 Hardening Guide - Rancher v2.3.3+source: "deb [arch=amd64] https://download.docker.com/linux/ubuntu $RELEASE stable" keyid: 0EBFCD88 packages: - [docker-ce, '5:19.03.5~3-0~ubuntu-bionic'] 26 - jq write_files: # 1.1.1 - Configure default homedir: /var/lib/etcd # 1.4.11 etcd data dir runcmd: - chmod 0700 /var/lib/etcd - usermod -G docker -a ubuntu - sysctl -p /etc/sysctl.d/90-kubelet.conf A ppe ndi x B - C o m pl e t e R K E cluster.yml E x a internal_address: 172.31.24.213 user: ubuntu role: [ "controlplane", "etcd", "worker" ] - address: 18.191.190.203 internal_address: 172.31.24.203 user: ubuntu role: [ "controlplane", "etcd", "worker"0 码力 | 44 页 | 279.78 KB | 1 年前3 Hardening Guide - Rancher v2.3.3+source: "deb [arch=amd64] https://download.docker.com/linux/ubuntu $RELEASE stable" keyid: 0EBFCD88 packages: - [docker-ce, '5:19.03.5~3-0~ubuntu-bionic'] 26 - jq write_files: # 1.1.1 - Configure default homedir: /var/lib/etcd # 1.4.11 etcd data dir runcmd: - chmod 0700 /var/lib/etcd - usermod -G docker -a ubuntu - sysctl -p /etc/sysctl.d/90-kubelet.conf A ppe ndi x B - C o m pl e t e R K E cluster.yml E x a internal_address: 172.31.24.213 user: ubuntu role: [ "controlplane", "etcd", "worker" ] - address: 18.191.190.203 internal_address: 172.31.24.203 user: ubuntu role: [ "controlplane", "etcd", "worker"0 码力 | 44 页 | 279.78 KB | 1 年前3
 Cloud Native Contrail Networking
Installation and Life Cycle ManagementGuide for Rancher RKE2
example) and gateway • access to one or more DNS servers NOTE: If you're running systemd-resolved on Ubuntu, ensure that /etc/resolv.conf is linked to /run/systemd/resolve/resolv.conf, and not to /run/systemd/resolve/stub- including root SSH access • NTP (must be chrony) The cluster nodes in our examples are running Ubuntu. c. If you're planning on running with a DPDK data plane, prepare each cluster node that is running resolving. Check the domain name server configuration to make sure it's correct. For example, in a Ubuntu system running systemd resolved, check that /etc/resolv.conf is linked to /run/systemd/resolve/resolv0 码力 | 72 页 | 1.01 MB | 1 年前3 Cloud Native Contrail Networking
Installation and Life Cycle ManagementGuide for Rancher RKE2
example) and gateway • access to one or more DNS servers NOTE: If you're running systemd-resolved on Ubuntu, ensure that /etc/resolv.conf is linked to /run/systemd/resolve/resolv.conf, and not to /run/systemd/resolve/stub- including root SSH access • NTP (must be chrony) The cluster nodes in our examples are running Ubuntu. c. If you're planning on running with a DPDK data plane, prepare each cluster node that is running resolving. Check the domain name server configuration to make sure it's correct. For example, in a Ubuntu system running systemd resolved, check that /etc/resolv.conf is linked to /run/systemd/resolve/resolv0 码力 | 72 页 | 1.01 MB | 1 年前3
 Rancher Hardening Guide v2.3.5RKE cluster.yml configuration Reference Hardened RKE Template configuration Hardened Reference Ubuntu 18.04 LTS cloud-config: Hardening Guide v2.3.5 2 This document provides prescriptive guidance profiling: 'false' ssh_agent_auth: false windows_prefered_cluster: false Hardened Reference Ubuntu 18.04 LTS cloud-config: The reference cloud-config is generally used in cloud infrastructure environments environments to allow for configuration management of compute instances. The reference config configures Ubuntu operating system level settings needed before installing kubernetes. #cloud-config packages:0 码力 | 21 页 | 191.56 KB | 1 年前3 Rancher Hardening Guide v2.3.5RKE cluster.yml configuration Reference Hardened RKE Template configuration Hardened Reference Ubuntu 18.04 LTS cloud-config: Hardening Guide v2.3.5 2 This document provides prescriptive guidance profiling: 'false' ssh_agent_auth: false windows_prefered_cluster: false Hardened Reference Ubuntu 18.04 LTS cloud-config: The reference cloud-config is generally used in cloud infrastructure environments environments to allow for configuration management of compute instances. The reference config configures Ubuntu operating system level settings needed before installing kubernetes. #cloud-config packages:0 码力 | 21 页 | 191.56 KB | 1 年前3
