Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cluster import not successful when agent-tls-mode flag is enabled #989

Open
cpinjani opened this issue Jan 9, 2025 · 0 comments · May be fixed by #993
Open

Cluster import not successful when agent-tls-mode flag is enabled #989

cpinjani opened this issue Jan 9, 2025 · 0 comments · May be fixed by #993
Labels
kind/bug Something isn't working
Milestone

Comments

@cpinjani
Copy link
Contributor

cpinjani commented Jan 9, 2025

What steps did you take and what happened?

  • Install turtles latest dev version with agent-tls-mode flag enabled (Rancher setting, any of Strict or System Store)
  • Provision and auto-import a CAPI cluster
  • Cluster stays in Pending state on Rancher dashboard and v3.setting related errors are seen in logs
I0108 18:04:12.532851       1 import_controller_v3.go:143] "Reconciling CAPI cluster" controller="cluster" controllerGroup="cluster.x-k8s.io" controllerKind="Cluster" Cluster="default/cluster1" namespace="default" name="cluster1" reconcileID="6144db93-1de6-427d-8637-3840ec34975c"
W0108 18:04:12.534171       1 reflector.go:561] k8s.io/[email protected]/tools/cache/reflector.go:243: failed to list *v3.Setting: settings.management.cattle.io is forbidden: User "system:serviceaccount:rancher-turtles-system:rancher-turtles-manager" cannot list resource "settings" in API group "management.cattle.io" at the cluster scope
E0108 18:04:12.534233       1 reflector.go:158] "Unhandled Error" err="k8s.io/[email protected]/tools/cache/reflector.go:243: Failed to watch *v3.Setting: failed to list *v3.Setting: settings.management.cattle.io is forbidden: User \"system:serviceaccount:rancher-turtles-system:rancher-turtles-manager\" cannot list resource \"settings\" in API group \"management.cattle.io\" at the cluster scope" logger="UnhandledError"
I0108 18:04:13.063442       1 capiprovider_controller.go:51] "Reconciling CAPIProvider" controller="capiprovider" controllerGroup="turtles-capi.cattle.io" controllerKind="CAPIProvider" CAPIProvider="rke2-bootstrap-system/rke2-bootstrap" namespace="rke2-bootstrap-system" name="rke2-bootstrap" reconcileID="c5625df0-1fea-46fd-93c4-ed41134c2cd7"

What did you expect to happen?

Able to use agent-tls-mode flag

How to reproduce it?

Steps mentioned above.

Rancher Turtles version

Dev version - 6924377

Anything else you would like to add?

No response

Label(s) to be applied

/kind bug

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug Something isn't working
Development

Successfully merging a pull request may close this issue.

2 participants