This commit is contained in:
github-actions[bot] committed 2023-04-12 04:51:21 +00:00
1 parent de59a1f028
commit 5383c45568
3665 files changed
+21759 -16265

No files matched your search

+4 -4
View File
@@ -12,15 +12,15 @@
<script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" charset="UTF-8" data-domain-script="0f98beb0-fc4c-417d-a42e-564e2cae42d2" async></script>
<script src="/scripts/optanonwrapper.js" async></script><link rel="stylesheet" href="/assets/css/styles.35be4547.css">
<link rel="preload" href="/assets/js/runtime~main.2e706d22.js" as="script">
<link rel="preload" href="/assets/js/main.0657872f.js" as="script">
<link rel="preload" href="/assets/js/runtime~main.dad943c6.js" as="script">
<link rel="preload" href="/assets/js/main.9c44ecb5.js" as="script">
</head>
<body class="navigation-with-keyboard">
<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-57KS2MW" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
<script>!function(){function t(t){document.documentElement.setAttribute("data-theme",t)}var e=function(){var t=null;try{t=localStorage.getItem("theme")}catch(t){}return t}();t(null!==e?e:"light")}()</script><div id="__docusaurus">
<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/rancher-logo-horiz-color.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/rancher-logo-horiz-color.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a><div class="navbar__item dropdown dropdown--hoverable"><a aria-current="page" class="navbar__link active" aria-haspopup="true" aria-expanded="false" role="button" href="/">v2.7</a><ul class="dropdown__menu"><li><a aria-current="page" class="dropdown__link dropdown__link--active" href="/">v2.7</a></li><li><a class="dropdown__link" href="/v2.6">v2.6</a></li><li><a class="dropdown__link" href="/v2.5">v2.5</a></li><li><a class="dropdown__link" href="/v2.0-v2.4">v2.0-v2.4</a></li><li><a class="dropdown__link" href="/versions">All versions</a></li></ul></div></div><div class="navbar__items navbar__items--right"><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/404" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/404" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li></ul></div><a href="https://github.com/rancher/rancher-docs" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github">GitHub<svg width="13.5" height="13.5" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPIU"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a><a href="https://rancher.com" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link">Rancher Home<svg width="13.5" height="13.5" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPIU"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0"><main class="container margin-vert--xl"><div class="row"><div class="col col--6 col--offset-3"><h1 class="hero__title">Page Not Found</h1><p>We could not find what you were looking for.</p><p>Please contact the owner of the site that linked you to the original URL and let them know their link is broken.</p></div></div></main></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 SUSE Rancher. All Rights Reserved.</div></div></div></footer></div>
<script src="/assets/js/runtime~main.2e706d22.js"></script>
<script src="/assets/js/main.0657872f.js"></script>
<script src="/assets/js/runtime~main.dad943c6.js"></script>
<script src="/assets/js/main.9c44ecb5.js"></script>
</body>
</html>
@@ -0,0 +1,37 @@
apiVersion: apiserver.config.k8s.io/v1
kind: AdmissionConfiguration
plugins:
- configuration:
apiVersion: pod-security.admission.config.k8s.io/v1
defaults:
audit: restricted
audit-version: latest
enforce: restricted
enforce-version: latest
warn: restricted
warn-version: latest
exemptions:
namespaces:
- ingress-nginx
- kube-system
- cattle-system
- cattle-epinio-system
- cattle-fleet-system
- longhorn-system
- cattle-neuvector-system
- cattle-monitoring-system
- rancher-alerting-drivers
- cis-operator-system
- cattle-csp-adapter-system
- cattle-externalip-system
- cattle-gatekeeper-system
- istio-system
- cattle-istio-system
- cattle-logging-system
- cattle-windows-gmsa-system
- cattle-sriov-system
- cattle-ui-plugin-system
- tigera-operator
kind: PodSecurityConfiguration
name: PodSecurity
path: ""
Binary file not shown.

