mirror of
https://github.com/rancher/rancher-docs.git
synced 2026-09-26 21:18:04 +00:00
31 lines
70 KiB
HTML
31 lines
70 KiB
HTML
<!doctype html>
|
||
<html lang="en" dir="ltr" class="docs-wrapper docs-doc-page docs-version-current plugin-docs plugin-id-default docs-doc-id-getting-started/installation-and-upgrade/installation-references/helm-chart-options" data-has-hydrated="false">
|
||
<head>
|
||
<meta charset="UTF-8">
|
||
<meta name="generator" content="Docusaurus v2.4.3">
|
||
<title data-rh="true">Rancher Helm Chart Options | Rancher</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://ranchermanager.docs.rancher.com/getting-started/installation-and-upgrade/installation-references/helm-chart-options"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Rancher Helm Chart Options | Rancher"><meta data-rh="true" name="description" content="This page is a configuration reference for the Rancher Helm chart."><meta data-rh="true" property="og:description" content="This page is a configuration reference for the Rancher Helm chart."><meta data-rh="true" name="keywords" content="rancher helm chart,rancher helm options,rancher helm chart options,helm chart rancher,helm options rancher,helm chart options rancher"><link data-rh="true" rel="icon" href="/img/favicon.png"><link data-rh="true" rel="alternate" href="https://ranchermanager.docs.rancher.com/getting-started/installation-and-upgrade/installation-references/helm-chart-options" hreflang="en"><link data-rh="true" rel="alternate" href="https://ranchermanager.docs.rancher.com/zh/getting-started/installation-and-upgrade/installation-references/helm-chart-options" hreflang="zh"><link data-rh="true" rel="alternate" href="https://ranchermanager.docs.rancher.com/getting-started/installation-and-upgrade/installation-references/helm-chart-options" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://30NEY6C9UY-dsn.algolia.net" crossorigin="anonymous"><link data-rh="true" rel="canonical" href="https://ranchermanager.docs.rancher.com/getting-started/installation-and-upgrade/installation-references/helm-chart-options"><link rel="preconnect" href="https://www.googletagmanager.com">
|
||
<script>window.dataLayer=window.dataLayer||[]</script>
|
||
<script>!function(e,t,a,n,g){e[n]=e[n]||[],e[n].push({"gtm.start":(new Date).getTime(),event:"gtm.js"});var m=t.getElementsByTagName(a)[0],r=t.createElement(a);r.async=!0,r.src="https://www.googletagmanager.com/gtm.js?id=GTM-57KS2MW",m.parentNode.insertBefore(r,m)}(window,document,"script","dataLayer")</script>
|
||
|
||
|
||
|
||
<link rel="search" type="application/opensearchdescription+xml" title="Rancher" href="/opensearch.xml">
|
||
|
||
|
||
|
||
<script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" charset="UTF-8" data-domain-script="0f98beb0-fc4c-417d-a42e-564e2cae42d2" async></script>
|
||
<script src="/scripts/optanonwrapper.js" async></script><link rel="stylesheet" href="/assets/css/styles.dea80607.css">
|
||
<link rel="preload" href="/assets/js/runtime~main.d98f8a34.js" as="script">
|
||
<link rel="preload" href="/assets/js/main.e9ebdfba.js" as="script">
|
||
</head>
|
||
<body class="navigation-with-keyboard">
|
||
<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-57KS2MW" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
|
||
|
||
|
||
<script>!function(){function t(t){document.documentElement.setAttribute("data-theme",t)}var e=function(){var t=null;try{t=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(t){}return t}()||function(){var t=null;try{t=localStorage.getItem("theme")}catch(t){}return t}();t(null!==e?e:"light")}()</script><div id="__docusaurus">
|
||
<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/rancher-logo-horiz-color.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/rancher-logo-horiz-color.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a><div class="navbar__item dropdown dropdown--hoverable"><a aria-current="page" class="navbar__link active" aria-haspopup="true" aria-expanded="false" role="button" href="/">Latest</a><ul class="dropdown__menu"><li><a aria-current="page" class="dropdown__link dropdown__link--active" href="/getting-started/installation-and-upgrade/installation-references/helm-chart-options">Latest</a></li><li><a class="dropdown__link" href="/v2.9/getting-started/installation-and-upgrade/installation-references/helm-chart-options">v2.9 (Preview)</a></li><li><a class="dropdown__link" href="/v2.8/getting-started/installation-and-upgrade/installation-references/helm-chart-options">v2.8</a></li><li><a class="dropdown__link" href="/v2.7/getting-started/installation-and-upgrade/installation-references/helm-chart-options">v2.7</a></li><li><a class="dropdown__link" href="/v2.6/getting-started/installation-and-upgrade/installation-references/helm-chart-options">v2.6</a></li><li><a class="dropdown__link" href="/v2.5">v2.5</a></li><li><a class="dropdown__link" href="/v2.0-v2.4">v2.0-v2.4</a></li><li><a class="dropdown__link" href="/versions">All versions</a></li></ul></div><div class="navbar__item dropdown dropdown--hoverable"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/getting-started/installation-and-upgrade/installation-references/helm-chart-options" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/getting-started/installation-and-upgrade/installation-references/helm-chart-options" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li></ul></div><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div></div><div class="navbar__items navbar__items--right"><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link">Quick Links</a><ul class="dropdown__menu"><li><a href="https://github.com/rancher/rancher" target="_blank" rel="noopener