启动
docker run -d --privileged --restart=unless-stopped --name rancher -p 8081:80 -p 443:443 -v /data0/rancher:/var/lib/rancher -t rancher/rancher:v2.5.5
证书轮换
kubectl --insecure-skip-tls-verify -n kube-system delete secrets k3s-serving
kubectl --insecure-skip-tls-verify -n cattle-system delete secret serving-cert
rm -f /var/lib/rancher/k3s/server/tls/dynamic-cert.json
curl --insecure -sfL https://ip:port/v3
docker restart rancher