Rancher Server 设置
- Rancher 版本：2.14.3
- 安装选项 (Docker install/Helm Chart): Docker version 29.6.1, build 8900f1d
- 如果是 Helm Chart 安装，需要提供 Local 集群的类型（RKE1, RKE2, k3s, EKS, 等）和版本：
- 在线或离线部署：在线部署
下游集群信息
- Kubernetes 版本:
- Cluster Type (Local/Downstream):
- 如果 Downstream，是什么类型的集群?(自定义/导入或为托管 等):
用户信息
- 登录用户的角色是什么？ （管理员/集群所有者/集群成员/项目所有者/项目成员/自定义）：
- 如果自定义，自定义权限集：
主机操作系统：
[root@rancher rancher]# uname -a
Linux rancher 5.14.0-427.13.1.el9_4.x86_64 #1 SMP PREEMPT_DYNAMIC Wed May 1 19:11:28 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
[root@rancher rancher]# cat /etc/redhat-release
Rocky Linux release 9.4 (Blue Onyx)
问题描述：
rancher2.14.3版本rancher-turtles-controller-manager容器一直重启
重现步骤：
结果：
预期结果：
截图：
其他上下文信息：
日志
bash-4.4# kubectl get pod -A
NAMESPACE NAME READY STATUS RESTARTS AGE
cattle-fleet-system fleet-controller-65b68b9b84-89tv4 3/3 Running 6 (10m ago) 49m
cattle-fleet-system gitjob-75944666c7-22tkb 1/1 Running 2 (10m ago) 49m
cattle-fleet-system helmops-79958bf5bc-qpqnd 1/1 Running 2 (10m ago) 49m
cattle-system api-extension-5749fcf9-pjpbz 1/1 Running 1 (10m ago) 49m
cattle-system rancher-webhook-69747f5f78-j96w8 1/1 Running 1 (10m ago) 48m
cattle-system system-upgrade-controller-795675cc79-jzclz 1/1 Running 1 (10m ago) 46m
cattle-turtles-system rancher-turtles-controller-manager-d849c969d-vvvt8 0/1 Error 4 (3m9s ago) 11m
kube-system coredns-8db54c48d-t8xmz 1/1 Running 3 (10m ago) 49m
# kubectl logs -n cattle-turtles-system rancher-turtles-controller-manager-d849c969d-vvvt8 --previous
输出：
I0715 03:40:01.659604 1 controller.go:286\] "Starting Controller" controller="cleanup" controllerGroup="management.cattle.io" controllerKind="Cluster"
I0715 03:40:01.659637 1 controller.go:289\] "Starting workers" controller="cleanup" controllerGroup="management.cattle.io" controllerKind="Cluster" worker count=1
I0715 03:40:01.660150 1 controller.go:286\] "Starting Controller" controller="healthcheck-turtles-capi.cattle.io/v1alpha1, Kind=CAPIProvider" controllerGroup="apps" controllerKind="Deployment"
I0715 03:40:01.660200 1 controller.go:289\] "Starting workers" controller="healthcheck-turtles-capi.cattle.io/v1alpha1, Kind=CAPIProvider" controllerGroup="apps" controllerKind="Deployment" worker count=1
I0715 03:40:01.660324 1 controller.go:286\] "Starting Controller" controller="clusterctlconfig" controllerGroup="turtles-capi.cattle.io" controllerKind="ClusterctlConfig"
I0715 03:40:01.660357 1 controller.go:289\] "Starting workers" controller="clusterctlconfig" controllerGroup="turtles-capi.cattle.io" controllerKind="ClusterctlConfig" worker count=1
I0715 03:40:01.661656 1 controller.go:286\] "Starting Controller" controller="ProviderReconciler" controllerGroup="turtles-capi.cattle.io" controllerKind="CAPIProvider"
I0715 03:40:01.661674 1 controller.go:289\] "Starting workers" controller="ProviderReconciler" controllerGroup="turtles-capi.cattle.io" controllerKind="CAPIProvider" worker count=1
I0715 03:40:01.661909 1 config.go:152\] "Turtles configured to use Rancher default registry for images" controller="clusterctlconfig" controllerGroup="turtles-capi.cattle.io" controllerKind="ClusterctlConfig" ClusterctlConfig="cattle-turtles-system/clusterctl-config" namespace="cattle-turtles-system" name="clusterctl-config" reconcileID="c75a857a-9c3f-4309-859b-47017d27e732"
I0715 03:40:01.765619 1 config.go:162\] "Rancher default registry has been set" controller="clusterctlconfig" controllerGroup="turtles-capi.cattle.io" controllerKind="ClusterctlConfig" ClusterctlConfig="cattle-turtles-system/clusterctl-config" namespace="cattle-turtles-system" name="clusterctl-config" reconcileID="c75a857a-9c3f-4309-859b-47017d27e732" registry="[registry.cn-hangzhou.aliyuncs.com](https://registry.cn-hangzhou.aliyuncs.com)"
I0715 03:40:01.765704 1 config.go:177\] "Overridden provider image to use Rancher default registry" controller="clusterctlconfig" controllerGroup="turtles-capi.cattle.io" controllerKind="ClusterctlConfig" ClusterctlConfig="cattle-turtles-system/clusterctl-config" namespace="cattle-turtles-system" name="clusterctl-config" reconcileID="c75a857a-9c3f-4309-859b-47017d27e732" image="cluster-api" repository="[registry.cn-hangzhou.aliyuncs.com/rancher](https://registry.cn-hangzhou.aliyuncs.com/rancher)" tag=""
E0715 03:40:11.561151 1 kind.go:75\] "if kind is a CRD, it should be installed before calling Start" err="no matches for kind \\"Cluster\\" in version \\"cluster.x-k8s.io/v1beta2\\"" logger="controller-runtime.source.Kind" kind="Cluster.cluster.x-k8s.io"
E0715 03:40:21.566830 1 kind.go:75\] "if kind is a CRD, it should be installed before calling Start" err="no matches for kind \\"Cluster\\" in version \\"cluster.x-k8s.io/v1beta2\\"" logger="controller-runtime.source.Kind" kind="Cluster.cluster.x-k8s.io"
E0715 03:40:31.568557 1 kind.go:75\] "if kind is a CRD, it should be installed before calling Start" err="no matches for kind \\"Cluster\\" in version \\"cluster.x-k8s.io/v1beta2\\"" logger="controller-runtime.source.Kind" kind="Cluster.cluster.x-k8s.io"
E0715 03:40:41.565174 1 kind.go:75\] "if kind is a CRD, it should be installed before calling Start" err="no matches for kind \\"Cluster\\" in version \\"cluster.x-k8s.io/v1beta2\\"" logger="controller-runtime.source.Kind" kind="Cluster.cluster.x-k8s.io"
E0715 03:40:51.562914 1 kind.go:75\] "if kind is a CRD, it should be installed before calling Start" err="no matches for kind \\"Cluster\\" in version \\"cluster.x-k8s.io/v1beta2\\"" logger="controller-runtime.source.Kind" kind="Cluster.cluster.x-k8s.io"
E0715 03:41:01.571348 1 kind.go:75\] "if kind is a CRD, it should be installed before calling Start" err="no matches for kind \\"Cluster\\" in version \\"cluster.x-k8s.io/v1beta2\\"" logger="controller-runtime.source.Kind" kind="Cluster.cluster.x-k8s.io"
E0715 03:41:11.563966 1 kind.go:75\] "if kind is a CRD, it should be installed before calling Start" err="no matches for kind \\"Cluster\\" in version \\"cluster.x-k8s.io/v1beta2\\"" logger="controller-runtime.source.Kind" kind="Cluster.cluster.x-k8s.io"
E0715 03:41:21.564452 1 kind.go:75\] "if kind is a CRD, it should be installed before calling Start" err="no matches for kind \\"Cluster\\" in version \\"cluster.x-k8s.io/v1beta2\\"" logger="controller-runtime.source.Kind" kind="Cluster.cluster.x-k8s.io"
E0715 03:41:31.562010 1 kind.go:75\] "if kind is a CRD, it should be installed before calling Start" err="no matches for kind \\"Cluster\\" in version \\"cluster.x-k8s.io/v1beta2\\"" logger="controller-runtime.source.Kind" kind="Cluster.cluster.x-k8s.io"
E0715 03:41:41.564998 1 kind.go:75\] "if kind is a CRD, it should be installed before calling Start" err="no matches for kind \\"Cluster\\" in version \\"cluster.x-k8s.io/v1beta2\\"" logger="controller-runtime.source.Kind" kind="Cluster.cluster.x-k8s.io"
E0715 03:41:51.563146 1 kind.go:75\] "if kind is a CRD, it should be installed before calling Start" err="no matches for kind \\"Cluster\\" in version \\"cluster.x-k8s.io/v1beta2\\"" logger="controller-runtime.source.Kind" kind="Cluster.cluster.x-k8s.io"
E0715 03:42:01.561506 1 controller.go:366\] "Could not wait for Cache to sync" err="failed to wait for cluster caches to sync kind source: \*v1beta2.Cluster: timed out waiting for cache to be synced for Kind \*v1beta2.Cluster" controller="cluster" controllerGroup="cluster.x-k8s.io" controllerKind="Cluster" source="kind source: \*v1beta2.Cluster"
I0715 03:42:01.561577 1 internal.go:555\] "Stopping and waiting for non leader election runnables"
I0715 03:42:01.561586 1 internal.go:559\] "Stopping and waiting for leader election runnables"
I0715 03:42:01.561602 1 internal.go:550\] "Stopping and waiting for warmup runnables"
I0715 03:42:01.561612 1 controller.go:309\] "Shutdown signal received, waiting for all workers to finish" controller="ProviderReconciler" controllerGroup="turtles-capi.cattle.io" controllerKind="CAPIProvider"
I0715 03:42:01.561619 1 controller.go:309\] "Shutdown signal received, waiting for all workers to finish" controller="clusterctlconfig" controllerGroup="turtles-capi.cattle.io" controllerKind="ClusterctlConfig"
I0715 03:42:01.561624 1 controller.go:309\] "Shutdown signal received, waiting for all workers to finish" controller="healthcheck-turtles-capi.cattle.io/v1alpha1, Kind=CAPIProvider" controllerGroup="apps" controllerKind="Deployment"
I0715 03:42:01.561629 1 controller.go:309\] "Shutdown signal received, waiting for all workers to finish" controller="cleanup" controllerGroup="management.cattle.io" controllerKind="Cluster"
I0715 03:42:01.561649 1 controller.go:311\] "All workers finished" controller="ProviderReconciler" controllerGroup="turtles-capi.cattle.io" controllerKind="CAPIProvider"
I0715 03:42:01.561655 1 controller.go:311\] "All workers finished" controller="cleanup" controllerGroup="management.cattle.io" controllerKind="Cluster"
I0715 03:42:01.561661 1 controller.go:311\] "All workers finished" controller="clusterctlconfig" controllerGroup="turtles-capi.cattle.io" controllerKind="ClusterctlConfig"
I0715 03:42:01.561666 1 controller.go:311\] "All workers finished" controller="healthcheck-turtles-capi.cattle.io/v1alpha1, Kind=CAPIProvider" controllerGroup="apps" controllerKind="Deployment"
I0715 03:42:01.561698 1 internal.go:567\] "Stopping and waiting for caches"
E0715 03:42:01.563427 1 kind.go:75\] "if kind is a CRD, it should be installed before calling Start" err="no matches for kind \\"Cluster\\" in version \\"cluster.x-k8s.io/v1beta2\\"" logger="controller-runtime.source.Kind" kind="Cluster.cluster.x-k8s.io"
I0715 03:42:01.563593 1 internal.go:571\] "Stopping and waiting for webhooks"
I0715 03:42:01.563612 1 internal.go:574\] "Stopping and waiting for HTTP servers"
I0715 03:42:01.563708 1 server.go:68\] "shutting down server" name="health probe" addr="\[::\]:9440"
I0715 03:42:01.563759 1 server.go:254\] "Shutting down metrics server with timeout of 1 minute" logger="controller-runtime.metrics"
I0715 03:42:01.563782 1 internal.go:578\] "Wait completed, proceeding to shutdown the manager"
E0715 03:42:01.563925 1 main.go:179\] "problem running manager" err="failed to wait for cluster caches to sync kind source: \*v1beta2.Cluster: timed out waiting for cache to be synced for Kind \*v1beta2.Cluster" logger="setup"
bash-4.4#
docker logs -f rancher
输出：
2026/07/15 02:44:21 [INFO] Waiting for CRD userattributes.management.cattle.io to become available
2026/07/15 02:44:21 [INFO] Done waiting for CRD userattributes.management.cattle.io to become available
2026/07/15 02:44:21 [INFO] Configuring auth server API body limit to 1048576 bytes
2026/07/15 02:44:21 [ERROR] RDPClient: error reading connect secret: secrets "api-extension" not found, will attempt to create new one...
2026/07/15 02:44:21 [INFO] creating imperative extension apiserver resources
2026/07/15 02:44:21 [INFO] RDPClient: Checking if dialer is built...
2026/07/15 02:44:21 [INFO] RDPClient: Dialer is not built yet, waiting 5 secs to re-check.
2026/07/15 02:44:21 [INFO] starting imperative api cert rotator
2026/07/15 02:44:21 [INFO] Successfully installed useractivity store
2026/07/15 02:44:21 [INFO] Successfully installed token store
2026/07/15 02:44:21 [INFO] Successfully installed kubeconfig store
2026/07/15 02:44:21 [INFO] Successfully installed passwordchangerequest store
2026/07/15 02:44:21 [INFO] Successfully installed groupmembershiprefreshrequest store
2026/07/15 02:44:21 [INFO] Successfully installed selfuser store
2026/07/15 02:44:21 [WARNING] Unable to fetch sql-cache-gc-interval setting (will use default): settings.management.cattle.io "sql-cache-gc-interval" not found
2026/07/15 02:44:21 [WARNING] Unable to fetch sql-cache-gc-keep-count setting (will use default): settings.management.cattle.io "sql-cache-gc-keep-count" not found
2026/07/15 02:44:22 [INFO] created imperative api cert secret
2026/07/15 02:44:22 [INFO] imperative api APIService cert updated
2026/07/15 02:44:22 [INFO] imperative api APIService cert updated
2026/07/15 02:44:26 [INFO] Starting management.cattle.io/v3, Kind=ProxyEndpoint controller
2026/07/15 02:44:26 [INFO] Starting rbac.authorization.k8s.io/v1, Kind=ClusterRole controller
2026/07/15 02:44:26 [INFO] wrangler-newContext leader func executed successfully
2026/07/15 02:44:26 [ERROR] getting AuthConfig genericoidc: authconfigs.management.cattle.io "genericoidc" not found
2026/07/15 02:44:26 [ERROR] getting AuthConfig cognito: authconfigs.management.cattle.io "cognito" not found
2026/07/15 02:44:26 [ERROR] failed to call leader func: authconfigs.management.cattle.io "genericoidc" not found
authconfigs.management.cattle.io "cognito" not found
2026/07/15 02:44:26 [INFO] Starting ServiceAccountSecretCleaner with 0 secrets
2026/07/15 02:44:26 [INFO] rancher-new leader func executed successfully
2026/07/15 02:44:26 [INFO] nodedriver-register leader func executed successfully
2026/07/15 02:44:26 [INFO] Reconciling GlobalRoles
2026/07/15 02:44:26 [INFO] Creating clusters-create
2026/07/15 02:44:26 [INFO] Creating nodedrivers-manage
2026/07/15 02:44:26 [INFO] Creating serviceaccounts-manage
2026/07/15 02:44:26 [INFO] Creating edit
2026/07/15 02:44:26 [WARNING] A bootstrap password secret was found, but did not match the expected structure.
2026/07/15 02:44:26 [INFO] Starting management.cattle.io/v3, Kind=Group controller
2026/07/15 02:44:26 [INFO] Starting management.cattle.io/v3, Kind=Token controller
2026/07/15 02:44:27 [INFO] Creating node driver vmwarevsphere
2026/07/15 02:44:27 [ERROR] error syncing 'server-url': handler apiservice-settings: secrets "tls-rancher-internal-ca" not found, requeuing
2026/07/15 02:44:27 [ERROR] error syncing 'server-url': handler apiservice-settings: secrets "tls-rancher-internal-ca" not found, requeuing
2026/07/15 02:44:27 [INFO] Starting management.cattle.io/v3, Kind=FleetWorkspace controller
2026/07/15 02:44:27 [INFO] Starting batch/v1, Kind=Job controller
2026/07/15 02:44:27 [INFO] Starting /v1, Kind=Pod controller
2026/07/15 02:44:27 [INFO] Starting apps/v1, Kind=Deployment controller
2026/07/15 02:44:27 [INFO] Starting /v1, Kind=Endpoints controller
2026/07/15 02:44:27 [INFO] Starting rke.cattle.io/v1, Kind=RKEControlPlane controller
2026/07/15 02:44:27 [INFO] Starting fleet.cattle.io/v1alpha1, Kind=ClusterGroup controller
2026/07/15 02:44:27 [INFO] Starting apps/v1, Kind=StatefulSet controller
