Access the Web UI Rancher

Hi,

I did the installation of RKE and apparently everything went well! Now I installed Rancher and put as hostname cltrke.labriunesp.org, but I can’t access the Web UI, any idea what I’m doing wrong?

# kubectl -n cattle-system get pods
NAME                               READY   STATUS      RESTARTS      AGE
helm-operation-4pmd5               0/2     Completed   0             50m
helm-operation-b9br5               0/2     Completed   0             49m
helm-operation-cwfwl               0/2     Completed   0             50m
helm-operation-lcdx6               0/2     Completed   0             50m
rancher-7c77f587dd-bzddh           1/1     Running     1 (16m ago)   51m
rancher-7c77f587dd-jz8mx           1/1     Running     3 (16m ago)   51m
rancher-7c77f587dd-zfxnj           1/1     Running     1 (16m ago)   51m
rancher-webhook-5d4f5b7f6d-psnwc   1/1     Running     1 (16m ago)   49m

   Command:
      helm-cmd
    State:          Terminated
      Reason:       Completed
      Exit Code:    0
      Started:      Tue, 29 Mar 2022 10:33:24 +0000
      Finished:     Tue, 29 Mar 2022 10:33:50 +0000
    Ready:          False
    Restart Count:  0
    Environment:
      KUBECONFIG:  /home/shell/.kube/config
    Mounts:
      /home/shell/.kube/config from user-kubeconfig (ro,path="config")
      /home/shell/helm from data (ro)
  proxy:
    Container ID:  docker://78365b383017949126acc52f6a65ce36d6d42bd6fe26a44172fd03edba56796b
    Image:         rancher/shell:v0.1.14
    Image ID:      docker-pullable://rancher/shell@sha256:9c33c0e58ceb0b3cb6a85d2a6349b1f7fe818e383e6a3cb46671558fbb2f7781
    Port:          <none>
    Host Port:     <none>
    Command:
      sh
      -c
      kubectl proxy --disable-filter || true
    State:          Terminated
      Reason:       Completed
      Exit Code:    0
      Started:      Tue, 29 Mar 2022 10:33:26 +0000
      Finished:     Tue, 29 Mar 2022 10:33:51 +0000
    Ready:          False
    Restart Count:  0
    Environment:
      KUBECONFIG:  /root/.kube/config
    Mounts:
      /root/.kube/config from admin-kubeconfig (ro,path="config")
      /var/run/secrets/kubernetes.io/serviceaccount from pod-impersonation-helm-op-7nqvp-token-zjvnr (ro)
Conditions:
  Type              Status
  Initialized       True 
  Ready             False 
  ContainersReady   False 
  PodScheduled      True 
Volumes:
  data:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  helm-operation-ktg62
    Optional:    false
  admin-kubeconfig:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      impersonation-helm-op-admin-kubeconfig-sfjs7
    Optional:  false
  user-kubeconfig:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      impersonation-helm-op-user-kubeconfig-7n898
    Optional:  false
  pod-impersonation-helm-op-7nqvp-token-zjvnr:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  pod-impersonation-helm-op-7nqvp-token-zjvnr
    Optional:    false
QoS Class:       BestEffort
Node-Selectors:  kubernetes.io/os=linux
Tolerations:     cattle.io/os=linux:NoSchedule
                 node-role.kubernetes.io/controlplane=true:NoSchedule
                 node-role.kubernetes.io/etcd=true:NoExecute
                 node.cloudprovider.kubernetes.io/uninitialized=true:NoSchedule
                 node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                 node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type     Reason       Age                From               Message
  ----     ------       ----               ----               -------
  Normal   Scheduled    53m                default-scheduler  Successfully assigned cattle-system/helm-operation-cwfwl to xxx.xxx.xxx.xx1
  Normal   Pulled       53m                kubelet            Container image "rancher/shell:v0.1.14" already present on machine
  Normal   Created      53m                kubelet            Created container helm
  Normal   Started      53m                kubelet            Started container helm
  Normal   Pulled       53m                kubelet            Container image "rancher/shell:v0.1.14" already present on machine
  Normal   Created      53m                kubelet            Created container proxy
  Normal   Started      53m                kubelet            Started container proxy
