rancher-users #general

crooked-cat-21365

02/17/2023, 3:24 PM

Hi, looking at Rancher's default roles, is it correct that a Cluster Member can create a Project? Thats what the GUI shows me. I find that hard to believe.

Copy code

apiVersion: <http://management.cattle.io/v3|management.cattle.io/v3>
builtin: true
context: cluster
description: ''
displayName: Cluster Member
external: false
hidden: false
kind: RoleTemplate
metadata:
  annotations:
    <http://cleanup.cattle.io/rtUpgradeCluster|cleanup.cattle.io/rtUpgradeCluster>: 'true'
    <http://lifecycle.cattle.io/create.mgmt-auth-roletemplate-lifecycle|lifecycle.cattle.io/create.mgmt-auth-roletemplate-lifecycle>: 'true'
  creationTimestamp: '2023-01-31T11:41:34Z'
  finalizers:
    - <http://controller.cattle.io/mgmt-auth-roletemplate-lifecycle|controller.cattle.io/mgmt-auth-roletemplate-lifecycle>
  generation: 1
  labels:
    <http://authz.management.cattle.io/bootstrapping|authz.management.cattle.io/bootstrapping>: default-roletemplate
    <http://cattle.io/creator|cattle.io/creator>: norman
  managedFields:
    - apiVersion: <http://management.cattle.io/v3|management.cattle.io/v3>
      fieldsType: FieldsV1
      fieldsV1:
        f:builtin: {}
        f:context: {}
        f:description: {}
        f:displayName: {}
        f:external: {}
        f:hidden: {}
        f:metadata:
          f:annotations:
            .: {}
            f:<http://cleanup.cattle.io/rtUpgradeCluster|cleanup.cattle.io/rtUpgradeCluster>: {}
            f:<http://lifecycle.cattle.io/create.mgmt-auth-roletemplate-lifecycle|lifecycle.cattle.io/create.mgmt-auth-roletemplate-lifecycle>: {}
          f:finalizers:
            .: {}
            v:"<http://controller.cattle.io/mgmt-auth-roletemplate-lifecycle|controller.cattle.io/mgmt-auth-roletemplate-lifecycle>": {}
          f:labels:
            .: {}
            f:<http://authz.management.cattle.io/bootstrapping|authz.management.cattle.io/bootstrapping>: {}
            f:<http://cattle.io/creator|cattle.io/creator>: {}
        f:rules: {}
      manager: rancher
      operation: Update
      time: '2023-01-31T11:41:50Z'
  name: cluster-member
  resourceVersion: '8254'
  uid: 8d5303bf-a83d-4d27-b379-0e97d7d6417f
rules:
  - apiGroups:
      - <http://ui.cattle.io|ui.cattle.io>
    resources:
      - navlinks
    verbs:
      - get
      - list
      - watch
  - apiGroups:
      - <http://management.cattle.io|management.cattle.io>
    resources:
      - clusterroletemplatebindings
    verbs:
      - get
      - list
      - watch
  - apiGroups:
      - <http://management.cattle.io|management.cattle.io>
    resources:
      - projects
    verbs:
      - create
  - apiGroups:
      - <http://management.cattle.io|management.cattle.io>
    resources:
:

stale-waiter-23637

02/17/2023, 3:46 PM

Hi everyone, I have a single node Rancher server (v2.7.1) running on docker which is used to manage some imported clusters. Today I was gonna tweak some configurations on the monitoring app and I noticed no charts are available in the apps page. Upon further investigation, I noticed my Repositories list currently looks like this: (image attached, one of the errors in the next line) Git -C /var/lib/rancher-data/local-catalogs/v2/rancher-partner-charts/8f17acdce9bffd6e05a58a3798840e408c4ea71783381ecd2e9af30baad65974 fetch origin -- c6b9fd47d3f7fdeefdb1eb67af52124b51ce6e67 error: exit status 128, detail: error: Server does not allow request for unadvertised object c6b9fd47d3f7fdeefdb1eb67af52124b51ce6e67 This happens in every imported cluster, the only cluster that can download the repos atm is the local one. Last time I saw this was working was either in 2.6.9 or 2.7.0. I saw a couple issues on github regarding the repositories not downloading but none had the "Server does not allow request for unadvertised object" error. Google searches point to git submodule but I have never worked with that and I'm not sure I should even try to sync manually, anyone have any idea what could be wrong or how to fix it?