2026/07/15 02:44:27 [INFO] Starting networking.k8s.io/v1, Kind=Ingress controller
2026/07/15 02:44:27 [ERROR] Failed to find system chart fleet-crd will try again in 5 seconds: configmaps "" not found
2026/07/15 02:44:27 [INFO] Starting batch/v1, Kind=CronJob controller
2026/07/15 02:44:27 [INFO] Starting catalog.cattle.io/v1, Kind=Operation controller
2026/07/15 02:44:27 [INFO] Detected v2.6.0 upgrade, forcing logout for all web users
2026/07/15 02:44:27 [ERROR] Failed to read API for groups map[ext.cattle.io/v1:stale GroupVersion discovery: ext.cattle.io/v1]
2026/07/15 02:44:27 [ERROR] error syncing 'server-url': handler apiservice-settings: secrets "tls-rancher-internal-ca" not found, requeuing
2026/07/15 02:44:27 [INFO] rancher-start::dashboarddata leader func executed successfully
2026/07/15 02:44:27 [INFO] Starting management.cattle.io/v3, Kind=ComposeConfig controller
2026/07/15 02:44:28 [INFO] bindings cleanup needed, waiting 3 minutes before starting
2026/07/15 02:44:28 [INFO] [clean-orphan-bindings] cleaning up orphaned bindings
2026/07/15 02:44:28 [INFO] [clean-orphan-bindings] checking for orphaned rolebindings
2026/07/15 02:44:28 [ERROR] error syncing 'server-url': handler apiservice-settings: secrets "tls-rancher-internal-ca" not found, requeuing
2026/07/15 02:44:28 [INFO] Refusing to reset the config and clean up resources of the auth provider activedirectory because its auth config annotation management.cattle.io/auth-provider-cleanup is set to rancher-locked.
2026/07/15 02:44:28 [INFO] [CleanupOrphanBindingsDone] successfully cleaned up orphan bindings
2026/07/15 02:44:28 [INFO] [migrate-ad-user] during unmigration, found that Active Directory is not enabled. nothing to do
2026/07/15 02:44:28 [INFO] Refusing to reset the config and clean up resources of the auth provider activedirectory because its auth config annotation management.cattle.io/auth-provider-cleanup is set to rancher-locked.
2026/07/15 02:44:28 [INFO] Watching metadata for rke.cattle.io/v1, Kind=CustomMachine
2026/07/15 02:44:28 [INFO] Watching metadata for rke.cattle.io/v1, Kind=RKEBootstrapTemplate
2026/07/15 02:44:28 [INFO] Watching metadata for rke.cattle.io/v1, Kind=RKECluster
2026/07/15 02:44:28 [ERROR] error syncing 'server-url': handler apiservice-settings: secrets "tls-rancher-internal-ca" not found, requeuing
2026/07/15 02:44:28 [ERROR] error syncing 'server-url': handler apiservice-settings: secrets "tls-rancher-internal-ca" not found, requeuing
2026/07/15 02:44:28 [INFO] Starting provisioning.cattle.io/v1, Kind=Cluster controller
2026/07/15 02:44:28 [INFO] Starting rke.cattle.io/v1, Kind=CustomMachine controller
2026/07/15 02:44:28 [INFO] Starting rke.cattle.io/v1, Kind=ETCDSnapshot controller
2026/07/15 02:44:28 [INFO] Starting rke.cattle.io/v1, Kind=RKEBootstrap controller
2026/07/15 02:44:28 [INFO] Starting rke.cattle.io/v1, Kind=RKEBootstrapTemplate controller
2026/07/15 02:44:28 [INFO] Starting rke.cattle.io/v1, Kind=RKECluster controller
2026/07/15 02:44:28 [INFO] Starting rke.cattle.io/v1, Kind=RKEControlPlane controller
2026/07/15 02:44:28 [INFO] [mgmt-cluster-rbac-delete] Creating Default project for cluster local
2026/07/15 02:44:28 [INFO] [mgmt-project-rbac-create] Creating namespace p-xd7zd
2026/07/15 02:44:28 [ERROR] error syncing 'server-url': handler apiservice-settings: secrets "tls-rancher-internal-ca" not found, requeuing
2026/07/15 02:44:28 [INFO] p-xd7zd-projectmember is being created in namespace local
2026/07/15 02:44:28 [ERROR] error syncing 'fleet-local/local': handler cluster-create: server url is missing, can't generate kubeconfig for fleet import cluster, requeuing