  Warning  FailedMount  53m (x2 over 53m)  kubelet            MountVolume.SetUp failed for volume "data" : object "cattle-system"/"helm-operation-ktg62" not registered


Name:         helm-operation-lcdx6
Namespace:    cattle-system
Priority:     0
Node:         xxx.xxx.xxx.xx1/xxx.xxx.xxx.xx1
Start Time:   Tue, 29 Mar 2022 10:32:49 +0000
Labels:       pod-impersonation.cattle.io/token=nplnmxxm9c9wz5frw4z5j4xl59hhdsrwj7ms4trmwb65hrtcqmpjmw
Annotations:  cni.projectcalico.org/containerID: 2bc6ad85dcd328c851bd4b12f944b8f4dba56af717a0ede71fd791cbbc2e88f2
              cni.projectcalico.org/podIP: 
              cni.projectcalico.org/podIPs: 
              pod-impersonation.cattle.io/cluster-role: pod-impersonation-helm-op-z8j9f
Status:       Succeeded
IP:           10.42.1.10
IPs:
  IP:  10.42.1.10
Containers:
  helm:
    Container ID:  docker://f11405ca2bc9e968753fc676a0809f59869f27e5499f052c0812dec44e277eea
    Image:         rancher/shell:v0.1.14
    Image ID:      docker-pullable://rancher/shell@sha256:9c33c0e58ceb0b3cb6a85d2a6349b1f7fe818e383e6a3cb46671558fbb2f7781
    Port:          <none>
    Host Port:     <none>
    Command:
      helm-cmd
    State:          Terminated
      Reason:       Completed
      Exit Code:    0
      Started:      Tue, 29 Mar 2022 10:32:53 +0000
      Finished:     Tue, 29 Mar 2022 10:33:15 +0000
    Ready:          False
    Restart Count:  0
    Environment:
      KUBECONFIG:  /home/shell/.kube/config
    Mounts:
      /home/shell/.kube/config from user-kubeconfig (ro,path="config")
      /home/shell/helm from data (ro)
  proxy:
    Container ID:  docker://23510b5e22ec47d0033ff875a6611a0359ce82d2179c08e8b11cd0884fa90286
    Image:         rancher/shell:v0.1.14
    Image ID:      docker-pullable://rancher/shell@sha256:9c33c0e58ceb0b3cb6a85d2a6349b1f7fe818e383e6a3cb46671558fbb2f7781
    Port:          <none>
    Host Port:     <none>
    Command:
      sh
      -c
      kubectl proxy --disable-filter || true
    State:          Terminated
      Reason:       Completed
      Exit Code:    0
      Started:      Tue, 29 Mar 2022 10:32:54 +0000
      Finished:     Tue, 29 Mar 2022 10:33:16 +0000
    Ready:          False
    Restart Count:  0
    Environment:
      KUBECONFIG:  /root/.kube/config
    Mounts:
      /root/.kube/config from admin-kubeconfig (ro,path="config")
      /var/run/secrets/kubernetes.io/serviceaccount from pod-impersonation-helm-op-r9njq-token-p85kf (ro)
Conditions:
  Type              Status
  Initialized       True 
  Ready             False 
  ContainersReady   False 
  PodScheduled      True 
Volumes:
  data:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  helm-operation-hqbp5
    Optional:    false
  admin-kubeconfig:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      impersonation-helm-op-admin-kubeconfig-jngfg
    Optional:  false
  user-kubeconfig:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      impersonation-helm-op-user-kubeconfig-4tlxh
    Optional:  false
  pod-impersonation-helm-op-r9njq-token-p85kf:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  pod-impersonation-helm-op-r9njq-token-p85kf
    Optional:    false
QoS Class:       BestEffort
Node-Selectors:  kubernetes.io/os=linux
Tolerations:     cattle.io/os=linux:NoSchedule
                 node-role.kubernetes.io/controlplane=true:NoSchedule
                 node-role.kubernetes.io/etcd=true:NoExecute
                 node.cloudprovider.kubernetes.io/uninitialized=true:NoSchedule
                 node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                 node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type     Reason       Age                From               Message
  ----     ------       ----               ----               -------
  Normal   Scheduled    54m                default-scheduler  Successfully assigned cattle-system/helm-operation-lcdx6 to xxx.xxx.xxx.xx1
  Normal   Pulled       54m                kubelet            Container image "rancher/shell:v0.1.14" already present on machine
  Normal   Created      54m                kubelet            Created container helm
  Normal   Started      54m                kubelet            Started container helm
  Normal   Pulled       54m                kubelet            Container image "rancher/shell:v0.1.14" already present on machine
