rancher-users #rancher-setup

broad-farmer-70498

07/06/2023, 8:27 PM

Has anything changed with the AD integration since 2.7.2 to 2.7.5? I’m getting new user objects duplicated for the same creds and failures syncing etc

quick-camera-3565

07/10/2023, 2:57 PM

@quick-camera-3565 has left the channel

little-engine-29776

07/11/2023, 4:46 PM

I have Rancher setup and running in the cloud, but my nodes are in an air-gapped network that only has access to Rancher. When I run the rancher agent it is failing on the nodes setup. I don't see traffic going back to my Rancher server. What is the best approach for this type of setup?

gray-architect-84789

07/11/2023, 8:01 PM

Any idea on the below error. observing below error when trying to create rancher managed downstream cluster. any idea?

Copy code

Jul 11 13:45:12 <hostName> rancher-system-agent[592515]: time="2023-07-11T13:45:12+04:00" level=info msg="[Applyinator] Extracting image <IP>:Port/rancher/system-agent-installer-rke2:v1.23.15-rke2r1 to directory /var/lib/rancher/agent/work/20230711-134512/48e703bd84cf2d319da3c171ab39a717262df591e8e11f305d2b2a9e76bc719a_0"

Copy code

Jul 11 13:45:12 <hostName> rancher-system-agent[592515]: time="2023-07-11T13:45:12+04:00" level=info msg="Using private registry config file at /etc/rancher/agent/registries.yaml"

Copy code

Jul 11 13:45:12 <hostName> rancher-system-agent[592515]: time="2023-07-11T13:45:12+04:00" level=info msg="Pulling image <IP>:Port/rancher/system-agent-installer-rke2:v1.23.15-rke2r1"

Copy code

Jul 11 13:45:13 <hostName> rancher-system-agent[592515]: time="2023-07-11T13:45:13+04:00" level=error msg="error while staging: GET http://<IP>:Port/v2/: unexpected status code 400 Bad Request: <html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.23.1</center>\r\n</body>\r\n</html>\r\n: failed to get image <IP>:Port/rancher/system-agent-installer-rke2:v1.23.15-rke2r1"

Copy code

Jul 11 13:45:13 <hostName> rancher-system-agent[592515]: time="2023-07-11T13:45:13+04:00" level=error msg="error executing instruction 0: GET http://<IP>:Port/v2/: unexpected status code 400 Bad Request: <html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.23.1</center>\r\n</body>\r\n</html>\r\n: failed to get image <IP>:Port/rancher/system-agent-installer-rke2:v1.23.15-rke2r1"

Copy code

Jul 11 13:45:13 <hostName> rancher-system-agent[592515]: time="2023-07-11T13:45:13+04:00" level=error msg="error encountered during parsing of last run time: parsing time \"\" as \"Mon Jan _2 15:04:05 MST 2006\": cannot parse \"\" as \"Mon\""

broad-farmer-70498

07/11/2023, 9:14 PM

can this mess get cleaned up? https://github.com/rancher/rancher/issues/41985

abundant-noon-17295

07/15/2023, 8:17 PM

Hi all, it there a way to reset Rancher back to pre-bootstrap state so that I can run terraform with

rancher2_bootstrap

resource again

ambitious-furniture-5481

07/19/2023, 8:46 AM

Hi All, Can any one help me to install a RKE2 and rancher on linux server. I have 9 node server in that 3 of them I need to make a master cluster and other 6 as a worker node. can anyone guide me here Thanks Brijesh

strong-eye-31559

07/21/2023, 11:53 AM

Hello everyone, I have a small problem with the installation of rancher on my on-premise RKE2 Kubernetes. I have used the offical documentation to install rancher on my kubernetes machine https://ranchermanager.docs.rancher.com/pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster. In the installation step 3 (Choose your SSL Configuration) I have chosen the option "LetsEncrypt" and in the next step (4. Install cert-manager) I have installed the cert-manager so I can use LetsEncrypt on future deployments or workloads to automatically get a valid certificate for my dyndns address. In step 5 (Install Rancher with Helm and Your Chosen Certificate Option) I have also choosen the configuration Option "LetsEncrypt" to setup my rancher. I have used the following helm chart:

Copy code

helm install rancher rancher-stable/rancher \
  --namespace cattle-system \
  --set hostname=<http://example.no-ip.org|example.no-ip.org> \
  --set bootstrapPassword=admin \
  --set ingress.tls.source=letsEncrypt \
  --set letsEncrypt.email=me@example.org \
  --set letsEncrypt.ingress.class=nginx

strong-eye-31559

07/21/2023, 12:01 PM

Copy code

helm install rancher rancher-stable/rancher \
  --namespace cattle-system \
  --set hostname=example.no-ip.org \
  --set bootstrapPassword=admin \
  --set ingress.tls.source=letsEncrypt \
  --set letsEncrypt.email=me@example.org \
  --set letsEncrypt.ingress.class=nginx

Now I don't want my rancher UI to be publicly accessable. How do I need to modify the helm chart so that for example I can change the Racher UI listinig port from 443 to port 8080 ?

rapid-tent-51700

07/29/2023, 11:51 PM

Hi, I’m currently in v2.5.12 and have upgraded Kubernetes to cluster to 1.22 which is causing Rancher to detect the cluster. If any of you have upgrade steps to 2.7 handy can you please share. I’m new to setup and I do see RKE is at 1.20.

