61 lines
1.4 KiB
Bash
61 lines
1.4 KiB
Bash
# 1. Installa RKE2 (script ufficial)
|
|
curl -sfL https://get.rke2.io | sh -
|
|
sudo systemctl enable rke2-server.service
|
|
|
|
# 2. Crea config (personalizza token e tls-san se serve)
|
|
sudo mkdir -p /etc/rancher/rke2
|
|
sudo tee /etc/rancher/rke2/config.yaml > /dev/null <<EOF
|
|
|
|
# RKE2 Server Configuration - First Master Node
|
|
write-kubeconfig-mode: "0644"
|
|
|
|
# CRITICAL: Add all possible API server access points to the certificate
|
|
tls-san:
|
|
- "POC-Kube-Balancer"
|
|
- "10.20.1.100"
|
|
- "POC-Master0"
|
|
- "10.20.1.101"
|
|
- "POC-Master1"
|
|
- "10.20.1.102"
|
|
- "POC-Master2"
|
|
- "10.20.1.103"
|
|
- "POC-Worker0"
|
|
- "10.20.1.104"
|
|
- "POC-Worker1"
|
|
- "10.20.1.105"
|
|
- "POC-Worker2"
|
|
- "10.20.1.106"
|
|
|
|
|
|
# Network configuration
|
|
#cluster-cidr: "10.42.64.0/18"
|
|
#service-cidr: "10.42.0.0/18"
|
|
#cluster-dns: "10.42.0.10"
|
|
|
|
# Security hardening
|
|
#profile: "cis-1.6"
|
|
selinux: true
|
|
secrets-encryption: true
|
|
|
|
# Node configuration
|
|
node-taint:
|
|
- "CriticalAddonsOnly=true:NoExecute"
|
|
|
|
ingress-controller: none
|
|
|
|
EOF
|
|
|
|
# 3. Avvia RKE2 server
|
|
sudo systemctl start rke2-server
|
|
|
|
# Attendi che i pod kube-system siano up (sul master 1)
|
|
|
|
#installa kubectl
|
|
curl -LO https://dl.k8s.io/release/v1.35.0/bin/linux/amd64/kubectl
|
|
sudo install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl
|
|
|
|
|
|
mkdir /root/.kube
|
|
cp /etc/rancher/rke2/rke2.yaml /root/.kube/config
|
|
echo "MASTER TOKEN TO COPY"
|
|
cat /var/lib/rancher/rke2/server/node-token |