# Access the Web UI Rancher

**URL:** <https://forums.suse.com/t/access-the-web-ui-rancher/37421>\
**Category:** SUSE Rancher Prime\
**Created:** [March 29, 2022, 11:56am UTC](https://forums.suse.com/t/access-the-web-ui-rancher/37421 "2022-03-29T11:56:27Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Rafael\_de\_Almeida](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/rafael_de_almeida/32/8779_2.png) [@Rafael\_de\_Almeida](https://forums.suse.com/u/Rafael_de_Almeida)\
**Post date:** [March 29, 2022, 11:56am UTC](https://forums.suse.com/t/access-the-web-ui-rancher/37421/1 "2022-03-29T11:56:27Z")

</div>

Hi,

I did the installation of RKE and apparently everything went well! Now I installed Rancher and put as hostname `cltrke.labriunesp.org`, but I can’t access the Web UI, any idea what I’m doing wrong?

```auto
# kubectl -n cattle-system get pods
NAME READY STATUS RESTARTS AGE
helm-operation-4pmd5 0/2 Completed 0 50m
helm-operation-b9br5 0/2 Completed 0 49m
helm-operation-cwfwl 0/2 Completed 0 50m
helm-operation-lcdx6 0/2 Completed 0 50m
rancher-7c77f587dd-bzddh 1/1 Running 1 (16m ago) 51m
rancher-7c77f587dd-jz8mx 1/1 Running 3 (16m ago) 51m
rancher-7c77f587dd-zfxnj 1/1 Running 1 (16m ago) 51m
rancher-webhook-5d4f5b7f6d-psnwc 1/1 Running 1 (16m ago) 49m

```

```auto
   Command:
      helm-cmd
    State: Terminated
      Reason: Completed
      Exit Code: 0
      Started: Tue, 29 Mar 2022 10:33:24 +0000
      Finished: Tue, 29 Mar 2022 10:33:50 +0000
    Ready: False
    Restart Count: 0
    Environment:
      KUBECONFIG: /home/shell/.kube/config
    Mounts:
      /home/shell/.kube/config from user-kubeconfig (ro,path="config")
      /home/shell/helm from data (ro)
  proxy:
    Container ID: docker://78365b383017949126acc52f6a65ce36d6d42bd6fe26a44172fd03edba56796b
    Image: rancher/shell:v0.1.14
    Image ID: docker-pullable://rancher/shell@sha256:9c33c0e58ceb0b3cb6a85d2a6349b1f7fe818e383e6a3cb46671558fbb2f7781
    Port: <none>
    Host Port: <none>
    Command:
      sh
      -c
      kubectl proxy --disable-filter || true
    State: Terminated
      Reason: Completed
      Exit Code: 0
      Started: Tue, 29 Mar 2022 10:33:26 +0000
      Finished: Tue, 29 Mar 2022 10:33:51 +0000
    Ready: False
    Restart Count: 0
    Environment:
      KUBECONFIG: /root/.kube/config
    Mounts:
      /root/.kube/config from admin-kubeconfig (ro,path="config")
      /var/run/secrets/kubernetes.io/serviceaccount from pod-impersonation-helm-op-7nqvp-token-zjvnr (ro)
Conditions:
  Type Status
  Initialized True 
  Ready False 
  ContainersReady False 
  PodScheduled True 
Volumes:
  data:
    Type: Secret (a volume populated by a Secret)
    SecretName: helm-operation-ktg62
    Optional: false
  admin-kubeconfig:
    Type: ConfigMap (a volume populated by a ConfigMap)
    Name: impersonation-helm-op-admin-kubeconfig-sfjs7
    Optional: false
  user-kubeconfig:
    Type: ConfigMap (a volume populated by a ConfigMap)
    Name: impersonation-helm-op-user-kubeconfig-7n898
    Optional: false
  pod-impersonation-helm-op-7nqvp-token-zjvnr:
    Type: Secret (a volume populated by a Secret)
    SecretName: pod-impersonation-helm-op-7nqvp-token-zjvnr
    Optional: false
QoS Class: BestEffort
Node-Selectors: kubernetes.io/os=linux
Tolerations: cattle.io/os=linux:NoSchedule
                 node-role.kubernetes.io/controlplane=true:NoSchedule
                 node-role.kubernetes.io/etcd=true:NoExecute
                 node.cloudprovider.kubernetes.io/uninitialized=true:NoSchedule
                 node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                 node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type Reason Age From Message
