https://rancher.com/ logo
Powered by
#rke2
  • g

    gentle-petabyte-40055

    01/29/2023, 9:29 PM
    image.png
  • g

    gentle-petabyte-40055

    01/29/2023, 9:29 PM
    the ip's changed on the control plane
  • g

    gentle-petabyte-40055

    01/29/2023, 9:29 PM
    I can access applications on the cluster
  • g

    gentle-petabyte-40055

    01/29/2023, 9:29 PM
    but rancher is unable to access it
  • s

    swift-student-44295

    01/30/2023, 3:42 PM
    Hi folks, I'm getting "error: You must be logged in to the server (Unauthorized)" and found that the client-certficate-data cert expired over the weekend. I understand that the cluster auto-renews certs when the service restarts, but I don't know how to update my client configuration. How do I do that?
    c
    • 2
    • 2
  • n

    narrow-noon-75604

    01/31/2023, 6:57 AM
    Hi, I have deployed some springboot apps on RKE2 cluster and exposed their services on nodeports. All the services are accessible on their respective nodeports except one service is unreachable on 30211 port. NOTE: I am using calico network and disabled both firewalld and iptables services
  • n

    narrow-noon-75604

    01/31/2023, 7:01 AM
    image.png
  • n

    narrow-noon-75604

    01/31/2023, 9:00 AM
    Any suggestions on how to open this port.
  • g

    gentle-island-29063

    01/31/2023, 5:55 PM
    did anyone successfully installed rke2 on ubuntu 22/20.04 using this 
    curl -sfL <https://get.rke2.io> | sh -
    ?
  • b

    blue-controller-9088

    01/31/2023, 7:01 PM
    Does anybody know what is the purpose of system-upgrade-controller in RKE2 spinned up as downstream cluster? I noticed it’s getting installed automatically. From what I can see in the docs https://docs.rke2.io/upgrade/automated_upgrade it can manage automated cluster upgrades. Do I really need it if I initiate upgrades manually, via terraform or UI?
    c
    • 2
    • 18
  • c

    crooked-cat-21365

    02/01/2023, 7:52 AM
    Trying to deploy a new RKE2 cluster using Rancher 2.7.1 I get a lot of messages "Internal server error" and "retrying of unary invoker failed", but the cluster doesn't show up. Not a single container has been started. If I try to run a sample container for verification I get
    Copy code
    # crictl runp /tmp/pod-config.json 
E0201 08:48:23.160651    4075 remote_runtime.go:201] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"00bea6d4a719789624b9eb4b5467cab36de70c241687f267377035958ca406cb\": cni plugin not initialized"
FATA[0000] run pod sandbox: rpc error: code = Unknown desc = failed to setup network for sandbox "00bea6d4a719789624b9eb4b5467cab36de70c241687f267377035958ca406cb": cni plugin not initialized
    How comes? Every insightful comment is highly appreciated.
    c
    a
    • 3
    • 6
  • b

    blue-controller-9088

    02/01/2023, 9:16 PM
    Anybody knows how to change ulimit for memlock in RKE2 (containerd)? In RKE1 we set it via /etc/docker/daemon.json, something like this: -- 
    {
    "log-driver": "json-file",
    "log-opts": {
    "max-size": "100m",
    "max-file": "3"
    },
    "default-ulimits": {
    "memlock": {
    "Name": "memlock",
    "Hard": -1,
    "Soft": -1
    }
    }
    }
    --- In RKE2 I tried it via /etc/security/limits.conf, but it’s not working, still can see mlock=64 in pods. Appreciate any suggestions. We run ubuntu 22.04 on nodes.
    c
    • 2
    • 22
  • r

    red-student-80543

    02/02/2023, 1:46 AM
    hi rke2 - I'm trying to install Flannel but the loopback and all other binaries are missing from the retail installation from flannel.io - what am I doing wrong?
    c
    • 2
    • 2
  • c

    crooked-cat-21365

    02/02/2023, 7:28 AM
    Trying to set a default-ssl-certificate for Ingress in RKE2 (set up via Rancher 2.7.1) I stumbled over https://stackoverflow.com/questions/71430478/rke2-ingress-nginx-default-ssl-certificate, but I doubt that manually adding config files deep into /var/lib/rancher/rke2 on each node is best practice. On the other hand I haven't found config options for the built-in Ingress in Rancher. Am I too blind to see? Every helpful hint is highly appreciated.
  • a

    acceptable-truck-99248

    02/02/2023, 3:49 PM
    Hi there! Trying to pin CoreDNS to specific nodes with a specific label. Will placing a manifest like this work? Trying to figure out how this YAML has to look like exactly. Can't find much on this in the internet.
  • a

    acceptable-truck-99248

    02/02/2023, 3:49 PM
    Copy code
    /var/lib/rancher/rke2/server/manifests/rke2-coredns-config.yaml 
apiVersion: <http://helm.cattle.io/v1|helm.cattle.io/v1>
kind: HelmChartConfig
metadata:
  name: rke2-coredns
  namespace: kube-system
spec:
  valuesContent: |-
    nodeSelector:
      app: "coredns"
  • a