  Normal   Created      54m                kubelet            Created container proxy
  Normal   Started      54m                kubelet            Started container proxy
  Warning  FailedMount  53m (x2 over 53m)  kubelet            MountVolume.SetUp failed for volume "pod-impersonation-helm-op-r9njq-token-p85kf" : object "cattle-system"/"pod-impersonation-helm-op-r9njq-token-p85kf" not registered
  Warning  FailedMount  53m (x2 over 53m)  kubelet            MountVolume.SetUp failed for volume "data" : object "cattle-system"/"helm-operation-hqbp5" not registered
  Warning  FailedMount  53m (x2 over 53m)  kubelet            MountVolume.SetUp failed for volume "user-kubeconfig" : object "cattle-system"/"impersonation-helm-op-user-kubeconfig-4tlxh" not registered
  Warning  FailedMount  53m (x2 over 53m)  kubelet            MountVolume.SetUp failed for volume "admin-kubeconfig" : object "cattle-system"/"impersonation-helm-op-admin-kubeconfig-jngfg" not registered


Name:         rancher-7c77f587dd-bzddh
Namespace:    cattle-system
Priority:     0
Node:         xxx.xxx.xxx.xx1/xxx.xxx.xxx.xx1
Start Time:   Tue, 29 Mar 2022 10:32:10 +0000
Labels:       app=rancher
              pod-template-hash=7c77f587dd
              release=rancher
Annotations:  cni.projectcalico.org/containerID: c96e042f603881bc4fd739e3cd4eab3b7408012c22bf68d639beda62dff1c4d8
              cni.projectcalico.org/podIP: 10.42.1.16/32
              cni.projectcalico.org/podIPs: 10.42.1.16/32
Status:       Running
IP:           10.42.1.16
IPs:
  IP:           10.42.1.16
Controlled By:  ReplicaSet/rancher-7c77f587dd
Containers:
  rancher:
    Container ID:  docker://78b1d852f95bf5def8b94c9d8c0fa63a2170ee37400ca7c279d46b0c70e2e960
    Image:         rancher/rancher:v2.6.3
    Image ID:      docker-pullable://rancher/rancher@sha256:f411ee37efa38d7891c11ecdd5c60ca73eb03dcd32296678af808f6b4ecccfff
    Port:          80/TCP
    Host Port:     0/TCP
    Args:
      --http-listen-port=80
      --https-listen-port=443
      --add-local=true
    State:          Running
      Started:      Tue, 29 Mar 2022 11:07:34 +0000
    Last State:     Terminated
      Reason:       Error
      Exit Code:    1
      Started:      Tue, 29 Mar 2022 10:32:11 +0000
      Finished:     Tue, 29 Mar 2022 11:06:50 +0000
    Ready:          True
    Restart Count:  1
    Liveness:       http-get http://:80/healthz delay=60s timeout=1s period=30s #success=1 #failure=3
    Readiness:      http-get http://:80/healthz delay=5s timeout=1s period=30s #success=1 #failure=3
    Environment:
      CATTLE_NAMESPACE:     cattle-system
      CATTLE_PEER_SERVICE:  rancher
      HTTP_PROXY:           http://
      HTTPS_PROXY:          http://
      NO_PROXY:             127.0.0.0/8,10.0.0.0/8,cattle-system.svc,172.16.0.0/12,192.168.0.0/16,.svc,.cluster.local
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-w6zsp (ro)
Conditions:
  Type              Status
  Initialized       True 
  Ready             True 
  ContainersReady   True 
  PodScheduled      True 
Volumes:
  kube-api-access-w6zsp:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
QoS Class:                   BestEffort
Node-Selectors:              <none>
Tolerations:                 cattle.io/os=linux:NoSchedule
                             node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type     Reason          Age                From               Message
  ----     ------          ----               ----               -------
  Normal   Scheduled       55m                default-scheduler  Successfully assigned cattle-system/rancher-7c77f587dd-bzddh to xxx.xxx.xxx.xx1
  Normal   Pulled          55m                kubelet            Container image "rancher/rancher:v2.6.3" already present on machine
  Normal   Created         55m                kubelet            Created container rancher
  Normal   Started         55m                kubelet            Started container rancher
  Warning  Unhealthy       54m                kubelet            Readiness probe failed: Get "http://10.42.1.9:80/healthz": dial tcp 10.42.1.9:80: connect: connection refused
  Normal   SandboxChanged  19m                kubelet            Pod sandbox changed, it will be killed and re-created.