After

Width:  |  Height:  |  Size: 140 KiB

-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[49435],{3905:(e,t,r)=>{r.d(t,{Zo:()=>p,kt:()=>d});var a=r(67294);function i(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function n(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function o(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?n(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):n(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,a,i=function(e,t){if(null==e)return{};var r,a,i={},n=Object.keys(e);for(a=0;a<n.length;a++)r=n[a],t.indexOf(r)>=0||(i[r]=e[r]);return i}(e,t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);for(a=0;a<n.length;a++)r=n[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(i[r]=e[r])}return i}var l=a.createContext({}),u=function(e){var t=a.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):o(o({},t),e)),r},p=function(e){var t=u(e.components);return a.createElement(l.Provider,{value:t},e.children)},g={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},c=a.forwardRef((function(e,t){var r=e.components,i=e.mdxType,n=e.originalType,l=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),c=u(r),d=i,m=c["".concat(l,".").concat(d)]||c[d]||g[d]||n;return r?a.createElement(m,o(o({ref:t},p),{},{components:r})):a.createElement(m,o({ref:t},p))}));function d(e,t){var r=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var n=r.length,o=new Array(n);o[0]=c;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:i,o[1]=s;for(var u=2;u<n;u++)o[u]=r[u];return a.createElement.apply(null,o)}return a.createElement.apply(null,r)}c.displayName="MDXCreateElement"},6905:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>o,default:()=>g,frontMatter:()=>n,metadata:()=>s,toc:()=>u});var a=r(87462),i=(r(67294),r(3905));const n={title:"Configuring a Global Default Private Registry"},o=void 0,s={unversionedId:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/global-default-private-registry",id:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/global-default-private-registry",title:"Configuring a Global Default Private Registry",description:"This page describes how to configure a global default private registry from the Rancher UI, after Rancher is already installed.",source:"@site/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/global-default-private-registry.md",sourceDirName:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration",slug:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/global-default-private-registry",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/global-default-private-registry",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/global-default-private-registry.md",tags:[],version:"current",lastUpdatedAt:1680534195,formattedLastUpdatedAt:"Apr 3, 2023",frontMatter:{title:"Configuring a Global Default Private Registry"},sidebar:"tutorialSidebar",previous:{title:"Pod Security Policies",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies"},next:{title:"Custom Branding",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/custom-branding"}},l={},u=[{value:"Set a Private Registry with No Credentials as the Default Registry",id:"set-a-private-registry-with-no-credentials-as-the-default-registry",level:2},{value:"Namespaced Private Registry with RKE2 Downstream Clusters",id:"namespaced-private-registry-with-rke2-downstream-clusters",level:3},{value:"Configure a Private Registry with Credentials when Creating a Cluster",id:"configure-a-private-registry-with-credentials-when-creating-a-cluster",level:2}],p={toc:u};function g(e){let{components:t,...r}=e;return(0,i.kt)("wrapper",(0,a.Z)({},p,r,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("admonition",{type:"note"},(0,i.kt)("p",{parentName:"admonition"},"This page describes how to configure a global default private registry from the Rancher UI, after Rancher is already installed. "),(0,i.kt)("p",{parentName:"admonition"},"For instructions on how to set up a private registry during Rancher installation, refer to the ",(0,i.kt)("a"Line truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[49435],{3905:(e,t,r)=>{r.d(t,{Zo:()=>p,kt:()=>d});var a=r(67294);function i(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function n(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function o(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?n(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):n(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,a,i=function(e,t){if(null==e)return{};var r,a,i={},n=Object.keys(e);for(a=0;a<n.length;a++)r=n[a],t.indexOf(r)>=0||(i[r]=e[r]);return i}(e,t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);for(a=0;a<n.length;a++)r=n[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(i[r]=e[r])}return i}var l=a.createContext({}),u=function(e){var t=a.