hello guys, do anyone ever experienced deploying laravel microservices using kubernetes cluster in rancher? i have some question to ask...

Hi trying to import an EKS cluster on active Rancher instance and have issues on this. I use version 2.7.1, and my instance is installed on an EKS cluster. I tried the following operations • renewing the credentials (AWS user) • importing a cluster from same region and other one. I previously imported 3 other clusters without any problem. I get several messages on import : • Wait for Condition: InitialRolesPopulated • Validation failed in API: cluster kubernetes version cannot be empty string I tried the operation described here : https://github.com/rancher/rancher/issues/25744 == https://ranchermanager.docs.rancher.com/v2.6/troubleshooting/other-troubleshooting-tips/expired-webhook-certificate-rotation The previous clusters have been registered when on K8S 1.23 then migrated. The new ones are 1.25 directly. Any clues ?

Hi everybody Is there any community for k3s? Thanks in advance!

#k3s?

@refined-analyst-8898 has left the channel

Hello All , I am struggling from last 15 days to add the other k8s cluster to my rancher node .Basically i have installed rancher 2.7 using helm charts and cert-manager with self signed certificate in rancher . But when i am trying to add the new cluster inside the rancher it says certificate chain is not completed .Can anyone please help me to set it up . (edited)

Hello All, Recently I am getting one error ([Errno 111] Connection refused') while communicating one pod (where my application is running) to another ( mongo-router is running here) . This is not regular error which I am getting but it is less frequent. Can someone please help me to sort it out

Hi, We are getting error "Alert: Component scheduler is unhealthy." for Rancher 2.5.10 version

Basically Scheduler is not getting started.. Is their any workaround possible for that ?

Hello everyone, Me and my co-founder @incalculable-artist-61842 are at the very beginning of our journey as a startup. Currently we're trying to gather more information and deeper understanding how IT companies are using their Kubernetes clusters (specially organizations with multi-cluster, multi-cloud environments). We are kindly asking you to participate in our short survey (5 minutes max). The information provided will help us tremendously and allow us to better contribute to CNCF community and projects. https://ncv.microsoft.com/Ta6MGGOGY8 Thank you for your time! Much appreciated! Cheers! Kubar.io team

can anyone guide me how to setup the alerts to the slack after enabling prometheus and grafana in rancher 2.7 . I have been trying to sending the alarms to the slack channel (edited)

@worried-receptionist-67815 has left the channel

Hi all, I have a conceptual question re ingress and load balancing. I configured an external nginx layer 4 load balancer. Is there a way to combine that with an ingress in Rancher to make services available?

hello, I'm creating namespaces with helm and after this I want to manage project members but this namespaces is not in project and I can not mange members of this namespace, do you have any solution ? thanks

~Hi, I have a problem exposing my app via ingress and external load balancer (rke2). Setup:~ • Rancher v2.7.2

Hi folks, using certbot I had created a certificate with "CN = *.k8s.example.com" (instead of "CN = k8s.example.com") and added it as a default cert to nginx ingress controler. I have revoked the bad cert, deleted the secret, created a new one with the expected CN and set the secret, but nginx refuses to use the new cert and still provides the bad certificate somehow. What is going on here? Obviously there is a copy of the bad secret somewhere, but I cannot find it. Every help is highly appreciated.

Hi, I created a deployment and under ports I create a ClusterIP service. It asks me for private container port and public host port. I thought ClusterIP was internal to the cluster only, but I can access the application on the rancher cluster IP and public port from my local computer outside the cluster. Is that the intended behavior? If I make the service a NodePort service I have the additional option of a listening port. What is that used for and how is it different than the public host port?

ok, thanks again. that helps

sorry that was meant for the thread

Hello y'all. I have upgraded my kubernetes version with an RKE1 template to kubernetes 1.24 and now none of my Persistent Volume Claims will mount with my pods. We are using azure for our PVCs and I made sure the template has the correct azure service principal to be able to connect. Does anyone have any experience with troubleshooting this? The error looks like this:

