This message was deleted.
# rke2a
adamant-kite-43734
10/17/2023, 5:20 PMThis message was deleted.
b
bland-account-99790
10/17/2023, 5:34 PMYou start rke2 from scratch with the dual-stack config and things don't work?
m
many-wall-12295
10/17/2023, 5:34 PMYea, uninstall reinstall, only difference being the dual stack config
b
bland-account-99790
10/17/2023, 5:34 PMThat errors seems to point at kube-apiserver not starting for some reason
bland-account-99790
10/17/2023, 5:35 PMcan you search in the logs "Running kube-apiserver"?
m
many-wall-12295
10/17/2023, 5:35 PMWhich logs are you thinking? Journalctl/running rke2-server with --debug?
b
bland-account-99790
10/17/2023, 5:36 PMjournalctl without debug should show it too
bland-account-99790
10/17/2023, 5:36 PMsudo journalctl | grep "Running kube-apiserver"m
many-wall-12295
10/17/2023, 5:37 PM Copy code
Oct 17 17:31:00 rke-01-evrtwaxa rke2[1097056]: time="2023-10-17T17:31:00Z" level=info msg="Running kube-apiserver --advertise-address=10.115.1.11 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=<https://kubernetes.default.svc.k8s-evrtwaxa.dev.as20055.net>,rke2 --authorization-mode=Node,RBAC --bind-address=0.0.0.0 --cert-dir=/var/lib/rancher/rke2/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/rke2/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/rke2/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --encryption-provider-config=/var/lib/rancher/rke2/server/cred/encryption-config.json --etcd-cafile=/var/lib/rancher/rke2/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/rke2/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/rke2/server/tls/etcd/client.key --etcd-servers=<https://127.0.0.1:2379> --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/rke2/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/rke2/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/rke2/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/rke2/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/rke2/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/rke2/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6443 --service-account-issuer=<https://kubernetes.default.svc.k8s-evrtwaxa.dev.as20055.net> --service-account-key-file=/var/lib/rancher/rke2/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/rke2/server/tls/service.key --service-cluster-ip-range=10.115.96.0/20,2605:21c0:fc02:100::/64 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/rke2/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/rke2/server/tls/serving-kube-apiserver.key"b
bland-account-99790
10/17/2023, 5:37 PMthat looks fine
bland-account-99790
10/17/2023, 5:38 PMcould you check the kube-api logs? They should be under
/var/log/container/$SOMETHING-KUBE-APIbland-account-99790
10/17/2023, 5:39 PMnot sure if the path is
containercontainersm
many-wall-12295
10/17/2023, 5:39 PMcontainers, interesting, that was the log I was looking for!
🙌 1
many-wall-12295
10/17/2023, 5:39 PM2023-10-17T173647.787539514Z stderr F E1017 173647.787319 1 run.go:74] "command failed" err="specified --service-cluster-ip-range[1] is too large; for 128-bit addresses, the mask must be >= 108"
b
bland-account-99790
10/17/2023, 5:40 PMah! True!
bland-account-99790
10/17/2023, 5:40 PMthe previous log didn't look fine in the end 😛
m
many-wall-12295
10/17/2023, 5:41 PMah, darn, the unstandard v6 allocation sizes that drive me nuts 😛
b
bland-account-99790
10/17/2023, 5:41 PMyeah, I agree
m
many-wall-12295
10/17/2023, 5:47 PMThanks for the help, I knew there had to be a log somewhere but I couldn't find it..
👍 1