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):o(o({},t),e)),r},p=function(e){var t=u(e.components);return a.createElement(l.Provider,{value:t},e.children)},g={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},c=a.forwardRef((function(e,t){var r=e.components,i=e.mdxType,n=e.originalType,l=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),c=u(r),d=i,m=c["".concat(l,".").concat(d)]||c[d]||g[d]||n;return r?a.createElement(m,o(o({ref:t},p),{},{components:r})):a.createElement(m,o({ref:t},p))}));function d(e,t){var r=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var n=r.length,o=new Array(n);o[0]=c;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:i,o[1]=s;for(var u=2;u<n;u++)o[u]=r[u];return a.createElement.apply(null,o)}return a.createElement.apply(null,r)}c.displayName="MDXCreateElement"},6905:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>o,default:()=>g,frontMatter:()=>n,metadata:()=>s,toc:()=>u});var a=r(87462),i=(r(67294),r(3905));const n={title:"Configuring a Global Default Private Registry"},o=void 0,s={unversionedId:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/global-default-private-registry",id:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/global-default-private-registry",title:"Configuring a Global Default Private Registry",description:"This page describes how to configure a global default private registry from the Rancher UI, after Rancher is already installed.",source:"@site/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/global-default-private-registry.md",sourceDirName:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration",slug:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/global-default-private-registry",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/global-default-private-registry",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/global-default-private-registry.md",tags:[],version:"current",lastUpdatedAt:1680534195,formattedLastUpdatedAt:"Apr 3, 2023",frontMatter:{title:"Configuring a Global Default Private Registry"},sidebar:"tutorialSidebar",previous:{title:"Pod Security Admission (PSA) Configuration Templates",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/psa-config-templates"},next:{title:"Custom Branding",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/custom-branding"}},l={},u=[{value:"Set a Private Registry with No Credentials as the Default Registry",id:"set-a-private-registry-with-no-credentials-as-the-default-registry",level:2},{value:"Namespaced Private Registry with RKE2 Downstream Clusters",id:"namespaced-private-registry-with-rke2-downstream-clusters",level:3},{value:"Configure a Private Registry with Credentials when Creating a Cluster",id:"configure-a-private-registry-with-credentials-when-creating-a-cluster",level:2}],p={toc:u};function g(e){let{components:t,...r}=e;return(0,i.kt)("wrapper",(0,a.Z)({},p,r,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("admonition",{type:"note"},(0,i.kt)("p",{parentName:"admonition"},"This page describes how to configure a global default private registry from the Rancher UI, after Rancher is already installed. "),(0,i.kt)("p",{parentName:"admonition"},"For instructions on how to set up a private registry during Rancher installation, refeLine truncated
@@ -1 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[34746],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>d});var a=n(67294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var i=a.createContext({}),c=function(e){var t=a.useContext(i),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},p=function(e){var t=c(e.components);return a.createElement(i.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},h=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,i=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),h=c(n),d=r,m=h["".concat(i,".").concat(d)]||h[d]||u[d]||l;return n?a.createElement(m,o(o({ref:t},p),{},{components:n})):a.createElement(m,o({ref:t},p))}));function d(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,o=new Array(l);o[0]=h;var s={};for(var i in t)hasOwnProperty.call(t,i)&&(s[i]=t[i]);s.originalType=e,s.mdxType="string"==typeof e?e:r,o[1]=s;for(var c=2;c<l;c++)o[c]=n[c];return a.createElement.apply(null,o)}return a.createElement.apply(null,n)}h.displayName="MDXCreateElement"},80188:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>i,contentTitle:()=>o,default:()=>u,frontMatter:()=>l,metadata:()=>s,toc:()=>c});var a=n(87462),r=(n(67294),n(3905));const l={title:"3. Install Rancher"},o=void 0,s={unversionedId:"getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher",id:"getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher",title:"3. Install Rancher",description:"Now that you have a running RKE cluster, you can install Rancher in it. For security reasons all traffic to Rancher must be encrypted with TLS. For this tutorial you are going to automatically issue a self-signed certificate through cert-manager. In a real-world use-case you will likely use Let's Encrypt or provide your own certificate.",source:"@site/docs/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher.md",sourceDirName:"getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy",slug:"/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher",permalink:"/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher.md",tags:[],version:"current",lastUpdatedAt:1673452765,formattedLastUpdatedAt:"Jan 11, 2023",frontMatter:{title:"3. Install Rancher"},sidebar:"tutorialSidebar",previous:{title:"2. Install Kubernetes",permalink:"/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-kubernetes"},next:{title:"Resources",permalink:"/pages-for-subheaders/resources"}},i={},c=[{value:"Install the Helm CLI",id:"install-the-helm-cli",level:3},{value:"Install cert-manager",id:"install-cert-manager",level:3},{value:"Install Rancher",id:"install-rancher",level:3},{value:"Additional Resources",id:"additional-resources",level:3}],p={toc:c};function u(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"Now that you have a running RKE cluster, you can install Rancher in it. For security reasons all traffic to Rancher must be encrypted with TLS. For this tutorial you are going to automatically issue a self-signed certificate through ",(0,r.kt)("a",{parentName:"p",href:"https://cert-manager.io/"},"cert-manager"),". In a real-world use-case you will likely use Let's Encrypt or provide your own certificate."),(0,r.kt)("h3",{id:"install-the-helm-cli"},"Install the Helm CLILine truncated