2026/07/15 02:44:28 [ERROR] error syncing 'fleet-local/local': handler cluster-create: server url is missing, can't generate kubeconfig for fleet import cluster, requeuing
2026/07/15 02:44:28 [INFO] p-xd7zd-projectowner is being created in namespace local
2026/07/15 02:44:28 [WARNING] [mgmt-project-rbac-create] project p-xd7zd has no creatorId annotation. Cannot add creator as owner
2026/07/15 02:44:28 [INFO] [mgmt-project-rbac-create] Updating project p-xd7zd
2026/07/15 02:44:28 [ERROR] error syncing 'fleet-local/local': handler cluster-create: server url is missing, can't generate kubeconfig for fleet import cluster, requeuing
2026/07/15 02:44:28 [INFO] [mgmt-cluster-rbac-delete] Creating System project for cluster local
2026/07/15 02:44:28 [INFO] [mgmt-cluster-rbac-delete] Updating cluster local
2026/07/15 02:44:28 [INFO] [mgmt-project-rbac-create] Creating namespace p-l9clc
2026/07/15 02:44:28 [INFO] p-xd7zd-projectmember in namespace local needs to be updated
2026/07/15 02:44:28 [INFO] p-l9clc-projectmember is being created in namespace local
2026/07/15 02:44:28 [INFO] local-clustermember is being created
2026/07/15 02:44:28 [INFO] p-xd7zd-projectowner in namespace local needs to be updated
2026/07/15 02:44:28 [INFO] p-l9clc-projectowner is being created in namespace local
2026/07/15 02:44:28 [INFO] local-clusterowner is being created
2026/07/15 02:44:28 [ERROR] error syncing 'fleet-local/local': handler cluster-create: server url is missing, can't generate kubeconfig for fleet import cluster, requeuing
2026/07/15 02:44:28 [WARNING] [mgmt-cluster-rbac-delete] cluster local has no creatorId annotation. Cannot add creator as owner
2026/07/15 02:44:28 [INFO] [mgmt-cluster-rbac-delete] Updating cluster local
2026/07/15 02:44:28 [WARNING] [mgmt-project-rbac-create] project p-l9clc has no creatorId annotation. Cannot add creator as owner
2026/07/15 02:44:28 [INFO] [mgmt-project-rbac-create] Updating project p-l9clc
2026/07/15 02:44:28 [INFO] p-xd7zd-projectmember in namespace local needs to be updated
2026/07/15 02:44:28 [INFO] p-xd7zd-projectowner in namespace local needs to be updated
2026/07/15 02:44:28 [INFO] p-xd7zd-projectmember in namespace local needs to be updated
2026/07/15 02:44:28 [INFO] p-l9clc-projectmember in namespace local needs to be updated
2026/07/15 02:44:28 [ERROR] error syncing 'fleet-local/local': handler cluster-create: server url is missing, can't generate kubeconfig for fleet import cluster, requeuing
2026/07/15 02:44:28 [INFO] p-xd7zd-projectowner in namespace local needs to be updated
2026/07/15 02:44:28 [INFO] p-l9clc-projectowner in namespace local needs to be updated
2026/07/15 02:44:28 [WARNING] [mgmt-cluster-rbac-delete] cluster local has no creatorId annotation. Cannot add creator as owner
2026/07/15 02:44:28 [INFO] [mgmt-cluster-rbac-delete] Updating cluster local
2026/07/15 02:44:28 [ERROR] error syncing 'fleet-local/local': handler cluster-create: server url is missing, can't generate kubeconfig for fleet import cluster, requeuing
2026/07/15 02:44:28 [INFO] Starting cluster controllers for local
2026/07/15 02:44:28 [ERROR] error syncing 'fleet-local/local': handler cluster-create: server url is missing, can't generate kubeconfig for fleet import cluster, requeuing
2026/07/15 02:44:28 [ERROR] error syncing 'server-url': handler apiservice-settings: secrets "tls-rancher-internal-ca" not found, requeuing
2026/07/15 02:44:28 [INFO] Starting management.cattle.io/v3, Kind=SamlToken controller
2026/07/15 02:44:28 [INFO] Waiting for 5m0s imperative API to be ready