  ---- ------ ---- ---- -------
  Normal Scheduled 53m default-scheduler Successfully assigned cattle-system/helm-operation-cwfwl to xxx.xxx.xxx.xx1
  Normal Pulled 53m kubelet Container image "rancher/shell:v0.1.14" already present on machine
  Normal Created 53m kubelet Created container helm
  Normal Started 53m kubelet Started container helm
  Normal Pulled 53m kubelet Container image "rancher/shell:v0.1.14" already present on machine
  Normal Created 53m kubelet Created container proxy
  Normal Started 53m kubelet Started container proxy
  Warning FailedMount 53m (x2 over 53m) kubelet MountVolume.SetUp failed for volume "data" : object "cattle-system"/"helm-operation-ktg62" not registered

Name: helm-operation-lcdx6
Namespace: cattle-system
Priority: 0
Node: xxx.xxx.xxx.xx1/xxx.xxx.xxx.xx1
Start Time: Tue, 29 Mar 2022 10:32:49 +0000
Labels: pod-impersonation.cattle.io/token=nplnmxxm9c9wz5frw4z5j4xl59hhdsrwj7ms4trmwb65hrtcqmpjmw
Annotations: cni.projectcalico.org/containerID: 2bc6ad85dcd328c851bd4b12f944b8f4dba56af717a0ede71fd791cbbc2e88f2
              cni.projectcalico.org/podIP: 
              cni.projectcalico.org/podIPs: 
              pod-impersonation.cattle.io/cluster-role: pod-impersonation-helm-op-z8j9f
Status: Succeeded
IP: 10.42.1.10
IPs:
  IP: 10.42.1.10
Containers:
  helm:
    Container ID: docker://f11405ca2bc9e968753fc676a0809f59869f27e5499f052c0812dec44e277eea
    Image: rancher/shell:v0.1.14
    Image ID: docker-pullable://rancher/shell@sha256:9c33c0e58ceb0b3cb6a85d2a6349b1f7fe818e383e6a3cb46671558fbb2f7781
    Port: <none>
    Host Port: <none>
    Command:
      helm-cmd
    State: Terminated
      Reason: Completed
      Exit Code: 0
      Started: Tue, 29 Mar 2022 10:32:53 +0000
      Finished: Tue, 29 Mar 2022 10:33:15 +0000
    Ready: False
    Restart Count: 0
    Environment:
      KUBECONFIG: /home/shell/.kube/config
    Mounts:
      /home/shell/.kube/config from user-kubeconfig (ro,path="config")
      /home/shell/helm from data (ro)
  proxy:
    Container ID: docker://23510b5e22ec47d0033ff875a6611a0359ce82d2179c08e8b11cd0884fa90286
    Image: rancher/shell:v0.1.14
    Image ID: docker-pullable://rancher/shell@sha256:9c33c0e58ceb0b3cb6a85d2a6349b1f7fe818e383e6a3cb46671558fbb2f7781
    Port: <none>
    Host Port: <none>
    Command:
      sh
      -c
      kubectl proxy --disable-filter || true
    State: Terminated
      Reason: Completed
      Exit Code: 0
      Started: Tue, 29 Mar 2022 10:32:54 +0000
      Finished: Tue, 29 Mar 2022 10:33:16 +0000
    Ready: False
    Restart Count: 0
    Environment:
      KUBECONFIG: /root/.kube/config
    Mounts:
      /root/.kube/config from admin-kubeconfig (ro,path="config")
      /var/run/secrets/kubernetes.io/serviceaccount from pod-impersonation-helm-op-r9njq-token-p85kf (ro)
Conditions:
  Type Status
  Initialized True 
  Ready False 
  ContainersReady False 
  PodScheduled True 
Volumes:
  data:
    Type: Secret (a volume populated by a Secret)
    SecretName: helm-operation-hqbp5
    Optional: false
  admin-kubeconfig:
    Type: ConfigMap (a volume populated by a ConfigMap)
    Name: impersonation-helm-op-admin-kubeconfig-jngfg
    Optional: false
  user-kubeconfig:
    Type: ConfigMap (a volume populated by a ConfigMap)
    Name: impersonation-helm-op-user-kubeconfig-4tlxh
    Optional: false
  pod-impersonation-helm-op-r9njq-token-p85kf:
    Type: Secret (a volume populated by a Secret)
    SecretName: pod-impersonation-helm-op-r9njq-token-p85kf
    Optional: false
QoS Class: BestEffort
Node-Selectors: kubernetes.io/os=linux
Tolerations: cattle.io/os=linux:NoSchedule
                 node-role.kubernetes.io/controlplane=true:NoSchedule
