{"action":"created","issue":{"url":"https://api.github.com/repos/rancher/rancher/issues/15966","repository_url":"https://api.github.com/repos/rancher/rancher","labels_url":"https://api.github.com/repos/rancher/rancher/issues/15966/labels{/name}","comments_url":"https://api.github.com/repos/rancher/rancher/issues/15966/comments","events_url":"https://api.github.com/repos/rancher/rancher/issues/15966/events","html_url":"https://github.com/rancher/rancher/issues/15966","id":367289904,"node_id":"MDU6SXNzdWUzNjcyODk5MDQ=","number":15966,"title":"-caChecksum is a mandatory parameter for rancher/rancher-agent windows images","user":{"login":"nlowe","id":794251,"node_id":"MDQ6VXNlcjc5NDI1MQ==","avatar_url":"https://avatars1.githubusercontent.com/u/794251?v=4","gravatar_id":"","url":"https://api.github.com/users/nlowe","html_url":"https://github.com/nlowe","followers_url":"https://api.github.com/users/nlowe/followers","following_url":"https://api.github.com/users/nlowe/following{/other_user}","gists_url":"https://api.github.com/users/nlowe/gists{/gist_id}","starred_url":"https://api.github.com/users/nlowe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nlowe/subscriptions","organizations_url":"https://api.github.com/users/nlowe/orgs","repos_url":"https://api.github.com/users/nlowe/repos","events_url":"https://api.github.com/users/nlowe/events{/privacy}","received_events_url":"https://api.github.com/users/nlowe/received_events","type":"User","site_admin":false},"labels":[{"id":500262051,"node_id":"MDU6TGFiZWw1MDAyNjIwNTE=","url":"https://api.github.com/repos/rancher/rancher/labels/area/windows","name":"area/windows","color":"fbca04","default":false},{"id":145695744,"node_id":"MDU6TGFiZWwxNDU2OTU3NDQ=","url":"https://api.github.com/repos/rancher/rancher/labels/kind/bug","name":"kind/bug","color":"fc2929","default":false},{"id":189155298,"node_id":"MDU6TGFiZWwxODkxNTUyOTg=","url":"https://api.github.com/repos/rancher/rancher/labels/status/resolved","name":"status/resolved","color":"0052cc","default":false},{"id":659821934,"node_id":"MDU6TGFiZWw2NTk4MjE5MzQ=","url":"https://api.github.com/repos/rancher/rancher/labels/version/2.0","name":"version/2.0","color":"e99695","default":false}],"state":"open","locked":false,"assignee":{"login":"thxCode","id":3394724,"node_id":"MDQ6VXNlcjMzOTQ3MjQ=","avatar_url":"https://avatars1.githubusercontent.com/u/3394724?v=4","gravatar_id":"","url":"https://api.github.com/users/thxCode","html_url":"https://github.com/thxCode","followers_url":"https://api.github.com/users/thxCode/followers","following_url":"https://api.github.com/users/thxCode/following{/other_user}","gists_url":"https://api.github.com/users/thxCode/gists{/gist_id}","starred_url":"https://api.github.com/users/thxCode/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thxCode/subscriptions","organizations_url":"https://api.github.com/users/thxCode/orgs","repos_url":"https://api.github.com/users/thxCode/repos","events_url":"https://api.github.com/users/thxCode/events{/privacy}","received_events_url":"https://api.github.com/users/thxCode/received_events","type":"User","site_admin":false},"assignees":[{"login":"thxCode","id":3394724,"node_id":"MDQ6VXNlcjMzOTQ3MjQ=","avatar_url":"https://avatars1.githubusercontent.com/u/3394724?v=4","gravatar_id":"","url":"https://api.github.com/users/thxCode","html_url":"https://github.com/thxCode","followers_url":"https://api.github.com/users/thxCode/followers","following_url":"https://api.github.com/users/thxCode/following{/other_user}","gists_url":"https://api.github.com/users/thxCode/gists{/gist_id}","starred_url":"https://api.github.com/users/thxCode/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thxCode/subscriptions","organizations_url":"https://api.github.com/users/thxCode/orgs","repos_url":"https://api.github.com/users/thxCode/repos","events_url":"https://api.github.com/users/thxCode/events{/privacy}","received_events_url":"https://api.github.com/users/thxCode/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/rancher/rancher/milestones/140","html_url":"https://github.com/rancher/rancher/milestone/140","labels_url":"https://api.github.com/repos/rancher/rancher/milestones/140/labels","id":3588413,"node_id":"MDk6TWlsZXN0b25lMzU4ODQxMw==","number":140,"title":"v2.2","description":"","creator":{"login":"deniseschannon","id":11410997,"node_id":"MDQ6VXNlcjExNDEwOTk3","avatar_url":"https://avatars1.githubusercontent.com/u/11410997?v=4","gravatar_id":"","url":"https://api.github.com/users/deniseschannon","html_url":"https://github.com/deniseschannon","followers_url":"https://api.github.com/users/deniseschannon/followers","following_url":"https://api.github.com/users/deniseschannon/following{/other_user}","gists_url":"https://api.github.com/users/deniseschannon/gists{/gist_id}","starred_url":"https://api.github.com/users/deniseschannon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/deniseschannon/subscriptions","organizations_url":"https://api.github.com/users/deniseschannon/orgs","repos_url":"https://api.github.com/users/deniseschannon/repos","events_url":"https://api.github.com/users/deniseschannon/events{/privacy}","received_events_url":"https://api.github.com/users/deniseschannon/received_events","type":"User","site_admin":false},"open_issues":220,"closed_issues":46,"state":"open","created_at":"2018-08-21T21:05:07Z","updated_at":"2018-11-06T08:05:59Z","due_on":null,"closed_at":null},"comments":5,"created_at":"2018-10-05T16:51:13Z","updated_at":"2018-11-06T17:10:37Z","closed_at":null,"author_association":"NONE","body":"**Rancher versions:**\r\nrancher/rancher: `v2.1.0-rc10`\r\nrancher/rancher-agent: `v2.1.0-rc8` (Can't use rc10 because no 1803-nanoserver image exists yet)\r\n\r\n**Infrastructure Stack versions:**\r\nkubernetes (if applicable): `v1.11.3-rancher1-1`\r\n\r\n**Docker version: (`docker version`,`docker info` preferred)**\r\n\r\n<details>\r\n\r\n<summary>docker version</summary>\r\n\r\n```txt\r\nClient:\r\n Version:      17.06.2-ee-16\r\n API version:  1.30\r\n Go version:   go1.8.7\r\n Git commit:   9ef4f0a\r\n Built:        Thu Jul 26 16:43:19 2018\r\n OS/Arch:      windows/amd64\r\n\r\nServer:\r\n Engine:\r\n  Version:      17.06.2-ee-16\r\n  API version:  1.30 (minimum version 1.24)\r\n  Go version:   go1.8.7\r\n  Git commit:   9ef4f0a\r\n  Built:        Thu Jul 26 16:52:17 2018\r\n  OS/Arch:      windows/amd64\r\n  Experimental: false\r\n```\r\n\r\n</details>\r\n\r\n<details>\r\n\r\n<summary>docker info</summary>\r\n\r\n```txt\r\nContainers: 0\r\n Running: 0\r\n Paused: 0\r\n Stopped: 0\r\nImages: 1\r\nServer Version: 17.06.2-ee-16\r\nStorage Driver: windowsfilter\r\n Windows:\r\nLogging Driver: json-file\r\nPlugins:\r\n Volume: local\r\n Network: l2bridge l2tunnel nat null overlay transparent\r\n Log: awslogs etwlogs fluentd json-file logentries splunk syslog\r\nSwarm: inactive\r\nDefault Isolation: process\r\nKernel Version: 10.0 17134 (17134.1.amd64fre.rs4_release.180410-1804)\r\nOperating System: Windows Server Datacenter\r\nOSType: windows\r\nArchitecture: x86_64\r\nCPUs: 2\r\nTotal Memory: 8GiB\r\nName: worker-03\r\nID: 754I:Y4L6:CMHU:C524:R2UV:TEMM:4E66:PWX6:TMK4:AJVD:LCLQ:XEF6\r\nDocker