This message was deleted.
# rke2a
adamant-kite-43734
08/14/2023, 8:47 AMThis message was deleted.
s
swift-sunset-4572
08/14/2023, 9:19 AMhelm install rancher rancher-latest/rancher --create-namespace --namespace cattle-system --set hostname=rancher.central.non-prod.rancher.prgx.com --set bootstrapPassword=Password --set replicas=1 --set global.cattle.psp.enabled=false --version=2.7.5 --set ingress.tls.source=secret --set privateCA=true
using the above command to deploy rancher it is getting deployed but when i am trying to deploy downstream cluster its getting stuck at the waiting for the cluster agent
i have checked the pods on the downstream node sit shows nginx metrics and snapshots pods in pending state due to the taints on control plane .
i eve try to remove those taints from the control plane nodes of downstream cluster that makes all the pods in the runnning staate but the downstream node stays stuck in waiting for cluster agent
@creamy-pencil-82913 any guidance here please?
h
hundreds-evening-84071
08/14/2023, 12:57 PMDid you also do this:
kubectl -n cattle-system create secret generic tls-ca --from-file=cacerts.pemhundreds-evening-84071
08/14/2023, 12:58 PMAfter helm command you have to create secret for the cacerts
s
swift-sunset-4572
08/14/2023, 1:41 PMyes i have done that
swift-sunset-4572
08/14/2023, 1:43 PMbut the thing is i have a loadbalancer on top of my 3 ctl plane nodes of centralised cluster
swift-sunset-4572
08/14/2023, 1:44 PMand i think the cluster agent is trying to go through the loadbalancer
swift-sunset-4572
08/14/2023, 1:45 PMip and there it is not able to communicate through the ip but the fqdn
swift-sunset-4572
08/14/2023, 2:11 PMoh my bad the websocket option was not enabled on the loadbalancer thats why the cluster agent was not able to communicate through a tunnel to register itself