Hi, first of all this is the second time im posting this issue im having with rancher, the original Post was in slack: Slack
This is also my first posting in this forum so if this seems out of place please feel free to move this topic.
I have an issue provisioning RKE2 Clusters on Nutanix as an infrastructure provider, whenever i create a cluster the pods trying tu pull the node driver from rancher and failing.
Logs of the Pod failing to download the driver:
Downloading driver from https://rancher06.dep.company.int/assets/docker-machine-driver-nutanix
Doing /etc/rancher/ssl
ls: cannot access 'docker-machine-driver-*': No such file or directory
downloaded file failed sha256 checksum
download of driver from https://rancher06.dep.company.int/assets/docker-machine-driver-nutanix failed
Stream closed EOF for fleet-default/test-pool1-59010ecd-5zmwj-machine-provision-k59jh (machine)
After some digging i found that that the secret fleet-default/cluster-pool1-***-machine-driver-secret mounted by the pod possibly contains the wrong proxy configuration and the pod will try to download the driver via the proxy which is not possible on our network. (Proxy is only used for internet acces).
Note that i have also tried pulling the driver with a curl container and on the k8s nodes themselves and that worked.
Secret looks something like this:
HTTP_PROXY: http://gateway.proxy.net:9480
HTTPS_PROXY: http://gateway.proxy.net:9480
NO_PROXY: 127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,.svc,.cluster.local
NUTANIX_ENDPOINT: ntxpc1.dep.company.int
NUTANIX_PASSWORD: redacted
NUTANIX_PORT: "9440"
NUTANIX_USERNAME: rancher
note that .company.int and others are missing int no_proxy compared to the rancher helm deployment values.
Rancher has been deployed via Helmchart with the following values:
additionalTrustedCAs: true
bootstrapPassword: initPW
hostname: rancher06.k8s.company.int
ingress:
extraAnnotations:
cert-manager.io/issuer: letsencrypt-prod
no_proxy: 127.0.0.0/8,10.0.0.0/8,cattle-system.svc,172.16.0.0/12,192.168.0.0/16,.svc,.cluster.local,.dep.company.int,.company.int,.company.com
privateCA: true
proxy: http://gateway.proxy.net:9480
replicas: 5
Is there any other way to set the no_proxy variable for the provisioning of nodes other then when deploying the helm chart? I also cannot edit the secret directly because it gets deleted/ recreated with every deployment attempt made by rancher/ fleet.
Any help on this topic is highly appreciated.
Thank you very much in advance,
Leon