The “worker” role is just an arbitrary label on the node, it doesn’t really mean anything. All nodes in a RKE2 cluster are capable of running workloads by default. They have containerd and the kubelet and are not tainted.