CIS 1.6 Benchmark - Self- Assessment Guide - Rancher v2.5.4 CIS 1.6 Benchmark - Self-Assessment Guide - Rancher v2.5.4 1 8 9 10 10 10 11 12 15 17 17 18 18 18 19 19 19 20 20 20 21 21 Contents CIS 1.6 Kubernetes Benchmark - Rancher v2.5.4 with Kubernetes v1.18 Controls 1.1 Etcd Node Configuration Files 1.1.11 Ensure that the etcd data directory permissions are set to 700 or more Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated) CIS 1.6 Benchmark - Self-Assessment Guide - Rancher v2.5.4 2 21 21 22 23 23 24 26 27 29 31 33 34

JAVA_HOME=/path/to/java in the local os session. export JAVA_HOME=/Library/Java/JavaVirtualMachines/jdk-11.0.5.jdk/Contents/Home java -version java version "11.0.5" 2019-10-15 LTS Java(TM) SE Runtime Environment 6.1-incubating (continued from previous page) JAVA_HOME: /Library/Java/JavaVirtualMachines/jdk1.8.0_251.jdk/Contents/Home KYUUBI_HOME: /Users/kentyao/svn-kyuubi/v1.3.1-incubating-rc0/apache-kyuubi-1.3 to ex- plicitly set kyuubi.ha.zookeeper.engine.auth.type to KERBEROS. Upgrading from Kyuubi 1.5 to 1.6 • Kyuubi engine gets Zookeeper principal & keytab from kyuubi.ha.zookeeper.auth.principal & kyuubi

JAVA_HOME=/path/to/java in the local os session. export JAVA_HOME=/Library/Java/JavaVirtualMachines/jdk- 11.0.5.jdk/Contents/Home java -version java version "11.0.5" 2019-10-15 LTS Java(TM) SE Runtime Environment bin/conf/kyuubi-env.sh, using default ones... JAVA_HOME: /Library/Java/JavaVirtualMachines/jdk1.8.0_251.jdk/Contents/Home KYUUBI_HOME: /Users/kentyao/svn-kyuubi/v1.3.1-incubating-rc0/apache- kyuubi-1 Server Kyuubi Migration Guide Upgrading from Kyuubi 1.6.0 to 1.6.1 Upgrading from Kyuubi 1.5 to 1.6 Configurations Introduction to the Kyuubi Configurations System Environments Kyuubi Configurations

JAVA_HOME=/path/to/java in the local os session. export JAVA_HOME=/Library/Java/JavaVirtualMachines/jdk- 11.0.5.jdk/Contents/Home java -version java version "11.0.5" 2019-10-15 LTS Java(TM) SE Runtime Environment bin/conf/kyuubi-env.sh, using default ones... JAVA_HOME: /Library/Java/JavaVirtualMachines/jdk1.8.0_251.jdk/Contents/Home KYUUBI_HOME: /Users/kentyao/svn-kyuubi/v1.3.1-incubating-rc0/apache- kyuubi-1 Required Hadoop jars when you use the Kyuubi Hive engine. # ## Examples ## # export JAVA_HOME=/usr/jdk64/jdk1.8.0_152 # export SPARK_HOME=/opt/spark # export FLINK_HOME=/opt/flink # export HIVE_HOME=/opt/hive

JAVA_HOME=/path/to/java in the local os session. export JAVA_HOME=/Library/Java/JavaVirtualMachines/jdk-11.0.5.jdk/Contents/Home java -version java version "11.0.5" 2019-10-15 LTS Java(TM) SE Runtime Environment 6.0-incubating (continued from previous page) JAVA_HOME: /Library/Java/JavaVirtualMachines/jdk1.8.0_251.jdk/Contents/Home KYUUBI_HOME: /Users/kentyao/svn-kyuubi/v1.3.1-incubating-rc0/apache-kyuubi-1.3 Required Hadoop jars when you use the Kyuubi Hive engine. # ## Examples ## # export JAVA_HOME=/usr/jdk64/jdk1.8.0_152 # export SPARK_HOME=/opt/spark # export FLINK_HOME=/opt/flink # export HIVE_HOME=/opt/hive

