Jake Hyde jakefhyde

Retrieve kubeconfig from RKE v0.2.x or Rancher v2.2.x custom cluster controlplane node

For RKE v0.1.x and Rancher v2.0.x/v2.1.x, see https://gist.github.com/superseb/3d8de6092ebc4b1581185197583f472a

This needs to be run on a node with the controlplane role, as it rewrites the server endpoint to https://127.0.0.1:6443, you can of course manually change this if necessary.

Applicable for:

RKE v0.2.x
Rancher v2.2.x

	set -x;
	if ! command -v rancher-machine &> /dev/null; then
	echo "rancher-machine must be in your PATH";
	exit 1;
	fi;
	RDIR=$(pwd)/local-run-data;
	mkdir -p $RDIR;
	: > run.env;
	echo "CATTLE_DEV_MODE=30" >> run.env;
	eval "$(grep '^ENV CATTLE_SYSTEM_AGENT' package/Dockerfile \| awk '{print "export " $2 "=" $3}')";

	#!/bin/sh

	PUBLIC_IP=$(curl ifconfig.io)

	# export INSTALL_RKE2_VERSION="v1.20.5+rke2r1"

	curl -sfL https://get.rke2.io \| sh -

	provider_id="$(curl -s http://169.254.169.254/latest/meta-data/placement/availability-zone)/$(curl -s http://169.254.169.254/latest/meta-data/instance-id)"

	#!/usr/bin/env bash

	if [ $# -ne 2 ]; then
	echo "Usage: $0 [filename] [etcd_version]"
	exit 1
	fi

	FILENAME=$1
	ETCD_VERSION=$2
	TIMESTAMP="$(date +%s)"

	#!/bin/bash
	echo "This will generate a new kube config for accessing your RKE-created kubernetes cluster. This script MUST be run on a Kubernetes node."
	echo "Please enter the IP of one of your control plane hosts, followed by [ENTER]:"

	read cphost

	openssl genrsa -out kube-admin.key 2048
	openssl req -new -sha256 -key kube-admin.key -subj "/O=system:masters/CN=kube-admin" -out kube-admin.csr
	sudo openssl x509 -req -in kube-admin.csr -CA /etc/kubernetes/ssl/kube-ca.pem -CAcreateserial -CAkey /etc/kubernetes/ssl/kube-ca-key.pem -out kube-admin.crt -days 365 -sha256
	sudo rm -f /etc/kubernetes/ssl/kube-ca.srl

	/*****************************************************************
	* onMessage from the extension or tab (a content script)
	*****************************************************************/
	chrome.runtime.onMessage.addListener(
	function(request, sender, sendResponse) {
	if (request.cmd == "any command") {
	sendResponse({ result: "any response from background" });
	} else {
	sendResponse({ result: "error", message: `Invalid 'cmd'` });
	}