This message was deleted Rancher Users #fleet

Join Slack

This message was deleted.

# fleet

adamant-kite-43734

11/02/2023, 4:11 PM

This message was deleted.

brave-afternoon-4801

11/02/2023, 5:25 PM

You need to create the namespace explicitly with a k8s resource

faint-island-31128

11/02/2023, 5:28 PM

isn't that the whole point of having

defaultNamespace

defined in

fleet.yaml

faint-island-31128

11/02/2023, 5:28 PM

that fleet creates the namespace for you

brave-afternoon-4801

11/02/2023, 5:29 PM

no. that just fills in the

namespace

field when it's not already specified in the manifests

faint-island-31128

11/02/2023, 5:29 PM

or is that only when used together with helm?

faint-island-31128

11/02/2023, 5:30 PM

and what about the

namespace

directive in

fleet.yaml

brave-afternoon-4801

11/02/2023, 5:31 PM

i think that enforces namespace, but not sure about auto-creating it

brave-afternoon-4801

11/02/2023, 5:32 PM

fwiw, on a dev cluster, I'm seeing defaultNamespace result in created namespaces

faint-island-31128

11/02/2023, 5:33 PM

yes, I see that same behaviour sometimes

faint-island-31128

11/02/2023, 5:33 PM

but not always, and I just can't seem to understand why

brave-afternoon-4801

11/02/2023, 5:33 PM

strange

brave-afternoon-4801

11/02/2023, 5:33 PM

fleet is not inspiring confidence

brave-afternoon-4801

11/02/2023, 5:34 PM

and i can't seem to get anyone from rancher to reply

brave-afternoon-4801

11/02/2023, 5:34 PM

well, they do in #k3s, but not here

faint-island-31128

11/02/2023, 5:34 PM

also when adding PSS labels on the

ns

it sometimes gets into a loop where ns objects gets updated again and again

faint-island-31128

11/02/2023, 5:36 PM

I have a support case open with SUSE. They should provide an answer beginning next week, but I think this affects more users than they might know

brave-afternoon-4801

11/02/2023, 5:37 PM

Yeaaaa... you should see my bug above

brave-afternoon-4801

11/02/2023, 5:37 PM

I can't get the official rancher addons to stop creating PSPs when run through fleet

brave-afternoon-4801

11/02/2023, 5:38 PM

fleet seems to completely remove

global.cattle.psp.enabled

every time I set it in the values. I have no idea wtf

faint-island-31128

11/02/2023, 5:38 PM

there is a doc about that

👀 1

faint-island-31128

11/02/2023, 5:38 PM

let me look it up

🙌 1

faint-island-31128

11/02/2023, 5:40 PM

https://www.suse.com/support/kb/doc/?id=000021053

brave-afternoon-4801

11/02/2023, 5:41 PM

haha dang i thought this was something new. Yeah its this doc that got me to set these values, but I swear, fleet just completely disregards the value, making this support article completely worthless

faint-island-31128

11/02/2023, 5:43 PM

and I see you found the rendered helm chart in the secret right

brave-afternoon-4801

11/02/2023, 5:43 PM

but there doesn't seem to be a trace for why this is happening. All I can see is that the bundledeployment has a record of me setting

global.cattle.psp.enabled: false

, yet the helm json secret with all the deployment details shows that fleet didn't pass that one set on to the chart

brave-afternoon-4801

11/02/2023, 5:43 PM

it's extremely strange

faint-island-31128

11/02/2023, 5:44 PM

which version of the helm charts are you using?

faint-island-31128

11/02/2023, 5:45 PM

and which version of k8s are you working on?

faint-island-31128

11/02/2023, 5:45 PM

any conditional in the helm chart?

brave-afternoon-4801

11/02/2023, 5:45 PM

v1.24.17+k3s1 and 102.0.2+up40.1.2

faint-island-31128

11/02/2023, 5:49 PM

did you disable psp support already?

faint-island-31128

11/02/2023, 5:49 PM

https://ranchermanager.docs.rancher.com/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards

faint-island-31128

11/02/2023, 5:49 PM

afk now - need food

brave-afternoon-4801

11/02/2023, 6:16 PM

did you disable psp support already

i haven't heard of a way of toggling it in any of the stuff I've read

brave-afternoon-4801

11/02/2023, 6:16 PM

yeah sorry had to deal with some contractors

faint-island-31128

11/02/2023, 6:29 PM

https://kubernetes.io/docs/tasks/configure-pod-container/migrate-from-psp/

faint-island-31128

11/02/2023, 6:30 PM

https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#how-do-i-turn-off-an-admission-controller

brave-afternoon-4801

11/02/2023, 6:58 PM

well slap me with a wet noodle

😂 1

brave-afternoon-4801

11/02/2023, 6:58 PM

i have no idea why, but after fully deleting the bundle and re-pushing, it's now correct. no psps

👍 1

faint-island-31128

11/02/2023, 6:59 PM

Glad it’s fixed 😉

brave-afternoon-4801

11/03/2023, 2:47 AM

I think the deeper issue turns out to be that fleet holds on to values, even if the git repo has new contents. I'm now seeing this with another chart 😭

faint-island-31128

11/03/2023, 11:12 AM

Ok, so I found the issue on my side. I was referencing the wrong path from my GitRepo so it wasn't looking at the fleet.yaml where I added the labels. 😞

brave-afternoon-4801

11/03/2023, 10:40 PM

no kidding! well glad you found it at least

Open in Slack

Previous Next