{"action":"created","issue":{"url":"https://api.github.com/repos/rancher/rancher/issues/16697","repository_url":"https://api.github.com/repos/rancher/rancher","labels_url":"https://api.github.com/repos/rancher/rancher/issues/16697/labels{/name}","comments_url":"https://api.github.com/repos/rancher/rancher/issues/16697/comments","events_url":"https://api.github.com/repos/rancher/rancher/issues/16697/events","html_url":"https://github.com/rancher/rancher/issues/16697","id":383942674,"node_id":"MDU6SXNzdWUzODM5NDI2NzQ=","number":16697,"title":"Error in HTTP GET to [https://git.rancher.io/charts/index.yaml]","user":{"login":"Celestialdeath99","id":6267549,"node_id":"MDQ6VXNlcjYyNjc1NDk=","avatar_url":"https://avatars2.githubusercontent.com/u/6267549?v=4","gravatar_id":"","url":"https://api.github.com/users/Celestialdeath99","html_url":"https://github.com/Celestialdeath99","followers_url":"https://api.github.com/users/Celestialdeath99/followers","following_url":"https://api.github.com/users/Celestialdeath99/following{/other_user}","gists_url":"https://api.github.com/users/Celestialdeath99/gists{/gist_id}","starred_url":"https://api.github.com/users/Celestialdeath99/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Celestialdeath99/subscriptions","organizations_url":"https://api.github.com/users/Celestialdeath99/orgs","repos_url":"https://api.github.com/users/Celestialdeath99/repos","events_url":"https://api.github.com/users/Celestialdeath99/events{/privacy}","received_events_url":"https://api.github.com/users/Celestialdeath99/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2018-11-23T23:46:23Z","updated_at":"2018-11-26T14:35:32Z","closed_at":"2018-11-24T13:00:44Z","author_association":"NONE","body":"<!--\r\nPlease search for existing issues first, then read https://rancher.com/docs/rancher/v2.x/en/contributing/#bugs-issues-or-questions to see what we expect in an issue\r\nFor security issues, please email security@rancher.com instead of posting a public issue in GitHub. You may (but are not required to) use the GPG key located on Keybase.\r\n-->\r\n\r\n**What kind of request is this (question/bug/enhancement/feature request):**\r\nQuestion\r\n\r\n**Steps to reproduce (least amount of steps as possible):**\r\nFollow the procedure exactly as outlined in [https://rancher.com/docs/rancher/v2.x/en/installation/ha/](https://rancher.com/docs/rancher/v2.x/en/installation/ha/) for a HA install and then in section 4 _(Install Rancher)_ I have added `--set tls=external` for TLS Termination on the Load Balancer.\r\n\r\n**Result:**\r\nThe install completed without any errors and I have been able to access the installation, however I am unable to load any of the catalogs.\r\n![image](https://user-images.githubusercontent.com/6267549/48962495-4342ca80-ef46-11e8-9ddb-4092326e9431.png)\r\n_NOTE: In the image above, the blacked out section is my domain name._\r\n\r\n**Other details that may be helpful:**\r\nI have followed the guide exactly as it goes, and I did not get any errors during install and all the nodes report healthy with no issues. I can access the installation with no issue on my domain. My load balancer is my pfsense firewall using the HAProxy service. My SSL certificates are provided through the ACME Certificated function on pfsense and are issued by LetsEncrypt. I have a few other subdomains running there as well, and HAProxy redirects to the correct backend servers based on the domain entered. I had a previous version of rancher running on a single server without HA and used the same setup for redirecting to the actual server and I had no issues. Can someone please help me figure out why this is not working? I am not the most familiar with rancher and am trying it out to see if I want to use it for some projects, but I need the catalog to work.\r\n\r\n**Environment information**\r\n- Rancher version: _2.1.1_\r\n- Installation option: _HA_\r\n"},"comment":{"url":"https://api.github.com/repos/rancher/rancher/issues/comments/441659499","html_url":"https://github.com/rancher/rancher/issues/16697#issuecomment-441659499","issue_url":"https://api.github.com/repos/rancher/rancher/issues/16697","id":441659499,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0MTY1OTQ5OQ==","user":{"login":"superseb","id":2620179,"node_id":"MDQ6VXNlcjI2MjAxNzk=","avatar_url":"https://avatars2.githubusercontent.com/u/2620179?v=4","gravatar_id":"","url":"https://api.github.com/users/superseb","html_url":"https://github.com/superseb","followers_url":"https://api.github.com/users/superseb/followers","following_url":"https://api.github.com/users/superseb/following{/other_user}","gists_url":"https://api.github.com/users/superseb/gists{/gist_id}","starred_url":"https://api.github.com/users/superseb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/superseb/subscriptions","organizations_url":"https://api.github.com/users/superseb/orgs","repos_url":"https://api.github.com/users/superseb/repos","events_url":"https://api.github.com/users/superseb/events{/privacy}","received_events_url":"https://api.github.com/users/superseb/received_events","type":"User","site_admin":false},"created_at":"2018-11-26T14:35:32Z","updated_at":"2018-11-26T14:35:32Z","author_association":"MEMBER","body":"Pretty sure this is caused by the wildcard record for your domain. As Kubernetes puts `ndots: 5` in `/etc/resolv.conf`, and your search domain probably set to `celestialdata.net` it will resolve `git.rancher.io.celestialdata.net` and point to itself. Then the certificate doesn't match.\r\n\r\nYou can validate this by removing the `options ndots:5` or `celestialdata.net` and check if that resolves the issue to validate this is the actual root cause. See more discussion in https://github.com/kubernetes/kubernetes/issues/64924"}}
{"actor":{"display_login":"superseb"}}