Rancher_Hardening_Guide.md 11/30/2018 1 / 24 Rancher Hardening Guide Rancher v2.1.x Version: 0.1.0 - November 26th 2018 Overview This document provides prescriptive guidance for hardening a production production installation of Rancher v2.1.x. It outlines the configurations and controls required to address CIS-Kubernetes benchmark controls. Rancher CIS-Kubernetes self assessment using RKE This document document has been created by the Engineering team at Rancher Labs. Profile Definitions The following profile definitions agree with the CIS Benchmarks for Kubernetes. Level 1 Items in this profile intend

Rancher is a trademark of Rancher Labs, Inc. in the United States and/or other countries. Other brand names mentioned herein are for identification purposes only and may be trademarks of their respective without notice. © 2017 Rancher Labs, Inc. All rights reserved. March 2017. 1 ©Rancher Labs 2017. All rights Reserved. 2 DEPLOYING AND SCALING KUBERNETES WITH RANCHER Contents Introduction .......... 8 2. Deploying Kubernetes with Rancher ...................................................................................... 9 2.1 Rancher Overview ...................................

Secrets Management at Scale with Vault & Rancher 24. June Robert de Bock Senior DevOps Engineer Adfinis robert.debock@adfinis.com Kapil Arora Senior Solution Engineer HashiCorp kapil@hashicorp.com Setting up Kubernetes is hard 10 You don’t compile Linux from scratch, you use a distribution 11 Rancher Kubernetes Engine • 100% Upstream Kubernetes • CNCF certified • Easy installation • Zero-downtime Different locations • Edge devices SUSE Rancher - the industry’s only platform to manage all Kubernetes distributions Applications 1 Applications 3 Applications 2 Rancher Catalog Service Mesh Longhorn

3.5 2 This document provides prescriptive guidance for hardening a production installation of Rancher v2.3.5. It outlines the configurations and controls required to address Kubernetes benchmark controls CIS Kubernetes Benchmark, Kubernetes, and Rancher: Hardening Guide Version Rancher Version CIS Benchmark Version Kubernetes Version Hardening Guide v2.3.5 Rancher v2.3.5 Benchmark v1.5 Kubernetes 1.15 Overview This document provides prescriptive guidance for hardening a production installation of Rancher v2.3.5 with Kubernetes v1.15. It outlines the configurations required to address Kubernetes benchmark

v2.4 2 This document provides prescriptive guidance for hardening a production installation of Rancher v2.4. It outlines the configurations and controls required to address Kubernetes benchmark controls CIS Kubernetes Benchmark, Kubernetes, and Rancher: Hardening Guide Version Rancher Version CIS Benchmark Version Kubernetes Version Hardening Guide v2.4 Rancher v2.4 Benchmark v1.5 Kubernetes 1.15 Click Overview This document provides prescriptive guidance for hardening a production installation of Rancher v2.4 with Kubernetes v1.15. It outlines the configurations required to address Kubernetes benchmark

h e r d e p l oy m e n t h as t h e --add-local=false op t i on s e t . kubectl get deployment rancher -n cattle-system -o yaml |grep 'add-local' 15 • I n t h e R an c h e r UI go t o C l u s t er s r s w e r e p as s e d i n t o t h e R an c h e r d e p l oy - m e n t . kubectl get deployment rancher -n cattle-system -o yaml | grep auditLog • Ve r i f y t h at t h e l og i s goi n g t o t h e ap : kubectl get pods -n cattle-system 2. T ai l l ogs : kubectl logs -n cattle-system -c rancher-audit-log • hostPath 1. O n t h e w or k e r n od e s r u n n i n g t h e R an c h e r p od s

Copyright © SUSE 2021 SUSE Rancher MSP Use Cases & Enablement APRIL 2022 Managed Services Providers Copyright © SUSE 2021 Agenda Acquired Rancher in 2020 1. Company Snapshot • Powering Innovation Market • Key Benefits of SUSE Rancher for MSPs • Program Benefits for MSPs • Success Stories 2. SUSE Rancher Use Cases • SUSE Rancher Service Models • SUSE Rancher Solution Stacks • Other Service SUSE • 88% YoY growth for SUSE Rancher • 50% ACV growth in cloud • Member of CNCF board and TOC • An independent leader in open source – SUSE SA (FRA) Acquired Rancher in 2020 Acquired NeuVector in

SUSE Best Practices SAP SAP Data Intelligence 3 on Rancher Kubernetes Engine 2 using VMware vSAN and vSphere SUSE Linux Enterprise Server 15 SP4 Rancher Kubernetes Engine 2 SAP Data Intelligence 3 Dr Solutions Architect (SUSE) 1 SAP Data Intelligence 3 on Rancher Kubernetes Engine 2 using VMware vSAN and vSphere SAP Data Intelligence 3 on Rancher Kubernetes Engine 2 using VMware vSAN and vSphere Date: be held liable for possi- ble errors or the consequences thereof. 2 SAP Data Intelligence 3 on Rancher Kubernetes Engine 2 using VMware vSAN and vSphere Contents 1 Introduction 4 2 Requirements 5

1 Competitor Analysis: KubeSphere vs. Rancher and OpenShift September 2021 2 Table of Contents Competitor Analysis: KubeSphere vs. Rancher and OpenShift........................................1 3 I. Overview 1.Metrics Comparison 1.1 Features Benchmarking Features KubeSphere OpenShift Rancher Monitoring ※※※※※ ※※※※ ※※※ Logging ※※※※※ ※※※ ※※※ Events ※※※※※ ※※※※ ※※※ Auditing ※※※※※ ※※※※ ※※※ Details Product Overview Overview Product name KubeSphere OpenShift Rancher Company name QingCloud Technologies Red Hat Rancher Labs Parent company None IBM SUSE Place of incorporation of parent

Rancher 用户手册 第 1 页 共 35 页 修订记录 版本 更改说明 更新人 日期 0.1 文档创建 Rancher 团队 2018/11/12 0.2 文档更新 Rancher 团队 2018/12/28 0.3 文档更新 Rancher 团队 2018/12/29 0.4 文档更新 Rancher 团队 团队 2019/01/02 1.0 文档更新 Rancher 团队 2019/01/07 第 2 页 共 35 页 目 录 1. 概要 ........................................................................... https://k8sadmin.sxc.sh/ Rancher UI Page 5 2. 系统登陆 2.1. 概述 通过 Rancher Server URL 登陆到 Rancher UI 管理平台。 2.2. 操作说明 具体操作说明如下： 2.2.1. 访问 Rancher UI 浏览器输入 Rancher Server URL，选择 Log in