diff --git a/hieradata/roles/infra/k8s/rke2.yaml b/hieradata/roles/infra/k8s/rke2.yaml
new file mode 100644
index 0000000..fe16631
--- /dev/null
+++ b/hieradata/roles/infra/k8s/rke2.yaml
@@ -0,0 +1,25 @@
+---
+#profiles::packages::include:
+#  bridge-utils: {}
+#  cephadm: {}
+
+# additional repos
+profiles::yum::global::repos:
+  rancher-rke2-common-latest:
+    name: rancher-rke2-common-latest
+    descr: rancher-rke2-common-latest
+    target: /etc/yum.repos.d/rke2-common.repo
+    baseurl: https://rpm.rancher.io/rke2/latest/common/centos/%{facts.os.release.major}/noarch
+    gpgkey: https://rpm.rancher.io/public.key
+    mirrorlist: absent
+  rancher-rke2-1-33-latest:
+    name: rancher-rke2-1-33-latest
+    descr: rancher-rke2-1-33-latest
+    target: /etc/yum.repos.d/rke2-1-33.repo
+    baseurl: https://rpm.rancher.io/rke2/latest/1.33/centos/%{facts.os.release.major}/x86_64
+    gpgkey: https://rpm.rancher.io/public.key
+    mirrorlist: absent
+
+#profiles::packages::include:
+#  bridge-utils: {}
+#  cephadm: {}
diff --git a/site/roles/manifests/infra/k8s/rke2.pp b/site/roles/manifests/infra/k8s/rke2.pp
new file mode 100644
index 0000000..e7c7cbd
--- /dev/null
+++ b/site/roles/manifests/infra/k8s/rke2.pp
@@ -0,0 +1,10 @@
+# rke2 controllers
+class roles::infra::k8s::rke2 {
+  if $facts['firstrun'] {
+    include profiles::defaults
+    include profiles::firstrun::init
+  }else{
+    include profiles::defaults
+    include profiles::base
+  }
+}