Rancher RKE2

NOTE

Linux distribution is Debian. Also works under Ubuntu

Installation Server ( Master )

apt install nfs-common open-iscsi -y

RKE releases can be found here Github

curl -sfL https://get.rke2.io | INSTALL_RKE2_CHANNEL=v1.31.0-rc1+rke2r1 INSTALL_RKE2_TYPE=server sh -

systemctl enable rke2-server.service
systemctl start rke2-server.service

ln -s $(find /var/lib/rancher/rke2/data/ -name kubectl) /usr/local/bin/kubectl

export KUBECONFIG=/etc/rancher/rke2/rke2.yaml

kubectl get nodes -o wide

Save token. We need that for the agent ( worker ) installation

cat /var/lib/rancher/rke2/server/node-token

Helm

curl -L https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash

Repos

helm repo add jetstack https://charts.jetstack.io
helm repo add rancher-latest https://releases.rancher.com/server-charts/latest
helm repo update

Cert Manager

kubectl create ns cert-manager

Releases can be found here cert-manager

kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.15.3/cert-manager.crds.yaml

helm upgrade -i cert-manager jetstack/cert-manager --namespace cert-manager --create-namespace

Cluster Issuer

Create a yaml file for the cluster issuer.

NOTE

You need to set your own email address

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: cert-issuer
spec:
  acme:
    # The ACME production api URL
    server: https://acme-v02.api.letsencrypt.org/directory
    # Email address used for ACME registration
    email: <email address>
    # Name of a secret used to store the ACME account private key
    privateKeySecretRef:
      name: cert-issuer-secret
    solvers:
    # An empty 'selector' means that this solver matches all domains
    - selector: {}
      http01:
        ingress:
          class: nginx

kubectl apply -f issuer.yaml -n cert-manager

Rancher

NOTE

You need to set your own domain and password

IMPORTANT

cert-manager must be installed first !

helm upgrade -i rancher rancher-latest/rancher --create-namespace --namespace cattle-system --set hostname=<domain> --set bootstrapPassword="password" --set replicas=1 --set global.cattle.psp.enabled=false

Longhorn

helm repo add longhorn https://charts.longhorn.io
helm repo update

helm upgrade -i longhorn longhorn/longhorn --namespace longhorn-system --create-namespace

Installation Agent ( Worker )

apt install nfs-common open-iscsi -y

curl -sfL https://get.rke2.io | INSTALL_RKE2_CHANNEL=v1.31.0-rc1+rke2r1 INSTALL_RKE2_TYPE=agent sh -

systemctl enable rke2-agent.service

We create now the rke configuration.
Agent ( Worker ) is after that, part of the cluster together with the master.

mkdir -p /etc/rancher/rke2/
vim /etc/rancher/rke2/config.yaml

server: https://ip-of-first-server:9345
token: <token from master>

systemctl start rke2-agent.service

kubectl get nodes -o wide

Longhorn

To be able to use all disks on all servers.

helm upgrade -i longhorn longhorn/longhorn --namespace longhorn-system --create-namespace