Chris Kim

RKE(1) unnecessarily causes DOS when generate_serving_certificate is set to true for the kubelet

1

When a Rancher installation with a large number of downstream provisioned RKE1 nodes comes back online, it is possible to accidentally/inadvertently DOS the installation. The overview of this issue is...

[BUG] Timeout received when waiting for rancher connection info

3

**Rancher Server Setup** - Rancher version: v2.6-head (a3b5237) - Installation option (Docker install/Helm Chart): - If Helm Chart, Kubernetes Cluster and version (RKE1, RKE2, k3s, EKS, etc): Docker - Proxy/Cert...

## Issue: https://github.com/rancher/rancher/issues/38896 ## Problem A change was introduced to the wins system-upgrade-controller image which started utilizing the `EventLog` for logging. I reverted this change, and made wins log directly...

## Issue: https://github.com/rancher/rancher/issues/38898

## Issue: https://github.com/rancher/rancher/issues/38989 ## Problem With K8s v1.24+, service account tokens are now created by Rancher if they do not exist (as the token-controller no longer automatically creates service account...

[release/v2.7] Forwardport of Add 1.23 for EKS

2

Forwardport of https://github.com/rancher/rancher/issues/38837

Backport: https://github.com/rancher/rancher/issues/43003 Below is a copy of the original issue description: **Rancher Server Setup** - Rancher version: `v2.8-head and v2.8.0-alpha1` - Installation option (Docker install/Helm Chart): `Helm` - If Helm...

Today, Rancher runs multiple sets of controllers across the replicas. If the replica is the "leader" it runs management controllers, and if it is a follower, it can still be...

[RFE] [CAPR] Support `/usr/local` as dedicated mount point or read-only

1

**Is your feature request related to a problem? Please describe.** CAPR is unable to properly perform operations on a cluster where `/usr/local` is a mount point or is read only....

Allow running CRD conversion webhook server without controllers

11

### What would you like to be added (User Story)? As an operator, I would like to be able to manipulate cluster-api objects in certain situations without having them immediately...