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[34746],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>d});var a=n(67294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var i=a.createContext({}),c=function(e){var t=a.useContext(i),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},p=function(e){var t=c(e.components);return a.createElement(i.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},h=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,i=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),h=c(n),d=r,m=h["".concat(i,".").concat(d)]||h[d]||u[d]||l;return n?a.createElement(m,o(o({ref:t},p),{},{components:n})):a.createElement(m,o({ref:t},p))}));function d(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,o=new Array(l);o[0]=h;var s={};for(var i in t)hasOwnProperty.call(t,i)&&(s[i]=t[i]);s.originalType=e,s.mdxType="string"==typeof e?e:r,o[1]=s;for(var c=2;c<l;c++)o[c]=n[c];return a.createElement.apply(null,o)}return a.createElement.apply(null,n)}h.displayName="MDXCreateElement"},80188:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>i,contentTitle:()=>o,default:()=>u,frontMatter:()=>l,metadata:()=>s,toc:()=>c});var a=n(87462),r=(n(67294),n(3905));const l={title:"3. Install Rancher"},o=void 0,s={unversionedId:"getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher",id:"getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher",title:"3. Install Rancher",description:"Now that you have a running RKE cluster, you can install Rancher in it. For security reasons all traffic to Rancher must be encrypted with TLS. For this tutorial you are going to automatically issue a self-signed certificate through cert-manager. In a real-world use-case you will likely use Let's Encrypt or provide your own certificate.",source:"@site/docs/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher.md",sourceDirName:"getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy",slug:"/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher",permalink:"/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher.md",tags:[],version:"current",lastUpdatedAt:1681151826,formattedLastUpdatedAt:"Apr 10, 2023",frontMatter:{title:"3. Install Rancher"},sidebar:"tutorialSidebar",previous:{title:"2. Install Kubernetes",permalink:"/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-kubernetes"},next:{title:"Resources",permalink:"/pages-for-subheaders/resources"}},i={},c=[{value:"Install the Helm CLI",id:"install-the-helm-cli",level:3},{value:"Install cert-manager",id:"install-cert-manager",level:3},{value:"Install Rancher",id:"install-rancher",level:3},{value:"Additional Resources",id:"additional-resources",level:3}],p={toc:c};function u(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"Now that you have a running RKE cluster, you can install Rancher in it. For security reasons all traffic to Rancher must be encrypted with TLS. For this tutorial you are going to automatically issue a self-signed certificate through ",(0,r.kt)("a",{parentName:"p",href:"https://cert-manager.io/"},"cert-manager"),". In a real-world use-case you will likely use Let's Encrypt or provide your own certificate."),(0,r.kt)("h3",{id:"install-the-helm-cli"},"Install the Helm CLILine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[59983],{3905:(e,r,t)=>{t.d(r,{Zo:()=>u,kt:()=>d});var a=t(67294);function n(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function s(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);r&&(a=a.filter((function(r){return Object.getOwnPropertyDescriptor(e,r).enumerable}))),t.push.apply(t,a)}return t}function l(e){for(var r=1;r<arguments.length;r++){var t=null!=arguments[r]?arguments[r]:{};r%2?s(Object(t),!0).forEach((function(r){n(e,r,t[r])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):s(Object(t)).forEach((function(r){Object.defineProperty(e,r,Object.getOwnPropertyDescriptor(t,r))}))}return e}function i(e,r){if(null==e)return{};var t,a,n=function(e,r){if(null==e)return{};var t,a,n={},s=Object.keys(e);for(a=0;a<s.length;a++)t=s[a],r.indexOf(t)>=0||(n[t]=e[t]);return n}(e,r);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(a=0;a<s.length;a++)t=s[a],r.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(n[t]=e[t])}return n}var c=a.createContext({}),o=function(e){var r=a.useContext(c),t=r;return e&&(t="function"==typeof e?e(r):l(l({},r),e)),t},u=function(e){var r=o(e.components);return a.createElement(c.Provider,{value:r},e.children)},p={inlineCode:"code",wrapper:function(e){var r=e.children;return a.createElement(a.Fragment,{},r)}},k=a.forwardRef((function(e,r){var t=e.components,n=e.mdxType,s=e.originalType,c=e.parentName,u=i(e,["components","mdxType","originalType","parentName"]),k=o(t),d=n,h=k["".concat(c,".").concat(d)]||k[d]||p[d]||s;return t?a.createElement(h,l(l({ref:r},u),{},{components:t})):a.createElement(h,l({ref:r},u))}));function d(e,r){var t=arguments,n=r&&r.mdxType;if("string"==typeof e||n){var s=t.length,l=new Array(s);l[0]=k;var i={};for(var c in r)hasOwnProperty.call(r,c)&&(i[c]=r[c]);i.originalType=e,i.mdxType="string"==typeof e?e:n,l[1]=i;for(var o=2;o<s;o++)l[o]=t[o];return a.createElement.apply(null,l)}return a.createElement.apply(null,t)}k.displayName="MDXCreateElement"},30554:(e,r,t)=>{t.r(r),t.d(r,{assets:()=>c,contentTitle:()=>l,default:()=>p,frontMatter:()=>s,metadata:()=>i,toc:()=>o});var