-
Notifications
You must be signed in to change notification settings - Fork 3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[GKE] Error when upgrading GKEv1 cluster to 1.19 #32312
Comments
The message is probably form Google API so maybe a note in doc would be nice. |
This issue is reproduced on a Steps: Result: Upgrades to k8s version |
This is not an issue with Rancher, but is something that should be documented in Rancher. If a user disables basic authentication with GCP (https://cloud.google.com/kubernetes-engine/docs/how-to/api-server-authentication#disabling_authentication_with_a_static_password), then the upgrade will be successful. In addition, if a user tries to upgrade a GKE cluster and gets this error, they should be able to disable basic authentication in GCP and Rancher will continue with the upgrade successfully. |
Thanks. Closing |
What kind of request is this (question/bug/enhancement/feature request): bug
Steps to reproduce (least amount of steps as possible):
1.18.17-gke.700
which will be upgraded later1.19.9-gke.1400
from dropdown and press Save+DoneResult:
Googleapi: Error 400: Basic authentication was removed for GKE cluster versions >= 1.19. The cluster cannot be upgraded until basic authentication is disabled. To disable basic authentication use: `gcloud container clusters upgrade c-4m97d --no-enable-basic-auth`. Instructions for choosing a new method can be found at: https://cloud.google.com/kubernetes-engine/docs/how-to/api-server-authentication., badRequest
but the command
gcloud container clusters upgrade c-4m97d --no-enable-basic-auth
is incorrect.According to my findings and tests the command should be
gcloud container clusters update c-4m97d --no-enable-basic-auth --zone us-central1-f
so notupgradebut update and also zone/region option is mandatory.Other details that may be helpful:
Not sure if it is needed but I run also following commands before in Google Shell console:
Environment information
rancher/rancher
/rancher/server
image tag or shown bottom left in the UI): 2.5.7 -> 2.5.8-rc9Cluster information
kubectl version
): see in descriptionThe text was updated successfully, but these errors were encountered: