Hardening Guide v2.3.5 Hardening Guide v2.3.5 1 3 3 4 5 6 14 21 Contents Overview Configure Kernel Runtime Parameters Configure etcd user and group Ensure that all Namespaces have Network Hardened RKE Template configuration Hardened Reference Ubuntu 18.04 LTS cloud-config: Hardening Guide v2.3.5 2 This document provides prescriptive guidance for hardening a production installation of Security (CIS). This hardening guide describes how to secure the nodes in your cluster, and it is recommended to follow this guide before installing Kubernetes. This hardening guide is intended to be used with

Hardening Guide v2.4 Hardening Guide v2.4 1 3 4 4 5 7 14 21 Contents Overview Configure Kernel Runtime Parameters Configure etcd user and group Ensure that all Namespaces have Network Policies Hardened RKE Template configuration Hardened Reference Ubuntu 18.04 LTS cloud-config: Hardening Guide v2.4 2 This document provides prescriptive guidance for hardening a production installation of Rancher Security (CIS). This hardening guide describes how to secure the nodes in your cluster, and it is recommended to follow this guide before installing Kubernetes. This hardening guide is intended to be used with

Rancher_Hardening_Guide.md 11/30/2018 1 / 24 Rancher Hardening Guide Rancher v2.1.x Version: 0.1.0 - November 26th 2018 Overview This document provides prescriptive guidance for hardening a production default sysctl settings on all hosts Profile Applicability Level 1 Description Rancher_Hardening_Guide.md 11/30/2018 2 / 24 Configure sysctl settings to match what the kubelet would set if allowed. configuration on all control plane nodes Profile Applicability Level 1 Description Rancher_Hardening_Guide.md 11/30/2018 3 / 24 Create a Kubernetes encryption configuration file on each of the RKE nodes

CIS Benchmark Rancher Self-Assessment Guide - v2.4 CIS Benchmark Rancher Self-Assessment Guide - v2.4 1 4 5 6 6 14 29 33 34 34 37 37 38 38 42 49 49 50 52 Contents CIS Kubernetes Benchmark Network Policies and CNI CIS Benchmark Rancher Self-Assessment Guide - v2.4 2 53 5.6 General Policies CIS Benchmark Rancher Self-Assessment Guide - v2.4 3 CIS Kubernetes Benchmark v1.5 - Rancher v2.4 with the Rancher v2.4 security hardening guide. The hardening guide provides prescriptive guidance for hardening a production installation of Rancher, and this benchmark guide is meant to help you evaluate the

CIS 1.6 Benchmark - Self- Assessment Guide - Rancher v2.5.4 CIS 1.6 Benchmark - Self-Assessment Guide - Rancher v2.5.4 1 8 9 10 10 10 11 12 15 17 17 18 18 18 19 19 19 20 20 20 21 21 file permissions are set to 644 or more restrictive (Automated) CIS 1.6 Benchmark - Self-Assessment Guide - Rancher v2.5.4 2 21 21 22 23 23 24 26 27 29 31 33 34 36 37 39 41 41 42 43 45 --audit-log-maxage argument is set to 30 or as appropriate (Automated) CIS 1.6 Benchmark - Self-Assessment Guide - Rancher v2.5.4 3 58 60 61 63 65 66 68 70 71 73 74 76 77 77 78 78 79 80 81 81

CIS 1.5 Benchmark - Self- Assessment Guide - Rancher v2.5 CIS 1.5 Benchmark - Self-Assessment Guide - Rancher v2.5 1 4 5 6 6 14 29 33 34 34 37 37 38 38 42 49 49 50 Contents CIS v1 CIS 1.5 Benchmark - Self-Assessment Guide - Rancher v2.5 2 52 53 5.3 Network Policies and CNI 5.6 General Policies CIS 1.5 Benchmark - Self-Assessment Guide - Rancher v2.5 3 CIS v1.5 Kubernetes the Rancher v2.5 security hardening guide. The hardening guide provides prescriptive guidance for hardening a production installation of Rancher, and this benchmark guide is meant to help you evaluate the

A Buyer’s Guide to Enterprise Kubernetes Management Platforms Red Hat OpenShift 4.9, VMware Tanzu 1.4, Google Anthos 1.10 and SUSE Rancher 2.6 A Buyer’s Guide to Enterprise Kubernetes .............................................................................. 7 4 About this Guide ................................................................................................. ......................................................................... 39 A Buyer’s Guide to Enterprise Kubernetes Management Platforms Copyright © SUSE 2022 3 1 Executive Summary Organizations

Introduction This guide describes the on-premises installation of SAP Data Intelligence 3.3 on top of VMware vSphere/vSAN cluster and Rancher Kubernetes Engine (RKE) 2. This guide does not provide information Rancher Management server and the other runs the actual workload, which for the purpose of this guide is SAP Data Intelligence. 4 SAP Data Intelligence 3 on Rancher Kubernetes Engine 2 using VMware vSAN Note for SAP SLC Bridge (https://launchpad.support.sap.com/#/ notes/2589449) Installation Guide at help.sap.com (https://help.sap.com/viewer/a8d90a56d61a49718e- bcb5f65014bbe7/3.2.latest/en-US)

entitlements. For more information about RMT server and its configuration, see Repository Mirroring Tool Guide. The following diagram shows the logical layout of PowerFlex rack access and aggregation with management PowerProtect Data Manager deployment methods, see the Dell EMC PowerProtect Data Manager Deployment Guide. PowerProtect Data Manager can be integrated with SUSE Rancher managed Kubernetes cluster through about creating a protection policy, see Dell EMC PowerProtect Data Manager Administration and User Guide. Discovering the Rancher Kubernetes cluster in PowerProtect Data Manager Protecting