Page Not Found
We could not find what you were looking for.
Please contact the owner of the site that linked you to the original URL and let them know their link is broken.
We could not find what you were looking for.
Please contact the owner of the site that linked you to the original URL and let them know their link is broken.
registries.yaml configuration (RKE2/k3s)",id:"manual-registriesyaml-configuration-rke2k3s",level:3},{value:"Reverting Rancher Chart",id:"reverting-rancher-chart",level:3}];function d(e){const r={a:"a",code:"code",h1:"h1",h2:"h2",h3:"h3",h4:"h4",li:"li",ol:"ol",p:"p",pre:"pre",strong:"strong",...(0,t.R)(),...e.components};return(0,s.jsxs)(s.Fragment,{children:[(0,s.jsx)(r.h1,{id:"rancher-manager-uninstall",children:"Rancher Manager Uninstall"}),"\n",(0,s.jsx)(r.p,{children:"This page will walk you through how to uninstall Carbide Registry Images from Rancher Manager both for its own components and downstream Rancher Kubernetes clusters (RKE2/K3s)."}),"\n",(0,s.jsx)(r.h2,{id:"reverting-cert-manager",children:"Reverting Cert Manager"}),"\n",(0,s.jsx)(r.p,{children:"As Rancher has a dependency on Cert Manager, you'll need to update your Helm install of Cert Manager to use the default images."}),"\n",(0,s.jsx)(r.h3,{id:"using-your-own-registry",children:"Using Your Own Registry"}),"\n",(0,s.jsxs)(r.p,{children:["If using your own registry, you simply need to ",(0,s.jsx)(r.a,{href:"https://ranchermanager.docs.rancher.com/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images#2-collect-the-cert-manager-image",children:"collect"})," the necessary images for cert-manager and overwrite those images in your registry."]}),"\n",(0,s.jsx)(r.p,{children:"As pods cycle, the new image should propagate across the cluster."}),"\n",(0,s.jsx)(r.h3,{id:"using-docker-hub-images",children:"Using Docker Hub Images"}),"\n",(0,s.jsx)(r.p,{children:"If you want to go back to using Docker Hub images directly, you'll need to upgrade the cert-manager installation to revert pointing to the private registry hosting the Carbide images:"}),"\n",(0,s.jsx)(r.pre,{children:(0,s.jsx)(r.code,{className:"language-bash",children:"helm install cert-manager jetstack/cert-manager \\\n --namespace cert-manager \\\n --create-namespace \\\n --version v1.7.1\n"})}),"\n",(0,s.jsx)(r.h2,{id:"registry-auth-scenarios",children:"Registry Auth Scenarios"}),"\n",(0,s.jsx)(r.h3,{id:"global-registry",children:"Global Registry"}),"\n",(0,s.jsx)(r.h4,{id:"uninstall-carbide-images-on-rancher-private-registry",children:"Uninstall Carbide Images on Rancher (Private Registry)"}),"\n",(0,s.jsx)(r.p,{children:"If using your own registry, you simply need to collect the necessary images for Rancher and overwrite those images in your registry."}),"\n",(0,s.jsx)(r.p,{children:"As pods cycle, the new image should propagate across the cluster."}),"\n",(0,s.jsx)(r.h4,{id:"uninstall-carbide-images-on-rancher-docker-hub",children:"Uninstall Carbide Images on Rancher (Docker Hub)"}),"\n",(0,s.jsx)(r.p,{children:"If wanting to use upgrade Docker Hub images for Rancher:"}),"\n",(0,s.jsxs)(r.ol,{children:["\n",(0,s.jsx)(r.li,{children:"Log into Rancher and configure the default administrator password."}),"\n",(0,s.jsxs)(r.li,{children:["Click ",(0,s.jsx)(r.strong,{children:"\u2630 > Global Settings"}),"."]}),"\n",(0,s.jsxs)(r.li,{children:["Go to the setting called ",(0,s.jsx)(r.code,{children:"system-default-registry"})," and choose ",(0,s.jsx)(r.strong,{children:"\u22ee > Edit Setting"}),"."]}),"\n",(0,s.jsxs)(r.li,{children:["Click the ",(0,s.jsx)(r.code,{children:"Use the default value"})," button."]}),"\n"]}),"\n",(0,s.jsxs)(r.p,{children:[(0,s.jsx)(r.strong,{children:"Result:"})," Rancher will use your private registry to pull system images."]}),"\n",(0,s.jsx)(r.h4,{id:"reverting-downstream-clusters-to-use-dockerhub-images",children:"Reverting Downstream Clusters to use DockerHub Images"}),"\n",(0,s.jsx)(r.p,{children:"If you want to revert downstream RKE2/K3s clusters to use DockerHub images:"}),"\n",(0,s.jsxs)(r.ol,{children:["\n",(0,s.jsxs)(r.li,{children:["Click ",(0,s.jsx)(r.strong,{children:"\u2630 > Cluster Management"}),"."]}),"\n",(0,s.jsxs)(r.li,{children:["On the ",(0,s.jsx)(r.strong,{children:"Clusters"})," page, select the 3-dot button to the right for downstream cluster you'd like to revert, and select ",(0,s.jsx)(r.strong,{children:"Edit Config"}),"."]}),"\n",(0,s.jsx)(r.li,{children:"."}),"\n",(0,s.jsxs)(r.li,{children:["In the ",(0,s.jsx)(r.strong,{children:"Cluster Configuration"})," go to the ",(0,s.jsx)(r.strong,{children:"Registries"})," tab and click ",(0,s.jsx)(r.strong,{children:"Use default global registry for Rancher System Container Images"}),"."]}),"\n",(0,s.jsxs)(r.li,{children:["Click ",(0,s.jsx)(r.strong,{children:"Save"}),"."]}),"\n"]}),"\n",(0,s.jsxs)(r.p,{children:[(0,s.jsx)(r.strong,{children:"Result:"})," The cluster will update nodepools to use DockerHub images."]}),"\n",(0,s.jsxs)(r.h3,{id:"manual-registriesyaml-configuration-rke2k3s",children:["Manual ",(0,s.jsx)(r.code,{children:"registries.yaml"})," configuration (",(0,s.jsx)(r.code,{children:"RKE2"}),"/",(0,s.jsx)(r.code,{children:"k3s"}),")"]}),"\n",(0,s.jsxs)(r.p,{children:["See the ",(0,s.jsx)(r.a,{href:"/carbide-docs/docs/registry-docs/uninstall-kubernetes",children:"RKE2/K3s Uninstall"})," documentation."]}),"\n",(0,s.jsxs)(r.h3,{id:"reverting-rancher-chart",children:["Reverting ",(0,s.jsx)(r.code,{children:"Rancher"})," Chart"]}),"\n",(0,s.jsxs)(r.p,{children:["Follow Rancher's ",(0,s.jsx)(r.a,{href:"https://rancher.com/docs/rancher/v2.7/en/installation/install-rancher-on-k8s",children:"Installation Guide"}),", you can revert to using DockerHub images by removing values from the Helm upgrade command."]}),"\n",(0,s.jsx)(r.pre,{children:(0,s.jsx)(r.code,{className:"language-bash",children:"helm upgrade rancher rancher-latest/rancher \\\n --namespace cattle-system \\\n --set hostname=rancher.my.org \\\n --set replicas=3\n"})})]})}function h(e={}){const{wrapper:r}={...(0,t.R)(),...e.components};return r?(0,s.jsx)(r,{...e,children:(0,s.jsx)(d,{...e})}):d(e)}},8453:(e,r,n)=>{n.d(r,{R:()=>i,x:()=>l});var s=n(6540);const t={},a=s.createContext(t);function i(e){const r=s.useContext(a);return s.useMemo((function(){return"function"==typeof e?e(r):{...r,...e}}),[r,e])}function l(e){let r;return r=e.disableParentContext?"function"==typeof e.components?e.components(t):e.components||t:i(e.components),s.createElement(a.Provider,{value:r},e.children)}}}]);
\ No newline at end of file
diff --git a/assets/js/09127693.b2e33581.js b/assets/js/09127693.b2e33581.js
new file mode 100644
index 0000000..b4b2282
--- /dev/null
+++ b/assets/js/09127693.b2e33581.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkcarbide_docs=self.webpackChunkcarbide_docs||[]).push([[620],{5786:(e,r,n)=>{n.r(r),n.d(r,{assets:()=>o,contentTitle:()=>i,default:()=>h,frontMatter:()=>a,metadata:()=>l,toc:()=>c});var s=n(4848),t=n(8453);const a={},i="Rancher Manager Uninstall",l={id:"registry-docs/uninstall-rancher",title:"Rancher Manager Uninstall",description:"This page will walk you through how to uninstall Carbide Registry Images from Rancher Manager both for its own components and downstream Rancher Kubernetes clusters (RKE2/K3s).",source:"@site/docs/registry-docs/uninstall-rancher.md",sourceDirName:"registry-docs",slug:"/registry-docs/uninstall-rancher",permalink:"/carbide-docs/docs/registry-docs/uninstall-rancher",draft:!1,unlisted:!1,editUrl:"https://github.com/rancherfederal/carbide-docs/edit/main/docs/registry-docs/uninstall-rancher.md",tags:[],version:"current",frontMatter:{},sidebar:"carbideSidebar",previous:{title:"RKE2/K3s