                 node-role.kubernetes.io/etcd=true:NoExecute
                 node.cloudprovider.kubernetes.io/uninitialized=true:NoSchedule
                 node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                 node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type Reason Age From Message
  ---- ------ ---- ---- -------
  Normal Scheduled 54m default-scheduler Successfully assigned cattle-system/helm-operation-lcdx6 to xxx.xxx.xxx.xx1
  Normal Pulled 54m kubelet Container image "rancher/shell:v0.1.14" already present on machine
  Normal Created 54m kubelet Created container helm
  Normal Started 54m kubelet Started container helm
  Normal Pulled 54m kubelet Container image "rancher/shell:v0.1.14" already present on machine
  Normal Created 54m kubelet Created container proxy
  Normal Started 54m kubelet Started container proxy
  Warning FailedMount 53m (x2 over 53m) kubelet MountVolume.SetUp failed for volume "pod-impersonation-helm-op-r9njq-token-p85kf" : object "cattle-system"/"pod-impersonation-helm-op-r9njq-token-p85kf" not registered
  Warning FailedMount 53m (x2 over 53m) kubelet MountVolume.SetUp failed for volume "data" : object "cattle-system"/"helm-operation-hqbp5" not registered
  Warning FailedMount 53m (x2 over 53m) kubelet MountVolume.SetUp failed for volume "user-kubeconfig" : object "cattle-system"/"impersonation-helm-op-user-kubeconfig-4tlxh" not registered
  Warning FailedMount 53m (x2 over 53m) kubelet MountVolume.SetUp failed for volume "admin-kubeconfig" : object "cattle-system"/"impersonation-helm-op-admin-kubeconfig-jngfg" not registered

Name: rancher-7c77f587dd-bzddh
Namespace: cattle-system
Priority: 0
Node: xxx.xxx.xxx.xx1/xxx.xxx.xxx.xx1
Start Time: Tue, 29 Mar 2022 10:32:10 +0000
Labels: app=rancher
              pod-template-hash=7c77f587dd
              release=rancher
Annotations: cni.projectcalico.org/containerID: c96e042f603881bc4fd739e3cd4eab3b7408012c22bf68d639beda62dff1c4d8
              cni.projectcalico.org/podIP: 10.42.1.16/32
              cni.projectcalico.org/podIPs: 10.42.1.16/32
Status: Running
IP: 10.42.1.16
IPs:
  IP: 10.42.1.16
Controlled By: ReplicaSet/rancher-7c77f587dd
Containers:
  rancher:
    Container ID: docker://78b1d852f95bf5def8b94c9d8c0fa63a2170ee37400ca7c279d46b0c70e2e960
    Image: rancher/rancher:v2.6.3
    Image ID: docker-pullable://rancher/rancher@sha256:f411ee37efa38d7891c11ecdd5c60ca73eb03dcd32296678af808f6b4ecccfff
    Port: 80/TCP
    Host Port: 0/TCP
    Args:
      --http-listen-port=80
      --https-listen-port=443
      --add-local=true
    State: Running
      Started: Tue, 29 Mar 2022 11:07:34 +0000
    Last State: Terminated
      Reason: Error
      Exit Code: 1
      Started: Tue, 29 Mar 2022 10:32:11 +0000
      Finished: Tue, 29 Mar 2022 11:06:50 +0000
    Ready: True
    Restart Count: 1
    Liveness: http-get http://:80/healthz delay=60s timeout=1s period=30s #success=1 #failure=3
    Readiness: http-get http://:80/healthz delay=5s timeout=1s period=30s #success=1 #failure=3
    Environment:
      CATTLE_NAMESPACE: cattle-system
      CATTLE_PEER_SERVICE: rancher
      HTTP_PROXY: http://
      HTTPS_PROXY: http://
      NO_PROXY: 127.0.0.0/8,10.0.0.0/8,cattle-system.svc,172.16.0.0/12,192.168.0.0/16,.svc,.cluster.local
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-w6zsp (ro)
Conditions:
  Type Status
  Initialized True 
  Ready True 
  ContainersReady True 
  PodScheduled True 
Volumes:
  kube-api-access-w6zsp:
    Type: Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds: 3607
    ConfigMapName: kube-root-ca.crt
    ConfigMapOptional: <nil>
    DownwardAPI: true
QoS Class: BestEffort
Node-Selectors: <none>
