Skip to content

Cannot provision new RKE Cluster from Template: Unable to validate S3 backup target configuration

This document (000020907) is provided subject to the disclaimer at the end of this document.

Environment

  • Suse Rancher 2.5.9
  • Air-gapped environment
  • 1 or more RKE downstream clusters
  • RKE template configured for the downstream clusters

Situation

The provisioning of an RKE downstream cluster fails after adding extra_args for the kubelet service to a new RKE template and using this newly created template to provision the RKE cluster.

Error:

Error message while creating a new RKE cluster from the new RKE Template:
Unable to validate S3 backup target configuration: Get http://169.254.169.254/latest/meta-data/iam/security-credentials/": dial tcp 169.254.169.254:80: i/o timeout

Configuration:

E.g. extra_args for the kubelet added to the RKE Template:

    kubelet:
      ...
      extra_args:
        ...
        image-gc-high-threshold: '80'
        image-gc-low-threshold: '75'

Resolution

Verify if the RKE Template has configurable questions:

  • Check in the RKE Template if there is any setting set as a configurable question for the end-user
  • Go to Cluster Management => RKE1 Configuration => RKE Templates
  • Select your desired RKE Template, and click on the 3-dot menu far on the right menu, select "Clone revision"
  • Go to the "Cluster Option Overrides" section lower down on the cloned template, and uncheck any available options. After removing these configurable questions,  the value set in the template is used without user entry.
  • Set a Name for the new Template and click on Save. Select the newly created template and set it as Default Template if this is going to be your default template.

Cause

Configurable questions on the RKE template would require the end-user to answer those questions to set up a new RKE cluster and won't allow a new RKE cluster to be deployed automatically.

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.