noreferrer" class="dropdown__link">GitHub<svg width="12" height="12" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPIU"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a></li><li><a href="https://github.com/rancher/rancher-docs" target="_blank" rel="noopener noreferrer" class="dropdown__link">Docs GitHub<svg width="12" height="12" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPIU"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a></li></ul></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link">More from SUSE</a><ul class="dropdown__menu"><li><a href="https://www.rancher.com" target="_blank" rel="noopener noreferrer" class="dropdown__link navbar__icon navbar__rancher">Rancher<svg width="12" height="12" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPIU"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a></li><li><hr style="margin: 0.3rem 0;"></li><li><a href="https://elemental.docs.rancher.com/" target="_blank" rel="noopener noreferrer" class="dropdown__link navbar__icon navbar__elemental">Elemental<svg width="12" height="12" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPIU"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a></li><li><a href="https://fleet.rancher.io/" target="_blank" rel="noopener noreferrer" class="dropdown__link navbar__icon navbar__fleet">Fleet<svg width="12" height="12" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPIU"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a></li><li><a href="https://harvesterhci.io" target="_blank" rel="noopener noreferrer" class="dropdown__link navbar__icon navbar__harvester">Harvester<svg width="12" height="12" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPIU"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a></li><li><a href="https://rancherdesktop.io/" target="_blank" rel="noopener noreferrer" class="dropdown__link navbar__icon navbar__rancher__desktop">Rancher Desktop<svg width="12" height="12" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPIU"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a></li><li><hr style="margin: 0.3rem 0;"></li><li><a href="https://opensource.suse.com" target="_blank" rel="noopener noreferrer" class="dropdown__link navbar__icon navbar__suse">More Projects...<svg width="12" height="12" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPIU"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a></li></ul></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">What is Rancher?</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--sublist-caret menu__link--active" aria-expanded="true" href="/getting-started/overview">Getting Started</a></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/getting-started/overview">Overview</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-2 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/getting-started/quick-start-guides">Quick Start Guides</a><button aria-label="Toggle the collapsible sidebar category 'Quick Start Guides'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-2 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" tabindex="0" href="/getting-started/installation-and-upgrade">Installation and Upgrade</a><button aria-label="Toggle the collapsible sidebar category 'Installation and Upgrade'" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/getting-started/installation-and-upgrade/installation-requirements">Installation Requirements</a><button aria-label="Toggle the collapsible sidebar category 'Installation Requirements'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" tabindex="0" href="/getting-started/installation-and-upgrade/installation-references">Installation References</a><button aria-label="Toggle the collapsible sidebar category 'Installation References'" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-4 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/getting-started/installation-and-upgrade/installation-references/helm-chart-options">Rancher Helm Chart Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-4 menu__list-item"><a class="menu__link" tabindex="0" href="/getting-started/installation-and-upgrade/installation-references/tls-settings">TLS Settings</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-4 menu__list-item"><a class="menu__link" tabindex="0" href="/getting-started/installation-and-upgrade/installation-references/feature-flags">Feature Flags</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster">Install/Upgrade on a Kubernetes Cluster</a><button aria-label="Toggle the collapsible sidebar category 'Install/Upgrade on a Kubernetes Cluster'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/getting-started/installation-and-upgrade/other-installation-methods">Other Installation Methods</a><button aria-label="Toggle the collapsible sidebar category 'Other Installation Methods'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/getting-started/installation-and-upgrade/resources">Resources</a><button aria-label="Toggle the collapsible sidebar category 'Resources'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-3 menu__list-item"><a class="menu__link" tabindex="0" href="/getting-started/installation-and-upgrade/upgrade-and-roll-back-kubernetes">Upgrading and Rolling Back Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-3 menu__list-item"><a class="menu__link" tabindex="0" href="/getting-started/installation-and-upgrade/upgrade-kubernetes-without-upgrading-rancher">Upgrading Kubernetes without Upgrading Rancher</a></li></ul></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--sublist-caret" aria-expanded="false" href="/how-to-guides/new-user-guides">How-to Guides</a></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--sublist-caret" aria-expanded="false" href="/reference-guides/best-practices">Reference