Tolerations: cattle.io/os=linux:NoSchedule
                             node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type Reason Age From Message
  ---- ------ ---- ---- -------
  Normal Scheduled 55m default-scheduler Successfully assigned cattle-system/rancher-7c77f587dd-bzddh to xxx.xxx.xxx.xx1
  Normal Pulled 55m kubelet Container image "rancher/rancher:v2.6.3" already present on machine
  Normal Created 55m kubelet Created container rancher
  Normal Started 55m kubelet Started container rancher
  Warning Unhealthy 54m kubelet Readiness probe failed: Get "http://10.42.1.9:80/healthz": dial tcp 10.42.1.9:80: connect: connection refused
  Normal SandboxChanged 19m kubelet Pod sandbox changed, it will be killed and re-created.
  Normal Pulled 19m kubelet Container image "rancher/rancher:v2.6.3" already present on machine
  Normal Created 19m kubelet Created container rancher
  Normal Started 19m kubelet Started container rancher
  Warning Unhealthy 18m (x3 over 19m) kubelet Readiness probe failed: Get "http://10.42.1.16:80/healthz": dial tcp 10.42.1.16:80: connect: connection refused

Name: rancher-7c77f587dd-jz8mx
Namespace: cattle-system
Priority: 0
Node: xxx.xxx.xxx.xx3/xxx.xxx.xxx.xx3
Start Time: Tue, 29 Mar 2022 10:32:10 +0000
Labels: app=rancher
              pod-template-hash=7c77f587dd
              release=rancher
Annotations: cni.projectcalico.org/containerID: 807ac87d77dac0e0b4935dcf9cc233c14517d3f50d9e8843620029494f2adf53
              cni.projectcalico.org/podIP: 10.42.0.12/32
              cni.projectcalico.org/podIPs: 10.42.0.12/32
Status: Running
IP: 10.42.0.12
IPs:
  IP: 10.42.0.12
Controlled By: ReplicaSet/rancher-7c77f587dd
Containers:
  rancher:
    Container ID: docker://686dbe59d60c25f7bb38b0bd717a62db44002de802a8893a9a251596a2c5e47a
    Image: rancher/rancher:v2.6.3
    Image ID: docker-pullable://rancher/rancher@sha256:f411ee37efa38d7891c11ecdd5c60ca73eb03dcd32296678af808f6b4ecccfff
    Port: 80/TCP
    Host Port: 0/TCP
    Args:
      --http-listen-port=80
      --https-listen-port=443
      --add-local=true
    State: Running
      Started: Tue, 29 Mar 2022 11:07:36 +0000
    Last State: Terminated
      Reason: Error
      Exit Code: 1
      Started: Tue, 29 Mar 2022 10:32:58 +0000
      Finished: Tue, 29 Mar 2022 11:06:50 +0000
    Ready: True
    Restart Count: 3
    Liveness: http-get http://:80/healthz delay=60s timeout=1s period=30s #success=1 #failure=3
    Readiness: http-get http://:80/healthz delay=5s timeout=1s period=30s #success=1 #failure=3
    Environment:
      CATTLE_NAMESPACE: cattle-system
      CATTLE_PEER_SERVICE: rancher
      HTTP_PROXY: http://
      HTTPS_PROXY: http://
      NO_PROXY: 127.0.0.0/8,10.0.0.0/8,cattle-system.svc,172.16.0.0/12,192.168.0.0/16,.svc,.cluster.local
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-747k5 (ro)
Conditions:
  Type Status
  Initialized True 
  Ready True 
  ContainersReady True 
  PodScheduled True 
Volumes:
  kube-api-access-747k5:
    Type: Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds: 3607
    ConfigMapName: kube-root-ca.crt
    ConfigMapOptional: <nil>
    DownwardAPI: true
QoS Class: BestEffort
Node-Selectors: <none>
Tolerations: cattle.io/os=linux:NoSchedule
                             node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type Reason Age From Message
  ---- ------ ---- ---- -------
  Normal Scheduled 55m default-scheduler Successfully assigned cattle-system/rancher-7c77f587dd-jz8mx to xxx.xxx.xxx.xx3
  Warning BackOff 54m kubelet Back-off restarting failed container
  Normal Pulled 54m (x3 over 55m) kubelet Container image "rancher/rancher:v2.6.3" already present on machine
  Normal Created 54m (x3 over 55m) kubelet Created container rancher
  Normal Started 54m (x3 over 55m) kubelet Started container rancher
  Warning Unhealthy 53m kubelet Liveness probe failed: Get "http://10.42.0.8:80/healthz": dial tcp 10.42.0.8:80: connect: connection refused
  Warning Unhealthy 53m (x5 over 54m) kubelet Readiness probe failed: Get "http://10.42.0.8:80/healthz": dial tcp 10.42.0.8:80: connect: connection refused
  Normal SandboxChanged 19m kubelet Pod sandbox changed, it will be killed and re-created.
  Normal Pulled 19m kubelet Container image "rancher/rancher:v2.6.3" already present on machine
  Normal Created 19m kubelet Created container rancher
  Normal Started 19m kubelet Started container rancher
  Warning Unhealthy 19m (x2 over 19m) kubelet Readiness probe failed: Get "http://10.42.0.12:80/healthz": dial tcp 10.42.0.12:80: connect: connection refused

Name: rancher-7c77f587dd-zfxnj
Namespace: cattle-system
Priority: 0
Node: xxx.xxx.xxx.xx2/xxx.xxx.xxx.xx2
Start Time: Tue, 29 Mar 2022 10:32:09 +0000
Labels: app=rancher
              pod-template-hash=7c77f587dd
              release=rancher
Annotations: cni.projectcalico.org/containerID: db7fb651ec67deb603bf6d6f5da0b3821a901fa97c57781dd12b6162cb591f51
              cni.projectcalico.org/podIP: 10.42.2.5/32
              cni.projectcalico.org/podIPs: 10.42.2.5/32
Status: Running
IP: 10.42.2.5
IPs:
  IP: 10.42.2.5
Controlled By: ReplicaSet/rancher-7c77f587dd
Containers:
  rancher:
    Container ID: docker://348ad8e5c714c32cc6b889395522df404fa44f95065b20e8132c6acfecb5f517
    Image: rancher/rancher:v2.6.3
    Image ID: docker-pullable://rancher/rancher@sha256:f411ee37efa38d7891c11ecdd5c60ca73eb03dcd32296678af808f6b4ecccfff
    Port: 80/TCP
    Host Port: 0/TCP
    Args:
      --http-listen-port=80
      --https-listen-port=443
      --add-local=true
    State: Running
      Started: Tue, 29 Mar 2022 11:07:36 +0000
    Last State: Terminated
      Reason: Error
      Exit Code: 1
      Started: Tue, 29 Mar 2022 10:32:11 +0000
      Finished: Tue, 29 Mar 2022 11:06:50 +0000
    Ready: True
    Restart Count: 1
    Liveness: http-get http://:80/healthz delay=60s timeout=1s period=30s #success=1 #failure=3
    Readiness: http-get http://:80/healthz delay=5s timeout=1s period=30s #success=1 #failure=3
    Environment:
      CATTLE_NAMESPACE: cattle-system
      CATTLE_PEER_SERVICE: rancher
      HTTP_PROXY: http://
      HTTPS_PROXY: http://
      NO_PROXY: 127.0.0.0/8,10.0.0.0/8,cattle-system.svc,172.16.0.0/12,192.168.0.0/16,.svc,.cluster.local
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-6shgm (ro)
Conditions:
  Type Status
  Initialized True 
  Ready True 
  ContainersReady True 
  PodScheduled True 
Volumes:
  kube-api-access-6shgm:
    Type: Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds: 3607
    ConfigMapName: kube-root-ca.crt
    ConfigMapOptional: <nil>
    DownwardAPI: true
QoS Class: BestEffort
Node-Selectors: <none>
Tolerations: cattle.io/os=linux:NoSchedule
                             node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type Reason Age From Message
  ---- ------ ---- ---- -------
  Normal Scheduled 55m default-scheduler Successfully assigned cattle-system/rancher-7c77f587dd-zfxnj to xxx.xxx.xxx.xx2
  Normal Pulled 55m kubelet Container image "rancher/rancher:v2.6.3" already present on machine
  Normal Created 55m kubelet Created container rancher
  Normal Started 55m kubelet Started container rancher
  Warning Unhealthy 54m kubelet Readiness probe failed: Get "http://10.42.2.3:80/healthz": dial tcp 10.42.2.3:80: connect: connection refused
  Normal SandboxChanged 19m kubelet Pod sandbox changed, it will be killed and re-created.
  Normal Pulled 19m kubelet Container image "rancher/rancher:v2.6.3" already present on machine
  Normal Created 19m kubelet Created container rancher
  Normal Started 19m kubelet Started container rancher
  Warning Unhealthy 19m (x3 over 19m) kubelet Readiness probe failed: Get "http://10.42.2.5:80/healthz": dial tcp 10.42.2.5:80: connect: connection refused

Name: rancher-webhook-5d4f5b7f6d-psnwc
Namespace: cattle-system
Priority: 0
Node: xxx.xxx.xxx.xx2/xxx.xxx.xxx.xx2
Start Time: Tue, 29 Mar 2022 10:33:58 +0000
Labels: app=rancher-webhook
              pod-template-hash=5d4f5b7f6d
Annotations: cni.projectcalico.org/containerID: 113e4a29975efd6d94388e4bab8e62fa46a2db2aeb42d91e3b2370228e430f14
              cni.projectcalico.org/podIP: 10.42.2.7/32
              cni.projectcalico.org/podIPs: 10.42.2.7/32
Status: Running
IP: 10.42.2.7
IPs:
  IP: 10.42.2.7
Controlled By: ReplicaSet/rancher-webhook-5d4f5b7f6d
Containers:
  rancher-webhook:
    Container ID: docker://0e70a75bb59c325cb681c47b5ec02014221ef36a6c5934d3ea93379a123fc19b
    Image: rancher/rancher-webhook:v0.2.2
    Image ID: docker-pullable://rancher/rancher-webhook@sha256:a9ede545ca7a404d534dc8ff0f69250f74bc0fad626e49ed874e4ee26aac651c
    Ports: 9443/TCP, 8777/TCP
    Host Ports: 0/TCP, 0/TCP
    State: Running
      Started: Tue, 29 Mar 2022 11:07:47 +0000
    Last State: Terminated
      Reason: Completed
      Exit Code: 0
      Started: Tue, 29 Mar 2022 10:34:13 +0000
      Finished: Tue, 29 Mar 2022 11:06:50 +0000
    Ready: True
    Restart Count: 1
    Environment:
      STAMP:        
      ENABLE_CAPI: true
      ENABLE_MCM: true
      NAMESPACE: cattle-system (v1:metadata.namespace)
    Mounts:
      /tmp/k8s-webhook-server/serving-certs from tls (rw)
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-vl4vn (ro)
Conditions:
  Type Status
  Initialized True 
  Ready True 
  ContainersReady True 
  PodScheduled True 
Volumes:
  tls:
    Type: Secret (a volume populated by a Secret)
    SecretName: rancher-webhook-tls
    Optional: false
  kube-api-access-vl4vn:
    Type: Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds: 3607
    ConfigMapName: kube-root-ca.crt
    ConfigMapOptional: <nil>
    DownwardAPI: true
QoS Class: BestEffort
Node-Selectors: <none>
Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type Reason Age From Message
  ---- ------ ---- ---- -------
  Normal Scheduled 53m default-scheduler Successfully assigned cattle-system/rancher-webhook-5d4f5b7f6d-psnwc to xxx.xxx.xxx.xx2
  Normal Pulling 53m kubelet Pulling image "rancher/rancher-webhook:v0.2.2"
  Normal Pulled 53m kubelet Successfully pulled image "rancher/rancher-webhook:v0.2.2" in 8.964444752s
  Normal Created 53m kubelet Created container rancher-webhook
  Normal Started 53m kubelet Started container rancher-webhook
  Warning FailedCreatePodSandBox 19m kubelet Failed to create pod sandbox: rpc error: code = Unknown desc = [failed to set up sandbox container "26252df9016c1f155eca5f9ceb3fc4ddc6d3d5087d27c0b7ff2e9d17126f4381" network for pod "rancher-webhook-5d4f5b7f6d-psnwc": networkPlugin cni failed to set up pod "rancher-webhook-5d4f5b7f6d-psnwc_cattle-system" network: failed to find plugin "calico" in path [/opt/cni/bin], failed to clean up sandbox container "26252df9016c1f155eca5f9ceb3fc4ddc6d3d5087d27c0b7ff2e9d17126f4381" network for pod "rancher-webhook-5d4f5b7f6d-psnwc": networkPlugin cni failed to teardown pod "rancher-webhook-5d4f5b7f6d-psnwc_cattle-system" network: failed to find plugin "calico" in path [/opt/cni/bin]]
  Normal SandboxChanged 19m (x4 over 19m) kubelet Pod sandbox changed, it will be killed and re-created.
