predicted that more than 75% of worldwide organizations would run containerized applications in production by 2022. Confidence of this prediction demonstrated the value of cloud native technologies for and security. Relying on upstream Kubernetes isn't enough for teams deploying Kubernetes into production. Basic Kubernetes installations are plagued by a lack of central visibility, inconsistent security Managed Services 3 3 1 2 Multi-Cluster Management 4 3 2 2 Edge Support 4 3 2 1 Integrated Public Cloud Support 4 2 2 2 Bare Metal, OpenStack & vSphere 4 3 2 2 Import Existing

................................................................ 9 How SUSE Rancher delivers production-grade Kubernetes at scale: ..................................... 10 Solution architecture .. giving the DevOps team freedom to build and run containerized applications anywhere. The PowerFlex family offers key value propositions for traditional and cloud-native production workloads, deployment PowerProtect Data Manager is used to discover, protect, and restore production workloads in Kubernetes environments and protects production and development, or test workloads to ensure that the data is easy

the terms and conditions of the End User License Agreement ("EULA") posted at https://support.juniper.net/support/eula/. By downloading, installing or using such software, you agree to the terms and conditions node. Integrating a full-fledged vRouter alongside the workloads provides CN2 the flexibility to support a wide range of networking requirements, from small single clusters to multi-cluster deployments presentation tools such as Prometheus and Grafana • Support for both CRI-O and containerd runtimes • Support for container and VM workloads (using kubevirt) • Support for DPDK data plane acceleration The Contrail

Leadership in Linux & Kubernetes Hybrid Cloud Infrastructure Dev Datacenter Branch Cloud Edge Support & Services Catalog Security Storage Governance The platform for managing all Kubernetes distributions approach 7 Maintain customer satisfaction with access to deep expertise from SUSE’s highly rated support organization Ensure you’re able to offer and meet Service Level Agreements (SLAs) for emerging invoicing based on usage • Backed by SUSE/Rancher -all products come with SUSE/Rancher L1, L2, and L3 support • Access to enterprise grade open-source software – no vendor lock-in • More than just subscriptions

0 - November 26th 2018 Overview This document provides prescriptive guidance for hardening a production installation of Rancher v2.1.x. It outlines the configurations and controls required to address Rancher CIS-Kubernetes self assessment using RKE This document has been created by the Engineering team at Rancher Labs. Profile Definitions The following profile definitions agree with the CIS Benchmarks Provider for Authentication Profile Applicability Level 1 Description When running Rancher in a production environment, configure an identity provider for authentication. Rationale Rancher supports several

Engine 2 using VMware vSAN and vSphere 2.1.1.2 Production systems Minimal hardware requirements for an SAP Data Intelligence 3 deployment for production use: At least seven nodes are needed for the documentation: Release Note for SAP DI 3 (https://launchpad.support.sap.com/#/notes/2871970) Release Note for SAP SLC Bridge (https://launchpad.support.sap.com/#/ notes/2589449) Installation Guide at help Downloading the SLC Bridge The SLC Bridge can be obtained: from the SAP software center at https://support.sap.com/en/tools/software-logistics-tool- s.html#section_622087154 . Choose "Download SLC Bridge"

Release ※※※※※ ※※※ ※※※ 4 Traffic Governance ※※※※※ ※※※ ※※※ Tracing ※※※※※ ※※※ ※※※ Multicloud Support ※※※※※ ※※※ ※※※※※ Multi-cluster Management ※※※※ ※※※ ※※※※※ Edge Computing ※※※※※ ※※ ※※※※※ Network ※※※※ ※※※※※ ※※※※※ Security ※※※※ ※※※※※ ※※ Windows Container ※ ※※※※ ※※※※ 5 Support Commercial Services and Support ※※※※※ ※※※※ ※※※※ 1.2 Metrics Details Product Overview Overview Product name installation tool RancherD, an easy-to-use installation tool, available Operating system support All major Linux operating systems supported Coupled to Red Hat underlying infrastructure,

.................................................................... 9 2.2 Native Kubernetes Support in Rancher ........................................................................ 9 2.3 Setting .............................................................40 4.2 Rancher Private Registry Support for Kubernetes .......................................................41 4.3 Container Monitoring ..............................................................................45 4.5 Ingress Support ................................................................................................

x security hardening guide. The hardening guide provides prescriptive guidance for hardening a production installation of Rancher, and this benchmark guide is meant to help you evaluate the level of security that the RotateKubeletServerCertificate argument is set to true (Scored) Notes RKE does not yet support certificate rotation. This feature is due for the 0.1.12 release of RKE. Audit docker inspect Ensure that the cluster-admin role is only used where required (Not Scored) Rancher has built in support for maintaining and enforcing Kubernetes RBAC on your workload clusters. Rancher has the ability

4 security hardening guide. The hardening guide provides prescriptive guidance for hardening a production installation of Rancher, and this benchmark guide is meant to help you evaluate the level of security supports Network Policies (Manual) Result: warn Remediation: If the CNI plugin in use does not support network policies, consideration should be given to making use of a different plugin, or finding an