SUSE Rancher and RKE Kubernetes cluster using CSI Driver on DELL EMC PowerFlex September 2021 H18899 White Paper Abstract This white paper describes the deployment of a SUSE Rancher Kubernetes Kubernetes Cluster on the Dell EMC PowerFlex family and the integration of PowerFlex CSI driver 1.4 for persistent volume, for customers requiring an on-premises container platform solution. This white paper Engineering Validated Copyright 2 SUSE Rancher and RKE Kubernetes cluster using CSI Driver on DELL EMC PowerFlex White Paper The information in this publication is provided as is. Dell

Storage Container Security I.a.a.S Copyright © SUSE 2021 5 Source: IDC Drivers and Inhibitors Driver: Public Cloud Adoption “Eventually, container infrastructure software as a service may become an functionality” Revenue Growth 2022 to 2025 Cloud +$778.9M, 25% CAGR On-Prem/Other +$1052.7M, 17% CAGR Driver: Shift to Cloud-Native Apps Enterprises have been trained by the hyperscalers to adopt cloud-native invent themselves Inhibitor: Scarcity of expertise While an inhibitor to software sales, this is a Driver of demand for managed and professional services 0 1000 2000 3000 4000 2022 2023 2024 2025

DigitalOcean and Tencent. If a user wishes to deploy a cluster with a new provider, they can import a driver for that provider directly from the UI. With EKS, GKE and AKS, SUSE Rancher can now import, vSphere Cloud Native Storage (CNS), along with NFS and iSCSI. TKG supports any CSI-compliant storage driver. 3.1.13.4 Anthos Anthos supports in-tree, CSI, AWS, NFS, Azure, vSphere storage drivers and

Agent container to manage these secrets ● Mount Vault secrets as volume using secrets store CSI driver Conclusion • Vault is a logical component in Ranchers K8s clusters. • It’s easy to install Vault

Self-Assessment Guide - Rancher v2.5.4 112 file=/etc/kubernetes/ssl/kube-kubelet-192-168-1-225.pem -- cgroup-driver=cgroupfs --resolv-conf=/run/systemd/resolve/ resolv.conf 4.2.6 Ensure that the --protect-kernel- --root-dir=/var/lib/kubelet --tls-cert- file=/etc/kubernetes/ssl/kube-kubelet-192-168-1-225.pem -- cgroup-driver=cgroupfs --resolv-conf=/run/systemd/resolve/ resolv.conf 4.2.12 Verify that the RotateKubeletServerCertificate

Review the list of node drivers that are in an Active state. Remediation If a disallowed node driver is active, visit the Node Drivers page under Global and disable it. Appendix A - Complete RKE cluster

intel_iommu=on iommu=pt” Update grub and reboot: sudo update-grub sudo reboot 3. Load the poll mode driver (PMD) kernel module according to the capabilities of your NIC. • If your NIC supports VFIO, then