9-rancher1-1 monitoring: provider: metrics-server # # If you are using calico on AWS # # network: # plugin: calico # calico_network_provider: # cloud_provider: aws # # # To specify flannel interface 6-rancher1-2 monitoring: provider: metrics-server # # If you are using calico on AWS # # network: # plugin: calico # calico_network_provider: # cloud_provider: aws # # # To specify flannel interface 3-rancher1-1 monitoring: provider: metrics-server 33 # # If you are using calico on AWS # # network: # plugin: calico # calico_network_provider: # cloud_provider: aws # # # To specify flannel interface

"" kubernetes: "" flannel: "" flannel_cni: "" calico_node: "" calico_cni: "" calico_controllers: "" calico_ctl: "" calico_flexvol: "" Hardening Guide v2.3.5 12 canal_node: "" kubernetes_version: v1.15.9-rancher1-1 # # If you are using calico on AWS # # network: # plugin: calico # calico_network_provider: # cloud_provider: aws # # # To specify

"" kubernetes: "" flannel: "" flannel_cni: "" calico_node: "" calico_cni: "" calico_controllers: "" calico_ctl: "" calico_flexvol: "" canal_node: "" canal_cni: "" canal_flannel: kubernetes_version: v1.15.9-rancher1-1 # # If you are using calico on AWS # # network: # plugin: calico # calico_network_provider: # cloud_provider: aws # # # To specify

required Rancher edge cluster Network and Storage Network Major CNIs supported, including Calico, Flannel, Weave, and Kube-OVN; OpenELB, a self-developed open-source Load Balancer, available Layer-3 model; CNI supported, including Flannel, Nuage, and Kuryer CNI supported, including Calico, Flannel, and Canal Storage NeonSAN, a fully self-developed production-grade distributed block

"%n - %a" /etc/cni/net.d/* Returned Value: /etc/cni/net.d/10-canal.conflist - 664 /etc/cni/net.d/calico-kubeconfig - 600 Result: Pass 1.4.10 - Ensure that the Container Network Interface file ownership %U:%G" /etc/cni/net.d/* Returned Value: /etc/cni/net.d/10-canal.conflist - root:root /etc/cni/net.d/calico-kubeconfig - root:root Result: Pass 1.4.11 - Ensure that the etcd data directory permissions are

socket path on host (192.168.153.111) [/var/run/docker.sock]: [+] Network Plugin Type (flannel, calico, weave, canal, aci) [canal]: [+] Authentication Strategy [x509]: [+] Authorization Mode (rbac