Uninstall",permalink:"/carbide-docs/docs/registry-docs/uninstall-kubernetes"},next:{title:"Carbide Helm Charts",permalink:"/carbide-docs/docs/carbide-charts"}},o={},c=[{value:"Reverting Cert Manager",id:"reverting-cert-manager",level:2},{value:"Using Your Own Registry",id:"using-your-own-registry",level:3},{value:"Using Docker Hub Images",id:"using-docker-hub-images",level:3},{value:"Registry Auth Scenarios",id:"registry-auth-scenarios",level:2},{value:"Global Registry",id:"global-registry",level:3},{value:"Uninstall Carbide Images on Rancher (Private Registry)",id:"uninstall-carbide-images-on-rancher-private-registry",level:4},{value:"Uninstall Carbide Images on Rancher (Docker Hub)",id:"uninstall-carbide-images-on-rancher-docker-hub",level:4},{value:"Reverting Downstream Clusters to use DockerHub Images",id:"reverting-downstream-clusters-to-use-dockerhub-images",level:4},{value:"Manual registries.yaml configuration (RKE2/k3s)",id:"manual-registriesyaml-configuration-rke2k3s",level:3},{value:"Reverting Rancher Chart",id:"reverting-rancher-chart",level:3}];function d(e){const r={a:"a",code:"code",h1:"h1",h2:"h2",h3:"h3",h4:"h4",li:"li",ol:"ol",p:"p",pre:"pre",strong:"strong",...(0,t.R)(),...e.components};return(0,s.jsxs)(s.Fragment,{children:[(0,s.jsx)(r.h1,{id:"rancher-manager-uninstall",children:"Rancher Manager Uninstall"}),"\n",(0,s.jsx)(r.p,{children:"This page will walk you through how to uninstall Carbide Registry Images from Rancher Manager both for its own components and downstream Rancher Kubernetes clusters (RKE2/K3s)."}),"\n",(0,s.jsx)(r.h2,{id:"reverting-cert-manager",children:"Reverting Cert Manager"}),"\n",(0,s.jsx)(r.p,{children:"As Rancher has a dependency on Cert Manager, you'll need to update your Helm install of Cert Manager to use the default images."}),"\n",(0,s.jsx)(r.h3,{id:"using-your-own-registry",children:"Using Your Own Registry"}),"\n",(0,s.jsxs)(r.p,{children:["If using your own registry, you simply need to ",(0,s.jsx)(r.a,{href:"https://ranchermanager.docs.rancher.com/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images#2-collect-the-cert-manager-image",children:"collect"})," the necessary images for cert-manager and overwrite those images in your registry."]}),"\n",(0,s.jsx)(r.p,{children:"As pods cycle, the new image should propagate across the cluster."}),"\n",(0,s.jsx)(r.h3,{id:"using-docker-hub-images",children:"Using Docker Hub Images"}),"\n",(0,s.jsx)(r.p,{children:"If you want to go back to using Docker Hub images directly, you'll need to upgrade the cert-manager installation to revert pointing to the private registry hosting the Carbide images:"}),"\n",(0,s.jsx)(r.pre,{children:(0,s.jsx)(r.code,{className:"language-bash",children:"helm install cert-manager jetstack/cert-manager \\\n --namespace cert-manager \\\n --create-namespace \\\n --version v1.14.4\n"})}),"\n",(0,s.jsx)(r.h2,{id:"registry-auth-scenarios",children:"Registry Auth Scenarios"}),"\n",(0,s.jsx)(r.h3,{id:"global-registry",children:"Global Registry"}),"\n",(0,s.jsx)(r.h4,{id:"uninstall-carbide-images-on-rancher-private-registry",children:"Uninstall Carbide Images on Rancher (Private Registry)"}),"\n",(0,s.jsx)(r.p,{children:"If using your own registry, you simply need to collect the necessary images for Rancher and overwrite those images in your registry."}),"\n",(0,s.jsx)(r.p,{children:"As pods cycle, the new image should propagate across the cluster."}),"\n",(0,s.jsx)(r.h4,{id:"uninstall-carbide-images-on-rancher-docker-hub",children:"Uninstall Carbide Images on Rancher (Docker Hub)"}),"\n",(0,s.jsx)(r.p,{children:"If wanting to use upgrade Docker Hub images for Rancher:"}),"\n",(0,s.jsxs)(r.ol,{children:["\n",(0,s.jsx)(r.li,{children:"Log into Rancher and configure the default administrator password."}),"\n",(0,s.jsxs)(r.li,{children:["Click ",(0,s.jsx)(r.strong,{children:"\u2630 > Global Settings"}),"."]}),"\n",(0,s.jsxs)(r.li,{children:["Go to the setting called ",(0,s.jsx)(r.code,{children:"system-default-registry"})," and choose ",(0,s.jsx)(r.strong,{children:"\u22ee > Edit Setting"}),"."]}),"\n",(0,s.jsxs)(r.li,{children:["Click the ",(0,s.jsx)(r.code,{children:"Use the default value"})," button."]}),"\n"]}),"\n",(0,s.jsxs)(r.p,{children:[(0,s.jsx)(r.strong,{children:"Result:"})," Rancher will use your private registry to pull system images."]}),"\n",(0,s.jsx)(r.h4,{id:"reverting-downstream-clusters-to-use-dockerhub-images",children:"Reverting Downstream Clusters to use DockerHub Images"}),"\n",(0,s.jsx)(r.p,{children:"If you want to revert downstream RKE2/K3s clusters to use DockerHub images:"}),"\n",(0,s.jsxs)(r.ol,{children:["\n",(0,s.jsxs)(r.li,{children:["Click ",(0,s.jsx)(r.strong,{children:"\u2630 > Cluster Management"}),"."]}),"\n",(0,s.jsxs)(r.li,{children:["On the ",(0,s.jsx)(r.strong,{children:"Clusters"})," page, select the 3-dot button to the right for downstream cluster you'd like to revert, and select ",(0,s.jsx)(r.strong,{children:"Edit Config"}),"."]}),"\n",(0,s.jsx)(r.li,{children:"."}),"\n",(0,s.jsxs)(r.li,{children:["In the ",(0,s.jsx)(r.strong,{children:"Cluster Configuration"})," go to the ",(0,s.jsx)(r.strong,{children:"Registries"})," tab and click ",(0,s.jsx)(r.strong,{children:"Use default global registry for Rancher System Container Images"}),"."]}),"\n",(0,s.jsxs)(r.li,{children:["Click ",(0,s.jsx)(r.strong,{children:"Save"}),"."]}),"\n"]}),"\n",(0,s.jsxs)(r.p,{children:[(0,s.jsx)(r.strong,{children:"Result:"})," The cluster will update nodepools to use DockerHub images."]}),"\n",(0,s.jsxs)(r.h3,{id:"manual-registriesyaml-configuration-rke2k3s",children:["Manual ",(0,s.jsx)(r.code,{children:"registries.yaml"})," configuration (",(0,s.jsx)(r.code,{children:"RKE2"}),"/",(0,s.jsx)(r.code,{children:"k3s"}),")"]}),"\n",(0,s.jsxs)(r.p,{children:["See the ",(0,s.jsx)(r.a,{href:"/carbide-docs/docs/registry-docs/uninstall-kubernetes",children:"RKE2/K3s Uninstall"})," documentation."]}),"\n",(0,s.jsxs)(r.h3,{id:"reverting-rancher-chart",children:["Reverting ",(0,s.jsx)(r.code,{children:"Rancher"})," Chart"]}),"\n",(0,s.jsxs)(r.p,{children:["Follow Rancher's ",(0,s.jsx)(r.a,{href:"https://rancher.com/docs/rancher/v2.7/en/installation/install-rancher-on-k8s",children:"Installation Guide"}),", you can revert to using DockerHub images by removing values from the Helm upgrade command."]}),"\n",(0,s.jsx)(r.pre,{children:(0,s.jsx)(r.code,{className:"language-bash",children:"helm upgrade rancher rancher-latest/rancher \\\n --namespace cattle-system \\\n --set hostname=rancher.my.org \\\n --set replicas=3\n"})})]})}function h(e={}){const{wrapper:r}={...(0,t.R)(),...e.components};return r?(0,s.jsx)(r,{...e,children:(0,s.jsx)(d,{...e})}):d(e)}},8453:(e,r,n)=>{n.d(r,{R:()=>i,x:()=>l});var s=n(6540);const t={},a=s.createContext(t);function i(e){const r=s.useContext(a);return s.useMemo((function(){return"function"==typeof e?e(r):{...r,...e}}),[r,e])}function l(e){let r;return r=e.disableParentContext?"function"==typeof e.components?e.components(t):e.components||t:i(e.components),s.createElement(a.Provider,{value:r},e.children)}}}]);
\ No newline at end of file
diff --git a/assets/js/638a4428.4eb6073a.js b/assets/js/638a4428.4eb6073a.js
deleted file mode 100644
index 2e3513f..0000000
--- a/assets/js/638a4428.4eb6073a.js
+++ /dev/null
@@ -1 +0,0 @@
-"use strict";(self.webpackChunkcarbide_docs=self.webpackChunkcarbide_docs||[]).push([[417],{5007:(e,r,a)=>{a.r(r),a.d(r,{assets:()=>s,contentTitle:()=>o,default:()=>h,frontMatter:()=>c,metadata:()=>i,toc:()=>d});var n=a(4848),t=a(8453);const c={},o="Downloading the Images",i={id:"registry-docs/downloading-images",title:"Downloading the Images",description:"This page will walk you through how you can locally download secured images from the hardened registry and package them to move over an airgap to your registry.",source:"@site/docs/registry-docs/downloading-images.md",sourceDirName:"registry-docs",slug:"/registry-docs/downloading-images",permalink:"/carbide-docs/docs/registry-docs/downloading-images",draft:!1,unlisted:!1,editUrl:"https://github.com/rancherfederal/carbide-docs/edit/main/docs/registry-docs/downloading-images.md",tags:[],version:"current",frontMatter:{},sidebar:"carbideSidebar",previous:{title:"Copying Images to a Registry",permalink:"/carbide-docs/docs/registry-docs/copying-images"},next:{title:"Loading Images to a Registry",permalink:"/carbide-docs/docs/registry-docs/loading-images"}},s={},d=[{value:"Carbide",id:"carbide",level:2},{value:"K3s",id:"k3s",level:2},{value:"RKE2",id:"rke2",level:2},{value:"Rancher",id:"rancher",level:2},{value:"Cert Manager",id:"cert-manager",level:3},{value:"Rancher",id:"rancher-1",level:3},{value:"Longhorn",id:"longhorn",level:2},{value:"NeuVector",id:"neuvector",level:2},{value:"Kubewarden",id:"kubewarden",level:2}];function l(e){const r={a:"a",code:"code",h1:"h1",h2:"h2",h3:"h3",p:"p",pre:"pre",strong:"strong",...(0,t.R)(),...e.components};return(0,n.jsxs)(n.Fragment,{children:[(0,n.jsx)(r.h1,{id:"downloading-the-images",children:"Downloading the Images"}),"\n",(0,n.jsx)(r.p,{children:"This page will walk you through how you can locally download secured images from the hardened registry and package them to move over an airgap to your registry."}),"\n",(0,n.jsxs)(r.p,{children:["If you're copying images into a connected registry, check the documents ",(0,n.jsx)(r.a,{href:"/carbide-docs/docs/registry-docs/copying-images",children:"here"}),"."]}),"\n",(0,n.jsx)(r.h2,{id:"carbide",children:"Carbide"}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"NOTE:"})," We are working to improve the collection and formatting of the ",(0,n.jsx)(r.code,{children:"carbide"})," manifests and will be updating them."]}),"\n",(0,n.jsx)(r.pre,{children:(0,n.jsx)(r.code,{className:"language-bash",children:"# authenticate into carbide secured registry\nhauler login -u registries.yaml configuration (RKE2/k3s)",id:"manual-registriesyaml-configuration-rke2k3s",level:3},{value:"registries.yaml Strategy",id:"registriesyaml-strategy",level:4},{value:"Usage with Rancher",id:"usage-with-rancher",level:3},{value:"Example cloud-init (RKE2)",id:"example-cloud-init-rke2",level:4}];function d(e){const r={a:"a",code:"code",em:"em",h1:"h1",h2:"h2",h3:"h3",h4:"h4",li:"li",ol:"ol",p:"p",pre:"pre",strong:"strong",table:"table",tbody:"tbody",td:"td",th:"th",thead:"thead",tr:"tr",...(0,i.R)(),...e.components};return(0,t.jsxs)(t.Fragment,{children:[(0,t.jsx)(r.h1,{id:"rancher-manager-configuration",children:"Rancher Manager Configuration"}),"\n",(0,t.jsx)(r.p,{children:"This page will walk you through how to configure Rancher Manager images instead of the upstream Docker hub images, both for its own components and downstream Rancher Kubernetes clusters (RKE2/K3s)."}),"\n",(0,t.jsxs)(r.p,{children:[(0,t.jsx)(r.strong,{children:"NOTE"}),": Due to current limitations of cloud providers, this project will not work for managing Cloud Provider clusters (AKS, EKS, GKE). If you're currently using Rancher to manage those workloads, do not use this project. We intend to improve this experience in the future."]}),"\n",(0,t.jsx)(r.h2,{id:"compatibility-matrix",children:"Compatibility Matrix"}),"\n",(0,t.jsxs)(r.table,{children:[(0,t.jsx)(r.thead,{children:(0,t.jsxs)(r.tr,{children:[(0,t.jsx)(r.th,{children:"Infra"}),(0,t.jsx)(r.th,{children:"Provisioner"}),(0,t.jsx)(r.th,{children:"Registry Auth Strategy"}),(0,t.jsx)(r.th,{children:"Test Status"})]})}),(0,t.jsxs)(r.tbody,{children:[(0,t.jsxs)(r.tr,{children:[(0,t.jsx)(r.td,{children:"Any"}),(0,t.jsx)(r.td,{children:"Rancher (Cloud provisioner)"}),(0,t.jsx)(r.td,{children:"Global Registry (Rancher)"}),(0,t.jsx)(r.td,{children:"Validated"})]}),(0,t.jsxs)(r.tr,{children:[(0,t.jsx)(r.td,{children:"Any"}),(0,t.jsx)(r.td,{children:"Rancher (Custom provisioner)"}),(0,t.jsx)(r.td,{children:"Authenticated Registry (Manual registries.yaml)"}),(0,t.jsx)(r.td,{children:"Validated"})]}),(0,t.jsxs)(r.tr,{children:[(0,t.jsx)(r.td,{children:"Any"}),(0,t.jsx)(r.td,{children:"Self Installation"}),(0,t.jsx)(r.td,{children:"Global Registry (Rancher)"}),(0,t.jsx)(r.td,{children:"Validated"})]}),(0,t.jsxs)(r.tr,{children:[(0,t.jsx)(r.td,{children:"Any"}),(0,t.jsx)(r.td,{children:"Imported Cluster"}),(0,t.jsx)(r.td,{children:"Unknown"}),(0,t.jsx)(r.td,{})]}),(0,t.jsxs)(r.tr,{children:[(0,t.jsx)(r.td,{children:"AWS-EKS"}),(0,t.jsx)(r.td,{children:"Rancher"}),(0,t.jsx)(r.td,{children:"ECR (public or private)"}),(0,t.jsx)(r.td,{})]})]})]}),"\n",(0,t.jsx)(r.h2,{id:"configuring-cert-manager",children:"Configuring Cert Manager"}),"\n",(0,t.jsx)(r.p,{children:"As Rancher has a dependency on Cert Manager, you'll need to update your Helm install of Cert Manager to use Carbide Secured Registry (CSR) images that are validated and signed by Rancher Government."}),"\n",(0,t.jsxs)(r.p,{children:["If you're following Rancher's ",(0,t.jsx)(r.a,{href:"https://rancher.com/docs/rancher/v2.6/en/installation/install-rancher-on-k8s/#4-install-cert-manager",children:"Connected"})," installation instructions, you'll need to follow the next steps to use the Carbide Secured Registry (CSR) images for cert-manager."]}),"\n",(0,t.jsxs)(r.p,{children:["If using the ",(0,t.jsx)(r.a,{href:"https://rancher.com/docs/rancher/v2.6/en/installation/other-installation-methods/air-gap/install-rancher/#1-add-the-cert-manager-repo",children:"Airgapped"})," installation instructions, make sure you've pulled the images to your local/airgapped registry."]}),"\n",(0,t.jsx)(r.h3,{id:"cert-manager-helm-install",children:"Cert Manager Helm Install"}),"\n",(0,t.jsxs)(r.p,{children:["Follow Rancher's ",(0,t.jsx)(r.a,{href:"https://rancher.com/docs/rancher/v2.6/en/installation/install-rancher-on-k8s/#4-install-cert-manager",children:"Connected"})," installation instructions, but using the following steps instead of the ",(0,t.jsx)(r.code,{children:"helm install"})," command from the docs."]}),"\n",(0,t.jsxs)(r.p,{children:["After adding the Cert Manager repo and installing the CRDs, use the following to create a temporary ",(0,t.jsx)(r.code,{children:"values.yaml"})," for your chart, subsituting your registry domain:"]}),"\n",(0,t.jsx)(r.pre,{children:(0,t.jsx)(r.code,{children:"cat <registries.yaml configuration (RKE2/k3s)",id:"manual-registriesyaml-configuration-rke2k3s",level:3},{value:"registries.yaml Strategy",id:"registriesyaml-strategy",level:4},{value:"Usage with Rancher",id:"usage-with-rancher",level:3},{value:"Example cloud-init (RKE2)",id:"example-cloud-init-rke2",level:4}];function d(e){const r={a:"a",code:"code",em:"em",h1:"h1",h2:"h2",h3:"h3",h4:"h4",li:"li",ol:"ol",p:"p",pre:"pre",strong:"strong",table:"table",tbody:"tbody",td:"td",th:"th",thead:"thead",tr:"tr",...(0,i.R)(),...e.components};return(0,t.jsxs)(t.Fragment,{children:[(0,t.jsx)(r.h1,{id:"rancher-manager-configuration",children:"Rancher Manager Configuration"}),"\n",(0,t.jsx)(r.p,{children:"This page will walk you through how to configure Rancher Manager images instead of the upstream Docker hub images, both for its own components and downstream Rancher Kubernetes clusters (RKE2/K3s)."}),"\n",(0,t.jsxs)(r.p,{children:[(0,t.jsx)(r.strong,{children:"NOTE"}),": Due to current limitations of cloud providers, this project will not work for managing Cloud Provider clusters (AKS, EKS, GKE). If you're currently using Rancher to manage those workloads, do not use this project. We intend to improve this experience in the future."]}),"\n",(0,t.jsx)(r.h2,{id:"compatibility-matrix",children:"Compatibility Matrix"}),"\n",(0,t.jsxs)(r.table,{children:[(0,t.jsx)(r.thead,{children:(0,t.jsxs)(r.tr,{children:[(0,t.jsx)(r.th,{children:"Infra"}),(0,t.jsx)(r.th,{children:"Provisioner"}),(0,t.jsx)(r.th,{children:"Registry Auth Strategy"}),(0,t.jsx)(r.th,{children:"Test Status"})]})}),(0,t.jsxs)(r.tbody,{children:[(0,t.jsxs)(r.tr,{children:[(0,t.jsx)(r.td,{children:"Any"}),(0,t.jsx)(r.td,{children:"Rancher (Cloud provisioner)"}),(0,t.jsx)(r.td,{children:"Global Registry (Rancher)"}),(0,t.jsx)(r.td,{children:"Validated"})]}),(0,t.jsxs)(r.tr,{children:[(0,t.jsx)(r.td,{children:"Any"}),(0,t.jsx)(r.td,{children:"Rancher (Custom provisioner)"}),(0,t.jsx)(r.td,{children:"Authenticated Registry (Manual registries.yaml)"}),(0,t.jsx)(r.td,{children:"Validated"})]}),(0,t.jsxs)(r.tr,{children:[(0,t.jsx)(r.td,{children:"Any"}),(0,t.jsx)(r.td,{children:"Self Installation"}),(0,t.jsx)(r.td,{children:"Global Registry (Rancher)"}),(0,t.jsx)(r.td,{children:"Validated"})]}),(0,t.jsxs)(r.tr,{children:[(0,t.jsx)(r.td,{children:"Any"}),(0,t.jsx)(r.td,{children:"Imported Cluster"}),(0,t.jsx)(r.td,{children:"Unknown"}),(0,t.jsx)(r.td,{})]}),(0,t.jsxs)(r.tr,{children:[(0,t.jsx)(r.td,{children:"AWS-EKS"}),(0,t.jsx)(r.td,{children:"Rancher"}),(0,t.jsx)(r.td,{children:"ECR (public or private)"}),(0,t.jsx)(r.td,{})]})]})]}),"\n",(0,t.jsx)(r.h2,{id:"configuring-cert-manager",children:"Configuring Cert Manager"}),"\n",(0,t.jsx)(r.p,{children:"As Rancher has a dependency on Cert Manager, you'll need to update your Helm install of Cert Manager to use Carbide Secured Registry (CSR) images that are validated and signed by Rancher Government."}),"\n",(0,t.jsxs)(r.p,{children:["If you're following Rancher's ",(0,t.jsx)(r.a,{href:"https://rancher.com/docs/rancher/v2.6/en/installation/install-rancher-on-k8s/#4-install-cert-manager",children:"Connected"})," installation instructions, you'll need to follow the next steps to use the Carbide Secured Registry (CSR) images for cert-manager."]}),"\n",(0,t.jsxs)(r.p,{children:["If using the ",(0,t.jsx)(r.a,{href:"https://rancher.com/docs/rancher/v2.6/en/installation/other-installation-methods/air-gap/install-rancher/#1-add-the-cert-manager-repo",children:"Airgapped"})," installation instructions, make sure you've pulled the images to your local/airgapped registry."]}),"\n",(0,t.jsx)(r.h3,{id:"cert-manager-helm-install",children:"Cert Manager Helm Install"}),"\n",(0,t.jsxs)(r.p,{children:["Follow Rancher's ",(0,t.jsx)(r.a,{href:"https://rancher.com/docs/rancher/v2.6/en/installation/install-rancher-on-k8s/#4-install-cert-manager",children:"Connected"})," installation instructions, but using the following steps instead of the ",(0,t.jsx)(r.code,{children:"helm install"})," command from the docs."]}),"\n",(0,t.jsxs)(r.p,{children:["After adding the Cert Manager repo and installing the CRDs, use the following to create a temporary ",(0,t.jsx)(r.code,{children:"values.yaml"})," for your chart, subsituting your registry domain:"]}),"\n",(0,t.jsx)(r.pre,{children:(0,t.jsx)(r.code,{children:"cat <Your Docusaurus site did not load properly.
\nA very common reason is a wrong site baseUrl configuration.
