and distributed in its entirety without modification. Rancher Kubernetes Cryptographic Library FIPS 140-2 Non-Proprietary Security Policy Document Version 1.1 January 4, 2021 corsec.com +1 703.276.6050 FIPS 140-2 Security Policy Rancher Kubernetes Cryptographic Library Page 2 of 16 References Ref Full Specification Name Date [140] FIPS 140-2, Security Authentication Code (HMAC) 7/16/2008 FIPS 140-2 Security Policy Rancher Kubernetes Cryptographic Library Page 3 of 16 Acronyms and Definitions Term Definition AES Advanced Encryption Standard

rights Reserved. 5 DEPLOYING AND SCALING KUBERNETES WITH RANCHER Selector A selector expression matches labels to filter certain resources. For example, you may want to search for all pods that to understanding what is happening with a given cluster. Internal Kubernetes components use log library to log data; kubectl (the command line interface) can be used to fetch log data from containers only target the pods which have a name label as frontend and are running port 80. The selector expression is evaluated continuously and posted on EndPoint object within Kubernetes. For example, if we

entry point for managing all Contrail resources. It is registered with the regular kube-apiserver as an APIService. The regular kube-apiserver forwards all network-related requests to the contrail-k8s-apiserver between Kubernetes resources and Contrail resources. It watches the kube- apiserver for changes to regular Kubernetes resources such as service and namespace and acts on any changes that affect the networking to other control plane nodes or external routers. These XMPP and BGP messages are sent outside of regular Kubernetes node-to-node communications. The contrail-k8s-kubemanager (cluster) components are only

backups of all relevant data to be able to restore the environment in case of a failure. To perform regular backups, follow the instructions as outlined in the respective documentation below: For RKE 2, (https://rancher.com/docs/rke/ latest/en/etcd-snapshots/) SAP Data Intelligence 3 can be configured to create regular backups. For more information, visit help.sap.com: https://help.sap.com/viewer/a8d90a56d61a49718ebcb5f65014bbe7/3

Rancher All SUSE Rancher-deployed RKE clusters are automatically backed up to local storage at regular intervals. The operator can change this to an S3-compatible endpoint. Clusters can be restored to