  Normal   Pulled          19m                kubelet            Container image "rancher/rancher:v2.6.3" already present on machine
  Normal   Created         19m                kubelet            Created container rancher
  Normal   Started         19m                kubelet            Started container rancher
  Warning  Unhealthy       18m (x3 over 19m)  kubelet            Readiness probe failed: Get "http://10.42.1.16:80/healthz": dial tcp 10.42.1.16:80: connect: connection refused


Name:         rancher-7c77f587dd-jz8mx
Namespace:    cattle-system
Priority:     0
Node:         xxx.xxx.xxx.xx3/xxx.xxx.xxx.xx3
Start Time:   Tue, 29 Mar 2022 10:32:10 +0000
Labels:       app=rancher
              pod-template-hash=7c77f587dd
              release=rancher
Annotations:  cni.projectcalico.org/containerID: 807ac87d77dac0e0b4935dcf9cc233c14517d3f50d9e8843620029494f2adf53
              cni.projectcalico.org/podIP: 10.42.0.12/32
              cni.projectcalico.org/podIPs: 10.42.0.12/32
Status:       Running
IP:           10.42.0.12
IPs:
  IP:           10.42.0.12
Controlled By:  ReplicaSet/rancher-7c77f587dd
Containers:
  rancher:
    Container ID:  docker://686dbe59d60c25f7bb38b0bd717a62db44002de802a8893a9a251596a2c5e47a
    Image:         rancher/rancher:v2.6.3
    Image ID:      docker-pullable://rancher/rancher@sha256:f411ee37efa38d7891c11ecdd5c60ca73eb03dcd32296678af808f6b4ecccfff
    Port:          80/TCP
    Host Port:     0/TCP
    Args:
      --http-listen-port=80
      --https-listen-port=443
      --add-local=true
    State:          Running
      Started:      Tue, 29 Mar 2022 11:07:36 +0000
    Last State:     Terminated
      Reason:       Error
      Exit Code:    1
      Started:      Tue, 29 Mar 2022 10:32:58 +0000
      Finished:     Tue, 29 Mar 2022 11:06:50 +0000
    Ready:          True
    Restart Count:  3
    Liveness:       http-get http://:80/healthz delay=60s timeout=1s period=30s #success=1 #failure=3
    Readiness:      http-get http://:80/healthz delay=5s timeout=1s period=30s #success=1 #failure=3
    Environment:
      CATTLE_NAMESPACE:     cattle-system
      CATTLE_PEER_SERVICE:  rancher
      HTTP_PROXY:           http://
      HTTPS_PROXY:          http://
      NO_PROXY:             127.0.0.0/8,10.0.0.0/8,cattle-system.svc,172.16.0.0/12,192.168.0.0/16,.svc,.cluster.local
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-747k5 (ro)
Conditions:
  Type              Status
  Initialized       True 
  Ready             True 
  ContainersReady   True 
  PodScheduled      True 
Volumes:
  kube-api-access-747k5:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
QoS Class:                   BestEffort
Node-Selectors:              <none>
Tolerations:                 cattle.io/os=linux:NoSchedule
                             node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type     Reason          Age                From               Message
  ----     ------          ----               ----               -------
  Normal   Scheduled       55m                default-scheduler  Successfully assigned cattle-system/rancher-7c77f587dd-jz8mx to xxx.xxx.xxx.xx3
  Warning  BackOff         54m                kubelet            Back-off restarting failed container
  Normal   Pulled          54m (x3 over 55m)  kubelet            Container image "rancher/rancher:v2.6.3" already present on machine
  Normal   Created         54m (x3 over 55m)  kubelet            Created container rancher
  Normal   Started         54m (x3 over 55m)  kubelet            Started container rancher
  Warning  Unhealthy       53m                kubelet            Liveness probe failed: Get "http://10.42.0.8:80/healthz": dial tcp 10.42.0.8:80: connect: connection refused
  Warning  Unhealthy       53m (x5 over 54m)  kubelet            Readiness probe failed: Get "http://10.42.0.8:80/healthz": dial tcp 10.42.0.8:80: connect: connection refused
  Normal   SandboxChanged  19m                kubelet            Pod sandbox changed, it will be killed and re-created.
  Normal   Pulled          19m                kubelet            Container image "rancher/rancher:v2.6.3" already present on machine
  Normal   Created         19m                kubelet            Created container rancher
  Normal   Started         19m                kubelet            Started container rancher
  Warning  Unhealthy       19m (x2 over 19m)  kubelet            Readiness probe failed: Get "http://10.42.0.12:80/healthz": dial tcp 10.42.0.12:80: connect: connection refused


Name:         rancher-7c77f587dd-zfxnj
Namespace:    cattle-system
Priority:     0
Node:         xxx.xxx.xxx.xx2/xxx.xxx.xxx.xx2
Start Time:   Tue, 29 Mar 2022 10:32:09 +0000
Labels:       app=rancher
              pod-template-hash=7c77f587dd
              release=rancher
Annotations:  cni.projectcalico.org/containerID: db7fb651ec67deb603bf6d6f5da0b3821a901fa97c57781dd12b6162cb591f51
              cni.projectcalico.org/podIP: 10.42.2.5/32
              cni.projectcalico.org/podIPs: 10.42.2.5/32
Status:       Running
IP:           10.42.2.5
IPs:
  IP:           10.42.2.5
Controlled By:  ReplicaSet/rancher-7c77f587dd
Containers:
  rancher:
    Container ID:  docker://348ad8e5c714c32cc6b889395522df404fa44f95065b20e8132c6acfecb5f517
    Image:         rancher/rancher:v2.6.3
    Image ID:      docker-pullable://rancher/rancher@sha256:f411ee37efa38d7891c11ecdd5c60ca73eb03dcd32296678af808f6b4ecccfff
    Port:          80/TCP
    Host Port:     0/TCP
    Args:
      --http-listen-port=80
      --https-listen-port=443
      --add-local=true
    State:          Running
      Started:      Tue, 29 Mar 2022 11:07:36 +0000
    Last State:     Terminated
      Reason:       Error
      Exit Code:    1
      Started:      Tue, 29 Mar 2022 10:32:11 +0000
      Finished:     Tue, 29 Mar 2022 11:06:50 +0000
    Ready:          True
    Restart Count:  1
    Liveness:       http-get http://:80/healthz delay=60s timeout=1s period=30s #success=1 #failure=3
    Readiness:      http-get http://:80/healthz delay=5s timeout=1s period=30s #success=1 #failure=3
    Environment:
      CATTLE_NAMESPACE:     cattle-system
      CATTLE_PEER_SERVICE:  rancher
      HTTP_PROXY:           http://
      HTTPS_PROXY:          http://
      NO_PROXY:             127.0.0.0/8,10.0.0.0/8,cattle-system.svc,172.16.0.0/12,192.168.0.0/16,.svc,.cluster.local
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-6shgm (ro)
Conditions:
  Type              Status
  Initialized       True 
  Ready             True 
  ContainersReady   True 
  PodScheduled      True 
Volumes:
  kube-api-access-6shgm:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
QoS Class:                   BestEffort
Node-Selectors:              <none>
Tolerations:                 cattle.io/os=linux:NoSchedule
                             node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type     Reason          Age                From               Message
  ----     ------          ----               ----               -------
  Normal   Scheduled       55m                default-scheduler  Successfully assigned cattle-system/rancher-7c77f587dd-zfxnj to xxx.xxx.xxx.xx2
  Normal   Pulled          55m                kubelet            Container image "rancher/rancher:v2.6.3" already present on machine
  Normal   Created         55m                kubelet            Created container rancher
  Normal   Started         55m                kubelet            Started container rancher
  Warning  Unhealthy       54m                kubelet            Readiness probe failed: Get "http://10.42.2.3:80/healthz": dial tcp 10.42.2.3:80: connect: connection refused
  Normal   SandboxChanged  19m                kubelet            Pod sandbox changed, it will be killed and re-created.
