root root 4096 Jul 1 19:53 . drwxr-xr-x 4 root root 4096 Jul 1 19:53 .. -rw------- 1 root root 1679 Jul 1 19:53 kube-apiserver-key.pem -rw------- 1 root root 1679 Jul 1 19:53 kube-apiserver-proxy-client-key root root 1107 Jul 1 19:53 kube-apiserver-proxy-client.pem -rw------- 1 root root 1675 Jul 1 19:53 kube-apiserver-requestheader-ca-key.pem -rw-r--r-- 1 root root 1082 Jul 1 19:53 kube-apiserver-requestheader-ca 1285 Jul 1 19:53 kube-apiserver.pem -rw------- 1 root root 1675 Jul 1 19:53 kube-ca-key.pem -rw-r--r-- 1 root root 1017 Jul 1 19:53 kube-ca.pem -rw------- 1 root root 1679 Jul 1 19:53 kube-controller-manager-key

(cp/etcd/worker) 25 x Node 3 x Node Product Qty Nodes Rancher Management Server 3 0 Rancher Nodes 53 53 ITOps Admin: End user DevOps: End user Copyright © SUSE 2021 Copyright © SUSE 2021 SUSE Partner respective owners. For more information, contact SUSE at: +1 800 796 3700 (U.S./Canada) +49 (0)911-740 53-0 (Worldwide) Maxfeldstrasse 5 90409 Nuremberg www.suse.com Thank you

Security Policies 5.3 Network Policies and CNI CIS Benchmark Rancher Self-Assessment Guide - v2.4 2 53 5.6 General Policies CIS Benchmark Rancher Self-Assessment Guide - v2.4 3 CIS Kubernetes Benchmark ot/.kube/config} kubectl version > /dev/null CIS Benchmark Rancher Self-Assessment Guide - v2.4 53 if [[ $? -gt 0 ]]; then echo "fail: kubectl failed" exit 1 fi default_resources=$(kubectl

Accounts 5.2 Pod Security Policies CIS 1.5 Benchmark - Self-Assessment Guide - Rancher v2.5 2 52 53 5.3 Network Policies and CNI 5.6 General Policies CIS 1.5 Benchmark - Self-Assessment Guide - Rancher Audit Script: 5.6.4.sh #!/bin/bash -e CIS 1.5 Benchmark - Self-Assessment Guide - Rancher v2.5 53 export KUBECONFIG=${KUBECONFIG:-/root/.kube/config} kubectl version > /dev/null if [[ $? -gt 0 ]];

4 2 21 21 22 23 23 24 26 27 29 31 33 34 36 37 39 41 41 42 43 45 47 48 50 52 53 55 56 1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated) 1.1.17 'false' is equal to 'false' Returned Value: CIS 1.6 Benchmark - Self-Assessment Guide - Rancher v2.5.4 53 root 4643 4626 22 16:15 ? 00:00:46 kube- apiserver --etcd-keyfile=/etc/kubernetes/ssl/kube-node-

ingress-nginx-controller NodePort 10.43.86.90 80:31963/ TCP,443:{di_version}06/TCP 53d In our example here, the TLS port is be 3.306. Note the port IP down as you will need it to access

namespace: elk labels: component: elasticsearch ©Rancher Labs 2017. All rights Reserved. 53 DEPLOYING AND SCALING KUBERNETES WITH RANCHER spec: replicas: 1 template: metadata: