I’m on a fresh install of Rancher 2.6.2 with an RKE1 cluster deployed out on v1.21.5 running the canal CNI. I’m trying to add the bitnami helm chart repo under the apps & marketplace menu. Regardless of the repo I add, I get errors similar to below Get "
https://charts.bitnami.com/bitnami/index.yaml
": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
I’ve checked DNS resolution and ping on the cluster pods and there doesn’t seem to be an issue.
It seems to be Firewall related. I disabled ufw on all of them and the repo added right away. I’m allowing all traffic from the pod network and from each node/master themselves. I’m a missing another network?
I’ve also allowed forwarding in the default policy.
ubuntu@k8s-worker01:~$ sudo ufw status verbose
Status: active
Logging: on (low)
Default: deny (incoming), allow (outgoing), allow (routed)
New profiles: skip
To Action From
-- ------ ----
Anywhere ALLOW IN 10.69.60.0/22
Anywhere ALLOW IN 10.69.59.0/24
Anywhere ALLOW IN 10.42.0.0/16 # K8S Pod Network
Anywhere ALLOW IN 172.17.0.0/16 # Docker Network