Guides</a></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/integrations-in-rancher">Integrations in Rancher</a><button aria-label="Toggle the collapsible sidebar category 'Integrations in Rancher'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--sublist-caret" aria-expanded="false" href="/faq/general-faq">FAQ</a></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--sublist-caret" aria-expanded="false" href="/troubleshooting/general-troubleshooting">Troubleshooting</a></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--sublist-caret" aria-expanded="false" href="/api/quickstart">Rancher Kubernetes API</a></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/contribute-to-rancher">Contributing to Rancher</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/glossary">Glossary</a></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li class="breadcrumbs__item"><span class="breadcrumbs__link">Getting Started</span><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/getting-started/installation-and-upgrade"><span itemprop="name">Installation and Upgrade</span></a><meta itemprop="position" content="2"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/getting-started/installation-and-upgrade/installation-references"><span itemprop="name">Installation References</span></a><meta itemprop="position" content="3"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Rancher Helm Chart Options</span><meta itemprop="position" content="4"></li></ul></nav><span class="theme-doc-version-badge badge badge--secondary">Version: Latest</span><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Rancher Helm Chart Options</h1></header><p>This page is a configuration reference for the Rancher Helm chart.</p><p>For help choosing a Helm chart version, refer to <a href="/getting-started/installation-and-upgrade/resources/choose-a-rancher-version">this page.</a></p><p>For information on enabling experimental features, refer to <a href="/how-to-guides/advanced-user-guides/enable-experimental-features">this page.</a></p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="common-options">Common Options<a href="#common-options" class="hash-link" aria-label="Direct link to Common Options" title="Direct link to Common Options"></a></h2><table><thead><tr><th>Option</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>bootstrapPassword</code></td><td>" "</td><td><code>string</code> - Set the <a href="#bootstrap-password">bootstrap password</a> for the first admin user. After logging in, the admin should reset their password. A randomly generated bootstrap password is used if this value is not set.</td></tr><tr><td><code>hostname</code></td><td>" "</td><td><code>string</code> - the Fully Qualified Domain Name for your Rancher Server</td></tr><tr><td><code>ingress.tls.source</code></td><td>"rancher"</td><td><code>string</code> - Where to get the cert for the ingress. - "rancher, letsEncrypt, secret"</td></tr><tr><td><code>letsEncrypt.email</code></td><td>" "</td><td><code>string</code> - Your email address</td></tr><tr><td><code>letsEncrypt.environment</code></td><td>"production"</td><td><code>string</code> - Valid options: "staging, production"</td></tr><tr><td><code>privateCA</code></td><td>false</td><td><code>bool</code> - Set to true if your cert is signed by a private CA</td></tr></tbody></table><br><h2 class="anchor anchorWithStickyNavbar_LWe7" id="advanced-options">Advanced Options<a href="#advanced-options" class="hash-link" aria-label="Direct link to Advanced Options" title="Direct link to Advanced Options"></a></h2><table><thead><tr><th>Option</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>additionalTrustedCAs</code></td><td>false</td><td><code>bool</code> - See <a href="#additional-trusted-cas">Additional Trusted CAs</a></td></tr><tr><td><code>addLocal</code></td><td>"true"</td><td><code>string</code> - Have Rancher detect and import the "local" (upstream) Rancher server cluster. <em>Note: This option is no longer available in v2.5.0. Consider using the <code>restrictedAdmin</code> option to prevent users from modifying the local cluster.</em></td></tr><tr><td><code>antiAffinity</code></td><td>"preferred"</td><td><code>string</code> - AntiAffinity rule for Rancher pods - "preferred, required"</td></tr><tr><td><code>auditLog.destination</code></td><td>"sidecar"</td><td><code>string</code> - Stream to sidecar container console or hostPath volume - "sidecar, hostPath"</td></tr><tr><td><code>auditLog.hostPath</code></td><td>"/var/log/rancher/audit"</td><td><code>string</code> - log file destination on host (only applies when <code>auditLog.destination</code> is set to <code>hostPath</code>)</td></tr><tr><td><code>auditLog.level</code></td><td>0</td><td><code>int</code> - set the <a href="/how-to-guides/advanced-user-guides/enable-api-audit-log">API Audit Log</a> level. 0 is off. <!-- -->[0-3]</td></tr><tr><td><code>auditLog.maxAge</code></td><td>1</td><td><code>int</code> - maximum number of days to retain old audit log files (only applies when <code>auditLog.destination</code> is set to <code>hostPath</code>)</td></tr><tr><td><code>auditLog.maxBackup</code></td><td>1</td><td><code>int</code> - maximum number of audit log files to retain (only applies when <code>auditLog.destination</code> is set to <code>hostPath</code>)</td></tr><tr><td><code>auditLog.maxSize</code></td><td>100</td><td><code>int</code> - maximum size in megabytes of the audit log file before it gets rotated (only applies when <code>auditLog.destination</code> is set to <code>hostPath</code>)</td></tr><tr><td><code>auditLog.image.repository</code></td><td>"registry.suse.com/bci/bci-micro"</td><td><code>string</code> - Location for the image used to collect audit logs.</td></tr><tr><td><code>auditLog.image.tag</code></td><td>"15.4.14.3"</td><td><code>string</code> - Tag for the image used to collect audit logs.</td></tr><tr><td><code>auditLog.image.pullPolicy</code></td><td>"IfNotPresent"</td><td><code>string</code> - Override imagePullPolicy for auditLog images - "Always", "Never", "IfNotPresent".</td></tr><tr><td><code>busyboxImage</code></td><td>""</td><td><code>string</code> - Image location for busybox image used to collect audit logs. <em>Note: This option is deprecated use <code>auditLog.image.repository</code> to control auditing sidecar image.</em></td></tr><tr><td><code>certmanager.version</code></td><td>""</td><td><code>string</code> - set cert-manager compatibility</td></tr><tr><td><code>debug</code></td><td>false</td><td><code>bool</code> - set debug flag on rancher server</td></tr><tr><td><code>extraEnv</code></td><td>[]</td><td><code>list</code> - set additional environment variables for Rancher</td></tr><tr><td><code>imagePullSecrets</code></td><td>[]</td><td><code>list</code> - list of names of Secret resource containing private registry credentials</td></tr><tr><td><code>ingress.configurationSnippet</code></td><td>""</td><td><code>string</code> - additional Nginx configuration. Can be used for proxy configuration.</td></tr><tr><td><code>ingress.extraAnnotations</code></td><td>{}</td><td><code>map</code> - additional annotations to customize the ingress</td></tr><tr><td><code>ingress.enabled</code></td><td>true</td><td>When set to false, Helm will not install a Rancher ingress. Set the option to false to deploy your own ingress.</td></tr><tr><td><code>letsEncrypt.ingress.class</code></td><td>""</td><td><code>string</code> - optional ingress class for the cert-manager acmesolver ingress that responds to the Let's Encrypt ACME challenges. Options: traefik, nginx.</td></tr><tr><td><code>noProxy</code></td><td>"127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,.svc,.cluster.local,cattle-system.svc"</td><td><code>string</code> - comma separated list of hostnames or ip address not to use the proxy</td></tr><tr><td><code>proxy</code></td><td>""</td><td><code>string</code> - HTTP<!-- -->[S]<!-- --> proxy server for Rancher</td></tr><tr><td><code>rancherImage</code></td><td>"rancher/rancher"</td><td><code>string</code> - rancher image source</td></tr><tr><td><code>rancherImagePullPolicy</code></td><td>"IfNotPresent"</td><td><code>string</code> - Override imagePullPolicy for rancher server images - "Always", "Never", "IfNotPresent"</td></tr><tr><td><code>rancherImageTag</code></td><td>same as chart version</td><td><code>string</code> - rancher/rancher image tag</td></tr><tr><td><code>replicas</code></td><td>3</td><td><code>int</code> - Number of Rancher server replicas. Setting to -1 will dynamically choose 1, 2, or 3 based on the number of available nodes in the cluster.</td></tr><tr><td><code>resources</code></td><td>{}</td><td><code>map</code> - rancher pod resource requests & limits</td></tr><tr><td><code>restrictedAdmin</code></td><td><code>false</code></td><td><code>bool</code> - When this option is set to <code>true</code>, the initial Rancher user has restricted access to the local Kubernetes cluster to prevent privilege escalation. For more information, see the section about the <a href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions#restricted-admin">restricted-admin role</a>.</td></tr><tr><td><code>systemDefaultRegistry</code></td><td>""</td><td><code>string</code> - private registry to be used for all system container images, e.g., <a href="http://registry.example.com/" target="_blank" rel="noopener noreferrer">http://registry.example.com/</a></td></tr><tr><td><code>tls</code></td><td>"ingress"</td><td><code>string</code> - See <a href="#external-tls-termination">External TLS Termination</a> for details. - "ingress, external"</td></tr><tr><td><code>useBundledSystemChart</code></td><td><code>false</code></td><td><code>bool</code> - select to use the system-charts packaged with Rancher server. This option is used for air gapped installations.</td></tr><tr><td><code>global.cattle.psp.enabled</code></td><td><code>true</code></td><td><code>bool</code> - select 'false' to disable PSPs for Kubernetes v1.25 and above when using Rancher v2.7.2-v2.7.4. When using Rancher v2.7.5 and above, Rancher attempts to detect if a cluster is running a Kubernetes version where PSPs are not supported, and will default it's usage of PSPs to false if it can determine that PSPs are not supported in the cluster. Users can still manually override this by explicitly providing <code>true</code> or <code>false</code> for this value. Rancher will still use PSPs by default in clusters which support PSPs (such as clusters running Kubernetes v1.24 or lower).</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="bootstrap-password">Bootstrap Password<a href="#bootstrap-password" class="hash-link" aria-label="Direct link to Bootstrap Password" title="Direct link to Bootstrap Password"></a></h3><p>You can <a href="/getting-started/installation-and-upgrade/resources/bootstrap-password">set a specific bootstrap password</a> during Rancher installation. If you don't set a specific bootstrap password, Rancher randomly generates a password for the first admin account.</p><p>When you log in for the first time, use the bootstrap password you set to log in. If you did not set a bootstrap password, the Rancher UI shows commands that can be used to <a href="/getting-started/installation-and-upgrade/resources/bootstrap-password#retrieving-the-bootstrap-password">retrieve the bootstrap password</a>. Run those commands and log in to the account. After you log in for the first time, you are asked to reset the admin password.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="api-audit-log">API Audit Log<a href="#api-audit-log" class="hash-link" aria-label="Direct link to API Audit Log" title="Direct link to API Audit Log"></a></h3><p>Enabling the <a href="/how-to-guides/advanced-user-guides/enable-api-audit-log">API Audit Log</a>.</p><p>You can collect this log as you would any container log. Enable <a href="/integrations-in-rancher/logging">logging</a> for the <code>System</code> Project on the Rancher server cluster.</p><div class="language-plain codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-plain codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--set auditLog.level=1</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>By default enabling Audit Logging will create a sidecar container in the Rancher pod. This container (<code>rancher-audit-log</code>) will stream the log to <code>stdout</code>. You can collect this log as you would any container log. When using the sidecar as the audit log destination, the <code>hostPath</code>, <code>maxAge</code>, <code>maxBackups</code>, and <code>maxSize</code> options do not apply. It's advised to use your OS or Docker daemon's log rotation features to control disk space use. Enable <a href="/integrations-in-rancher/logging">logging</a> for the Rancher server cluster or System Project.</p><p>Set the <code>auditLog.destination</code> to <code>hostPath</code> to forward logs to volume shared with the host system instead of streaming to a sidecar container. When setting the destination to <code>hostPath</code> you may want to adjust the other auditLog parameters for log rotation.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="setting-extra-environment-variables">Setting Extra Environment Variables<a href="#setting-extra-environment-variables" class="hash-link" aria-label="Direct link to Setting Extra Environment Variables" title="Direct link to Setting Extra Environment Variables"></a></h3><p>You can set extra environment variables for Rancher server using <code>extraEnv</code>. This list is passed to the Rancher deployment in its YAML format. It is embedded under <code>env</code> for the Rancher container. Refer to the Kubernetes documentation for setting container environment variables, <code>extraEnv</code> can use any of the keys referenced in <a href="https://kubernetes.io/docs/tasks/inject-data-application/define-environment-variable-container/#define-an-environment-variable-for-a-container" target="_blank" rel="noopener noreferrer">Define Environment Variables for a Container</a>.</p><p>Consider an example that uses the <code>name</code> and <code>value</code> keys:</p><div class="language-plain codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-plain codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--set 'extraEnv[0].name=CATTLE_TLS_MIN_VERSION'</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">--set 'extraEnv[0].value=1.0'</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If passing sensitive data as the value for an environment variable, such as proxy authentication credentials, it is strongly recommended that a secret reference is used. This will prevent sensitive data from being exposed in Helm or the Rancher deployment.</p><p>Consider an example that uses the <code>name</code>, <code>valueFrom.secretKeyRef.name</code>, and <code>valueFrom.secretKeyRef.key</code> keys. See example in <a href="#http-proxy">HTTP Proxy</a></p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="tls-settings">TLS Settings<a href="#tls-settings" class="hash-link" aria-label="Direct link to TLS Settings" title="Direct link to TLS Settings"></a></h3><p>When you install Rancher inside of a Kubernetes cluster, TLS is offloaded at the cluster's ingress controller. The possible TLS settings depend on the used ingress controller.</p><p>See <a href="/getting-started/installation-and-upgrade/installation-references/tls-settings">TLS settings</a> for more information and options.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="import-local-cluster">Import <code>local</code> Cluster<a href="#import-local-cluster" class="hash-link" aria-label="Direct link to import-local-cluster" title="Direct link to import-local-cluster"></a></h3><p>By default Rancher server will detect and import the <code>local</code> cluster it's running on. User with access to the <code>local</code> cluster will essentially have "root" access to all the clusters managed by Rancher server.</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>caution</div><div class="admonitionContent_S0QG"><p>If you turn addLocal off, most Rancher v2.5 features won't work, including the EKS provisioner.</p></div></div><p>If this is a concern in your environment you can set this option to "false" on your initial install.</p><p>This option is only effective on the initial Rancher install. See <a href="https://github.com/rancher/rancher/issues/16522" target="_blank" rel="noopener noreferrer">Issue 16522</a> for more information.</p><div class="language-plain codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-plain codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--set addLocal="false"</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="customizing-your-ingress">Customizing your Ingress<a href="#customizing-your-ingress" class="hash-link" aria-label="Direct link to Customizing your Ingress" title="Direct link to Customizing your Ingress"></a></h3><p>To customize or use a different ingress with Rancher server you can set your own Ingress annotations.</p><p>Example on setting a custom certificate issuer:</p><div class="language-plain codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-plain codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--set ingress.extraAnnotations.'cert-manager\.io/cluster-issuer'=issuer-name</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Example on setting a static proxy header with <code>ingress.configurationSnippet</code>. This value is parsed like a template so variables can be used.</p><div class="language-plain codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-plain codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--set ingress.configurationSnippet='more_set_input_headers X-Forwarded-Host {{ .Values.hostname }};'</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="http-proxy">HTTP Proxy<a href="#http-proxy" class="hash-link" aria-label="Direct link to HTTP Proxy" title="Direct link to HTTP Proxy"></a></h3><p>Rancher requires internet access for some functionality (Helm charts). Use <code>proxy</code> to set your proxy server or use <code>extraEnv</code> to set the <code>HTTPS_PROXY</code> environment variable to point to your proxy server.</p><p>Add your IP exceptions to the <code>noProxy</code> chart value as a comma separated list. Make sure you add the following values:</p><ul><li>Pod cluster IP range (default: <code>10.42.0.0/16</code>).</li><li>Service cluster IP range (default: <code>10.43.0.0/16</code>).</li><li>Internal cluster domains (default: <code>.svc,.cluster.local</code>).</li><li>Any worker cluster <code>controlplane</code> nodes.
|
||
Rancher supports CIDR notation ranges in this list.</li></ul><p>When not including sensitive data, the <code>proxy</code> or <code>extraEnv</code> chart options can be used. When using <code>extraEnv</code> the <code>noProxy</code> Helm option is ignored. Therefore, the <code>NO_PROXY</code> environment variable must also be set with <code>extraEnv</code>.</p><p>The following is an example of setting proxy using the <code>proxy</code> chart option:</p><div class="language-plain codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-plain codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--set proxy="http://<proxy_url:proxy_port>/"</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Example of setting proxy using the <code>extraEnv</code> chart option:</p><div class="language-plain codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-plain codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--set extraEnv[1].name=HTTPS_PROXY</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">--set extraEnv[1].value="http://<proxy_url>:<proxy_port>/"</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">--set extraEnv[2].name=NO_PROXY</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">--set extraEnv[2].value="127.0.0.0/8\,10.0.0.0/8\,172.16.0.0/12\,192.168.0.0/16\,.svc\,.cluster.local"</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>When including sensitive data, such as proxy authentication credentials, use the <code>extraEnv</code> option with <code>valueFrom.secretRef</code> to prevent sensitive data from being exposed in Helm or the Rancher deployment.</p><p>The following is an example of using <code>extraEnv</code> to configure proxy. This example secret would contain the value <code>"http://<username>:<password>@<proxy_url>:<proxy_port>/"</code> in the secret's <code>"https-proxy-url"</code> key:</p><div class="language-plain codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-plain codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--set extraEnv[1].name=HTTPS_PROXY</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">--set extraEnv[1].valueFrom.secretKeyRef.name=secret-name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">--set extraEnv[1].valueFrom.secretKeyRef.key=https-proxy-url</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">--set extraEnv[2].name=NO_PROXY</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">--set extraEnv[2].value="127.0.0.0/8\,10.0.0.0/8\,172.16.0.0/12\,192.168.0.0/16\,.svc\,.cluster.local"</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>To learn more about how to configure environment variables, refer to <a href="https://kubernetes.io/docs/tasks/inject-data-application/define-environment-variable-container/#define-an-environment-variable-for-a-container" target="_blank" rel="noopener noreferrer">Define Environment Variables for a Container</a>.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="additional-trusted-cas">Additional Trusted CAs<a href="#additional-trusted-cas" class="hash-link" aria-label="Direct link to Additional Trusted CAs" title="Direct link to Additional Trusted CAs"></a></h3><p>If you have private registries, catalogs or a proxy that intercepts certificates, you may need to add more trusted CAs to Rancher.</p><div class="language-plain codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-plain codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--set additionalTrustedCAs=true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Once the Rancher deployment is created, copy your CA certs in pem format into a file named <code>ca-additional.pem</code> and use <code>kubectl</code> to create the <code>tls-ca-additional</code> secret in the <code>cattle-system</code> namespace.</p><div class="language-plain codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-plain codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl -n cattle-system create secret generic tls-ca-additional --from-file=ca-additional.pem=./ca-additional.pem</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="private-registry-and-air-gap-installs">Private Registry and Air Gap Installs<a href="#private-registry-and-air-gap-installs" class="hash-link" aria-label="Direct link to Private Registry and Air Gap Installs" title="Direct link to Private Registry and Air Gap Installs"></a></h3><p>For details on installing Rancher with a private registry, see the <a href="/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install">air gap installation docs.