\nCurrent configured baseUrl = ${e} ${"/"===e?" (default value)":""}
\nWe suggest trying baseUrl =
\n.comment can become .namespace--comment) or replace them with your defined ones (like .editor__comment). You can even add new classes.",owner:"dvkndn",noCSS:!0},"file-highlight":{title:"File Highlight",description:"Fetch external files and highlight them with Prism. Used on the Prism website itself.",noCSS:!0},"show-language":{title:"Show Language",description:"Display the highlighted language in code blocks (inline code does not show the label).",owner:"nauzilus",noCSS:!0,require:"toolbar"},"jsonp-highlight":{title:"JSONP Highlight",description:"Fetch content with JSONP and highlight some interesting content (e.g. GitHub/Gists or Bitbucket API).",noCSS:!0,owner:"nauzilus"},"highlight-keywords":{title:"Highlight Keywords",description:"Adds special CSS classes for each keyword for fine-grained highlighting.",owner:"vkbansal",noCSS:!0},"remove-initial-line-feed":{title:"Remove initial line feed",description:"Removes the initial line feed in code blocks.",owner:"Golmote",noCSS:!0},"inline-color":{title:"Inline color",description:"Adds a small inline preview for colors in style sheets.",require:"css-extras",owner:"RunDevelopment"},previewers:{title:"Previewers",description:"Previewers for angles, colors, gradients, easing and time.",require:"css-extras",owner:"Golmote"},autoloader:{title:"Autoloader",description:"Automatically loads the needed languages to highlight the code blocks.",owner:"Golmote",noCSS:!0},"keep-markup":{title:"Keep Markup",description:"Prevents custom markup from being dropped out during highlighting.",owner:"Golmote",optional:"normalize-whitespace",noCSS:!0},"command-line":{title:"Command Line",description:"Display a command line with a prompt and, optionally, the output/response from the commands.",owner:"chriswells0"},"unescaped-markup":{title:"Unescaped Markup",description:"Write markup without having to escape anything."},"normalize-whitespace":{title:"Normalize Whitespace",description:"Supports multiple operations to normalize whitespace in code blocks.",owner:"zeitgeist87",optional:"unescaped-markup",noCSS:!0},"data-uri-highlight":{title:"Data-URI Highlight",description:"Highlights data-URI contents.",owner:"Golmote",noCSS:!0},toolbar:{title:"Toolbar",description:"Attach a toolbar for plugins to easily register buttons on the top of a code block.",owner:"mAAdhaTTah"},"copy-to-clipboard":{title:"Copy to Clipboard Button",description:"Add a button that copies the code block to the clipboard when clicked.",owner:"mAAdhaTTah",require:"toolbar",noCSS:!0},"download-button":{title:"Download Button",description:"A button in the toolbar of a code block adding a convenient way to download a code file.",owner:"Golmote",require:"toolbar",noCSS:!0},"match-braces":{title:"Match braces",description:"Highlights matching braces.",owner:"RunDevelopment"},"diff-highlight":{title:"Diff Highlight",description:"Highlights the code inside diff blocks.",owner:"RunDevelopment",require:"diff"},"filter-highlight-all":{title:"Filter highlightAll",description:"Filters the elements the highlightAll and highlightAllUnder methods actually highlight.",owner:"RunDevelopment",noCSS:!0},treeview:{title:"Treeview",description:"A language with special styles to highlight file system tree structures.",owner:"Golmote"}}})},8722:(e,t,n)=>{const r=n(6969),a=n(8380),o=new Set;function i(e){void 0===e?e=Object.keys(r.languages).filter((e=>"meta"!=e)):Array.isArray(e)||(e=[e]);const t=[...o,...Object.keys(Prism.languages)];a(r,e,t).load((e=>{if(!(e in r.languages))return void(i.silent||console.warn("Language does not exist: "+e));const t="./prism-"+e;delete n.c[n(3157).resolve(t)],delete Prism.languages[e],n(3157)(t),o.add(e)}))}i.silent=!1,e.exports=i},9700:()=>{!function(e){function t(e,t){return"___"+e.toUpperCase()+t+"___"}Object.defineProperties(e.languages["markup-templating"]={},{buildPlaceholders:{value:function(n,r,a,o){if(n.language===r){var i=n.tokenStack=[];n.code=n.code.replace(a,(function(e){if("function"==typeof o&&!o(e))return e;for(var a,l=i.length;-1!==n.code.indexOf(a=t(r,l));)++l;return i[l]=e,a})),n.grammar=e.languages.markup}}},tokenizePlaceholders:{value:function(n,r){if(n.language===r&&n.tokenStack){n.grammar=e.languages[r];var a=0,o=Object.keys(n.tokenStack);!function i(l){for(var s=0;s