Failed Mount 
Unable to attach or mount volumes: unmounted volumes=[data-0], unattached volumes=[ready-files kube-api-access-8jhkt data-0 app-name-tmp cluster-ca broker-certs client-ca-cert kafka-metrics-and-logging]: timed out waiting for the condition

Hey guys! I did setup for 3 masters and 5 worker nodes It was running well previously but now I am seeing a issue related to etcd not able to connect

k3s[1510]: {"level":"warn","ts":"2023-06-26T04:33:34.490Z","logger":"etcd-client","caller":"v3@v3.5.3-k3s1/retry_interceptor.go:62","msg":"retrying of unary invoker failed","target":"<etcd-endpoints://0xc000d8a000/127.0.0.1:2379>","attempt":0,"error":"rpc error: code = DeadlineExceeded desc = context deadline exceeded"}
k3s[1510]: time="2023-06-26T04:33:34Z" level=error msg="Failed to check local etcd status for learner management: context deadline exceeded"
k3s[1510]: time="2023-06-26T04:33:34Z" level=info msg="Waiting to retrieve kube-proxy configuration; server is not ready: <https://127.0.0.1:6443/v1-k3s/readyz>: 500 Internal Server Error"

Tried few solutions from online but nothing helped https://github.com/etcd-io/etcd/issues/12234 https://github.com/mmumshad/kubernetes-the-hard-way/blob/master/docs/07-bootstrapping-etcd.md#configure-the-etcd-server https://stackoverflow.com/questions/55571566/unable-to-bring-up-kubernetes-api-server Can anyone help or tell how to bring etcd service back?? when I try to manually run etcd it starts as expected but k3s service doesnt start because port 2379 is already in use Also port 2379 and 2380 are open on all nodes

Hi Team, I have ran into an issue where we have an application deployed that uses a lot of ingresses. Now I see that rancher puts an annotation on de deployment named

<http://field.cattle.io/publicEndpoints|field.cattle.io/publicEndpoints>

at this point the annotation is so big that updates fail with the following error.

is invalid: metadata.annotations: Too long: must have at most 262144 bytes

. Is it possible to disable the use of this annotation for rancher?

Has anyone gotten the UserNamespacesStatelessPodsSupport feature gate to work on either k3s or rke2? I've tried on the most recent versions of both but get the same problem even with the simple example doc'd on the k8s website. (keywords: hostUsers, KEP-127)

Dear all, I have 2 “Machines” in a very weird status: “Failed deleting server [fleet-default/…-cluster-master-pool-c4…] of kind (OpenstackMachine) for machine …-cluster-master-pool-58… in infrastructure provider: DeleteError: About to remove …-cluster-master-pool-c4f…WARNING: This action will delete both local reference and remote instance. (…-cluster-master-pool-c4f…) deleting instance... map[MachineId:] (…-cluster-master-pool-c4…) Deleting OpenStack instance... (…-cluster-master-pool-c4…) Authenticating... map[ApplicationCredentialId: ApplicationCredentialName: AuthUrl:https://X.Y.Z:5000 CaCert: DomainId:53…9 DomainName: Insecure:true TenantDomainID: TenantDomainName: TenantID:2a…c4 TenantName: UserDomainID: UserDomainName: UserId: Username:] Error removing host “…-cluster-master-pool-c4…“: You must provide a password to authenticate” I’m not able to delete them (there are 2 of them) from Rancher UI. They don’t exist in Openstack

Would you have some adivce s on what can be done to completely make them dissapear?

found the solution - again “finalizers” sorry for the noise :)

Hi All, I would like to check if anyone deployed pgbouncer in aks without azure vault

We deploy our Rancher cluster via Terraform, and at one point had to raise a cluster_monitoring_input memory setting. Since moving to Rancher's updated alerting/monitoring system this setting has been deprecated, but at this point we can't find a way to remove it from tf/cluster state (meaning this change persists after we attempt to apply it). Any suggestions?

Creating ELB with openstack. It’s in this state forever. Any guides?

Cross post. Need some help on this one. 🙂 (rke2 cluster)