a=t(87462),n=(t(67294),t(3905));const s={title:"RKE2 Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.23"},l=void 0,i={unversionedId:"reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.23",id:"reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.23",title:"RKE2 Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.23",description:"This document is a companion to the RKE2 Hardening Guide, which provides prescriptive guidance on how to harden RKE2 clusters that are running in production and managed by Rancher. This benchmark guide helps you evaluate the security of a hardened cluster against each control in the CIS Kubernetes Benchmark.",source:"@site/docs/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.23.md",sourceDirName:"reference-guides/rancher-security/hardening-guides/rke2-hardening-guide",slug:"/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.23",permalink:"/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.23",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.23.md",tags:[],version:"current",lastUpdatedAt:1678300966,formattedLastUpdatedAt:"Mar 8, 2023",frontMatter:{title:"RKE2 Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.23"},sidebar:"tutorialSidebar",previous:{title:"RKE2 Hardening Guide",permalink:"/pages-for-subheaders/rke2-hardening-guide"},next:{title:"RKE2 Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.24",permalink:"/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.24"}},c={},o=[{value:"Testing Methodology",id:"testing-methodology",level:2},{value:"Controls",id:"controls",level:3},{value:"1.1 Master Node Configuration Files",id:"11-master-node-configuration-files",level:2},{value:"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)",id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)",id:"112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{Line truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[20416],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>h});var a=n(67294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function l(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function i(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},o=Object.keys(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var s=a.createContext({}),c=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):l(l({},t),e)),n},p=function(e){var t=c(e.components);return a.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,o=e.originalType,s=e.parentName,p=i(e,["components","mdxType","originalType","parentName"]),d=c(n),h=r,m=d["".concat(s,".").concat(h)]||d[h]||u[h]||o;return n?a.createElement(m,l(l({ref:t},p),{},{components:n})):a.createElement(m,l({ref:t},p))}));function h(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=n.length,l=new Array(o);l[0]=d;var i={};for(var s in t)hasOwnProperty.call(t,s)&&(i[s]=t[s]);i.originalType=e,i.mdxType="string"==typeof e?e:r,l[1]=i;for(var c=2;c<o;c++)l[c]=n[c];return a.createElement.apply(null,l)}return a.createElement.apply(null,n)}d.displayName="MDXCreateElement"},46035:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>l,default:()=>u,frontMatter:()=>o,metadata:()=>i,toc:()=>c});var a=n(87462),r=(n(67294),n(3905));const o={title:"3. Install Rancher"},l=void 0,i={unversionedId:"getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher",id:"version-2.6/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher",title:"3. Install Rancher",description:"Now that you have a running RKE cluster, you can install Rancher in it. For security reasons all traffic to Rancher must be encrypted with TLS. For this tutorial you are going to automatically issue a self-signed certificate through cert-manager. In a real-world use-case you will likely use Let's Encrypt or provide your own certificate.",source:"@site/versioned_docs/version-2.6/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher.md",sourceDirName:"getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy",slug:"/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher",permalink:"/v2.6/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.6/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher.md",tags:[],version:"2.6",lastUpdatedAt:1681239575,formattedLastUpdatedAt:"Apr 11, 2023",frontMatter:{title:"3. Install Rancher"},sidebar:"tutorialSidebar",previous:{title:"2. Install Kubernetes",permalink:"/v2.6/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-kubernetes"},next:{title:"Resources",permalink:"/v2.6/pages-for-subheaders/resources"}},s={},c=[{value:"Install cert-manager",id:"install-cert-manager",level:3},{value:"Install Rancher",id:"install-rancher",level:3},{value:"Additional Resources",id:"additional-resources",level:3}],p={toc:c};function u(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"Now that you have a running RKE cluster, you can install Rancher in it. For security reasons all traffic to Rancher must be encrypted with TLS. For this tutorial you are going to automatically issue a self-signed certificate through ",(0,r.kt)("a",{parentName:"p",href:"https://cert-manager.io/"},"cert-manager"),". In a real-world use-case you will likely use Let's Encrypt or provide your own certificate."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:Line truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[20416],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>h});var a=n(67294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function i(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var s=a.createContext({}),c=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},p=function(e){var t=c(e.components);return a.