rancher

Rancher

Chainguard's redistribution of the Rancher Helm chart.

Rancher is an open-source, multi-cluster Kubernetes management platform that lets operators provision, upgrade, and manage clusters across on-premises, cloud, and edge environments from a single control plane. This chart installs the Rancher Server workloads (deployment, service, ingress) that expose the Rancher UI and API.

Prerequisites

Authentication is required to access this chart. First, authenticate with Chainguard and configure your environment:

chainctl auth login
chainctl auth configure-docker --pull-token --save
helm registry login cgr.dev

Rancher requires cert-manager when using the default ingress.tls.source=rancher or letsEncrypt TLS options. Install it before installing Rancher:

helm install cert-manager oci://cgr.dev/ORGANIZATION/charts/cert-manager \
  --namespace cert-manager \
  --create-namespace \
  --set crds.enabled=true

Installation

helm install rancher oci://cgr.dev/ORGANIZATION/charts/rancher \
  --namespace cattle-system \
  --create-namespace \
  --set hostname=rancher.my.org \
  --set bootstrapPassword=admin

Once the release is ready, open https://<hostname> and log in with the bootstrap password.

Configuration

Chainguard's chart is a redistribution of the upstream Rancher chart -- all upstream values and documentation apply. A few common overrides:

For the complete list of values and their defaults, see the upstream values.yaml and the Rancher installation guide.

Images

This chart is wired to the following Chainguard images:

• cgr.dev/ORGANIZATION/rancher -- the Rancher Server (image.repository / image.tag).
• cgr.dev/ORGANIZATION/rancher-shell -- used by the postDelete and preUpgrade Helm hook jobs.
• cgr.dev/ORGANIZATION/busybox -- default for the optional auditLog sidecar; override auditLog.image.repository / auditLog.image.tag to point at your preferred log-tailing image.

Documentation

• Rancher Manager documentation
• Upstream chart README
• API audit log guide