Removing nginx-ingress, updating some phrasing regarding Traefik Ingress usage.

Signed-off-by: Sunil Singh <sunil.singh@suse.com>
This commit is contained in:
Sunil Singh
2026-03-17 15:54:04 -07:00
parent 2386faad52
commit 946b9fc10a
60 changed files with 324 additions and 696 deletions
@@ -9,7 +9,7 @@ title: Rancher Server Kubernetes 集群的问题排查
故障排除主要针对以下 3 个命名空间中的对象:
- `cattle-system`:`rancher` deployment 和 Pod。
- `ingress-nginx`:Ingress Controller Pod 和 services。
- `traefik`:Ingress Controller Pod 和 services。
- `cert-manager`:`cert-manager` Pod。
## "default backend - 404"
@@ -117,14 +117,12 @@ Events:
kubectl -n cattle-system describe ingress
```
如果 Ingress 对象已就绪,但是 SSL 仍然无法正常工作,你的证书或密文的格式可能不正确。
If its ready and the SSL is still not working you may have a malformed cert or secret.
这种情况下,请检查 nginx-ingress-controller 的日志。nginx-ingress-controller 的 Pod 中有多个容器,因此你需要指定容器的名称:
Check the `traefik` logs.
```
kubectl -n ingress-nginx logs -f nginx-ingress-controller-rfjrq nginx-ingress-controller
...
W0705 23:04:58.240571 7 backend_ssl.go:49] error obtaining PEM from secret cattle-system/tls-rancher-ingress: error retrieving secret cattle-system/tls-rancher-ingress: secret cattle-system/tls-rancher-ingress was not found
kubectl -n traefik logs
```
## 没有匹配的 "Issuer"
@@ -144,7 +142,7 @@ Error: validation failed: unable to recognize "": no matches for kind "Issuer" i
解决网络问题后,`canal` Pod 会超时并重启以建立连接。
## nginx-ingress-controller Pod 显示 RESTARTS
## Traefik Pod 显示 RESTARTS
此问题的最常见原因是 `canal` pod 未能建立覆盖网络。参见 [canal Pod 显示 READY `2/3`](#canal-pod-显示-ready-23) 进行排查。
@@ -6,10 +6,7 @@ title: TLS 设置
## 在高可用 Kubernetes 集群中运行 Rancher
当你在 Kubernetes 集群内安装 Rancher 时,TLS 会在集群的 Ingress Controller 上卸载。可用的 TLS 设置取决于使用的 Ingress Controller:
* nginx-ingress-controller(RKE1 和 RKE2 默认):[默认的 TLS 版本和密码](https://kubernetes.github.io/ingress-nginx/user-guide/tls/#default-tls-version-and-ciphers)。
* traefik(K3s 默认):[TLS 选项](https://doc.traefik.io/traefik/https/tls/#tls-options)。
When you install a Rancher managed Kubernetes cluster, TLS is offloaded at the cluster's ingress controller. Traefik is the default ingress for K3s and can be used with RKE2, refer to [TLS Options](https://doc.traefik.io/traefik/https/tls/#tls-options) for further information.
## 在单个 Docker 容器中运行 Rancher