  Normal Pulled 19m kubelet Container image "rancher/rancher-webhook:v0.2.2" already present on machine
  Normal Created 19m kubelet Created container rancher-webhook
  Normal Started 19m kubelet Started container rancher-webhook

```

```auto
# kubectl -n cattle-system describe certificate
Name: tls-rancher-ingress
Namespace: cattle-system
Labels: app=rancher
              app.kubernetes.io/managed-by=Helm
              chart=rancher-2.6.3
              heritage=Helm
              release=rancher
Annotations: <none>
API Version: cert-manager.io/v1
Kind: Certificate
Metadata:
  Creation Timestamp: 2022-03-29T10:32:10Z
  Generation: 1
  Managed Fields:
    API Version: cert-manager.io/v1
    Fields Type: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
        f:revision:
    Manager: controller
    Operation: Update
    Time: 2022-03-29T10:33:15Z
  Owner References:
    API Version: networking.k8s.io/v1
    Block Owner Deletion: true
    Controller: true
    Kind: Ingress
    Name: rancher
    UID: 85aac594-b598-4b20-b12d-df79d3ec9ad0
  Resource Version: 4447
  UID: 53524ab4-f831-429b-89c7-a083de3bf144
Spec:
  Dns Names:
    cltrke.labriunesp.org
  Issuer Ref:
    Group: cert-manager.io
    Kind: Issuer
    Name: rancher
  Secret Name: tls-rancher-ingress
  Usages:
    digital signature
    key encipherment
Status:
  Conditions:
    Last Transition Time: 2022-03-29T10:33:15Z
    Message: Certificate is up to date and has not expired
    Observed Generation: 1
    Reason: Ready
    Status: True
    Type: Ready
  Not After: 2022-06-27T10:33:15Z
  Not Before: 2022-03-29T10:33:15Z
  Renewal Time: 2022-05-28T10:33:15Z
  Revision: 1
Events:
  Type Reason Age From Message
  ---- ------ ---- ---- -------
  Normal Issuing 61m cert-manager Issuing certificate as Secret does not exist
  Normal Generated 61m cert-manager Stored new private key in temporary Secret resource "tls-rancher-ingress-85nmn"
  Normal Requested 61m cert-manager Created new CertificateRequest resource "tls-rancher-ingress-jvqdj"
  Normal Issuing 60m cert-manager The certificate has been successfully issued

```

```auto
# kubectl -n cattle-system describe issuer
Name: rancher
Namespace: cattle-system
Labels: app=rancher
              app.kubernetes.io/managed-by=Helm
              chart=rancher-2.6.3
              heritage=Helm
              release=rancher
Annotations: meta.helm.sh/release-name: rancher
              meta.helm.sh/release-namespace: cattle-system
API Version: cert-manager.io/v1
Kind: Issuer
Metadata:
  Creation Timestamp: 2022-03-29T10:32:10Z
  Generation: 1
  Managed Fields:
    API Version: cert-manager.io/v1beta1
    Fields Type: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .:
          f:meta.helm.sh/release-name:
          f:meta.helm.sh/release-namespace:
        f:labels:
          .:
          f:app:
          f:app.kubernetes.io/managed-by:
          f:chart:
          f:heritage:
          f:release:
      f:spec:
        .:
        f:ca:
          .:
          f:secretName:
    Manager: helm
    Operation: Update
    Time: 2022-03-29T10:32:10Z
    API Version: cert-manager.io/v1
    Fields Type: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
    Manager: controller
