rke2-operations
Installation
SKILL.md
RKE2 Operations
Overview
RKE2 is a FIPS-compliant Kubernetes distribution that manages its own TLS certificates and provides built-in upgrade mechanisms. Understanding certificate lifecycle and upgrade procedures is essential for maintaining cluster health and security.
Core principle: Always upgrade control plane (server) nodes before worker (agent) nodes. Never skip certificate inspection before rotation, and never skip pre-upgrade health checks before version upgrades.
When to Use
- Inspecting or rotating RKE2 TLS certificates
- Upgrading RKE2 cluster versions (manual or automated)
- Deploying the System Upgrade Controller for automated rolling upgrades
- Troubleshooting certificate expiration warnings or TLS errors
- Planning maintenance windows for certificate or version operations
Not for: Initial RKE2 installation (use rke2-deployment), Kubespray-managed clusters (use kubespray-operations), Rancher UI-driven upgrades (use Rancher documentation)