SAP SAP Data Intelligence 3 on Rancher Kubernetes Engine 2 using VMware vSAN and vSphere SUSE Linux Enterprise Server 15 SP4 Rancher Kubernetes Engine 2 SAP Data Intelligence 3 Dr. Ulrich Schairer, (SUSE) 1 SAP Data Intelligence 3 on Rancher Kubernetes Engine 2 using VMware vSAN and vSphere SAP Data Intelligence 3 on Rancher Kubernetes Engine 2 using VMware vSAN and vSphere Date: 2023-07-24 SAP possi- ble errors or the consequences thereof. 2 SAP Data Intelligence 3 on Rancher Kubernetes Engine 2 using VMware vSAN and vSphere Contents 1 Introduction 4 2 Requirements 5 3 Preparations 7

co-located group of containers and their storage is called a pod. For example, it makes sense to have database processes and data containers as close as possible - ideally they should be in same pod. Label role, group, or any similar mechanism given to a container or resource. One container can have a database role, while the other can be a load-balancer. Similarly, all pods could be labeled by geography that belong to a certain service, or find all containers that have a specific tier label value as database. Labels and selectors are inherently two sides of the same coin. You can use labels to classify

routes. If a Contrail controller goes down, the Contrail controllers on the other nodes retain all database information and continue to provide the network control plane uninterrupted. On the worker nodes data in the main Kubernetes etcd database by default. When running on OpenShift, the Contrail controller stores all CN2 cluster data in its own Contrail etcd database. 9 The kube-apiserver is the entry capabilities. This makes it easier to collaborate and manage containerized applications. Rancher Kubernetes Engine 2 (RKE2), is a lightweight Kubernetes distribution that is specifically designed for security and

hard 10 You don’t compile Linux from scratch, you use a distribution 11 Rancher Kubernetes Engine • 100% Upstream Kubernetes • CNCF certified • Easy installation • Zero-downtime upgrades • Backup have a strong API. • The combination prevents vendor lock-in. • With Rancher and K8s a secrets engine becomes important. Deploy Vault on Ranchers K8s clusters $ helm repo add hashicorp https://helm hashicorp.com/role: "internal-app" vault.hashicorp.com/agent-inject-secret-database-config.txt: "internal/data/database/config" https://learn.hashicorp.com/tutorials/vault/kubernetes-sidecar Vault

does not need Docker containers when used with distributions such as K3s and Rancher Kubernetes Engine 2 (RKE2). For installations that want an even smaller attack surface, SUSE Rancher can utilize an the hosted hyperscaler Kubernetes services. With RHACM, operators also get access to a policy engine via GitOps help manage clusters at scale. OpenShift clusters will also have full monitoring capabilities directly on vSphere-managed ESXi hosts through proprietary VMware extensions that replace the container engine and the standard Kubernetes kubelet. Tanzu can also manage non TKG clusters deployed on different

yml E x a m pl e B e f or e ap p l y , r e p l ac e rancher_kubernetes_engine_config.services.etcd.gid an d rancher_kubernetes_engine_config.services.etcd.uid w i t h t h e p r op e r e t c d gr ou p an e E x a m pl e B e f or e ap p l y , r e p l ac e rancher_kubernetes_engine_config.services.etcd.gid an d rancher_kubernetes_engine_config.services.etcd.uid w i t h t h e p r op e r e t c d gr ou p an local_cluster_auth_endpoint: enabled: false name: test-35378 # # Rancher Config # rancher_kubernetes_engine_config: addon_job_timeout: 30 authentication: strategy: x509 authorization: {} bastion_host:

appliance. This paper discusses how to deploy a Kubernetes cluster using SUSE Rancher Kubernetes Engine on a PowerFlex cluster and the use of the PowerFlex CSI 1.4 driver to provision persistent storage paper gives you an overview of the creation of a Kubernetes cluster using SUSE Rancher Kubernetes Engine and managing the cluster using SUSE Rancher as the container orchestration layer on Dell EMC PowerFlex Virtualization Appliance PV Persistent Volume PVC Persistent Volume Claim RKE SUSE Rancher Kubernetes Engine RMT Repository Mirroring Tool SAN Subject Alternative Name SDC Storage Data Client for PowerFlex

RKE CLI that provides the configuration needed to achieve a hardened install of Rancher Kubernetes Engine (RKE). Install documentation is provided with additional details about the configuration items. enable_cluster_monitoring: false enable_network_policy: true # # Rancher Config # rancher_kubernetes_engine_config: addon_job_timeout: 30 addons: |- --- apiVersion: v1 kind: Namespace

RKE CLI that provides the configuration needed to achieve a hardened install of Rancher Kubernetes Engine (RKE). Install documentation is provided with additional details about the configuration items. enable_cluster_monitoring: false enable_network_policy: true # # Rancher Config # rancher_kubernetes_engine_config: addon_job_timeout: 30 addons: |- --- apiVersion: v1 kind: Namespace

multi- tenant environment — The Ondat data platform is used by SunnyVision as the basis for its database as a service (DBaaS) “Secrets management has always been one of the most difficult issues in Kubernetes Application 1 Application 2 Customer B Cluster 1 Application 1 Customer A Copyright © SUSE 2021 K8s Database as a Service Rancher Management Server (RMS) Cluster All-in-one nodes Node Node Node Node Worker All-in-one nodes Node* Node* Node* Node* Node* Node* Node* Copyright © SUSE 2021 K8s Database as a Service Rancher Management Server (RMS) Cluster All-in-one nodes Node Node Node Node