rancher-users #general

witty-translator-86250

04/17/2023, 9:50 AM

anyone knows this?

witty-translator-86250

04/17/2023, 9:51 AM

Using the new version of rancher, the original service port (80) and the target port (8080) are different. After updating the application, why does the port corresponding to the service become the same as the target port?

loud-diamond-82990

04/17/2023, 10:55 AM

Hi, is there any way to dynamically change configurations in /etc/rancher/rke2/config.yaml after installation? Say I have a running RKE2 environment, based on default configurations, node-monitor-grace-period is 40s and default-not-ready-toleration-seconds is 300s. If on a running RKE2 cluster, I want to reduce those values for all pods, what can I do? Currently the steps I figured out is, 1. change values in /etc/rancher/rke2/config.yaml 2. restart all master nodes to let k8s service load new values 3. cordon & drain all nodes to recreate all pods, so each pod can adopt new values as value for 'tolerations' But those steps definitely affects running services' availability, so wondering if there is any easier way to make those changes, thanks

loud-diamond-82990

04/17/2023, 12:38 PM

One more question about Calico usage in RKE2. How to customize calico-kube-controller pod number during installation?

white-branch-93180

04/17/2023, 1:25 PM

are those RKE system image will be deleted after installation or those image will be store forever ..I am talking about these images … https://rke.docs.rancher.com/config-options/system-images

rhythmic-painter-76998

04/17/2023, 3:01 PM

anyone running a container inside a vm created by harvester? I am encountered with a slow network issue

best-address-42882

04/17/2023, 3:49 PM

hey guru's, what monitoring do you use. We need to monitor our microservices uptime and and implement some sort of liveness prob? We need to know whether application is still accepting traffic even pods in deployment are up.

wide-smartphone-57691

04/17/2023, 4:41 PM

Is there a process documented for connecting clusters to a new rancher instance? (Rancher was deleted, and I don't see any docs on connecting existing clusters that were previously connected to the previous rancher server.) It doesn't look promising with this: https://github.com/rancher/rancher/issues/25234 But these documentation sections don't mention rke2, only rke. https://ranchermanager.docs.rancher.com/faq/rancher-is-no-longer-needed#if-the-rancher-server-is-deleted-how-do-i-access-my-downstream-clusters

proud-ram-62490

04/17/2023, 5:55 PM

In general, let’s say I have one Rancher server, and I want to deploy multiple RKE2 clusters - does each Service Cluster cidr need to be different for each cluster or can they all run on the default?

chilly-translator-36463

04/17/2023, 6:25 PM

Hi All I am breaking my head since couple of Days to deploy a simple pod in Rancher 2.6.11 in onenode cluster, here is my manifest file

Copy code

apiVersion: apps/v1
kind: Deployment
metadata:
  name: tea-deployment
  labels:
    app: tea
spec:
  replicas: 1
  selector:
    matchLabels:
      app: tea
  template:
    metadata:
      labels:
        app: tea
    spec:
      containers:
      - name: tea
        image: nirulabs/tea:latest
        ports:
        - containerPort: 80
---
apiVersion: v1
kind: Service
metadata: 
  name: tea-service
spec: 
  type: NodePort
  selector: 
    app: tea
  ports: 
    - port: 8082
      targetPort: 80
      nodePort: 30003
---
apiVersion: <http://networking.k8s.io/v1|networking.k8s.io/v1>
kind: Ingress
metadata:
  name: tea-ingress
spec:
  rules:
  - host: <http://example.com|example.com>
    http:
      paths:
      - pathType: Prefix
        path: "/"
        backend:
          service:
            name: tea-service
            port:
              number: 8082

chilly-translator-36463

04/17/2023, 6:25 PM

=====

chilly-translator-36463

04/17/2023, 6:26 PM

I dont see any issues while kubectl deploy -f .

chilly-translator-36463

04/17/2023, 6:28 PM

the problem is in the browser when in search for example.com, its not pointing to my service.

swift-cricket-47233

04/17/2023, 6:54 PM

Hi all! I've got an RKE2 cluster set up, and I've added a remote cluster in Azure for it to manage. We occasionally get this error when doing a kubectl apply -f on it:

error trying to reach service: dial tcp: lookup [HOSTNAME] on [COREDNS:53] no such host

. We've been able to isolate the issue to CoreDNS, and specifically one of the CoreDNS pods seems to be unable to resolve the lookup being requested...but this works a few seconds later (on the same pod). Has anybody experienced this, or does anybody have some advice/guidance on how we might fix it?

stale-spring-20280

04/17/2023, 8:09 PM

Hi All, I have accidentally deleted EKS cluster through AWS console (not using Rancher UI). Rancher is still trying to connect to non existing EKS. Is there way to clean this up?

