ansible-role-rke2

ansible-role-rke2 copied to clipboard

# Description This PR is: - adding new molecule test for cluster provisioning with kube-vip and cluster upgrade - fixing module names which are not using fqcn ## Type of...

MonolithProjects

# Description The CIS hardening currently expects the file to be at `/usr/local/share/rke2/rke2-cis-sysctl.conf` but if `/usr/local` is not writeable it will be at `/opt/rke2/share/rke2/rke2-cis-sysctl.conf`. This PR simply adds a check...

jLemmings

better support for airgap mode 'exists', secure rke2 token by default, allow setting rke2_node_name, implement local artifact download and push to remote fallback

5

# Description There's a bunch of stuff in this commit. I realize it could have been multiple pull requests. Sorry about that. - added better support for airgap mode 'exists'...

simonfelding

bug: When using CIS hardening, the task of copying the systcl config fails under certain conditions

4

### Summary When enabling cis, with "cis-1.23", which is deprecated btw, it is "cis" now, it fails when copying the sysctl values in ```- name: Copy systemctl config file for...

Evantage-WS

bug: in a cluster with a single master, config file is always changed twice triggering a rke2-server service restart

2

### Summary When deploying RKE2 in a cluster with a single master, Ansible will always change the RKE2 configuration file in the master node triggering a rke2-server service restart. I...

oirtemed

feature: Validate config before restarting rke2

1

### Summary I had the following invalid ansible-role-rke2 config which lead to a broken `/etc/rancher/rke2/config.yaml` on the server: ```yaml rke2_server_options: service-node-port-range: 20000-32767 ``` Maybe the `config.yaml` can be validated before...

mueller-ma

### Summary Hello, want to use custom CA certificates in ansible-role-rke2 ### Issue Type Feature Idea

ngatcheu

### Summary For some maintenance tasks it's required to reboot the nodes. This role contains already tasks for a rolling restart of rke2, so it would be easy to integrate...

mueller-ma

### Summary I am trying to install rke2 for a single node which acts as server and agent. There is no example how to write the hosts file for a...

kmashwin

Install stuck in "wait for the first server be ready" with kubevip, cilium and kube proxy disabled

2

### Summary During the initial installation of a cluster using RKE2 version 1.27.1+rke2r1, kubevip, cilium and kube proxy disabled, the first node is stuck in the NOTREADY state preventing the...

drustan