RKE2 v1.35.6 部署文档

一、部署概览

项目	值
RKE2 版本	v1.35.6+rke2r1
Kubernetes 版本	v1.35.6
容器镜像仓库	Harbor (192.168.122.156:30000)
软件安装源	Nginx (http://192.168.122.1:31000/repo/rke2/)
集群 CIDR	10.12.0.0/16
Service CIDR	10.13.0.0/16

二、节点规划

节点名	IP 地址	角色	说明
rocky9-vm-04	192.168.122.190	control-plane,etcd	第一个 server 节点
rocky9-vm-05	192.168.122.96	worker	agent 节点
rocky9-vm-06	192.168.122.231	worker	agent 节点

三、软件安装源

本地 nginx 已提供 RKE2 安装源：

• 安装脚本：http://192.168.122.1:31000/repo/rke2/1.35.6/install.sh
• 软件包目录：http://192.168.122.1:31000/repo/rke2/rke2-1.35.6/
• 包含文件：
  • rke2.linux-amd64.tar.gz
  • rke2-images.linux-amd64.tar.zst
  • rke2-images-calico.linux-amd64.tar.zst
  • sha256sum-amd64.txt

安装时设置环境变量：

export INSTALL_RKE2_VERSION=v1.35.6+rke2r1
export INSTALL_RKE2_ARTIFACT_PATH=/opt/rke2-artifacts

四、Harbor 镜像仓库

所有容器镜像均从 Harbor 仓库拉取，Harbor 地址：http://192.168.122.156:30000。

RKE2 配置 system-default-registry: 192.168.122.156:30000，使所有系统镜像默认从 Harbor 拉取。

/etc/rancher/rke2/registries.yaml 配置允许通过 HTTP 访问 Harbor：

configs:
  "192.168.122.156:30000":
    tls:
      insecure_skip_verify: true
mirrors:
  "192.168.122.156:30000":
    endpoint:
      - "http://192.168.122.156:30000"
  "docker.io":
    endpoint:
      - "http://192.168.122.156:30000"

五、Server 节点配置

文件：/etc/rancher/rke2/config.yaml

node-name: rocky9-vm-04
node-ip: 192.168.122.190
advertise-address: 192.168.122.190
tls-san:
  - 192.168.122.190
  - rocky9-vm-04
cluster-cidr: 10.12.0.0/16
service-cidr: 10.13.0.0/16
kube-proxy-arg:
  - "proxy-mode=ipvs"
system-default-registry: 192.168.122.156:30000
etcd-snapshot-retention: 5
etcd-snapshot-schedule-cron: "0 */6 * * *"

六、Agent 节点配置

文件：/etc/rancher/rke2/config.yaml

server: https://192.168.122.190:9345
token: <从 server 节点 /var/lib/rancher/rke2/server/agent-token 获取>
node-name: rocky9-vm-05
node-ip: 192.168.122.96
kube-proxy-arg:
  - "proxy-mode=ipvs"
system-default-registry: 192.168.122.156:30000

注意：token 需使用 server 节点上 /var/lib/rancher/rke2/server/agent-token 文件中的实际值。

七、部署命令

7.1 Server 节点

mkdir -p /opt/rke2-artifacts
cd /opt/rke2-artifacts
curl -fsSL http://192.168.122.1:31000/repo/rke2/1.35.6/install.sh -o /tmp/install-rke2.sh
chmod +x /tmp/install-rke2.sh
curl -fsSL http://192.168.122.1:31000/repo/rke2/rke2-1.35.6/rke2.linux-amd64.tar.gz -o rke2.linux-amd64.tar.gz
curl -fsSL http://192.168.122.1:31000/repo/rke2/rke2-1.35.6/sha256sum-amd64.txt -o sha256sum-amd64.txt
INSTALL_RKE2_VERSION=v1.35.6+rke2r1 INSTALL_RKE2_ARTIFACT_PATH=/opt/rke2-artifacts INSTALL_RKE2_TYPE=server /tmp/install-rke2.sh
systemctl enable rke2-server --now

7.2 Agent 节点

mkdir -p /opt/rke2-artifacts
cd /opt/rke2-artifacts
curl -fsSL http://192.168.122.1:31000/repo/rke2/1.35.6/install.sh -o /tmp/install-rke2.sh
chmod +x /tmp/install-rke2.sh
curl -fsSL http://192.168.122.1:31000/repo/rke2/rke2-1.35.6/rke2.linux-amd64.tar.gz -o rke2.linux-amd64.tar.gz
curl -fsSL http://192.168.122.1:31000/repo/rke2/rke2-1.35.6/sha256sum-amd64.txt -o sha256sum-amd64.txt
INSTALL_RKE2_VERSION=v1.35.6+rke2r1 INSTALL_RKE2_ARTIFACT_PATH=/opt/rke2-artifacts INSTALL_RKE2_TYPE=agent /tmp/install-rke2.sh
systemctl enable rke2-agent --now

八、验证

8.1 查看节点

/var/lib/rancher/rke2/data/v1.35.6-rke2r1-*/bin/kubectl --kubeconfig /etc/rancher/rke2/rke2.yaml get nodes -o wide

8.2 查看 Pod

/var/lib/rancher/rke2/data/v1.35.6-rke2r1-*/bin/kubectl --kubeconfig /etc/rancher/rke2/rke2.yaml get pods -A

8.3 查看服务状态

systemctl status rke2-server   # server 节点
systemctl status rke2-agent    # agent 节点

九、kubeconfig

server 节点的 kubeconfig 位于：

/etc/rancher/rke2/rke2.yaml

可将其复制到本地并修改 server 地址为 https://192.168.122.190:6443 后使用。