    Operation: Update
    Time: 2022-03-29T10:33:15Z
  Resource Version: 4415
  UID: 4d2a6c3a-5bc8-4256-83bd-4c8a050a5ee9
Spec:
  Ca:
    Secret Name: tls-rancher
Status:
  Conditions:
    Last Transition Time: 2022-03-29T10:33:15Z
    Message: Signing CA verified
    Observed Generation: 1
    Reason: KeyPairVerified
    Status: True
    Type: Ready
Events:
  Type Reason Age From Message
  ---- ------ ---- ---- -------
  Warning ErrGetKeyPair 62m (x4 over 63m) cert-manager Error getting keypair for CA issuer: secret "tls-rancher" not found
  Warning ErrInitIssuer 62m (x4 over 63m) cert-manager Error initializing issuer: secret "tls-rancher" not found
  Normal KeyPairVerified 61m (x2 over 61m) cert-manager Signing CA verified
  Normal KeyPairVerified 26m cert-manager Signing CA verified

```

```auto
# kubectl -n cattle-system describe ingress
Name: rancher
Labels: app=rancher
                  app.kubernetes.io/managed-by=Helm
                  chart=rancher-2.6.3
                  heritage=Helm
                  release=rancher
Namespace: cattle-system
Address: xxx.xxx.xxx.xx3,xxx.xxx.xxx.xx1,xxx.xxx.xxx.xx2
Default backend: default-http-backend:80 (<error: endpoints "default-http-backend" not found>)
TLS:
  tls-rancher-ingress terminates cltrke.labriunesp.org
Rules:
  Host Path Backends
  ---- ---- --------
  cltrke.labriunesp.org  
                            rancher:80 (10.42.0.12:80,10.42.1.16:80,10.42.2.5:80)
Annotations: cert-manager.io/issuer: rancher
                         cert-manager.io/issuer-kind: Issuer
                         field.cattle.io/publicEndpoints:
                           [{"addresses":["xxx.xxx.xxx.xx3","xxx.xxx.xxx.xx1","xxx.xxx.xxx.xx2"],"port":443,"protocol":"HTTPS","serviceName":"cattle-system:rancher","i...
                         meta.helm.sh/release-name: rancher
                         meta.helm.sh/release-namespace: cattle-system
                         nginx.ingress.kubernetes.io/proxy-connect-timeout: 30
                         nginx.ingress.kubernetes.io/proxy-read-timeout: 1800
                         nginx.ingress.kubernetes.io/proxy-send-timeout: 1800
Events:
  Type Reason Age From Message
  ---- ------ ---- ---- -------
  Normal CreateCertificate 75m cert-manager Successfully created Certificate "tls-rancher-ingress"
  Normal Sync 75m (x3 over 75m) nginx-ingress-controller Scheduled for sync
  Normal Sync 75m (x3 over 75m) nginx-ingress-controller Scheduled for sync
  Normal Sync 75m (x3 over 75m) nginx-ingress-controller Scheduled for sync
  Normal Sync 39m (x4 over 40m) nginx-ingress-controller Scheduled for sync
  Normal Sync 39m (x5 over 40m) nginx-ingress-controller Scheduled for sync
  Normal Sync 39m (x4 over 40m) nginx-ingress-controller Scheduled for sync

```

---

<div class="post-metadata">

**Author:** ![kiran\_G](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/kiran_g/32/8702_2.png) [@kiran\_G](https://forums.suse.com/u/kiran_G)\
**Post date:** [April 26, 2022, 7:58pm UTC](https://forums.suse.com/t/access-the-web-ui-rancher/37421/2 "2022-04-26T19:58:37Z")

</div>

I am also getting the same problem while deploying v2.6.4 on AWS EKS (Air gapped Install).  
Please let me know if you find the solution.