    acceptable-truck-99248

    02/02/2023, 4:03 PM
    (It's about configuring this for a RKE2 cluster that was created through Rancher and is managed by Rancher.)
  • a

    acceptable-truck-99248

    02/02/2023, 4:14 PM
    To answer my own question: After fiddling around with control chars in the file, it works as expected.
  • b

    broad-petabyte-50341

    02/02/2023, 6:29 PM
    Hi all, I have a situation where I'd like to add a sidecar to the kube-apiserver and this will need to happen after the cluster has been created. Would the proper way to do this be to edit the manifest in 
    /var/lib/rancher/rke2/agent/pod-manifests/
    or just do a 
    kubectl edit
    on the pod itself?
    c
    • 2
    • 24
  • e

    early-engineer-43393

    02/02/2023, 7:51 PM
    Hi all, what’s the easiest way to update the hosts file on each node in the cluster so as it can be resolved. Currently if we try to resolve a node by name it doesn’t resolve, we can get around this by updating the hosts file, but I would like to think there is an automated way of doing this on provisioning?
    c
    s
    r
    • 4
    • 15
  • p

    purple-monkey-3785

    02/02/2023, 10:02 PM
    Hey hello, whats the best way to talk to a downstream cluster created from the local cluster? I want to create resources, currently I'm using the additionalMafinest section on the cluster template but I need to create a secret, is there a way to inherit resources? I'm using the helm chart way to create rke2 clusters: https://github.com/rancher/cluster-template-examples
  • w

    witty-sugar-30798

    02/02/2023, 10:33 PM
    With RKE2, is it possible to create a 3 node cluster with all nodes installed as Server but also assign worker roles to those servers? In other words, with RKE I can assign controlplane, etcd and worker roles to the nodes for all-in-one nodes and I’m wanting to make sure I can do the same with RKE2. I assume the answer is yes but I haven’t seen an example in the docs.
  • c

    creamy-pencil-82913

    02/02/2023, 10:35 PM
    The “worker” role is just an arbitrary label on the node, it doesn’t really mean anything. All nodes in a RKE2 cluster are capable of running workloads by default. They have containerd and the kubelet and are not tainted.
    👍 1
  • f

    future-pencil-6407

    02/03/2023, 1:07 PM
    I was trying to install rke on AWS ec2. I installed the server using: 
    ./rke-install.sh --cloud-provider-name=aws
    . I have tagged the node as well as checked the IAM policy. But my loadbalancer services remain stuck in Pending. Is there a way to check where the issue might be?
    c
    • 2
    • 1
  • a

    abundant-noon-17295

    02/06/2023, 7:54 AM
    hello everyone, i joined rancher slack yesterday. i got a question: how to config custom policy for 
    selinux: true
    when installing rke2 with tar method?
  • c

    crooked-cat-21365

    02/07/2023, 1:46 PM
    Hi folks, I found https://docs.rke2.io/install/containerd_registry_configuration giving a few examples, but where can I find the reference documentation for /etc/rancher/rke2/registries.yaml ?
    c
    • 2
    • 6
  • m

    miniature-magician-78452

    02/07/2023, 10:28 PM
    This seems like it should be an easy question but I'm having trouble finding the answer: I have a home lab cluster (1 srv, 2 additional agents) configured with alternative tls-san and CNAME record in my DNS means my registration address is always 
    <http://cluster.domain.net|cluster.domain.net>
    , regardless of the server node. I like to "cycle" nodes on a regular cadence (say every 2 weeks) to keep nodes up to date. So, if I provision a new server and new agents using the fixed registration (
    <http://cluster.domain.net|cluster.domain.net>
    ), can I just uninstall rke2 from the old nodes and then deprovision them? I would presume i should cordon and drain each node prior to rke2 uninstall, but if I'm provisioning a new server node pointing to the registration address, can I just change the CNAME to point to the new server and then cordon, drain, and uninstall the old server??
    c
    • 2
    • 9
  • r

    red-magician-75203

    02/08/2023, 1:56 AM
    As rke2 is targeted for government workloads, do you guys have any recommendation on what type of monitoring, alerting and logging stack to use? Is there any flavor of existing open source project that support FIPS compliance or FedRamp? Any insights will be helpful.
    a
    • 2
    • 3
  • m

    magnificent-rainbow-12629

    02/08/2023, 12:38 PM
    Hello, I am trying to deployed EC2 cluster using RKE2 on Rancher 2.7.1. I experience a strange issue. In sys log I get message like this:
    Copy code
    Feb  8 12:36:07 aq-test-iam5-pool1-53711a1a-9gchq rke2[1590]: time="2023-02-08T12:36:07Z" level=info msg="Waiting for control-plane node ip-172-21-11-16.prod.cliq.run startup: nodes \"ip-172-21-11-16.prod.cliq.run\" not found".
    When i run ping, or dig, i can resolve the host.
    • 1
    • 3
  • a

    abundant-noon-17295

    02/08/2023, 2:30 PM
    a design question, why rke2 installs ingress-nginx controller by ds with host network, any design consideration?
    a
    r
    • 3
    • 3
1...131415...26Latest