r od u c t i on i n s t al - l at i on of R an c h e r v 2. 3. 3+ w i t h K u b e r n e t e s v 1. 14, v 1. 15 an d v 1. 16. I t ou t l i n e s t h e c on fi gu r at i on s an d c on t r ol s r e q u i at t h e RotateKubeletServerCertificate ar gu m e n t i s s e t t o t r u e ( S c or e d ) • 2. 1. 14 - E n s u r e t h at t h e K u b e l e t on l y m ak e s u s e of S t r on g C r y p t ogr ap h i c at t h e ad m i s s i on c on t r ol p l u gi n DenyEscalatingExec i s s e t ( S c or e d ) • 1. 1. 14 - E n s u r e t h at t h e ad m i s s i on c on t r ol p l u gi n NamespaceLifecycle i s s e t ( S

Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography 3/14/2007 [SP 800-57 P1 r5] NIST SP 800-57 Part 1 Rev. 5, Recommendation for Key Management: Part 1 – ............................14 8.1 Power-On Self-Tests ............................................................................................................... 14 8.2 Conditional Self-Tests .................................................................................................. 14 9 Guidance and Secure Operation ...............................................................

"${FILES_PERMISSIONS}" echo "true" exit CIS 1.6 Benchmark - Self-Assessment Guide - Rancher v2.5.4 14 Returned Value: true 1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Automated) present AND '--key-file' is present Returned Value: etcd 4318 4301 6 16:15 ? 00:00:14 /usr/ local/bin/etcd --listen-peer-urls=https://0.0.0.0:2380 --cert- file=/etc/kubernetes/ssl/ku present OR 'true' is equal to 'true' Returned Value: etcd 4318 4301 6 16:15 ? 00:00:14 /usr/ local/bin/etcd --listen-peer-urls=https://0.0.0.0:2380 --cert- file=/etc/kubernetes/ssl/ku

com/dell/csi- vxflexos Requirements Installation of the SUSE Rancher Kubernetes cluster 14 SUSE Rancher and RKE Kubernetes cluster using CSI Driver on DELL EMC PowerFlex White Paper Note: WordPress application in the namespace dellwordpress that is accessed using the nodeports: Figure 14. WordPress application pods in dellwordpress namespace from Rancher UI Performing backup of namespaces Hardware Configuration CPU Cores 2 x Intel(R) Xeon(R) Gold 6126 CPU @ 2.60 GHz Memory 14 x 16 GB NIC 2 x Mellanox ConnectX-4 LX 25 GbE SFP Adapter 1 x Intel(R) Ethernet 10G 4P X710/I350

Container Management ............14 2.4.1 Infrastructure Visibility .............................................................................................14 2.4.2 Kubernetes Dashboard ... • kubectld is the daemon which runs kubectl. ©Rancher Labs 2017. All rights Reserved. 14 DEPLOYING AND SCALING KUBERNETES WITH RANCHER • kubelet is an agent node and runs on every node

configure and manage, but also easier to apply consistent network policy and security. Figure 5 on page 14 provides more detail on this setup. The Contrail controller sits in the Kubernetes control plane of cluster or in different clusters. The only requirement is that the data plane components are reachable. 14 System Requirements Table 3: System Requirements for Rancher RKE2 Installation with CN2 Machine Native Computing Foundation (CNCF) certified and offers Federal Information Processing Standard (FIPS) 14-2 compliance. RKE2 leverages containerd as the container runtime, reducing resource overhead and improving

Hardening Guide v2.3.5 Hardening Guide v2.3.5 1 3 3 4 5 6 14 21 Contents Overview Configure Kernel Runtime Parameters Configure etcd user and group Ensure that all Namespaces have Network ingress-nginx --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role Hardening Guide v2.3.5 14 metadata: name: default-psp-role namespace: ingress-nginx rules: - apiGroups: