itself. Disabling the local cluster is a defense in depth measure and removes the possible attack vector from the Rancher UI and API. Rancher_Hardening_Guide.md 11/30/2018 17 / 24 Audit Verify the Rancher This privilege should only be granted to a few people who are responsible for the availability and support of Rancher and the clusters that it manages. Audit The following script uses the Rancher API to

Message Authentication Code IG Implementation Guidance Term Definition IV Initialization Vector KAS Key Agreement Scheme KAT Known Answer Test KDF Key Derivation Function KTS Key Transport The cryptographic module implements both User and Crypto Officer (CO) roles. The module does not support user authentication. The User and CO roles are implicitly assumed by the entity accessing services

the terms and conditions of the End User License Agreement ("EULA") posted at https://support.juniper.net/support/eula/. By downloading, installing or using such software, you agree to the terms and conditions provides dynamic end-to-end virtual networking and security for cloud-native containerized and virtual machine (VM) workloads, across multi-cluster compute and storage environments, all from a central point of node. Integrating a full-fledged vRouter alongside the workloads provides CN2 the flexibility to support a wide range of networking requirements, from small single clusters to multi-cluster deployments

documentation: Release Note for SAP DI 3 (https://launchpad.support.sap.com/#/notes/2871970) Release Note for SAP SLC Bridge (https://launchpad.support.sap.com/#/ notes/2589449) Installation Guide at help Downloading the SLC Bridge The SLC Bridge can be obtained: from the SAP software center at https://support.sap.com/en/tools/software-logistics-tool- s.html#section_622087154 . Choose "Download SLC Bridge" Bridge". via the information in the release notes of the SLC Bridge at https://launchpad.support.s- ap.com/#/notes/2589449 . via https://help.sap.com/viewer/a8d90a56d61a49718ebcb5f65014bbe7/3.3.latest/en-

.................................................................... 9 2.2 Native Kubernetes Support in Rancher ........................................................................ 9 2.3 Setting .............................................................40 4.2 Rancher Private Registry Support for Kubernetes .......................................................41 4.3 Container Monitoring ..............................................................................45 4.5 Ingress Support ................................................................................................

Solid-State Disk TLS Transport Layer Security VLAN Virtual Local Area Network VM Virtual Machine PowerFlex product overview 7 SUSE Rancher and RKE Kubernetes cluster using CSI Driver time as per your requirements. • Shared platform for heterogeneous workloads The platform can support a broad range of operating environments simultaneously such as, bare-metal operating systems, hypervisors container platforms with a unified underlying infrastructure platform and management. It can also support heterogeneous workloads with varying requirements on a flexible shared infrastructure platform

Managed Services 3 3 1 2 Multi-Cluster Management 4 3 2 2 Edge Support 4 3 2 1 Integrated Public Cloud Support 4 2 2 2 Bare Metal, OpenStack & vSphere 4 3 2 2 Import Existing 4 2 Cluster Upgrades & Version Management 4 4 2 2 Storage Support 4 4 4 3 Arm Support 4 2 1 0 Airgap Support 4 3 2 0 Etcd Backup and Restore 4 2 3 1 A Buyer’s Guide to infrastructure. Feature SUSE Rancher OpenShift Tanzu Anthos Active Directory and LDAP Support 4 4 4 2 Pod and Network Security Policies 4 3 2 2 Configurable Adherence to CIS 4

Release ※※※※※ ※※※ ※※※ 4 Traffic Governance ※※※※※ ※※※ ※※※ Tracing ※※※※※ ※※※ ※※※ Multicloud Support ※※※※※ ※※※ ※※※※※ Multi-cluster Management ※※※※ ※※※ ※※※※※ Edge Computing ※※※※※ ※※ ※※※※※ Network ※※※※ ※※※※※ ※※※※※ Security ※※※※ ※※※※※ ※※ Windows Container ※ ※※※※ ※※※※ 5 Support Commercial Services and Support ※※※※※ ※※※※ ※※※※ 1.2 Metrics Details Product Overview Overview Product name installation tool RancherD, an easy-to-use installation tool, available Operating system support All major Linux operating systems supported Coupled to Red Hat underlying infrastructure,

Leadership in Linux & Kubernetes Hybrid Cloud Infrastructure Dev Datacenter Branch Cloud Edge Support & Services Catalog Security Storage Governance The platform for managing all Kubernetes distributions approach 7 Maintain customer satisfaction with access to deep expertise from SUSE’s highly rated support organization Ensure you’re able to offer and meet Service Level Agreements (SLAs) for emerging invoicing based on usage • Backed by SUSE/Rancher -all products come with SUSE/Rancher L1, L2, and L3 support • Access to enterprise grade open-source software – no vendor lock-in • More than just subscriptions

that the RotateKubeletServerCertificate argument is set to true (Scored) Notes RKE does not yet support certificate rotation. This feature is due for the 0.1.12 release of RKE. Audit docker inspect Ensure that the cluster-admin role is only used where required (Not Scored) Rancher has built in support for maintaining and enforcing Kubernetes RBAC on your workload clusters. Rancher has the ability