 Rancher Hardening Guide v2.4RKE cluster.yml configuration Reference Hardened RKE Template configuration Hardened Reference Ubuntu 18.04 LTS cloud-config: Hardening Guide v2.4 2 This document provides prescriptive guidance for profiling: 'false' ssh_agent_auth: false windows_prefered_cluster: false Hardened Reference Ubuntu 18.04 LTS cloud-config: The reference cloud-config is generally used in cloud infrastructure environments environments to allow for configuration management of compute instances. The reference config configures Ubuntu operating system level settings needed before installing kubernetes. #cloud-config packages:0 码力 | 22 页 | 197.27 KB | 1 年前3 Rancher Hardening Guide v2.4RKE cluster.yml configuration Reference Hardened RKE Template configuration Hardened Reference Ubuntu 18.04 LTS cloud-config: Hardening Guide v2.4 2 This document provides prescriptive guidance for profiling: 'false' ssh_agent_auth: false windows_prefered_cluster: false Hardened Reference Ubuntu 18.04 LTS cloud-config: The reference cloud-config is generally used in cloud infrastructure environments environments to allow for configuration management of compute instances. The reference config configures Ubuntu operating system level settings needed before installing kubernetes. #cloud-config packages:0 码力 | 22 页 | 197.27 KB | 1 年前3
 Rancher Hardening Guide Rancher v2.1.xinternal_address: 172.31.24.213 user: ubuntu role: [ "controlplane", "etcd", "worker" ] - address: 18.191.190.203 internal_address: 172.31.24.203 user: ubuntu role: [ "controlplane", "etcd", "worker" ] - address: 18.191.190.10 internal_address: 172.31.24.244 user: ubuntu role: [ "controlplane", "etcd", "worker" ] services: kubelet: extra_args: streaming-connection-idle-timeout:0 码力 | 24 页 | 336.27 KB | 1 年前3 Rancher Hardening Guide Rancher v2.1.xinternal_address: 172.31.24.213 user: ubuntu role: [ "controlplane", "etcd", "worker" ] - address: 18.191.190.203 internal_address: 172.31.24.203 user: ubuntu role: [ "controlplane", "etcd", "worker" ] - address: 18.191.190.10 internal_address: 172.31.24.244 user: ubuntu role: [ "controlplane", "etcd", "worker" ] services: kubelet: extra_args: streaming-connection-idle-timeout:0 码力 | 24 页 | 336.27 KB | 1 年前3
 SUSE Rancher and RKE Kubernetes cluster
using CSI Driver on DELL EMC PowerFlex driver on a two-layer PowerFlex cluster. SUSE Rancher supports Kubernetes clusters running on Ubuntu, CentOS, Oracle Linux, SLES, and RedHat Enterprise Linux. For information about the supported Operating key, defaulting to cluster level SSH key: ~/.ssh/id_rsa [+] SSH User of host (192.168.153.111) [ubuntu]: tux [+] Is host (192.168.153.111) a Control Plane host (y/n)? [y]: [+] Is host (192.168.1530 码力 | 45 页 | 3.07 MB | 1 年前3 SUSE Rancher and RKE Kubernetes cluster
using CSI Driver on DELL EMC PowerFlex driver on a two-layer PowerFlex cluster. SUSE Rancher supports Kubernetes clusters running on Ubuntu, CentOS, Oracle Linux, SLES, and RedHat Enterprise Linux. For information about the supported Operating key, defaulting to cluster level SSH key: ~/.ssh/id_rsa [+] SSH User of host (192.168.153.111) [ubuntu]: tux [+] Is host (192.168.153.111) a Control Plane host (y/n)? [y]: [+] Is host (192.168.1530 码力 | 45 页 | 3.07 MB | 1 年前3
 企业云原生的探索与落地深圳沙龙-RacherLabs-20-11-14/应用容器化最佳实践dist-upgrade,因为一方面父级镜像中的有些核心软件包无法在非特权容器中更新升级,另一方面 大范围的更新软件及其依赖,会增加镜像大小。所以,建议只更新必要的指定软件,并做好清除动作 以下示例基础镜像基于ubuntu:18.04,其他操作系统类似: © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 通过ConfigMap管理可变应用配置0 码力 | 28 页 | 3.47 MB | 1 年前3 企业云原生的探索与落地深圳沙龙-RacherLabs-20-11-14/应用容器化最佳实践dist-upgrade,因为一方面父级镜像中的有些核心软件包无法在非特权容器中更新升级,另一方面 大范围的更新软件及其依赖,会增加镜像大小。所以,建议只更新必要的指定软件,并做好清除动作 以下示例基础镜像基于ubuntu:18.04,其他操作系统类似: © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 通过ConfigMap管理可变应用配置0 码力 | 28 页 | 3.47 MB | 1 年前3
共 7 条
- 1