</a></p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="external-tls-termination">External TLS Termination<a href="#external-tls-termination" class="hash-link" aria-label="Direct link to External TLS Termination" title="Direct link to External TLS Termination"></a></h2><p>We recommend configuring your load balancer as a Layer 4 balancer, forwarding plain 80/tcp and 443/tcp to the Rancher Management cluster nodes. The Ingress Controller on the cluster will redirect http traffic on port 80 to https on port 443.</p><p>You may terminate the SSL/TLS on a L7 load balancer external to the Rancher cluster (ingress). Use the <code>--set tls=external</code> option and point your load balancer at port http 80 on all of the Rancher cluster nodes. This will expose the Rancher interface on http port 80. Be aware that clients that are allowed to connect directly to the Rancher cluster will not be encrypted. If you choose to do this we recommend that you restrict direct access at the network level to just your load balancer.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>If you are using a Private CA signed certificate, add <code>--set privateCA=true</code> and see <a href="/getting-started/installation-and-upgrade/resources/add-tls-secrets">Adding TLS Secrets - Using a Private CA Signed Certificate</a> to add the CA cert for Rancher.</p></div></div><p>Your load balancer must support long lived websocket connections and will need to insert proxy headers so Rancher can route links correctly.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="configuring-ingress-for-external-tls-when-using-nginx-v025">Configuring Ingress for External TLS when Using NGINX v0.25<a href="#configuring-ingress-for-external-tls-when-using-nginx-v025" class="hash-link" aria-label="Direct link to Configuring Ingress for External TLS when Using NGINX v0.25" title="Direct link to Configuring Ingress for External TLS when Using NGINX v0.25"></a></h3><p>In NGINX v0.25, the behavior of NGINX has <a href="https://github.com/kubernetes/ingress-nginx/blob/master/Changelog.md#0220" target="_blank" rel="noopener noreferrer">changed</a> regarding forwarding headers and external TLS termination. Therefore, in the scenario that you are using external TLS termination configuration with NGINX v0.25, you must edit the <code>cluster.yml</code> to enable the <code>use-forwarded-headers</code> option for ingress:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> </span><span class="token key atrule">provider</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> nginx</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> </span><span class="token key atrule">options</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> </span><span class="token key atrule">use-forwarded-headers</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">'true'</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="required-headers">Required Headers<a href="#required-headers" class="hash-link" aria-label="Direct link to Required Headers" title="Direct link to Required Headers"></a></h3><ul><li><code>Host</code></li><li><code>X-Forwarded-Proto</code></li><li><code>X-Forwarded-Port</code></li><li><code>X-Forwarded-For</code></li></ul><h3 class="anchor anchorWithStickyNavbar_LWe7" id="recommended-timeouts">Recommended Timeouts<a href="#recommended-timeouts" class="hash-link" aria-label="Direct link to Recommended Timeouts" title="Direct link to Recommended Timeouts"></a></h3><ul><li>Read Timeout: <code>1800 seconds</code></li><li>Write Timeout: <code>1800 seconds</code></li><li>Connect Timeout: <code>30 seconds</code></li></ul><h3 class="anchor anchorWithStickyNavbar_LWe7" id="health-checks">Health Checks<a href="#health-checks" class="hash-link" aria-label="Direct link to Health Checks" title="Direct link to Health Checks"></a></h3><p>Rancher will respond <code>200</code> to health checks on the <code>/healthz</code> endpoint.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="example-nginx-config">Example NGINX config<a href="#example-nginx-config" class="hash-link" aria-label="Direct link to Example NGINX config" title="Direct link to Example NGINX config"></a></h3><p>This NGINX configuration is tested on NGINX 1.14.</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>caution</div><div class="admonitionContent_S0QG"><p>This NGINX configuration is only an example and may not suit your environment. For complete documentation, see <a href="https://docs.nginx.com/nginx/admin-guide/load-balancer/http-load-balancer/" target="_blank" rel="noopener noreferrer">NGINX Load Balancing - HTTP Load Balancing</a>.</p></div></div><ul><li>Replace <code>IP_NODE1</code>, <code>IP_NODE2</code> and <code>IP_NODE3</code> with the IP addresses of the nodes in your cluster.</li><li>Replace both occurrences of <code>FQDN</code> to the DNS name for Rancher.</li><li>Replace <code>/certs/fullchain.pem</code> and <code>/certs/privkey.pem</code> to the location of the server certificate and the server certificate key respectively.