2026/07/15 02:44:28 [INFO] generated self-signed CA certificate CN=dynamiclistener-ca@1784083468,O=dynamiclistener-org: notBefore=2026-07-15 01:44:28.968943305 +0000 UTC notAfter=2036-07-12 01:44:28.968943305 +0000 UTC
2026/07/15 02:44:29 [INFO] Listening on :443
2026/07/15 02:44:29 [INFO] certificate CN=dynamic,O=dynamic signed by CN=dynamiclistener-ca@1784083468,O=dynamiclistener-org: notBefore=2026-07-15 01:44:29 +0000 UTC notAfter=2027-07-15 01:44:29 +0000 UTC
2026/07/15 02:44:29 [WARNING] dynamiclistener [::]:443: no cached certificate available for preload - deferring certificate load until storage initialization or first client request
2026/07/15 02:44:29 [INFO] Listening on :80
2026/07/15 02:44:29 [INFO] uploading googlecredentialConfig to credentialconfig schema
2026/07/15 02:44:29 [WARNING] Skipping save of TLS secret for cattle-system/serving-cert due to missing certificate data
2026/07/15 02:44:29 [INFO] Active TLS secret cattle-system/serving-cert (ver=) (count -1): map[]
2026/07/15 02:44:29 [INFO] uploading amazonec2Config to nodeconfig schema
2026/07/15 02:44:29 [INFO] Creating new TLS secret for cattle-system/serving-cert (count: 4): map[listener.cattle.io/cn-127.0.0.1:127.0.0.1 listener.cattle.io/cn-172.17.0.2:172.17.0.2 listener.cattle.io/cn-localhost:localhost listener.cattle.io/cn-rancher.cattle-system:rancher.cattle-system listener.cattle.io/fingerprint:SHA1=33C736BF7A92148C54F77485F22B1593B8B0AF05]
2026/07/15 02:44:29 [INFO] uploading amazonec2Config to nodetemplateconfig schema
2026/07/15 02:44:29 [INFO] Active TLS secret cattle-system/serving-cert (ver=1286) (count 4): map[listener.cattle.io/cn-127.0.0.1:127.0.0.1 listener.cattle.io/cn-172.17.0.2:172.17.0.2 listener.cattle.io/cn-localhost:localhost listener.cattle.io/cn-rancher.cattle-system:rancher.cattle-system listener.cattle.io/fingerprint:SHA1=33C736BF7A92148C54F77485F22B1593B8B0AF05]
2026/07/15 02:44:29 [WARNING] Skipping save of TLS secret for cattle-system/tls-rancher-internal due to missing certificate data
2026/07/15 02:44:29 [INFO] Active TLS secret cattle-system/tls-rancher-internal (ver=) (count -1): map[]
2026/07/15 02:44:29 [INFO] generated self-signed CA certificate CN=dynamiclistener-ca@1784083469,O=dynamiclistener-org: notBefore=2026-07-15 01:44:29.027877986 +0000 UTC notAfter=2036-07-12 01:44:29.027877986 +0000 UTC
2026/07/15 02:44:29 [INFO] Listening on :444
2026/07/15 02:44:29 [INFO] certificate CN=dynamic,O=dynamic signed by CN=dynamiclistener-ca@1784083469,O=dynamiclistener-org: notBefore=2026-07-15 01:44:29 +0000 UTC notAfter=2027-07-15 01:44:29 +0000 UTC
2026/07/15 02:44:29 [WARNING] dynamiclistener [::]:444: no cached certificate available for preload - deferring certificate load until storage initialization or first client request
2026/07/15 02:44:29 [INFO] Creating new TLS secret for cattle-system/tls-rancher-internal (count: 1): map[listener.cattle.io/cn-10.43.15.58:10.43.15.58 listener.cattle.io/fingerprint:SHA1=D6132037C794C540F140207C5B3FB2271FADEA77]
2026/07/15 02:44:29 [INFO] uploading digitaloceanConfig to nodeconfig schema
2026/07/15 02:44:29 [INFO] Active TLS secret cattle-system/tls-rancher-internal (ver=1290) (count 1): map[listener.cattle.io/cn-10.43.15.58:10.43.15.58 listener.cattle.io/fingerprint:SHA1=D6132037C794C540F140207C5B3FB2271FADEA77]
2026/07/15 02:44:29 [INFO] uploading digitaloceanConfig to nodetemplateconfig schema
2026/07/15 02:44:29 [INFO] uploading linodeConfig to nodeconfig schema
2026/07/15 02:44:29 [INFO] Watching metadata for management.cattle.io/v3, Kind=RoleTemplate