Rancher 2.1.x - Rancher Hardening Guide

This document (000020238) is provided subject to the disclaimer at the end of this document.

Situation

Rancher v2.1.x

Version: 0.1.0 - November 26th 2018

Overview

This document provides prescriptive guidance for hardening a production installation of Rancher v2.1.x. It outlines the configurations and controls required to address CIS-Kubernetes benchmark controls.

Rancher CIS-Kubernetes self assessment using RKE

This document has been created by the Engineering team at Rancher Labs.

Profile Definitions
The following profile definitions agree with the CIS Benchmarks for Kubernetes.

Level 1

Items in this profile intend to:

offer practical advice appropriate for the environment;
deliver an obvious security benefit; and
not alter the functionality or utility of the environment beyond an acceptable margin

Level 2

Items in this profile extend the “Level 1” profile and exhibit one or more of the following characteristics:

are intended for use in environments or use cases where security is paramount
act as a defense in depth measure
may negatively impact the utility or performance of the technology

Authors

Jason Greathouse
Bill Maxwell

Download document here:

https://releases.rancher.com/documents/security/latest/Rancher_Hardening_Guide.pdf

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.