Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [rancher]

15 questions
3
votes
0 answers

k3s without HA: how to switch master node?

Rancher documentation on k3s is quite nice and its HA support (both with external DB or embedded etcd) look nice, but I don't want/need an HA setup. In case my master node fails, I don't mind having downtime while I re-create it or make a master out…
Filipe Pina
  • 123
  • 8
2
votes
0 answers

Find out specific Rancher RKE K8s image versions

I am wondering where I can find which containers versions will be deployed when I install a K8s Cluster with the following version…
Shurkan2
  • 21
  • 1
2
votes
1 answer

Rancher x509 Certificate Expired yet not

When running kubectl, I get the error Unable to connect to the server: x509: certificate has expired or is not yet valid: current time 2021-10-05T11:59:14-04:00 is after 2021-09-29T19:21:40Z So clearly it says the cert is expired. Only problem is…
cclloyd
  • 593
  • 2
  • 14
  • 29
1
vote
0 answers

OpenSSL issue with Rancher/Kubernetes cluster on RHEL 8

So we are working on setting up a big Rancher/Kubernetes cluster on a bunch of RHEL 8 servers. We have everything installed and have Rancher running on a 3 node cluster behind a load balancer. The issue we are running into is enrolling the other…
shagrat861
  • 11
  • 2
1
vote
0 answers

rke2 ingress-nginx default ssl certificate

I asked this here yesterday. Can anyone advise how to apply the default ssl certificate to ingress-nginx on rke2? I followed the doc at https://docs.rke2.io/networking/#nginx-ingress-controller I imported the TLS certificate into a secret I created…
crowne
  • 113
  • 5
1
vote
0 answers

Controlling Egress calls of kubernetes pods based on intermediate host file

Can I modify and use /etc/host.allow file or something similar to restrict the outgoing (egress) calls from my kubernetes pods. If there is intermediate lookup happening while making an egress call from pod to external domain(lets say google.com),…
solveit
  • 265
  • 1
  • 4
  • 12
1
vote
0 answers

Coredns ACL plugin for restricting domain from Kubernetes Pod

How can I use use coredns acl plugin for the domain based access [blocking/allowing] the egress calls ? As per my use case I want to control the outgoing calls from my pod. something like this : . { acl { allow net stackoverflow.com …
solveit
  • 265
  • 1
  • 4
  • 12
0
votes
0 answers

Ranchers cattle-cluster-agent-* pod log errors

When deploying rancher onto a downstream cluster the cattle-cluster-agent- pods appear and they show running. The issue is (1) when I try to access the cluster via the UI, the UI displayed " Cluster agent is not connected" and I cannot manage the…
Cody Dacosta
  • 1
  • 1
0
votes
1 answer

Create Rancher API Key with kubectl

Given access to the kubernetes cluster, but no API key, how can I programatically create a API key for rancher server? The method described in documentation here requires a password login an a web browser. I would like to get the same outcome…
d_inevitable
  • 209
  • 1
  • 7
  • 19
0
votes
0 answers

dynamic app instance on demand : docker ? rancher ? k3s?

I would like to launch dynamic Wordpress instance i.e. "on demand" when a user want to test Wordpress (Wordpress for example). I have a bare metal server. Example scenario : A user will connect with demo/demo login and will be able to test a…
rach
  • 1
0
votes
2 answers

Metrics-server is in CrashLoopBackOff with NEW install by rke

I have installed at least 10 times last one days, but its same every time Everything runs fine but metrics-server is in CrashLoopBackOff what I understand below section are missing from the pods YAML file and needs to add into Deployment. I am …
alammd
  • 103
  • 2
0
votes
1 answer

How can you update the password for an AWS ECR repo in Kubernetes?

I created a private docker registry using AWS ECR. I want to use it with a Kubernetes cluster managed by Rancher, but the password to the registry is changed by AWS every 12 hours. How do I keep it updated as a secret in the cluster?
Juan Jimenez
  • 870
  • 1
  • 7
  • 13
0
votes
1 answer

Force deployment on Rancher when AWS CodeBuild produces a new container image

I have a Rancher 2.5 cluster running on AWS EKS. My CI is done in CodeBuild via a webhook to a Github repo. The buildspec.yml works fine to run the build, tag the containers and then send them to my private registry on AWS ECR, but I have not found…
Juan Jimenez
  • 870
  • 1
  • 7
  • 13
0
votes
1 answer

How to surface a docker-registry secret in Rancher?

I am using Rancher 2.5.8 to run Kubernetes clusters. In my org, we maintain a private docker registry on AWS ECR. I know I can create registry credentials within a project (for use in one or all projects), but ECR changes the password every 12 hours…
Juan Jimenez
  • 870
  • 1
  • 7
  • 13
-1
votes
1 answer

What is the Path API for kubectl top pods

I use this command "kubectl top pods" using Kubectl command I need path api for this command I need return data from this command "kubectl top pods" via api
uday kiran
  • 1