ancient-area-28415

02/17/2023, 5:03 PM

Howdy folks, does anyone know if there's a way to setup an AlertmanagerConfig with a route that isn't limited to one namespace? My actual AlertmanagerConfig doesn't have a matcher for the namespace, but when I look in my actual Alertmanager config, the namespace is added:

best-address-42882

02/17/2023, 6:21 PM

hi, I am trying to install rancher monitoring, but it fails with

best-address-42882

02/17/2023, 6:21 PM

Normal Scheduled 5m37s default-scheduler Successfully assigned cattle-monitoring-system/rancher-monitoring-admission-create-bkfmp to k8sstageworker002dd Normal Pulling 4m3s (x4 over 5m36s) kubelet Pulling image "artifactdv.us.platforms.dev/registry-1.docker.io/rancher/mirrored-ingress-nginx-kube-webhook-certgen:v1.0" Warning Failed 4m2s (x4 over 5m35s) kubelet Failed to pull image "artifactdv.us.platforms.dev/registry-1.docker.io/rancher/mirrored-ingress-nginx-kube-webhook-certgen:v1.0": rpc error: code = Unknown desc = Error response from daemon: Head "https://artifactdv.us.platforms.dev/v2/registry-1.docker.io/rancher/mirrored-ingress-nginx-kube-webhook-certgen/manifests/v1.0": unknown: Bad credentials

best-address-42882

02/17/2023, 6:22 PM

but I can bull this docker with docker pull wit no issues, and repo doesn't have any auth

hundreds-evening-84071

02/17/2023, 8:45 PM

Hey all, I have 3-node RKE1 HA cluster - running on RHEL 7 upgrade rke to 1.4.2 (from 1.3.15) then upgraded kubernetes version to v1.23.15 (from 1.23.10) Now, I am getting

rke-network-plugin-deploy-job

pods in

kube-system

namespace that are spawning every few minutes in error state. I need some guidance in resolving this

magnificent-dress-27494

02/17/2023, 11:30 PM

Hi. I am at a loss and hope somebody might have some guidance. I have noticed recently that when I try to deploy to my

k3s

cluster that docker.io images that should not require pull secrets fail with a 401 authorization error. Example:

Copy code

helm upgrade --install openfaas openfaas/openfaas -n openfaas -f values-arm64.yaml
---
29s         Warning   Failed              pod/nats-7489f6b794-7qfjs            Failed to pull image "nats-streaming:0.25.3": rpc error: code = Unknown desc = failed to pull and unpack image "<http://docker.io/library/nats-streaming:0.25.3|docker.io/library/nats-streaming:0.25.3>": failed to resolve reference "<http://docker.io/library/nats-streaming:0.25.3|docker.io/library/nats-streaming:0.25.3>": failed to authorize: failed to fetch oauth token: unexpected status: 401 Unauthorized

I noticed the same thing with a JupyterHub deployment. I eventually got around that by adding my Docker Pro credentials and specifying

imagePullSecrets

as the Chart allows. Unfortunately, the OpenFaaS does not allow for specifying

regcred

for the base install. Does anybody have any tips on this? I haven't had to specify credentials for both of these deployments in the past. This seems to have only come up in the past few weeks.

hundreds-actor-42498

02/18/2023, 4:41 PM

narrow-lunch-43082

02/19/2023, 3:41 AM

So i want to be alble to use the rancher ui on the rke2 version is that possible, i cant find anything on the quickstart or that docs

adorable-midnight-46384

02/19/2023, 8:19 AM

Hello, I am getting crazy trying to deploy a RKE2 cluster at Amazon ECS using Rancher 2.7. I am unable to use the option "Amazon Cloud Provider" so it is integrated with the AWS load balancer. I have no problems doing the deployment if I i choose "none" instead of Amazon Cloud Provider, but on this case, I lost the ELB integration. I tryed to setup a IAM role, as suggested on the guide, but I guess I am doing something bad there (and instructions are not clear enough for meat that point). Anyone can help me, please ?

some-monkey-58167

02/20/2023, 1:45 AM

Hi, does RKE2 support change providerID ? I installed RKE2 server and agent , then import to Rancher UI v2.6.9 manage it, Now I try to use kubernetes autoscaler (https://github.com/kubernetes/autoscaler/tree/master/cluster-autoscaler/cloudprovider/alicloud) work with Alibabacloud ESS , Alibaba require providerID format is REGION.INSTANCE_ID , but RKE2 providerID format is rke2://HOSTNAME , anyonw know how change it or config any provider or something else?