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,p=i(e,["components","mdxType","originalType","parentName"]),d=c(n),h=r,m=d["".concat(s,".").concat(h)]||d[h]||u[h]||l;return n?a.createElement(m,o(o({ref:t},p),{},{components:n})):a.createElement(m,o({ref:t},p))}));function h(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,o=new Array(l);o[0]=d;var i={};for(var s in t)hasOwnProperty.call(t,s)&&(i[s]=t[s]);i.originalType=e,i.mdxType="string"==typeof e?e:r,o[1]=i;for(var c=2;c<l;c++)o[c]=n[c];return a.createElement.apply(null,o)}return a.createElement.apply(null,n)}d.displayName="MDXCreateElement"},46035:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>u,frontMatter:()=>l,metadata:()=>i,toc:()=>c});var a=n(87462),r=(n(67294),n(3905));const l={title:"3. Install Rancher"},o=void 0,i={unversionedId:"getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher",id:"version-2.6/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher",title:"3. Install Rancher",description:"Now that you have a running RKE cluster, you can install Rancher in it. For security reasons all traffic to Rancher must be encrypted with TLS. For this tutorial you are going to automatically issue a self-signed certificate through cert-manager. In a real-world use-case you will likely use Let's Encrypt or provide your own certificate.",source:"@site/versioned_docs/version-2.6/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher.md",sourceDirName:"getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy",slug:"/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher",permalink:"/v2.6/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.6/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-rancher.md",tags:[],version:"2.6",lastUpdatedAt:1668452187,formattedLastUpdatedAt:"Nov 14, 2022",frontMatter:{title:"3. Install Rancher"},sidebar:"tutorialSidebar",previous:{title:"2. Install Kubernetes",permalink:"/v2.6/getting-started/installation-and-upgrade/other-installation-methods/rancher-behind-an-http-proxy/install-kubernetes"},next:{title:"Resources",permalink:"/v2.6/pages-for-subheaders/resources"}},s={},c=[{value:"Install cert-manager",id:"install-cert-manager",level:3},{value:"Install Rancher",id:"install-rancher",level:3},{value:"Additional Resources",id:"additional-resources",level:3}],p={toc:c};function u(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"Now that you have a running RKE cluster, you can install Rancher in it. For security reasons all traffic to Rancher must be encrypted with TLS. For this tutorial you are going to automatically issue a self-signed certificate through ",(0,r.kt)("a",{parentName:"p",href:"https://cert-manager.io/"},"cert-manager"),". In a real-world use-case you will likely use Let's Encrypt or provide your own certificate."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:Line truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[30362],{3905:(e,r,t)=>{t.d(r,{Zo:()=>l,kt:()=>f});var n=t(67294);function a(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function o(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);r&&(n=n.filter((function(r){return Object.getOwnPropertyDescriptor(e,r).enumerable}))),t.push.apply(t,n)}return t}function i(e){for(var r=1;r<arguments.length;r++){var t=null!=arguments[r]?arguments[r]:{};r%2?o(Object(t),!0).forEach((function(r){a(e,r,t[r])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):o(Object(t)).forEach((function(r){Object.defineProperty(e,r,Object.getOwnPropertyDescriptor(t,r))}))}return e}function c(e,r){if(null==e)return{};var t,n,a=function(e,r){if(null==e)return{};var t,n,a={},o=Object.keys(e);for(n=0;n<o.length;n++)t=o[n],r.indexOf(t)>=0||(a[t]=e[t]);return a}(e,r);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)t=o[n],r.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(a[t]=e[t])}return a}var s=n.createContext({}),p=function(e){var r=n.useContext(s),t=r;return e&&(t="function"==typeof e?e(r):i(i({},r),e)),t},l=function(e){var r=p(e.components);return n.createElement(s.Provider,{value:r},e.children)},u={inlineCode:"code",wrapper:function(e){var r=e.children;return n.createElement(n.Fragment,{},r)}},d=n.forwardRef((function(e,r){var t=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,l=c(e,["components","mdxType","originalType","parentName"]),d=p(t),f=a,m=d["".concat(s,".").concat(f)]||d[f]||u[f]||o;return t?n.createElement(m,i(i({ref:r},l),{},{components:t})):n.createElement(m,i({ref:r},l))}));function f(e,r){var t=arguments,a=r&&r.mdxType;if("string"==typeof e||a){var o=t.length,i=new Array(o);i[0]=d;var c={};for(var s in r)hasOwnProperty.call(r,s)&&(c[s]=r[s]);c.originalType=e,c.mdxType="string"==typeof e?e:a,i[1]=c;for(var p=2;p<o;p++)i[p]=t[p];return n.createElement.apply(null,i)}return n.createElement.apply(null,t)}d.displayName="MDXCreateElement"},21619:(e,r,t)=>{t.r(r),t.d(r,{assets:()=>s,contentTitle:()=>i,default:()=>u,frontMatter:()=>o,metadata:()=>c,toc:()=>p});var n=t(87462),a=(t(67294),t(3905));const o={title:"Cloud Marketplace Integration"},i=void 0,c={unversionedId:"pages-for-subheaders/cloud-marketplace",id:"pages-for-subheaders/cloud-marketplace",title:"Cloud Marketplace Integration",description:"Rancher offers integration with cloud marketplaces to easily purchase support for installations hosted on certain cloud providers. In addition, this integration also provides the ability to generate a supportconfig bundle which can be provided to rancher support.",source:"@site/docs/pages-for-subheaders/cloud-marketplace.