primo

master23-installa_rke.sh

@@ -0,0 +1,56 @@
+# 1. Installa RKE2 (script ufficial)
+curl -sfL https://get.rke2.io | sh -
+sudo systemctl enable rke2-server.service
+
+# 2. Crea config (personalizza token e tls-san se serve)
+sudo mkdir -p /etc/rancher/rke2
+sudo tee /etc/rancher/rke2/config.yaml > /dev/null <<EOF
+
+# RKE2 Server Configuration - Additional Master
+server: https://POC-Master0:9345  # Direct connection for initial join
+token: "K10b8b252de84e5aab8bc1d2a8e4aad3e329ee84d638892b8638de0260b7cb8212a::server:34b189ab7b91fc924500ba0b3608b80b"
+write-kubeconfig-mode: "0644"
+
+# Same TLS SANs as master-1 - consistency is crucial!
+tls-san:
+  - "POC-Kube-Balancer" 
+  - "10.20.1.100"
+  - "POC-Master0"
+  - "10.20.1.101"
+  - "POC-Master1"
+  - "10.20.1.102"
+  - "POC-Master2"
+  - "10.20.1.103"
+  - "POC-Worker0"
+  - "10.20.1.104" 
+  - "POC-Worker1"
+  - "10.20.1.105" 
+  - "POC-Worker2"
+  - "10.20.1.106" 
+  
+# Identical network configuration
+#cluster-cidr: "10.42.64.0/18"
+#service-cidr: "10.42.0.0/18"
+#cluster-dns: "10.42.0.10"
+
+# Same backup and security settings
+#profile: "cis-1.6"
+selinux: true
+secrets-encryption: true
+
+# Node configuration
+node-taint:
+  - "CriticalAddonsOnly=true:NoExecute"
+  
+ingress-controller: none    
+  
+EOF
+
+# 3. Avvia RKE2 server
+sudo systemctl start rke2-server
+
+curl -LO https://dl.k8s.io/release/v1.35.0/bin/linux/amd64/kubectl
+sudo install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl
+
+mkdir /root/.kube
+cp /etc/rancher/rke2/rke2.yaml /root/.kube/config