mammoth-kilobyte-91460

04/18/2023, 1:30 AM

Hi Rancher Masters!!! My LetsEncrypt certificate are expiring soon and I'm trying to renew it for my Rancher Cluster (hosted on a EKS cluster). I've changed the

ingress.tls.email

because the previous owner of this cluster isn't working with us anymore. So, I tried steps 3, 4 and 5 of the official documentation but my certificate it's still the same: https://ranchermanager.docs.rancher.com/getting-started/installation-and-upgrade/resources/update-rancher-certificate#3-reconfigure[…]her-deployment I'm curious if I need to generate a LetsEncrypt certificate manually again (using certbot) and update the secret with it or how can I run a certbot server if my rancher application are running on a k8s cluster? Please, I'm struggling with this issue for some days.

busy-flag-55906

04/18/2023, 10:25 AM

good day, i am adding audit policy on the downstream cluster using crd Cluster and the problem is that kube-api manifest created with the readonly mount: - mountPath: /var/lib/rancher/rke2/server/logs/policy.log name: file5 readOnly: true cluster settings are the following: kube-apiserver-arg: - audit-policy-file=/var/lib/rancher/rke2/server/logs/policy-test.yaml - audit-log-path=/var/lib/rancher/rke2/server/logs/policy.log how can i set mount policy?

busy-flag-55906

04/18/2023, 10:26 AM

Untitled

busy-flag-55906

04/18/2023, 10:26 AM

kubeapi is not able to start

abundant-portugal-24141

04/18/2023, 10:57 AM

Hi All,

abundant-portugal-24141

04/18/2023, 11:17 AM

Hi All, I'm trying to install a new rancher 2.7.2 cluster on top of a freshly installed rke2 1.25.7 cluster. I'm following the air-gapped install instructions for rancher 2.7 but I must be missing something because when I get to the install rancher step it fails with an error about PSP missing:

"Error: INSTALLATION FAILED: execution error at (rancher/templates/validate-psp-install.yaml:4:5): The target cluster does not have the PodSecurityPolicy API resource. Please disable PSPs in this chart before proceeding."

If I add the "global.cattle.psp.enabled=false" flag, I get an other error:

INSTALLATION FAILED: unable to build kubernetes objects from release manifest: resource mapping not found for name: "rancher" namespace: "" from "": no matches for kind "Issuer" in version "<http://cert-manager.io/v1alpha2|cert-manager.io/v1alpha2>" Ensure CRDs are installed first

Can someone please suggest what I am missing?

gentle-diamond-79411

04/18/2023, 12:43 PM

Hi All, I'm facing issue with Rancher installation, can someone help with this. Thanks

future-garden-49149

04/18/2023, 1:11 PM

Hi , I wan't to ask if somebody encounater this error despite the server is added to the authconfigs.management.cattle.io activedirectory

future-garden-49149

04/18/2023, 1:11 PM

Copy code

[ERROR] API error response 500 for POST /v3-public/activeDirectoryProviders/activedirectory?action=login. Cause: invalid server config. at least 1 server needs to be configured

future-garden-49149

04/18/2023, 1:12 PM

and be willing to give a hint where the misconfiguration maye be

most-sunset-36476

04/18/2023, 2:20 PM

@all, I have the rancher-monitoring app deployed with grafana ingress enabled and sidecar dashboads:

Copy code

sidecar:
    dashboards:
      enabled: true
      label: grafana_dashboard
      searchNamespace: cattle-dashboards

But i can't find the

cattle-dashboards

namespace, is this a normal behavior ? Is that namespace created by default ?

best-address-42882

04/18/2023, 3:11 PM

Hi I need to use update certs on my Rancher 2.7.0 to certs signed by private CA, I have copied certs, (.key, cacert.pem, cert.pem)to /etc/rancher/ssl inside my rancher docker container, but it fails to start then with error: [FATAL] failed to setup TLS listener: invalid SSL configuration found, please set cacerts when using self signed certificates or use --no-cacerts when using certificates from a recognized Certificate Authority, do not use both at the same time

best-address-42882

04/18/2023, 8:04 PM

after adding certs to /etc/rancher/ssl folder container fails to start with error: [FATAL] failed to setup TLS listener: invalid SSL configuration found, please set cacerts when using self signed certificates or use --no-cacerts when using certificates from a recognized Certificate Authority, do not use both at the same time

brash-oil-2252

04/19/2023, 10:22 AM

Hello everyone, I try to add Azure China Cloud Credentials on my Rancher UI v2.7.1 but I got the following error : "Authentication test failed, please check your credentials". Do you know how to solve this problem? I can't figure out if it is still an open issue or not. Thank you for your help.

proud-ram-62490

04/19/2023, 2:54 PM

Hi, so I’m running a single node docker rancher instance, I have seemingly lost all ability to add new nodes to clusters. There haven’t really been any changes to the network in general. Even with nodes on the same VLAN with everything wide open, I’m still unable to get a new node registered. I continue to get stuck at: Non-ready bootstrap machine custom=91**LSKJFDLKJOWie and join url to be available on bootstrap node