straight-fountain-2279

08/02/2023, 11:50 AM

can anyone help me on this

ambitious-furniture-5481

08/03/2023, 12:16 PM

Hi Teaam, After upgrade rke2 k8s 1.21 version to 1.25. I am getting below issue. Please help me here to resolve this issue

freezing-ability-85929

08/07/2023, 7:42 AM

Not able to download rancher desktop from github. After download it stuck with message like need authentication. Already login in GitHub. Given Full Access Write to Download Folder.

busy-photographer-15014

08/08/2023, 8:41 PM

Hi guys, I'm provisioning an rke2 cluster on harvester via node-driver. I notice that the machines are created, the IPs are received by DHCP, however I have the status below eternally. Do you have any other source of information so I can assess what possible problem I'm facing?

busy-photographer-15014

08/08/2023, 10:21 PM

Problem it's resolved!

sticky-jewelry-7454

08/13/2023, 12:48 PM

I need help

happy-twilight-88918

08/16/2023, 12:55 AM

Hi all, im trying to find where I can look for documentation on figuring out a problem I'm running into. The issue is that my clusters are in of state of "in progress", I cant explorer my clusters any more through the rancher console, and in the cluster management screen I see the following "Cluster generation is 9, but latest observed generation is 7". We are running rancher 2.6.8 with v1.25.9+rke2r1 and then the nodes failed to upgrade and are stuck on v1.24.9+rke2r2, v1.24.10+rke2r1, v1.24.9+rke2r2. Any ideas where I can look for documentation dealing wit this?

straight-fountain-2279

08/16/2023, 12:00 PM

any one know how we can define load balancer to access rancher UI

green-doctor-75427

08/21/2023, 4:47 AM

Hello Guys, I am trying the to create docker image as suggested in the Elemental documentation using the image registry.suse.com/rancher/elemental-teal/5.3:latest RUN rpm --import <repo-signing-key-url> && \ zypper addrepo --refresh <repo_url> extra_repo && \ zypper install -y <extra_package> However i am unable to install any package in it using zypper. I tried using the Suse repositories it did not work, and it requires sle micro 5.3 repo? Is there public repo available to use for sle micro? How to install packages using zypper in sle micro 5.3 thanks, Harsha

most-kite-870

08/22/2023, 9:28 AM

I just install the Rancher v2.7.5 (via official docker container) on Windows 10 Desktop Docker, The Fleet Continuous Delivery Menu option is missing. How do I get that back?

magnificent-midnight-15169

08/23/2023, 4:29 PM

Hi i have a big problem to pull images in my Rencher v 2.7.5 . I want pull images to deploy one deployment from my registry. My registry es Harbor

fresh-jelly-81876

08/25/2023, 3:50 PM

Hi all, can anyone help me with the ubuntu iso image compatible with latest harvester and rancher v2.7.5

bumpy-queen-38421

08/31/2023, 9:43 AM

Hello, i got rancher 2.5.13 and kubernetes 1.20.15 And i want to upgrade kubernetes 1.22 but rancher cant purpose this version Which version rancher i need to be install for had kube 1.22 ?

blue-farmer-46993

09/06/2023, 12:33 PM

Hello Everyone, I am using CIS scan chart by Rancher over my cluster. I can see some of the scan's failed . For example Ensure that the --audit-log-path argument is set (Automated) . Is there a way to implement the fix via Rancher?

proud-ram-62490

09/11/2023, 4:46 PM

Hi all, I’m noticed this morning that several of my downstream clusters are throwing this log from the agent: rancher-system-agent[14138]: panic: error while connecting to Kubernetes cluster: the server has asked for the client to provide credentials the clusters themselves are still serving data and can be managed through the rancher webui, any idea where to start with this?

proud-ram-62490

09/11/2023, 5:02 PM

Does this exist for non elemental installs?

proud-ram-62490

09/11/2023, 5:02 PM

https://elemental.docs.rancher.com/troubleshooting-restore/

mammoth-mechanic-18117

09/12/2023, 11:47 AM

Hello. I installed Harvester 1.2.0 and Rancher 1.2.7, activated integration. But when I try to create a Kubernetes cluster in Rancher, the list of images is empty, although Harvester has them.

full-train-34126

09/21/2023, 8:12 PM

Hi everyone. Quick question for anyone using Keycloak for Rancher authentication. I'm on Rancher 2.7.3. Keycloak authentication was all set up and working, or so I thought. I have no problems authenticating and logging in new users etc. But after about 2-3 minutes of configuring the authentication I start getting errors in the Keycloak pod about "type=REFRESH_TOKEN_ERROR, realmId=myrealm, clientId=(removed), userId=null, ipAddress=(removed), error=invalid_token, grant_type=refresh_token". Then after about 30 minutes I suddenly can't see certain LDAP groups associated with clusters, the objects are there but the UI show "Unknown" and something about couldn't query principal something or other. If I go back to the Keycloak configuration the client secret is empty, I put that back in and save the config and everything goes back to working, I can see the LDAP groups again and everything works until the cycle repeats itself. Feel like I've checked the Rancher and Keycloak client configs a million times, but Iust be missing something. Any help or pointers appreciated.

fierce-knife-24388

09/24/2023, 3:18 PM

@fierce-knife-24388 has left the channel