticate request..."
time="2022-10-13T14:54:35Z" level=info msg=" ...looking up token for kubeconfig-u-24776dj8qj"
time="2022-10-13T14:54:35Z" level=error msg="<http://clusterauthtokens.cluster.cattle.io|clusterauthtokens.cluster.cattle.io> \"cattle-system/kubeconfig-u-24776dj8qj\" not found"

blue-florist-78333

10/13/2022, 2:56 PM

any idea

hallowed-helmet-98598

10/13/2022, 3:05 PM

hello everyone, i'm using rancher with calico, as i see My firewall can see my k8s ClusterIP, like that source (nodeIP) destination (clusterIP) and i whant to disable traffice route from my k8s cluster to my firewall i have not BGP configuration i have only this configuration: question how can i disable announce my cluster ip to outside of k8s i whant when pod trying to connect clusterIP don't go to outside from node connect from inside bettwing nodes root@rke-worker04:~# k get ippools.crd.projectcalico.org default-ipv4-ippool -o yaml apiVersion: crd.projectcalico.org/v1 kind: IPPool metadata: annotations: projectcalico.org/metadata: '{"uid":"38607f3c-c3cc-4a57-be59-3652f1b055aa","creationTimestamp":"2022-09-19T063420Z"}' creationTimestamp: "2022-09-19T063420Z" generation: 1 name: default-ipv4-ippool resourceVersion: "42199" uid: 167f9f78-d05f-4233-8bc1-4f60dc93a51a spec: allowedUses: - Workload - Tunnel blockSize: 26 cidr: 10.42.0.0/16 ipipMode: Never natOutgoing: true nodeSelector: all() vxlanMode: CrossSubnet

hallowed-helmet-98598

10/13/2022, 3:06 PM

how can i fix it ?

dry-businessperson-9236

10/13/2022, 6:14 PM

If I want to install Rancher (v2.6.6) using CA certificate signed by my company (that provides root and intermediate certificates for our domain), what's the order of certificates in full certificate chain: root, followed by intermediate followed by host certificate, or is it the other way round? Different systems require different order, do don't want to mess up my installation.