  Normal   Pulled          19m                kubelet            Container image "rancher/rancher:v2.6.3" already present on machine
  Normal   Created         19m                kubelet            Created container rancher
  Normal   Started         19m                kubelet            Started container rancher
  Warning  Unhealthy       19m (x3 over 19m)  kubelet            Readiness probe failed: Get "http://10.42.2.5:80/healthz": dial tcp 10.42.2.5:80: connect: connection refused


Name:         rancher-webhook-5d4f5b7f6d-psnwc
Namespace:    cattle-system
Priority:     0
Node:         xxx.xxx.xxx.xx2/xxx.xxx.xxx.xx2
Start Time:   Tue, 29 Mar 2022 10:33:58 +0000
Labels:       app=rancher-webhook
              pod-template-hash=5d4f5b7f6d
Annotations:  cni.projectcalico.org/containerID: 113e4a29975efd6d94388e4bab8e62fa46a2db2aeb42d91e3b2370228e430f14
              cni.projectcalico.org/podIP: 10.42.2.7/32
              cni.projectcalico.org/podIPs: 10.42.2.7/32
Status:       Running
IP:           10.42.2.7
IPs:
  IP:           10.42.2.7
Controlled By:  ReplicaSet/rancher-webhook-5d4f5b7f6d
Containers:
  rancher-webhook:
    Container ID:   docker://0e70a75bb59c325cb681c47b5ec02014221ef36a6c5934d3ea93379a123fc19b
    Image:          rancher/rancher-webhook:v0.2.2
    Image ID:       docker-pullable://rancher/rancher-webhook@sha256:a9ede545ca7a404d534dc8ff0f69250f74bc0fad626e49ed874e4ee26aac651c
    Ports:          9443/TCP, 8777/TCP
    Host Ports:     0/TCP, 0/TCP
    State:          Running
      Started:      Tue, 29 Mar 2022 11:07:47 +0000
    Last State:     Terminated
      Reason:       Completed
      Exit Code:    0
      Started:      Tue, 29 Mar 2022 10:34:13 +0000
      Finished:     Tue, 29 Mar 2022 11:06:50 +0000
    Ready:          True
    Restart Count:  1
    Environment:
      STAMP:        
      ENABLE_CAPI:  true
      ENABLE_MCM:   true
      NAMESPACE:    cattle-system (v1:metadata.namespace)
    Mounts:
      /tmp/k8s-webhook-server/serving-certs from tls (rw)
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-vl4vn (ro)
Conditions:
  Type              Status
  Initialized       True 
  Ready             True 
  ContainersReady   True 
  PodScheduled      True 
Volumes:
  tls:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  rancher-webhook-tls
    Optional:    false
  kube-api-access-vl4vn:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
QoS Class:                   BestEffort
Node-Selectors:              <none>
Tolerations:                 node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type     Reason                  Age                From               Message
  ----     ------                  ----               ----               -------
  Normal   Scheduled               53m                default-scheduler  Successfully assigned cattle-system/rancher-webhook-5d4f5b7f6d-psnwc to xxx.xxx.xxx.xx2
  Normal   Pulling                 53m                kubelet            Pulling image "rancher/rancher-webhook:v0.2.2"
  Normal   Pulled                  53m                kubelet            Successfully pulled image "rancher/rancher-webhook:v0.2.2" in 8.964444752s
  Normal   Created                 53m                kubelet            Created container rancher-webhook
  Normal   Started                 53m                kubelet            Started container rancher-webhook
  Warning  FailedCreatePodSandBox  19m                kubelet            Failed to create pod sandbox: rpc error: code = Unknown desc = [failed to set up sandbox container "26252df9016c1f155eca5f9ceb3fc4ddc6d3d5087d27c0b7ff2e9d17126f4381" network for pod "rancher-webhook-5d4f5b7f6d-psnwc": networkPlugin cni failed to set up pod "rancher-webhook-5d4f5b7f6d-psnwc_cattle-system" network: failed to find plugin "calico" in path [/opt/cni/bin], failed to clean up sandbox container "26252df9016c1f155eca5f9ceb3fc4ddc6d3d5087d27c0b7ff2e9d17126f4381" network for pod "rancher-webhook-5d4f5b7f6d-psnwc": networkPlugin cni failed to teardown pod "rancher-webhook-5d4f5b7f6d-psnwc_cattle-system" network: failed to find plugin "calico" in path [/opt/cni/bin]]
  Normal   SandboxChanged          19m (x4 over 19m)  kubelet            Pod sandbox changed, it will be killed and re-created.
