Rancher namespace has to be cattle-system

1 minute read

Rancher namespace must be cattle-system

“tls-rancher” secret is stored in cattle system , installing rancher in an other namespace will not found the secret .

helm install rancher rancher-stable/rancher --namespace rancher --set hostname=rancher.local --set replicas=3 --set ingress.tls.source=rancher

kubectl describe certs tls-rancher-ingress -n rancher
Status:
  Conditions:
    Last Transition Time:        2021-07-30T07:16:03Z
    Message:                     Issuing certificate as Secret does not exist
    Observed Generation:         1
    Reason:                      DoesNotExist
    Status:                      True
    Type:                        Issuing
    Last Transition Time:        2021-07-30T07:16:03Z
    Message:                     Issuing certificate as Secret does not exist
    Observed Generation:         2
    Reason:                      DoesNotExist
    Status:                      False
    Type:                        Ready
  Next Private Key Secret Name:  tls-rancher-ingress-4fbbd
Events:                          <none>

changing the Rancher namespace to cattle-system fixed the issue

helm install rancher rancher-stable/rancher --namespace cattle-system --set hostname=rancher.local --set replicas=3 --set ingress.tls.source=rancher

kubectl describe certs tls-rancher-ingress -n cattle-system
Status:
  Conditions:
    Last Transition Time:  2021-08-18T12:41:17Z
    Message:               Certificate is up to date and has not expired
    Observed Generation:   1
    Reason:                Ready
    Status:                True
    Type:                  Ready
  Not After:               2021-11-16T12:41:17Z
  Not Before:              2021-08-18T12:41:17Z
  Renewal Time:            2021-10-17T12:41:17Z
  Revision:                1
Events:
  Type    Reason     Age   From          Message
  ----    ------     ----  ----          -------
  Normal  Issuing    10m   cert-manager  Existing issued Secret is not up to date for spec: [spec.dnsNames]
  Normal  Reused     10m   cert-manager  Reusing private key stored in existing Secret resource "tls-rancher-ingress"
  Normal  Requested  10m   cert-manager  Created new CertificateRequest resource "tls-rancher-ingress-rf28s"

Leave a comment