Root Dir: C:\\ProgramData\\docker\r\nDebug Mode (client): false\r\nDebug Mode (server): false\r\nRegistry: https://index.docker.io/v1/\r\nExperimental: false\r\nInsecure Registries:\r\n 127.0.0.0/8\r\nLive Restore Enabled: false\r\n```\r\n\r\n</details>\r\n\r\n**Operating system and kernel: (`cat /etc/os-release`, `uname -r` preferred)**\r\n\r\n```powershell\r\nPS C:\\Users\\Administrator> [System.Environment]::OSVersion\r\n\r\nPlatform ServicePack Version      VersionString\r\n-------- ----------- -------      -------------\r\n Win32NT             10.0.17134.0 Microsoft Windows NT 10.0.17134.0\r\n```\r\n\r\n\r\n**Type/provider of hosts: (VirtualBox/Bare-metal/AWS/GCE/DO)**\r\n\r\nBare-metal (vSphere VM's). Single linux master / worker node, single windows worker node.\r\n\r\n**Setup details: (single node rancher vs. HA rancher, internal DB vs. external DB)**\r\n\r\nSingle node rancher, cert signed by publicly trusted CA.\r\n\r\n**Environment Template: (Cattle/Kubernetes/Swarm/Mesos)**\r\n\r\nKubernetes\r\n\r\n**Steps to Reproduce:**\r\n\r\n1. Deploy Rancher 2.1 Using Option C of the [single node install documentation](https://rancher.com/docs/rancher/v2.x/en/installation/single-node/) (Bring Your Own Certificate: Signed by Recognized CA)\r\n2. Create a new cluster with windows support enabled\r\n3. Deploy a linux master\r\n4. Attempt to deploy a windows worker\r\n\r\n**Results:**\r\n\r\nThe node-join command that is generated for windows does not include a `-caChecksum` parameter because we are using a certificate signed by a recognized CA. However, the powershell entrypoint script marks this as a required parameter:\r\n\r\nhttps://github.com/rancher/rancher/blob/ba118e9ce42bfd45666570d4968e7c966a68019b/package/windows/start.ps1#L6\r\n\r\nIf I try to provide a dummy value the image refuses to start because it can't pull the CA cert:\r\n\r\n```txt\r\nERRO[0000] Can't get cattle server CA from https://ranchertest.hyland.io, exit\r\n```\r\n\r\nIf I add the CA's root cert at `/etc/rancher/ssl/cacerts.pem` and remove `--no-cacerts` I can get the agent to start."},"comment":{"url":"https://api.github.com/repos/rancher/rancher/issues/comments/436331855","html_url":"https://github.com/rancher/rancher/issues/15966#issuecomment-436331855","issue_url":"https://api.github.com/repos/rancher/rancher/issues/15966","id":436331855,"node_id":"MDEyOklzc3VlQ29tbWVudDQzNjMzMTg1NQ==","user":{"login":"nlowe","id":794251,"node_id":"MDQ6VXNlcjc5NDI1MQ==","avatar_url":"https://avatars1.githubusercontent.com/u/794251?v=4","gravatar_id":"","url":"https://api.github.com/users/nlowe","html_url":"https://github.com/nlowe","followers_url":"https://api.github.com/users/nlowe/followers","following_url":"https://api.github.com/users/nlowe/following{/other_user}","gists_url":"https://api.github.com/users/nlowe/gists{/gist_id}","starred_url":"https://api.github.com/users/nlowe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nlowe/subscriptions","organizations_url":"https://api.github.com/users/nlowe/orgs","repos_url":"https://api.github.com/users/nlowe/repos","events_url":"https://api.github.com/users/nlowe/events{/privacy}","received_events_url":"https://api.github.com/users/nlowe/received_events","type":"User","site_admin":false},"created_at":"2018-11-06T17:10:37Z","updated_at":"2018-11-06T17:10:37Z","author_association":"NONE","body":"@thxCode Sorry for the delay, other priorities came up. The patched image you pushed does indeed work. When can we expect this to land in a release?"}}
{"actor":{"display_login":"nlowe"}}