1. Getting Kyuubi 1.2. Requirements 1.3. Installation 1.4. Running Kyuubi 1.5. Using Hive Beeline 1.6. Stopping Kyuubi 2. Getting Started With Kyuubi and DBeaver 2.1. What is DBeaver 2.2. Preparation JAVA_HOME=/path/to/java in the local os session. export JAVA_HOME=/Library/Java/JavaVirtualMachines/jdk- 11.0.5.jdk/Contents/Home java -version java version "11.0.5" 2019-10-15 LTS Java(TM) SE Runtime Environment bin-spark-3.0.1/conf/kyuubi-env.sh to initialize... JAVA_HOME: /Library/Java/JavaVirtualMachines/jdk1.8.0_251.jdk/Contents/Home KYUUBI_HOME: /Users/kentyao/kyuubi/kyuubi-1.0.2-bin-spark-3.0.1 KYUUBI_CONF_DIR:

1. Getting Kyuubi 1.2. Requirements 1.3. Installation 1.4. Running Kyuubi 1.5. Using Hive Beeline 1.6. Stopping Kyuubi 2. Getting Started With Kyuubi on kubernetes 2.1. Running kyuubi with helm 3. Getting JAVA_HOME=/path/to/java in the local os session. export JAVA_HOME=/Library/Java/JavaVirtualMachines/jdk- 11.0.5.jdk/Contents/Home java -version java version "11.0.5" 2019-10-15 LTS Java(TM) SE Runtime Environment bin/conf/kyuubi-env.sh, using default ones... JAVA_HOME: /Library/Java/JavaVirtualMachines/jdk1.8.0_251.jdk/Contents/Home KYUUBI_HOME: /Users/kentyao/svn-kyuubi/v1.3.1-incubating-rc0/apache- kyuubi-1

1. Getting Kyuubi 1.2. Requirements 1.3. Installation 1.4. Running Kyuubi 1.5. Using Hive Beeline 1.6. Stopping Kyuubi 2. Getting Started With Kyuubi on kubernetes 2.1. Running kyuubi with helm 3. Getting JAVA_HOME=/path/to/java in the local os session. export JAVA_HOME=/Library/Java/JavaVirtualMachines/jdk- 11.0.5.jdk/Contents/Home java -version java version "11.0.5" 2019-10-15 LTS Java(TM) SE Runtime Environment bin/conf/kyuubi-env.sh, using default ones... JAVA_HOME: /Library/Java/JavaVirtualMachines/jdk1.8.0_251.jdk/Contents/Home KYUUBI_HOME: /Users/kentyao/svn-kyuubi/v1.3.1-incubating-rc0/apache- kyuubi-1

1. Getting Kyuubi 1.2. Requirements 1.3. Installation 1.4. Running Kyuubi 1.5. Using Hive Beeline 1.6. Stopping Kyuubi 2. Getting Started With Kyuubi on kubernetes 2.1. Running kyuubi with helm 3. Getting JAVA_HOME=/path/to/java in the local os session. export JAVA_HOME=/Library/Java/JavaVirtualMachines/jdk- 11.0.5.jdk/Contents/Home java -version java version "11.0.5" 2019-10-15 LTS Java(TM) SE Runtime Environment bin/conf/kyuubi-env.sh, using default ones... JAVA_HOME: /Library/Java/JavaVirtualMachines/jdk1.8.0_251.jdk/Contents/Home KYUUBI_HOME: /Users/kentyao/svn-kyuubi/v1.3.1-incubating-rc0/apache- kyuubi-1

1. Getting Kyuubi 1.2. Requirements 1.3. Installation 1.4. Running Kyuubi 1.5. Using Hive Beeline 1.6. Stopping Kyuubi 2. Getting Started With Kyuubi and DBeaver 2.1. What is DBeaver 2.2. Preparation JAVA_HOME=/path/to/java in the local os session. export JAVA_HOME=/Library/Java/JavaVirtualMachines/jdk- 11.0.5.jdk/Contents/Home java -version java version "11.0.5" 2019-10-15 LTS Java(TM) SE Runtime Environment bin-spark-3.0.1/conf/kyuubi-env.sh to initialize... JAVA_HOME: /Library/Java/JavaVirtualMachines/jdk1.8.0_251.jdk/Contents/Home KYUUBI_HOME: /Users/kentyao/kyuubi/kyuubi-1.0.2-bin-spark-3.0.1 KYUUBI_CONF_DIR: