rancher/rke2

RKE2 is a Kubernetes distribution that emphasizes security and compliance for use within the U.S. Federal Government sector.

The distribution solves the problem of deploying Kubernetes in environments with strict security and regulatory requirements. It achieves this by providing hardened defaults and configuration options designed to pass the CIS Kubernetes Benchmark with minimal operator intervention, enabling FIPS 140-2 compliance, supporting SELinux policy and Multi-Category Security label enforcement, and regularly scanning components for vulnerabilities using automated tooling in its build pipeline.

Organizations should adopt RKE2 if they operate in regulated environments where federal compliance standards apply or require high-security Kubernetes deployments. The tool is particularly suited for government agencies and enterprises with stringent security postures. The README distinguishes RKE2 from RKE1 and K3s, indicating these are the primary alternatives, though specific comparisons are not detailed in the provided materials.

The project maintains a release cadence aligned with upstream Kubernetes, targeting patch releases within one week and minor releases within thirty days. The versioning scheme directly reflects the upstream Kubernetes version with an RKE2-specific postfix, allowing multiple releases against the same upstream version while remaining semantically versioned.