little-ram-17683

02/20/2023, 4:49 AM

Hi, I would like to use metallb on RKE2 provisioned cluster. I have to add this configuration to

kube-proxy

Copy code

kubeproxy:
  extra_args:
  ipvs-strict-arp: 'true'
  proxy-mode: ipvs

But looks like there is no config map for kube-proxy. When I try to edit

cluster.yaml

to add custom config to kubeproxy I'm not sure where I should add this cfg. Could you help me, please? 🙂

white-house-39401

02/20/2023, 9:37 AM

i m new in rancher what do you advise me as atraining

clean-piano-88449

02/20/2023, 10:11 AM

Hi, does anybody have any experience with RKE2 Dual Stack deployments? If I define a IPv4 and IPv6 IPPool in the helmchart config for Calico it does not enable IPv6, which can be seen in /etc/cni.d/ calico config file. Is RKE2 performing checks or logic which causes this behavior. If I do not define any settings in the HelmChart Config for calico regarding IPPools, it enables IPv4 and IPv6 but with the default settings.

narrow-lunch-43082

02/21/2023, 1:12 AM

im getting an error Kubernetes cluster unreachable: Get "http://localhost:8080/version" when trying to install longhorn following this guide https://github.com/clemenko/rke_install_blog#longhorn-gui but to no luck, is there something special i need to do with rke2?

microscopic-knife-52274

02/21/2023, 6:34 AM

Hello everyone, we installed Rancher 2.7 on our RKE2 Cluster and we are trying to automate the installation of apps from the "Apps -> Charts" menu. I know that there is the possibility to use Rancher CLI Tools, but is there a way to do that via a .yml file? I found out that there are the some api-resources that seem suitable: helmcharts helm.cattle.io/v1 <- cannot find the helm chart in /home/shell/helm/metallb-0.13.7.tgz apps catalog.cattle.io/v1 <- only creates metadata in "installed apps but there is no deployment" So is there a way to install apps from the "Apps -> Charts" menu via a yml file? Thank you in advance 🙂

flat-finland-50817

02/21/2023, 10:31 AM

Hello all, I was wondering if it is possible to use rancher to manage an Harvester cluster as a normal cluster with Rancher ? I'm able to add Harvester cluster in the virtualization settings but I'd like to be able to access it with the k8s cluster interface of rancher to be able to see all the k8s objects and deploy pods alongside the VMs. Is that possible ? I tried to add the Harvester cluster as a normal cluster using kubectl but I got an error saying "this is an Harvester cluster, please use the virtualization page".

billions-action-81923

02/21/2023, 11:49 AM

Hi guys, I am trying to re setup Rancher on my EC2 instance again after clean up. (Ubuntu) I installed latest version of docker using - https://docs.docker.com/engine/install/ubuntu/ And then ran the command in docs to get the latest Rancher -

Copy code

sudo docker run -d --restart=unless-stopped -p 80:80 -p 443:443 --privileged rancher/rancher

I can see the container running (Image attached) But I cannot access the rancher UI on the public IP. This site can’t be reached error. Has something changed recently cause I was able to access it few weeks back? Appreciate any help on this

hundreds-evening-84071

02/21/2023, 2:05 PM

a general question here.... anyone had any issue with RKE1 after docker-ce upgrade to version 23.x?

bumpy-printer-21267

02/21/2023, 6:54 PM

What is the current recommended solution for auto-redeploy when a new :latest image is published to docker hub?

victorious-mouse-54341

02/21/2023, 7:35 PM

I'm trying to set my server IP to a specific address (192.169.7.10), but it keeps auto assigning. I'm actually using k3d, but it looks like this piggybacks off of the k3s config. So I wanted to make sure that my k3s arg looked correct. I believe this should do it

--node-ip=192.169.7.10"

. My full k3d syntax (if it matters) is:

k3d cluster create doctorconsul --network doctorconsul_wan --api-port 127.0.0.1:6443 --k3s-arg="--disable=traefik@server:0" -p "8502:443@loadbalancer --node-ip=192.169.7.10"

If someone could confirm that the arg is correct in k3s, that will help me dig into k3d. Thanks!

stocky-dream-23501

02/21/2023, 8:03 PM

Hey guys,anyone know's where can i find a tutorial to install about Dockers/Kubernetes and Rancher Manager ?

