17
votes
Accepted
error: error loading config file "/etc/rancher/k3s/k3s.yaml": open /etc/rancher/k3s/k3s.yaml: permission denied
No, do not change permissions of /etc/rancher/k3s/k3s.yaml
First set up your an environmental variable for KUBECONFIG=~/.kube/config.
export KUBECONFIG=~/.kube/config
Then let's generate the file at ...
- 1,794
17
votes
Accepted
What functional differences are there between kubernetes, rancher and mesos?
First of all, Rancher actually contains implementations of both Kubernetes and Mesos within itself. However, they did make their own system called Cattle which is heavily based on Docker's Swarm. I'll ...
- 1,092
5
votes
Kubernetes on k3s can't resolve domains from custom dns server (fritz.box with dnsmasq)
ibuildthecloud9 gave me the right hint. Since the github issue doesn't describe how to midify the dns, I figured it out and want to document it here in case someone need to change it, too. It's stored ...
- 191
4
votes
Kubernetes on k3s can't resolve domains from custom dns server (fritz.box with dnsmasq)
I believe this is an current bug in k3s that upstream DNS is hardcoded to 1.1.1.1. this should be resolved shortly https://github.com/rancher/k3s/issues/53
4
votes
How do I automate deployments with Kubernetes?
As of you are using Rancher the easiest way would be to register custom Rancher Catalog and create an item for each stack/service you want to deploy.
Rancher Catalog is a Git repository with the ...
- 329
3
votes
Accepted
"The plain HTTP request was sent to HTTPS port" issue with nginx-ingress in rancher/k8s
I found a resolution to my issue. I deleted the installed nginx-ingress app (chart). Went back to the marketplace to reinstall it and when I was given the opportunity to edit my configuration, I ...
- 141
3
votes
Accepted
Will data contained withing Persistent Volume survive cluster deletion?
It depends on what your persistentVolumeReclaimPolicy is. If you manually created/defined the PersistentVolume, then the default action is to keep the data. (This sounds like what you're doing.)
If ...
- 261
2
votes
Accepted
Why is the K8s UI not available when rancher is used?
I've seen this happen, especially on the newest (as of now) version. Try going into the "Infrastructure stack" and look for stopped containers. Often it helps to just refresh the entire deployment (...
- 381
2
votes
Are there arguments against using “imagization" tools in the literature and if so, what are the main ones?
In my opinion, your real problem about this is getting incomplete data that didn't include image scanning, hardening and trusted registries.
Here are some first directions:
The well curated Official ...
- 181
1
vote
Why does the Rancher Security Group use TCP Port 10256?
According to this page it is used for kubeproxy.
The Kubernetes network proxy runs on each node. This reflects services as defined in the Kubernetes API on each node and can do simple TCP, UDP, and ...
- 664
1
vote
Accepted
k3s: Eviction manager: attempting to reclaim" resourceName="ephemeral-storage
This is because of the default settings for the eviction manager (currently 5% hard, and 10% minimum for image reclaim) safeguard a new pod exhausting the space on your hard disk, and the metrics are ...
- 1,794
1
vote
Accepted
how to change a rancher UI installed prometheus server config
If you could let us know what helm chart you have used to install prom-operator, that might help refine the answer.
But in case of kube-prometheus-stack, in the values.yaml of the , use the ...
- 401
1
vote
Accepted
Are there arguments against using “imagization" tools in the literature and if so, what are the main ones?
You might have better luck finding answers to your questions if you use the more standard term of "containerization".
This article discusses containerization as well as some pros and cons you might ...
- 1,018
1
vote
"Error: forwarding ports: Upgrade request required" Error in helm of a kubernetes cluster
See my answer here:
Ran into this today when trying to use Garden.io for a cluster running in Jelastic.
Found the solution in this Github comment:
First acquire a local binary for Tiller (server-...
- 111
1
vote
Accepted
Kubernetes multi cloud
(Rancher employee) Kubernetes itself is really not meant for that use-case. A cluster is generally a set of machines in the same provider with close proximity (latency) to each other.
Etcd (and ...
- 151
1
vote
Rancher, Load Balancing and own domain
Your first step is to setup and configure the Route53 service from the rancher catalog.
After that, the load-balancer will automatically update its DNS in Route53.
1
vote
What are the two project layouts offered by Rancher on installation?
Project is a Rancher specific concept. A Project can have multiple Kubernetes namespaces.
The System Project has all the Kubernetes system components like kube-dns, ingress etc. Think of it like ...
- 111
1
vote
Rancher & gitlab-runner - is there a way to get the gitlab-runner to tell Rancher to start the CI test environment instead?
The short answer is "it depends". Rancher itself runs using system-docker and the docker instances it starts for you, such as gitlab-runner are run separately in regular docker. Gitlab-runner then ...
- 131
1
vote
Measure service unavailability during upgrade
What you suggest might be the simplest way to collect the data, but you will have to do quite a bit of work to extract the availability over certain periods.
I think it's fair to say that if you ...
- 3,570
1
vote
Migrate Rancher host from server to server
First of all you need to support HA mode. You will need:
external MySQL DB (e.g. AWS RDS Aurora)
external load balancer (e.g. AWS ELB)
2 additional Rancher Server Nodes (to support quorum of 3)
Once ...
- 329
1
vote
Accepted
Why do some components vanish from the catalog list if one component has been installed in Rancher?
You haven't specified anything concrete, so I can't give you a specific reason... But catalog items can:
Be mutually exclusive (e.g. you can't use ipsec and vxlan at the same time)
Be deployed at ...
- 151
Only top scored, non community-wiki answers of a minimum length are eligible