This message was deleted.

that’s not really a rancher thing, it depends highly on how the cluster in question runs the apiserver. If it’s a hosted cluster (gke, eks, or so on) you’d have to get logs from the service provider. For rke, you’d need to look at the apiserver docker container. for k3s, you’d need to look at the k3s service logs in journald. for rke2, you can look at the apiserver static pod logs.

So for a rke1 downstream i should find the apiserver via ssh/docker ps?

yep

Nice ty! Now if only i could get ahold of a rancher tshirt still…. 😅