resource for Rancher concepts, components, and best practices o Helm Documentation: Provides in depth information about using Helm package manager in Kubernetes Rancher Articles and Walkthroughs deployable in a Kubernetes environment. o Rancher Controller for the Kubernetes Ingress Feature: An in-depth look on how Rancher works with one of the key features of Kubernetes o Creating a MongoDB Replica your build, test, and deployment processes o Comparing Kubernetes, Mesos, and Docker Swarm: an in-depth guide comparing the most common orchestration tools on the market Rancher is a trademark

are intended for use in environments or use cases where security is paramount act as a defense in depth measure may negatively impact the utility or performance of the technology Authors Jason Greathouse system, including the Rancher management server itself. Disabling the local cluster is a defense in depth measure and removes the possible attack vector from the Rancher UI and API. Rancher_Hardening_Guide

different projects and user interfaces. To handle different scenarios, users need to have an in-depth understanding of the concepts and use of Kubernetes and cloud-native ecological projects. Since

r1] NIST SP 800-90A Rev. 1, Recommendation for Random Number Generation Using Deterministic Random Bit Generators 6/24/2015 [SP 800-131A r2] NIST SP 800-131A Rev. 2, Transitioning the Use of Cryptographic Keyed Hashing HMAC-SHA HMAC key User, CO Execute Hashing SHS None User, CO N/A Random Bit Generation CTR_DRBG DRBG seed, internal state V and Key values User, CO Write/Execute Signature Cryptographic Key Generation Key Generation A865 DRBG [SP 800-90A r1] AES-256 CTR_DRBG Random Bit Generation A865 ECDSA [FIPS 186-4] Sig Gen Component Key Pair Gen, Sig Gen, Sig Ver, PKV P-224

completely removing the need for any manual configuration. The logging operator utilizes Fluent Bit to query the Kubernetes API and enriches logs with metadata on pods. Fluentd then filters, transfers TKG ships with Fluent Bit for collecting and forwarding logs. Logs can go to an Elasticsearch, Kafka, Splunk, syslog or HTTP endpoint. The deployment and configuration of Fluent Bit is a manual process capabilities and now utilizes Banzai Cloud Logging operator to power logging across the platform. Fluent Bit is used to aggregate logs and Fluentd is used for filtering messages and routing them to outputs.