RKE2
RKE2
Introduction
data:image/svg+xml;base64,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#gh-dark-mode-only
RKE2, also known as RKE Government, is Rancher's next-generation Kubernetes distribution.
It is a fully conformant Kubernetes distribution that focuses on security and compliance within the U.S. Federal Government sector.
To meet these goals, RKE2 does the following:
Provides defaults and configuration options that allow clusters to pass the CIS Kubernetes Benchmark v1.6 or v1.23 with minimal operator intervention
Enables FIPS 140-2 compliance
Regularly scans components for CVEs using trivy in our build pipeline
How is this different from RKE or K3s?
RKE2 combines the best-of-both-worlds from the 1.x version of RKE (hereafter referred to as RKE1) and K3s.
From K3s, it inherits the usability, ease-of-operations, and deployment model.
From RKE1, it inherits close alignment with upstream Kubernetes. In places K3s has diverged from upstream Kubernetes in order to optimize for edge deployments, but RKE1 and RKE2 can stay closely aligned with upstream.
Importantly, RKE2 does not rely on Docker as RKE1 does. RKE1 leveraged Docker for deploying and managing the control plane components as well as the container runtime for Kubernetes. RKE2 launches control plane components as static pods, managed by the kubelet. The embedded container runtime is containerd.
Why two names?
It is known as RKE Government in order to convey the primary use cases and sector it currently targets.
It is also known as RKE2 as it is the next iteration of the Rancher Kubernetes Engine for datacenter use cases. The distribution runs standalone and integration work into Rancher is underway. We intend to make RKE2 an option in Rancher once it achieves feature parity with RKE. An upgrade path from RKE to RKE2 is also under development for those that want to migrate.
Rancher Labs supports responsible disclosure and endeavors to resolve security issues in a reasonable timeframe. To report a security vulnerability, email [email protected].
Last updated