</li></ul><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">worker_processes 4;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">worker_rlimit_nofile 40000;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">events {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> worker_connections 8192;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">}</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">http {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> upstream rancher {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> server IP_NODE_1:80;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> server IP_NODE_2:80;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> server IP_NODE_3:80;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> }</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> map $http_upgrade $connection_upgrade {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> default Upgrade;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> '' close;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> }</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> server {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> listen 443 ssl http2;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> server_name FQDN;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> ssl_certificate /certs/fullchain.pem;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> ssl_certificate_key /certs/privkey.pem;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> location / {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> proxy_set_header Host $host;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> proxy_set_header X-Forwarded-Proto $scheme;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> proxy_set_header X-Forwarded-Port $server_port;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> proxy_pass http://rancher;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> proxy_http_version 1.1;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> proxy_set_header Upgrade $http_upgrade;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> proxy_set_header Connection $connection_upgrade;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> # This allows the ability for the execute shell window to remain open for up to 15 minutes. Without this parameter, the default is 1 minute and will automatically close.</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> proxy_read_timeout 900s;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> proxy_buffering off;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> }</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> }</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> server {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> listen 80;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> server_name FQDN;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> return 301 https://$server_name$request_uri;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> }</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">}</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/rancher/rancher-docs/edit/main/docs/getting-started/installation-and-upgrade/installation-references/helm-chart-options.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2024-04-15T18:15:35.000Z">Apr 15, 2024</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/getting-started/installation-and-upgrade/installation-references"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Installation References</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/getting-started/installation-and-upgrade/installation-references/tls-settings"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">TLS Settings</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#common-options" class="table-of-contents__link toc-highlight">Common Options</a></li><li><a href="#advanced-options" class="table-of-contents__link toc-highlight">Advanced Options</a><ul><li><a href="#bootstrap-password" class="table-of-contents__link toc-highlight">Bootstrap Password</a></li><li><a href="#api-audit-log" class="table-of-contents__link toc-highlight">API Audit Log</a></li><li><a href="#setting-extra-environment-variables" class="table-of-contents__link toc-highlight">Setting Extra Environment Variables</a></li><li><a href="#tls-settings" class="table-of-contents__link toc-highlight">TLS Settings</a></li><li><a href="#import-local-cluster" class="table-of-contents__link toc-highlight">Import <code>local</code> Cluster</a></li><li><a href="#customizing-your-ingress" class="table-of-contents__link toc-highlight">Customizing your Ingress</a></li><li><a href="#http-proxy" class="table-of-contents__link toc-highlight">HTTP Proxy</a></li><li><a href="#additional-trusted-cas" class="table-of-contents__link toc-highlight">Additional Trusted CAs</a></li><li><a href="#private-registry-and-air-gap-installs" class="table-of-contents__link toc-highlight">Private Registry and Air Gap Installs</a></li></ul></li><li><a href="#external-tls-termination" class="table-of-contents__link toc-highlight">External TLS Termination</a><ul><li><a href="#configuring-ingress-for-external-tls-when-using-nginx-v025" class="table-of-contents__link toc-highlight">Configuring Ingress for External TLS when Using NGINX v0.25</a></li><li><a href="#required-headers" class="table-of-contents__link toc-highlight">Required Headers</a></li><li><a href="#recommended-timeouts" class="table-of-contents__link toc-highlight">Recommended Timeouts</a></li><li><a href="#health-checks" class="table-of-contents__link toc-highlight">Health Checks</a></li><li><a href="#example-nginx-config" class="table-of-contents__link toc-highlight">Example NGINX config</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2024 SUSE Rancher. All Rights Reserved.</div></div></div></footer></div>
|
||
<script src="/assets/js/runtime~main.d98f8a34.js"></script>
|
||
<script src="/assets/js/main.e9ebdfba.js"></script>
|
||
</body>
|
||
</html> |