Hello Rancher team, I have a Fleet issue like this...
# general
a
Hello Rancher team, I have a Fleet issue like this when provisioning an RKE2 cluster from Rancher using the Calico CNI. What is the possible cause of this? This issue does not happen when I use a Security Group with “allow all ports”. However, this issue occurs when I try to only allow the ports that are recommended by Rancher.
Below is the Security Group I’m currently using:
Copy code
ALLOW IPv4 2380/tcp from 0.0.0.0/0
ALLOW IPv4 5473/tcp from 0.0.0.0/0
ALLOW IPv4 30000-32767/tcp from 0.0.0.0/0
ALLOW IPv4 443/tcp from 0.0.0.0/0
ALLOW IPv4 6443/tcp from 0.0.0.0/0
ALLOW IPv6 to ::/0
ALLOW IPv4 icmp from 0.0.0.0/0
ALLOW IPv4 9345/tcp from 0.0.0.0/0
ALLOW IPv4 2379/tcp from 0.0.0.0/0
ALLOW IPv4 22/tcp from 0.0.0.0/0
ALLOW IPv4 9099/tcp from 0.0.0.0/0
ALLOW IPv4 4789/udp from 0.0.0.0/0
ALLOW IPv4 10254/tcp from 0.0.0.0/0
ALLOW IPv4 to 0.0.0.0/0
ALLOW IPv4 8472/udp from 0.0.0.0/0
ALLOW IPv4 10250/tcp from 0.0.0.0/0
ALLOW IPv4 80/tcp from 0.0.0.0/0
Is there any specific port required by Fleet when using the Calico network?
c
… have you looked at the logs for the failing init container to see what it’s trying to do?