the Role should be gitlab-app-role-anyuid and have this mappingrules: - verbs: - use apiGroups: - security.openshift.io resources: - securitycontextconstraints resourceNames: - anyuid

seems to be an openshift settings rather than a k8s compatible (even if the operator is set to kubernetes)

hey, is there anyway to scale etcd cluster without readding it? For example, i would like to scale etcd from 1 to 3 on the existing cluster

Hey Rancher-Fans, I've a setup with rancher in version 2.7 in place to manage multiple Kubernetes Clusters in Azure. It is currently a POC to show how useful rancher is in a company szenario. But, unfortunaly I am not able to configure the rancher-backup to work with azure storage account. Can somebody give me useful informations?

I am using Docker Single Install of Rancher and a Minikube cluster. It looks like everything is working, but the repositories are stuck in the In Progress state. I am using my own certs. Does anyone have any ideas on how to trouble shoot this?

Hey, adding private repo to "local" cluster works without any issues, but when I add same repo for imported RKE2 cluster it always "In progress" and doesn't read helm repo. What could be an issue here?

Has anyone ever tried adding a VMWare NAPP cluster to Rancher? If so, think you could give me a walkthrough?

Not sure how I got into this situation just curious if anyone as seen this before. The

cattle-node-agent

logs are just showing the following

time="2023-02-10T16:45:53Z" level=info msg="Connecting to <wss://rancher.prime.iad0.netskope.com/v3/connect> with token ********"
time="2023-02-10T16:45:53Z" level=info msg="Connecting to proxy" url="<wss://rancher>.*****.com/v3/connect"
time="2023-02-10T16:45:53Z" level=error msg="Remotedialer proxy error" error="Error response from daemon: unknown: Not Found"

Hello, is it possible to register a rke2 cluster (exposed on the public internet) on a private rancher 2.7? it looks like the cluster-agent has to resolve the rancher url to be able to register the cluster. Is there another way? My rancher instance is not exposed on internet and is on a different private network. Thanks

hey, I've enabled legacy flag on Rancher 2.7.0 and see my global catalogs there, they are active, but how to use them? For example charts from legacy catalogs is not available for any clusters.

Import existing cluster with same name (but from different accounts/projects/...) does not work in Rancher! Why? I'm getting the same error as here (but with GKE instead of EKS): https://forums.rancher.com/t/import-eks-cluster-with-same-name-and-same-region-but-in-different-aws-accounts/38285 I'm running Rancher 2.7

My doubt is? Do I need to "manually" release ports 30000:32767/tcp on the node's firewall?

hey, i’m facing an issue with Rancher and my Kubernetes cluster, while the kubernetes cluster is still working and has no issues as of right now, rancher reports that it is updating one specific master node since more than 24 hours, see screenshots attached. I tried already a few things to solve it: e.g. restoring from an older etcd/cluster snapshot and manually applying the managed chart item on the rancher cluster But I’m running out of ideas now and no idea what/how to fix that, any hints/tips/ideas? Thanks 🙏

Hello Team .Do we have QoS DSCP like OpenShift Container Platform.There should be some mechanism for network appliances outside the OpenShift Container Platform (OCP) cluster to prioritize the traffic. anyone could you please guide me ?

I just did a fresh install of Rancher Desktop on Windows 10. WSL is hooked up, I have no errors, K8s is running but when I open the dashboard, it never loads. I have no proxy, I've shut my firewall off and yet it never shows the dashboard.

What I see is this. Any idea what is keeping the dashboard from showing up?

Does anyone know where the configuration files for the cluster are stored? Specifically the repositories?

Hi @all i and my team are new to k8s . Can anyone send ref on-> how to create private docker registery in local k3s . It will be really helpful thanks!

Fresh install of k3s on 4 node PI cluster and i get no charts showing up, i assume due to no arm64 capable helm charts being found. Do we have any good repos setup with arm64 helm charts? maybe keycloak, certmanager, mongodb ? Provider: K3s Kubernetes Version: v1.25.6 Repos Partners: https://git.rancher.io/partner-charts Rancher: https://git.rancher.io/charts

Hello, I am setting up a 3 node cluster with Rancher in my 2 EC2 instances Custom Setup. Registering the two nodes seems to be stuck for a long time and have an error on network ports. All 3 instances can ping to each other. Am I overlooking something in the setup as I am new to Rancher? Appreciate any leads on this issue. [[network] Host [172.x.x.109] is not able to connect to the following ports: [170.x.x.154:2379, 170.x.x.154:2380]. Please check network policies and firewall rules]

Rancher2 Terraform GKE question: when I add a new nodepool for GKE in terraform, the whole cluster must be destroyed and recreated. Why? If I merely delete an existing nodepool from terraform, only an update is performed - as it should be also with adding nodepools. Isn't it possible that Rancher just adds its cattle pods into the new nodepool nodes?

SlackHi, what do I need to configure where so that my app's Prometheus Exporter is picked up by Prometheus. I would have hoped that one set of annotations would be enough. Pointing to a correct example would be enough for me. Thanks!

Any freelance to configure metallb ?

How can I tell Rancher which CNI to use for setting up a new K3S cluster? https://ranchermanager.docs.rancher.com/faq/container-network-interface-providers doesn't tell; it is all about RKE/RKE2.

Hi do anyone know if rancher is compatible with win 11? I'm having issues with the port-forwarding in wsl2, and windows can't seem to find the containers that are running, even though they are up and running on the specified port.

Hello , we see something that rancher users are not able to login, and they keep seeing the spinning wheel. In the browser network logs we see this:

NavigationDuplicated: Avoided redundant navigation to current location: "/"

Any idea? rancher version:

2.6.9

Is it normal that cattle-cluster-agent restarts 4-5 times in the first day? I only imported a GKE cluster into Rancher 2.7 with private worker nodes, private control plane and authorized networks enabled (including the Rancher server external IP). I also cannot install any apps on this downstream GKE cluster: Cluster Tools -> "No Cluster Tools found", Apps -> Charts -> "There are no charts available, have you added any repos?", the Rancher and Partners repos are there and working fine on local Rancher server cluster. They are also working fine on public downstream GKE clusters.

Having an issue on M1 MacOS where it's not asking for sudo password and instead failing with

stderr=\\"sudo: a terminal is required to read the password; either use the -S option to read from standard input or configure an askpass helper\\\\n\\": exit status 1"\n',

This wasn't an issue Friday, and I don't believe anything has changed on my side. Tried restarting multiple times (running dockerd(moby) with "Allow Rancher Desktop to acquire administrative credentials" checked), factory reset, and machine restart.

I have a version rancher 2.6.5 on a k8s1.23 provider. If I had to upgrade k8s to 1.24 do I have to upgrade Rancher before hand to accomplish this?

Have any of you had experience getting cert-manager to work on your RKE k8s cluster? I can't seem get passed the self-check part. I ask here because maybe it's RKE config that's preventing the self-check from working?