SAP SAP Data Intelligence 3 on Rancher Kubernetes Engine 2 using VMware vSAN and vSphere SUSE Linux Enterprise Server 15 SP4 Rancher Kubernetes Engine 2 SAP Data Intelligence 3 Dr. Ulrich Schairer, (SUSE) 1 SAP Data Intelligence 3 on Rancher Kubernetes Engine 2 using VMware vSAN and vSphere SAP Data Intelligence 3 on Rancher Kubernetes Engine 2 using VMware vSAN and vSphere Date: 2023-07-24 SAP possi- ble errors or the consequences thereof. 2 SAP Data Intelligence 3 on Rancher Kubernetes Engine 2 using VMware vSAN and vSphere Contents 1 Introduction 4 2 Requirements 5 3 Preparations 7

does not need Docker containers when used with distributions such as K3s and Rancher Kubernetes Engine 2 (RKE2). For installations that want an even smaller attack surface, SUSE Rancher can utilize an the hosted hyperscaler Kubernetes services. With RHACM, operators also get access to a policy engine via GitOps help manage clusters at scale. OpenShift clusters will also have full monitoring capabilities Additionally, SUSE Rancher-managed Amazon EKS, Microsoft AKS and Google GKE deployments support templating and CIS benchmark scanning to maintain high security and minimize configuration drift between

yml E x a m pl e B e f or e ap p l y , r e p l ac e rancher_kubernetes_engine_config.services.etcd.gid an d rancher_kubernetes_engine_config.services.etcd.uid w i t h t h e p r op e r e t c d gr ou p an e E x a m pl e B e f or e ap p l y , r e p l ac e rancher_kubernetes_engine_config.services.etcd.gid an d rancher_kubernetes_engine_config.services.etcd.uid w i t h t h e p r op e r e t c d gr ou p an local_cluster_auth_endpoint: enabled: false name: test-35378 # # Rancher Config # rancher_kubernetes_engine_config: addon_job_timeout: 30 authentication: strategy: x509 authorization: {} bastion_host:

persistent across hosts, we will need to use some sort of persistent disk. Here, we will use Google Cloud Engine persistent disk for our application before discussing other storage options. The storage in Kubernetes annotations: volume.beta.kubernetes.io/storage-class: fast We have used the Google Cloud Engine persistent disk in this example, but Kubernetes provides some more types of persistent volumes. container running cAdvisor can mount and look at /dev/cgroups gcePersistentDisk A Google cloud engine disk which is unmounted when container is removed but can be re-mounted while data persists. A gce

appliance. This paper discusses how to deploy a Kubernetes cluster using SUSE Rancher Kubernetes Engine on a PowerFlex cluster and the use of the PowerFlex CSI 1.4 driver to provision persistent storage paper gives you an overview of the creation of a Kubernetes cluster using SUSE Rancher Kubernetes Engine and managing the cluster using SUSE Rancher as the container orchestration layer on Dell EMC PowerFlex Virtualization Appliance PV Persistent Volume PVC Persistent Volume Claim RKE SUSE Rancher Kubernetes Engine RMT Repository Mirroring Tool SAN Subject Alternative Name SDC Storage Data Client for PowerFlex

capabilities. This makes it easier to collaborate and manage containerized applications. Rancher Kubernetes Engine 2 (RKE2), is a lightweight Kubernetes distribution that is specifically designed for security and the rke2-server service. systemctl status rke2-server ● rke2-server.service - Rancher Kubernetes Engine v2 (server) Loaded: loaded (/usr/local/lib/systemd/system/rke2-server.service; enabled; vendor of the rke2-agent service. systemctl status rke2-agent ● rke2-agent.service - Rancher Kubernetes Engine v2 (agent) Loaded: loaded (/usr/local/lib/systemd/system/rke2-agent.service; enabled; vendor

hard 10 You don’t compile Linux from scratch, you use a distribution 11 Rancher Kubernetes Engine • 100% Upstream Kubernetes • CNCF certified • Easy installation • Zero-downtime upgrades • Backup have a strong API. • The combination prevents vendor lock-in. • With Rancher and K8s a secrets engine becomes important. Deploy Vault on Ranchers K8s clusters $ helm repo add hashicorp https://helm

RKE CLI that provides the configuration needed to achieve a hardened install of Rancher Kubernetes Engine (RKE). Install documentation is provided with additional details about the configuration items. enable_cluster_monitoring: false enable_network_policy: true # # Rancher Config # rancher_kubernetes_engine_config: addon_job_timeout: 30 addons: |- --- apiVersion: v1 kind: Namespace

RKE CLI that provides the configuration needed to achieve a hardened install of Rancher Kubernetes Engine (RKE). Install documentation is provided with additional details about the configuration items. enable_cluster_monitoring: false enable_network_policy: true # # Rancher Config # rancher_kubernetes_engine_config: addon_job_timeout: 30 addons: |- --- apiVersion: v1 kind: Namespace