Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Additional information needed for documentation? #62

Open
burvil-aero opened this issue Feb 26, 2025 · 0 comments
Open

Additional information needed for documentation? #62

burvil-aero opened this issue Feb 26, 2025 · 0 comments

Comments

@burvil-aero
Copy link

burvil-aero commented Feb 26, 2025

I read and went through the steps at https://github.com/rancherfederal/rancher-cluster-templates/blob/main/charts/cluster-templates/README.md, and updated the required variables at the top of https://github.com/rancherfederal/rancher-cluster-templates/blob/main/charts/cluster-templates/values-vsphere.yaml.

  1. It seems that cloudCredentialSecretName vsphere-creds specified at the top of that yaml would need to be created with the following commands:

kubectl create secret -n cattle-global-data generic vsphere-creds --from-literal=vmwarevspherecredentialConfig-username=$USERNAME --from-literal=vmwarevspherecredentialConfig-password=$PASSWORD --from-literal=vmwarevspherecredentialConfig-vcenter=$VCENTER_HOST --from-literal=vmwarevspherecredentialConfig-vcenterPort=$VCENTER_PORT

kubectl annotate secret -n cattle-global-data vsphere-creds provisioning.cattle.io/driver=vmwarevsphere

However, this would imply the secret is stored in a cluster. Do I need to first set the context to a cluster, and if so, what cluster would that be? I'd think it wouldn't be a downstream cluster, as it seems the intent here is to create a downstream RKE2 cluster.

  1. In order to connect to and use resources on the Rancher instance specified by the Rancher URL at the top of the yaml, wouldn't I also need to supply an API key for that Rancher instance? [ In other words, login to the Rancher UI, click on the icon in the upper right, Click Account & API keys, Create API Key, next, and use the resulting API key ?]

Currently, I get the following when trying to install per the instructions; I think it's because I haven't provided the information above.

user@machine $ helm upgrade -i cluster cluster-templates/rancher-cluster-templates -n fleet-default -f values-vsphere.yaml
Error: Kubernetes cluster unreachable: {"Code":{"Code":"Forbidden","Status":403},"Message":"clusters.management.cattle.io "c-kqv6m" is forbidden: User "system:unauthenticated" cannot get resource "clusters" in API group "management.cattle.io" at the cluster scope","Cause":null,"FieldName":""}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant