This message was deleted.
# generala
adamant-kite-43734
05/30/2023, 5:56 PMThis message was deleted.
p
polite-translator-35958
05/30/2023, 7:36 PMDoes this even work? Is anyone running Rancher on RKE2 w/CIS Profile v1.23?
c
creamy-pencil-82913
05/30/2023, 8:02 PMwhat version of rancher, and what version of rke2?
p
polite-translator-35958
05/30/2023, 8:36 PMRancher v2.73 and RKE2 v1.25.9~rke2r1 (RPM)
c
creamy-pencil-82913
05/30/2023, 9:29 PMWas that a terminal error, or was it successfully created after a retry? It's possible the pod just got deployed before the priorityclass was created.
creamy-pencil-82913
05/30/2023, 9:29 PMMight help to mention the rancher Helm Chart options too
p
polite-translator-35958
05/31/2023, 2:53 AMAs far as I could tell, the deployment never completed. I never saw any rancher pods being deployed.
polite-translator-35958
05/31/2023, 2:59 AMI deployed with the following options to the chart:
• bootstrapPassword
• global.cattle.psp.enabled: false
• hostname: <tls_san>
• ingress.tls.source: “secret”
• privateCA: true
• replicas: 1 (single rke node for testing)
• systemDefaultRegistry: <private registry>
I also found Rancher #37927 and tried to add priorityClassName=“system-node-critical” but that failed in a different way… Failed the Pod Security Admission Controller…
28 Views