  Normal   Pulled                  19m                kubelet            Container image "rancher/rancher-webhook:v0.2.2" already present on machine
  Normal   Created                 19m                kubelet            Created container rancher-webhook
  Normal   Started                 19m                kubelet            Started container rancher-webhook
# kubectl -n cattle-system describe certificate
Name:         tls-rancher-ingress
Namespace:    cattle-system
Labels:       app=rancher
              app.kubernetes.io/managed-by=Helm
              chart=rancher-2.6.3
              heritage=Helm
              release=rancher
Annotations:  <none>
API Version:  cert-manager.io/v1
Kind:         Certificate
Metadata:
  Creation Timestamp:  2022-03-29T10:32:10Z
  Generation:          1
  Managed Fields:
    API Version:  cert-manager.io/v1
    Fields Type:  FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
        f:revision:
    Manager:    controller
    Operation:  Update
    Time:       2022-03-29T10:33:15Z
  Owner References:
    API Version:           networking.k8s.io/v1
    Block Owner Deletion:  true
    Controller:            true
    Kind:                  Ingress
    Name:                  rancher
    UID:                   85aac594-b598-4b20-b12d-df79d3ec9ad0
  Resource Version:        4447
  UID:                     53524ab4-f831-429b-89c7-a083de3bf144
Spec:
  Dns Names:
    cltrke.labriunesp.org
  Issuer Ref:
    Group:      cert-manager.io
    Kind:       Issuer
    Name:       rancher
  Secret Name:  tls-rancher-ingress
  Usages:
    digital signature
    key encipherment
Status:
  Conditions:
    Last Transition Time:  2022-03-29T10:33:15Z
    Message:               Certificate is up to date and has not expired
    Observed Generation:   1
    Reason:                Ready
    Status:                True
    Type:                  Ready
  Not After:               2022-06-27T10:33:15Z
  Not Before:              2022-03-29T10:33:15Z
  Renewal Time:            2022-05-28T10:33:15Z
  Revision:                1
Events:
  Type    Reason     Age   From          Message
  ----    ------     ----  ----          -------
  Normal  Issuing    61m   cert-manager  Issuing certificate as Secret does not exist
  Normal  Generated  61m   cert-manager  Stored new private key in temporary Secret resource "tls-rancher-ingress-85nmn"
  Normal  Requested  61m   cert-manager  Created new CertificateRequest resource "tls-rancher-ingress-jvqdj"
  Normal  Issuing    60m   cert-manager  The certificate has been successfully issued

# kubectl -n cattle-system describe issuer
Name:         rancher
Namespace:    cattle-system
Labels:       app=rancher
              app.kubernetes.io/managed-by=Helm
              chart=rancher-2.6.3
              heritage=Helm
              release=rancher
Annotations:  meta.helm.sh/release-name: rancher
              meta.helm.sh/release-namespace: cattle-system
API Version:  cert-manager.io/v1
Kind:         Issuer
Metadata:
  Creation Timestamp:  2022-03-29T10:32:10Z
  Generation:          1
  Managed Fields:
    API Version:  cert-manager.io/v1beta1
    Fields Type:  FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .:
          f:meta.helm.sh/release-name:
          f:meta.helm.sh/release-namespace:
        f:labels:
          .:
          f:app:
          f:app.kubernetes.io/managed-by:
          f:chart:
          f:heritage:
          f:release:
      f:spec:
        .:
        f:ca:
          .:
          f:secretName:
    Manager:      helm
    Operation:    Update