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/cloud-marketplace",permalink:"/pages-for-subheaders/cloud-marketplace",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/pages-for-subheaders/cloud-marketplace.md",tags:[],version:"current",lastUpdatedAt:1663953084,formattedLastUpdatedAt:"Sep 23, 2022",frontMatter:{title:"Cloud Marketplace Integration"},sidebar:"tutorialSidebar",previous:{title:"Security Advisories and CVEs",permalink:"/reference-guides/rancher-security/security-advisories-and-cves"},next:{title:"AWS Marketplace Integration",permalink:"/pages-for-subheaders/aws-cloud-marketplace"}},s={},p=[],l={toc:p};function u(e){let{components:r,...t}=e;return(0,a.kt)("wrapper",(0,n.Z)({},l,t,{components:r,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Rancher offers integration with cloud marketplaces to easily purchase support for installations hosted on certain cloud providers. In addition, this integration also provides the ability to generate a supportconfig bundle which can be provided to rancher support."),(0,a.kt)("p",null,"As of Rancher v2.6.7, only AWS is supported for this integration."))}u.isMDXComponent=!0}}]);
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[30362],{3905:(e,t,r)=>{r.d(t,{Zo:()=>l,kt:()=>f});var n=r(67294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function c(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},o=Object.keys(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var s=n.createContext({}),p=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},l=function(e){var t=p(e.components);return n.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,l=c(e,["components","mdxType","originalType","parentName"]),d=p(r),f=a,m=d["".concat(s,".").concat(f)]||d[f]||u[f]||o;return r?n.createElement(m,i(i({ref:t},l),{},{components:r})):n.createElement(m,i({ref:t},l))}));function f(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=r.length,i=new Array(o);i[0]=d;var c={};for(var s in t)hasOwnProperty.call(t,s)&&(c[s]=t[s]);c.originalType=e,c.mdxType="string"==typeof e?e:a,i[1]=c;for(var p=2;p<o;p++)i[p]=r[p];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},21619:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>u,frontMatter:()=>o,metadata:()=>c,toc:()=>p});var n=r(87462),a=(r(67294),r(3905));const o={title:"Cloud Marketplace Integration"},i=void 0,c={unversionedId:"pages-for-subheaders/cloud-marketplace",id:"pages-for-subheaders/cloud-marketplace",title:"Cloud Marketplace Integration",description:"Rancher offers integration with cloud marketplaces to easily purchase support for installations hosted on certain cloud providers. In addition, this integration also provides the ability to generate a supportconfig bundle which can be provided to rancher support.",source:"@site/docs/pages-for-subheaders/cloud-marketplace.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/cloud-marketplace",permalink:"/pages-for-subheaders/cloud-marketplace",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/pages-for-subheaders/cloud-marketplace.md",tags:[],version:"current",lastUpdatedAt:1663953084,formattedLastUpdatedAt:"Sep 23, 2022",frontMatter:{title:"Cloud Marketplace Integration"},sidebar:"tutorialSidebar",previous:{title:"Sample PodSecurityConfiguration",permalink:"/reference-guides/rancher-security/psa-restricted-exemptions"},next:{title:"AWS Marketplace Integration",permalink:"/pages-for-subheaders/aws-cloud-marketplace"}},s={},p=[],l={toc:p};function u(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},l,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Rancher offers integration with cloud marketplaces to easily purchase support for installations hosted on certain cloud providers. In addition, this integration also provides the ability to generate a supportconfig bundle which can be provided to rancher support."),(0,a.kt)("p",null,"As of Rancher v2.6.7, only AWS is supported for this integration."))}u.isMDXComponent=!0}}]);
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[7297],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>m});var a=r(67294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function i(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},o=Object.keys(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var s=a.createContext({}),p=function(e){var t=a.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):l(l({},t),e)),r},c=function(e){var t=p(e.components);return a.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},h=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,o=e.originalType,s=e.parentName,c=i(e,["components","mdxType","originalType","parentName"]),h=p(r),m=n,d=h["".concat(s,".").concat(m)]||h[m]||u[m]||o;return r?a.createElement(d,l(l({ref:t},c),{},{components:r})):a.createElement(d,l({ref:t},c))}));function m(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var o=r.length,l=new Array(o);l[0]=h;var i={};for(var s in t)hasOwnProperty.call(t,s)&&(i[s]=t[s]);i.originalType=e,i.mdxType="string"==typeof e?e:n,l[1]=i;for(var p=2;p<o;p++)l[p]=r[p];return a.createElement.apply(null,l)}return a.createElement.apply(null,r)}h.displayName="MDXCreateElement"},43280:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>l,default:()=>u,frontMatter:()=>o,metadata:()=>i,toc:()=>p});var a=r(87462),n=(r(67294),r(3905));const o={title:"Continuous Delivery with Fleet"},l=void 0,i={unversionedId:"pages-for-subheaders/fleet-gitops-at-scale",id:"version-2.5/pages-for-subheaders/fleet-gitops-at-scale",title:"Continuous Delivery with Fleet",description:"Available as of Rancher v2.5",source:"@site/versioned_docs/version-2.5/pages-for-subheaders/fleet-gitops-at-scale.