Why RKE2?
RKE2, also known as RKE Government, is Rancher's next-generation Kubernetes distribution.
It is a fully conformant Kubernetes distribution that focuses on security and compliance within the U.S. Federal Government sector.
To meet these goals, RKE2 does the following:
- Provides defaults and configuration options that allow clusters to pass the CIS Kubernetes Benchmark v1.6 or v1.23 with minimal operator intervention
- Enables FIPS 140-2 compliance
- Regularly scans components for CVEs using trivy in our build pipeline
1. Install RKE2
curl -sfL https://get.rke2.io | sudo sh - sudo systemctl enable rke2-server.service sudo systemctl start rke2-server.service
2. Install K9s (Optional)
curl -L -s https://github.com/derailed/k9s/releases/download/v0.24.15/k9s_Linux_x86_64.tar.gz | tar xvz -C /tmp sudo mv /tmp/k9s /usr/local/bin rm -rf k9s_Linux_x86_64.tar.gz
3. Check your RKE2 install
mkdir -p ~/.kube sudo cp /etc/rancher/rke2/rke2.yaml ~/.kube/config sudo chmod 644 ~/.kube/config kubectl get pods # No resources found in default namespace.
4. Install Local Path Provisioner
kubectl apply -f https://raw.githubusercontent.com/rancher/local-path-provisioner/v0.0.24/deploy/local-path-storage.yaml
5. Install the Bionic CLI
export BIONIC_VERSION={{ version() }} curl -OL https://github.com/bionic-gpt/bionic-gpt/releases/download/${BIONIC_VERSION}/bionic-cli-linux && chmod +x ./bionic-cli-linux && sudo mv ./bionic-cli-linux /usr/local/bin/bionic
Try it out
bionic -V
6. Install the application into RKE2
bionic install
If you get the error below then wait a bit longer. The cluster is still coming up.
Error: ApiError: "service unavailable\n": Failed to parse error data (ErrorResponse { status: "503 Service Unavailable", message: "\"service unavailable\\n\"", reason: "Failed to parse error data", code: 503 })
The Finished Result
After a while of container creation you should see all the pods running and then be able to access Bionic.
Run the User Interface
You can then access the front end from http://localhost
and you'll be redirected to a registration screen.
Registration
The first user to register with BionicGPT will become the system administrator. The information is kept local to your machine and your data is not sent anywhere.
Uninstall Bionic
First we can remove K3s entirely. K3s comes with it's own uninstall script.
sudo rke2-uninstall.sh
Then you can remove the bionic cli
sudo rm /usr/local/bin/bionic
And also remove k9s if you want to.
sudo rm /usr/local/bin/k9s