Andy Clemenko clemenko

setting up Rancher with certs - example

Docs : https://ranchermanager.docs.rancher.com/getting-started/installation-and-upgrade/resources/add-tls-secrets

install rke2

curl -sfL https://get.rke2.io |  sh -

Anyone Can install RKE2 and Rancher on a Node

RKE2 - Security focused Kubernetes
Rancher - Multi-Cluster Kubernetes Management
Longhorn - Unified storage layer

We will need a few tools for this guide. We will walk through how to install helm and kubectl.

A longer version of this install : Can a 12 y/o install the Rancher Stack?

iPXE with Netboot.xyz

Leverage Docker and Netboot.xyz to host Harvester/Rocky/Liberty installers and kickstart. We have been developing an Harvester Workshop and needed a better way to boot dozens of machines. Netboot.xyz was a simple way to do it. We used https://hub.docker.com/r/linuxserver/netbootxyz to simplify the install.

Then we created a custom menu and loaded the assets. After updating the DHCP settings on the network to point to the machine we are able to boot anything.

Netboot Docker docs : https://netboot.xyz/docs/docker

Multus

update rke2 config

aka install
add the following to the config.yaml from https://docs.rke2.io/install/network_options#using-multus

# /etc/rancher/rke2/config.yaml
cni:

k3s airgap

Docs

https://docs.k3s.io/installation/airgap#manually-deploy-images-method
https://github.com/k3s-io/k3s/

download

Fleet notes for github ssh

# create a key pair
ssh-keygen -t rsa -b 4096 -m pem -f /Users/clemenko/Desktop/github -C "[email protected]"

# add secret for auth key
kubectl create secret generic ssh-github -n fleet-local --from-file=ssh-privatekey=/Users/clemenko/Desktop/github --from-file=ssh-publickey=/Users/clemenko/Desktop/github.pub --type=kubernetes.io/ssh-auth

My current Cloud Init

In case you are curious the password hashed is "Pa22word".

from : https://cloudinit.readthedocs.io/en/latest/topics/examples.html

for harvester

Keybase proof

I hereby claim:

I am clemenko on github.
I am clemenko (https://keybase.io/clemenko) on keybase.
I have a public key whose fingerprint is 5D23 F230 5CD9 8477 4FB2 0E8F 9F37 134D 1ABB 8EA3

To claim this, I am signing this object:

	# this is for joining federated clusters within NeuVector
	# check the passwords

	export masterPassword=Pa22word
	export masterUrl=neuvector.rfed.io
	export masterApi=nv-api.rfed.io

	export manangedPassword=admin
	export managedUrl=nv2.rfed.io
	export managedApi=nv2-api.rfed.io