Kubernetes cluster using CSI Driver on DELL EMC PowerFlex September 2021 H18899 White Paper Abstract This white paper describes the deployment of a SUSE Rancher Kubernetes Cluster on the Dell Dell EMC PowerProtect Data Manager. Dell Technologies Solutions PowerFlex Engineering Validated Copyright 2 SUSE Rancher and RKE Kubernetes cluster using CSI Driver on DELL EMC is subject to change without notice. Contents 3 SUSE Rancher and RKE Kubernetes cluster using CSI Driver on DELL EMC PowerFlex White Paper Contents Executive Summary ........

2022 A Buyer’s Guide to Enterprise Kubernetes Management Platforms Red Hat OpenShift 4.9, VMware Tanzu 1.4, Google Anthos 1.10 and SUSE Rancher 2.6 A Buyer’s Guide to Enterprise management platforms need to confidently deliver: • Simplified Cluster Operations: improved DevOps efficiencies with simplified cluster operations • Consistent Security Policy and User Management: Cloud portfolio. Their initial go-to-market strategy saw a high premium for an immature multi-cluster platform. In 2020, Google introduced a new pay-as-you-go pricing model and invested heavily in developing

Competitor Analysis: KubeSphere vs. Rancher and OpenShift September 2021 2 Table of Contents Competitor Analysis: KubeSphere vs. Rancher and OpenShift........................................1 I. Overview ......18 3 I. Overview 1.Metrics Comparison 1.1 Features Benchmarking Features KubeSphere OpenShift Rancher Monitoring ※※※※※ ※※※※ ※※※ Logging ※※※※※ ※※※ ※※※ Events ※※※※※ ※※※※ ※※※ Auditing ※※※※※ Traffic Governance ※※※※※ ※※※ ※※※ Tracing ※※※※※ ※※※ ※※※ Multicloud Support ※※※※※ ※※※ ※※※※※ Multi-cluster Management ※※※※ ※※※ ※※※※※ Edge Computing ※※※※※ ※※ ※※※※※ Network ※※※※※ ※※※※※ ※※※※ Storage ※※※※※

Models | 11 Single Cluster Deployment | 11 Multi-Cluster Deployment | 12 System Requirements | 15 2 Install Overview | 17 Before You Install | 18 Install Single Cluster CN2 on Rancher RKE2 19 Install Single Cluster CN2 on Rancher RKE2 Running Kernel Mode Data Plane | 21 Install Single Cluster CN2 on Rancher RKE2 Running DPDK Data Plane | 24 Install Multi-Cluster CN2 on Rancher RKE2 Manage Single Cluster CN2 | 45 Overview | 45 Run Preflight and Postflight Checks | 45 Upgrade CN2 | 47 Uninstall CN2 | 48 Manage Multi-Cluster CN2 | 49 Attach a Workload Cluster | 50 Detach

(Automated) 1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated) 1.1.4 Ensure that the controller manager pod specification file ownership is (Automated) 1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated) 1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated) Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Automated) 1.3 Controller Manager 1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Automated) 1

August 2019 Authors Taylor Price Overview The following document scores a Kubernetes 1.13.x RKE cluster provisioned according to the Rancher v2.2.x hardening guide against the CIS 1.4.0 Kubernetes benchmark and this benchmark guide is meant to help you evaluate the level of security of the hardened cluster against each control in the benchmark. Because Rancher and RKE install Kubernetes services as Docker This admission controller should only be used where Pod Security Policies cannot be used on the cluster, as it can interact poorly with certain Pod Security Policies Several system services (such as

robust cluster management capabilities that can handle scheduling, service discovery, load balancing, resource monitoring and isolation, and more. For years, Google has used a cluster manager called Kubernetes terminology: Cluster A cluster is a set of machines (physical or virtual) on which your applications are managed and run. For Kubernetes, all machines are managed as a cluster (or set of clusters topology used). Node A logical machine unit (physical or virtual), which is part of a larger cluster on which you can run your applications. Pod A co-located group of containers and their storage

performance of the technology Authors Jason Greathouse Bill Maxwell 1.1 - Rancher HA Kubernetes cluster host configuration 1.1.1 - Configure default sysctl settings on all hosts Profile Applicability with the controlplane role: Rationale This configuration file will ensure that the Rancher RKE cluster encrypts secrets at rest, which Kubernetes does not do by default. This supports the following encryption provider is set to aescbc (Scored) Audit On the control plane hosts for the Rancher HA cluster run: stat /etc/kubernetes/encryption.yaml Ensure that: The file is present The file mode is

Node Security Configuration 1.1 Master Node Configuration Files 1.2 API Server 1.3 Controller Manager 1.4 Scheduler 2 Etcd Node Configuration 2 Etcd Node Configuration Files 3 Control Plane Configuration Rancher, and this benchmark guide is meant to help you evaluate the level of security of the hardened cluster against each control in the benchmark. This guide corresponds to specific versions of the hardening configuration is passed in as arguments at container run time. 1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Scored) Result: Not Applicable

u n t u cloud-config E x am p l e . . . . . . . . 26 1 Ap p e n d i x B - C om p l e t e R K E cluster.yml E x am p l e . . . . . . . . . . 27 Ap p e n d i x C - C om p l e t e R K E T e m p l at e E /var/lib/etcd etcd R e c or d t h e u i d /gi d : id etcd • Ad d t h e f ol l ow i n g t o t h e R K E cluster.yml e t c d s e c t i on u n d e r services: services: etcd: uid: s C l us t e r C o nfig ur a t i o n v i a R K E ( S e e Ap p e n d i x B . f or f u l l R K E cluster.yml e x am p l e ) 2. 1. 1 - C on fi gu r e k u b e l e t op t i on s P r ofi l e A p p l i c ab