Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [rancher]

15 questions
2
votes
1 answer

Rancher x509 Certificate Expired yet not

When running kubectl, I get the error Unable to connect to the server: x509: certificate has expired or is not yet valid: current time 2021-10-05T11:59:14-04:00 is after 2021-09-29T19:21:40Z So clearly it says the cert is expired. Only problem is…
cclloyd
  • 583
  • 1
  • 13
  • 24
2
votes
0 answers

k3s without HA: how to switch master node?

Rancher documentation on k3s is quite nice and its HA support (both with external DB or embedded etcd) look nice, but I don't want/need an HA setup. In case my master node fails, I don't mind having downtime while I re-create it or make a master out…
Filipe Pina
  • 113
  • 8
1
vote
0 answers

Find out specific Rancher RKE K8s image versions

I am wondering where I can find which containers versions will be deployed when I install a K8s Cluster with the following version…
Shurkan2
  • 11
  • 1
1
vote
0 answers

Controlling Egress calls of kubernetes pods based on intermediate host file

Can I modify and use /etc/host.allow file or something similar to restrict the outgoing (egress) calls from my kubernetes pods. If there is intermediate lookup happening while making an egress call from pod to external domain(lets say google.com),…
solveit
  • 255
  • 2
  • 11
1
vote
0 answers

Coredns ACL plugin for restricting domain from Kubernetes Pod

How can I use use coredns acl plugin for the domain based access [blocking/allowing] the egress calls ? As per my use case I want to control the outgoing calls from my pod. something like this : . { acl { allow net stackoverflow.com …
solveit
  • 255
  • 2
  • 11
0
votes
0 answers

Inter-pod communication failure between Kubernetes nodes : Azure virtual machine and on-prem node

Rancher Server Setup Rancher version: 2.6.3 Installation option (Docker install/Helm Chart): Helm Chart, Kubernetes v1.21.6 and RKE1 Information about the Cluster Kubernetes version: v1.20.15-rancher1-2 Cluster Type (Local/Downstream):…
femtonelson
  • 1
0
votes
0 answers

kubernetes local persistent volume for all nodes

I am using the Rancher local provisioner and have a requirement for creating local storage on all the nodes. I use the local-path-storage.yaml to provision the controller, storage class etc. I create a PVC as below apiVersion: v1 kind:…
M.P
  • 1
0
votes
0 answers

rke2 ingress-nginx default ssl certificate

I asked this here yesterday. Can anyone advise how to apply the default ssl certificate to ingress-nginx on rke2? I followed the doc at https://docs.rke2.io/networking/#nginx-ingress-controller I imported the TLS certificate into a secret I created…
crowne
  • 103
  • 4
0
votes
0 answers

Worker roles missing on new RKE cluster on Ubuntu

I’ve installed my first RKE cluster on Ubuntu-20.04.3 I followed the quickstart guide, and configured 1 controller and 2 workers. root@tk8sc1:~# /var/lib/rancher/rke2/bin/kubectl --kubeconfig /etc/rancher/rke2/rke2.yaml get nodes NAME STATUS …
crowne
  • 103
  • 4
0
votes
0 answers

Connection timeout when hitting port-forwarded endpoint; works fine with local IP

In pfSense, I have this rule: https://i.imgur.com/10jE1Gs.png Where 192.168.1.203 is my target machine and I have a rancher app hosted at port 8081. If I hit https://MY_DOMAIN_NAME:8081--MY_DOMAIN_NAME resolves to MY_WAN_IP, I get connection…
Kyle
  • 63
  • 5
0
votes
2 answers

Metrics-server is in CrashLoopBackOff with NEW install by rke

I have installed at least 10 times last one days, but its same every time Everything runs fine but metrics-server is in CrashLoopBackOff what I understand below section are missing from the pods YAML file and needs to add into Deployment. I am …
alammd
  • 103
  • 1
0
votes
1 answer

How can you update the password for an AWS ECR repo in Kubernetes?

I created a private docker registry using AWS ECR. I want to use it with a Kubernetes cluster managed by Rancher, but the password to the registry is changed by AWS every 12 hours. How do I keep it updated as a secret in the cluster?
Juan Jimenez
  • 717
  • 1
  • 6
  • 12
0
votes
1 answer

Force deployment on Rancher when AWS CodeBuild produces a new container image

I have a Rancher 2.5 cluster running on AWS EKS. My CI is done in CodeBuild via a webhook to a Github repo. The buildspec.yml works fine to run the build, tag the containers and then send them to my private registry on AWS ECR, but I have not found…
Juan Jimenez
  • 717
  • 1
  • 6
  • 12
0
votes
1 answer

How to surface a docker-registry secret in Rancher?

I am using Rancher 2.5.8 to run Kubernetes clusters. In my org, we maintain a private docker registry on AWS ECR. I know I can create registry credentials within a project (for use in one or all projects), but ECR changes the password every 12 hours…
Juan Jimenez
  • 717
  • 1
  • 6
  • 12
-1
votes
1 answer

What is the Path API for kubectl top pods

I use this command "kubectl top pods" using Kubectl command I need path api for this command I need return data from this command "kubectl top pods" via api
uday kiran
  • 1