    Time:         2022-03-29T10:32:10Z
    API Version:  cert-manager.io/v1
    Fields Type:  FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
    Manager:         controller
    Operation:       Update
    Time:            2022-03-29T10:33:15Z
  Resource Version:  4415
  UID:               4d2a6c3a-5bc8-4256-83bd-4c8a050a5ee9
Spec:
  Ca:
    Secret Name:  tls-rancher
Status:
  Conditions:
    Last Transition Time:  2022-03-29T10:33:15Z
    Message:               Signing CA verified
    Observed Generation:   1
    Reason:                KeyPairVerified
    Status:                True
    Type:                  Ready
Events:
  Type     Reason           Age                From          Message
  ----     ------           ----               ----          -------
  Warning  ErrGetKeyPair    62m (x4 over 63m)  cert-manager  Error getting keypair for CA issuer: secret "tls-rancher" not found
  Warning  ErrInitIssuer    62m (x4 over 63m)  cert-manager  Error initializing issuer: secret "tls-rancher" not found
  Normal   KeyPairVerified  61m (x2 over 61m)  cert-manager  Signing CA verified
  Normal   KeyPairVerified  26m                cert-manager  Signing CA verified

# kubectl -n cattle-system describe ingress
Name:             rancher
Labels:           app=rancher
                  app.kubernetes.io/managed-by=Helm
                  chart=rancher-2.6.3
                  heritage=Helm
                  release=rancher
Namespace:        cattle-system
Address:          xxx.xxx.xxx.xx3,xxx.xxx.xxx.xx1,xxx.xxx.xxx.xx2
Default backend:  default-http-backend:80 (<error: endpoints "default-http-backend" not found>)
TLS:
  tls-rancher-ingress terminates cltrke.labriunesp.org
Rules:
  Host                   Path  Backends
  ----                   ----  --------
  cltrke.labriunesp.org  
                            rancher:80 (10.42.0.12:80,10.42.1.16:80,10.42.2.5:80)
Annotations:             cert-manager.io/issuer: rancher
                         cert-manager.io/issuer-kind: Issuer
                         field.cattle.io/publicEndpoints:
                           [{"addresses":["xxx.xxx.xxx.xx3","xxx.xxx.xxx.xx1","xxx.xxx.xxx.xx2"],"port":443,"protocol":"HTTPS","serviceName":"cattle-system:rancher","i...
                         meta.helm.sh/release-name: rancher
                         meta.helm.sh/release-namespace: cattle-system
                         nginx.ingress.kubernetes.io/proxy-connect-timeout: 30
                         nginx.ingress.kubernetes.io/proxy-read-timeout: 1800
                         nginx.ingress.kubernetes.io/proxy-send-timeout: 1800
Events:
  Type    Reason             Age                From                      Message
  ----    ------             ----               ----                      -------
  Normal  CreateCertificate  75m                cert-manager              Successfully created Certificate "tls-rancher-ingress"
  Normal  Sync               75m (x3 over 75m)  nginx-ingress-controller  Scheduled for sync
  Normal  Sync               75m (x3 over 75m)  nginx-ingress-controller  Scheduled for sync
  Normal  Sync               75m (x3 over 75m)  nginx-ingress-controller  Scheduled for sync
  Normal  Sync               39m (x4 over 40m)  nginx-ingress-controller  Scheduled for sync
  Normal  Sync               39m (x5 over 40m)  nginx-ingress-controller  Scheduled for sync
  Normal  Sync               39m (x4 over 40m)  nginx-ingress-controller  Scheduled for sync


I am also getting the same problem while deploying v2.6.4 on AWS EKS (Air gapped Install).
Please let me know if you find the solution.