init

3.RKE2/traefik/data/custom/example/app.yaml

@@ -0,0 +1,17 @@
+http:
+  routers:
+    app-domain-ru-route:
+      entryPoints:
+      - https
+      service: app-domain-ru-service
+      rule: Host(`$APP_HOSTNAME`)
+      tls:
+        certResolver: letsEncrypt
+  services:
+    app-domain-ru-service:
+      loadBalancer:
+        passHostHeader: true
+        servers:
+        - url: http://192.168.20.101
+        - url: http://192.168.20.102
+        - url: http://192.168.20.103

3.RKE2/traefik/data/custom/rke-custom.yaml

@@ -0,0 +1,29 @@
+tcp:
+ routers:
+    rke2-api:
+      entryPoints:
+        - k8s-api
+      rule: "HostSNI(`*`)"
+      service: rke2-api-service
+      tls:
+        passthrough: true
+    rke2-connect:
+      entryPoints:
+        - rke2-connect
+      rule: "HostSNI(`*`)"
+      service: rke2-connect-service
+      tls:
+        passthrough: true
+ services:
+   rke2-api-service:
+     loadBalancer:
+       servers:
+         - address: 192.168.20.101:6443
+        #  - address: 192.168.20.102:6443
+        #  - address: 192.168.20.103:6443
+   rke2-connect-service:
+     loadBalancer:
+       servers:
+         - address: 192.168.20.101:9345
+        #  - address: 192.168.20.102:9345
+        #  - address: 192.168.20.103:9345

3.RKE2/traefik/data/traefik.yaml

@@ -0,0 +1,39 @@
+global:
+  checkNewVersion: true
+
+log:
+  level: error
+  filePath: /data/stdout.log
+  format: common
+
+serversTransport:
+  insecureSkipVerify: true
+
+api:
+  dashboard: true
+
+entryPoints:
+  http:
+    address: ":80"
+  https:
+    address: ":443"
+  k8s-api:
+    address: ":6443"
+  rke2-connect:
+    address: ":9345"
+
+providers:
+  docker:
+    endpoint: "unix:///var/run/docker.sock"
+    exposedByDefault: false
+  file:
+    directory: /custom
+    watch: true
+
+certificatesResolvers:
+  letsEncrypt:
+    acme:
+      email: mail@gmail.com
+      storage: acme.json
+      httpChallenge:
+        entryPoint: http