bright-fireman-42144

02/21/2023, 10:14 PM

single node rancher manager... needed for outside a harvester cluster. I've ran into the latest rancher manager not being compatible with latest k3s what string should I use in the following:

Copy code

INSTALL_K3S_VERSION="v1.24.7+k3s1"

red-vegetable-45199

02/22/2023, 12:49 AM

I tried to build kubernetes with tag v1.20.15, however, I see following error:

Copy code

$ make quick-release
+++ [0221 16:32:42] Verifying Prerequisites....
+++ [0221 16:32:42] Using Docker for MacOS
+++ [0221 16:32:43] Building Docker image kube-build:build-1b391dbecf-5-v1.15.15-legacy-1
+++ Docker build command failed for kube-build:build-1b391dbecf-5-v1.15.15-legacy-1

#1 [internal] load build definition from Dockerfile
#1 sha256:6e1255cd7055eb1cfae67de69d45beeac7b5ba54045fd75efabf9a5c9b66e94c
#1 transferring dockerfile: 1.97kB done
#1 DONE 0.0s

#2 [internal] load .dockerignore
#2 sha256:023df0965c52a498f67650eb5839999db1772ef4662fc6bf683096ebea80ecfe
#2 transferring context: 2B done
#2 DONE 0.0s

#3 [internal] load metadata for <http://k8s.gcr.io/build-image/kube-cross:v1.15.15-legacy-1|k8s.gcr.io/build-image/kube-cross:v1.15.15-legacy-1>
#3 sha256:de1430dc4d9c424151ed461aaeef09868cd97b36305b30b581cd87032a3545d5
#3 ERROR: no match for platform in manifest sha256:f393f7b488a9488fc1dff42ba24e2674f9a2d962c7dedd93a457aaf414ab956e: not found
------
 > [internal] load metadata for <http://k8s.gcr.io/build-image/kube-cross:v1.15.15-legacy-1|k8s.gcr.io/build-image/kube-cross:v1.15.15-legacy-1>:
------
failed to solve with frontend dockerfile.v0: failed to create LLB definition: no match for platform in manifest sha256:f393f7b488a9488fc1dff42ba24e2674f9a2d962c7dedd93a457aaf414ab956e: not found

To retry manually, run:

docker build -t kube-build:build-1b391dbecf-5-v1.15.15-legacy-1 --pull=false --build-arg=KUBE_BUILD_IMAGE_CROSS_TAG=v1.15.15-legacy-1 --build-arg=KUBE_BASE_IMAGE_REGISTRY=<http://k8s.gcr.io/build-image|k8s.gcr.io/build-image> /Users/yongxiang.gao/source/kubernetes/_output/images/kube-build:build-1b391dbecf-5-v1.15.15-legacy-1

!!! [0221 16:32:44] Call tree:
!!! [0221 16:32:44] 1: build/release.sh:35 kube::build::build_image(...)
make: *** [quick-release] Error 1

How to fix it?

narrow-lunch-43082

02/22/2023, 2:33 AM

Is there a way to change the self signed ssl cert for rancher after the install? Im not sure where nginx or the cert is on the server

dazzling-holiday-3716

02/22/2023, 4:25 AM

Hi All, Need some help to fix this issue, Recently i have installed Rancher desktop it version is 1.70 -win32 (x64) and i have windows 10 version 10.01.19045 build19045. Now I am getting this error

dazzling-holiday-3716

02/22/2023, 4:25 AM

Copy code

WSL2 is not supported with your current machine configuration.
Please enable the "Virtual Machine Platform" optional component and ensure virtualization is enabled in the BIOS.
For information please visit <https://aka.ms/enablevirtualization>
Error code: Wsl/Service/CreateVm/0x80370102

dazzling-holiday-3716

02/22/2023, 4:25 AM

Copy code

23-02-22T04:22:36.568Z: Registered distributions: 
2023-02-22T04:22:37.179Z: Registered distributions: 
2023-02-22T04:22:38.578Z: WSL failed to execute wsl.exe --import rancher-desktop C:\Users\Madhu\AppData\Local\rancher-desktop\distro C:\Program Files\Rancher Desktop\resources\resources\win32\distro-0.31.tar --version 2: Error: wsl.exe exited with code 4294967295

dazzling-holiday-3716

02/22/2023, 4:26 AM

Virtualization is enabled in BIOS, and i have change WSL2 to WSL1 , still no luck