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/fleet-gitops-at-scale",permalink:"/v2.5/pages-for-subheaders/fleet-gitops-at-scale",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.5/pages-for-subheaders/fleet-gitops-at-scale.md",tags:[],version:"2.5",lastUpdatedAt:1680728494,formattedLastUpdatedAt:"Apr 5, 2023",frontMatter:{title:"Continuous Delivery with Fleet"},sidebar:"tutorialSidebar",previous:{title:"Creating a Custom Benchmark Version for Running a Cluster Scan",permalink:"/v2.5/explanations/integrations-in-rancher/cis-scans/custom-benchmark"},next:{title:"Architecture",permalink:"/v2.5/explanations/integrations-in-rancher/fleet-gitops-at-scale/architecture"}},s={},p=[{value:"Architecture",id:"architecture",level:2},{value:"Accessing Fleet in the Rancher UI",id:"accessing-fleet-in-the-rancher-ui",level:2},{value:"Windows Support",id:"windows-support",level:2},{value:"GitHub Repository",id:"github-repository",level:2},{value:"Using Fleet Behind a Proxy",id:"using-fleet-behind-a-proxy",level:2},{value:"Helm Chart Dependencies",id:"helm-chart-dependencies",level:2},{value:"Troubleshooting",id:"troubleshooting",level:2},{value:"Documentation",id:"documentation",level:2}],c={toc:p};function u(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,a.Z)({},c,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,(0,n.kt)("em",{parentName:"p"},"Available as of Rancher v2.5")),(0,n.kt)("p",null,"Continuous Delivery with Fleet is GitOps at scale. Fleet is designed to manage up to a million clusters. It\u2019s also lightweight enough that it works great for a ",(0,n.kt)("a",{parentName:"p",href:"https://fleet.rancher.io/single-cluster-install/"},"single cluster")," too, but it really shines when you get to a ",(0,n.kt)("a",{parentName:"p",href:"https://fleet.rancher.io/multi-cluster-install/"},"large scale"),". By large scale we mean either a lot of clusters, a lot of deployments, or a lot of teams in a single organization."),(0,n.kt)("p",null,"Fleet is a separate project from Rancher, and can be installed on any Kubernetes cluster with Helm."),(0,n.kt)("h2",{id:"architecture"},"Architecture"),(0,n.kt)("p",null,"For information about how Fleet works, see ",(0,n.kt)("a",{parentName:"p",hrLine truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[7297],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>m});var a=r(67294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function i(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},o=Object.keys(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var s=a.createContext({}),p=function(e){var t=a.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):l(l({},t),e)),r},c=function(e){var t=p(e.components);return a.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},h=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,o=e.originalType,s=e.parentName,c=i(e,["components","mdxType","originalType","parentName"]),h=p(r),m=n,d=h["".concat(s,".").concat(m)]||h[m]||u[m]||o;return r?a.createElement(d,l(l({ref:t},c),{},{components:r})):a.createElement(d,l({ref:t},c))}));function m(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var o=r.length,l=new Array(o);l[0]=h;var i={};for(var s in t)hasOwnProperty.call(t,s)&&(i[s]=t[s]);i.originalType=e,i.mdxType="string"==typeof e?e:n,l[1]=i;for(var p=2;p<o;p++)l[p]=r[p];return a.createElement.apply(null,l)}return a.createElement.apply(null,r)}h.displayName="MDXCreateElement"},43280:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>l,default:()=>u,frontMatter:()=>o,metadata:()=>i,toc:()=>p});var a=r(87462),n=(r(67294),r(3905));const o={title:"Fleet - GitOps at Scale"},l=void 0,i={unversionedId:"pages-for-subheaders/fleet-gitops-at-scale",id:"version-2.5/pages-for-subheaders/fleet-gitops-at-scale",title:"Fleet - GitOps at Scale",description:"Available as of Rancher v2.5",source:"@site/versioned_docs/version-2.5/pages-for-subheaders/fleet-gitops-at-scale.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/fleet-gitops-at-scale",permalink:"/v2.5/pages-for-subheaders/fleet-gitops-at-scale",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.5/pages-for-subheaders/fleet-gitops-at-scale.md",tags:[],version:"2.5",lastUpdatedAt:1662794811,formattedLastUpdatedAt:"Sep 10, 2022",frontMatter:{title:"Fleet - GitOps at Scale"},sidebar:"tutorialSidebar",previous:{title:"Creating a Custom Benchmark Version for Running a Cluster Scan",permalink:"/v2.5/explanations/integrations-in-rancher/cis-scans/custom-benchmark"},next:{title:"Architecture",permalink:"/v2.5/explanations/integrations-in-rancher/fleet-gitops-at-scale/architecture"}},s={},p=[{value:"Architecture",id:"architecture",level:2},{value:"Accessing Fleet in the Rancher UI",id:"accessing-fleet-in-the-rancher-ui",level:2},{value:"Windows Support",id:"windows-support",level:2},{value:"GitHub Repository",id:"github-repository",level:2},{value:"Using Fleet Behind a Proxy",id:"using-fleet-behind-a-proxy",level:2},{value:"Helm Chart Dependencies",id:"helm-chart-dependencies",level:2},{value:"Troubleshooting",id:"troubleshooting",level:2},{value:"Documentation",id:"documentation",level:2}],c={toc:p};function u(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,a.Z)({},c,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,(0,n.kt)("em",{parentName:"p"},"Available as of Rancher v2.5")),(0,n.kt)("p",null,"Fleet is GitOps at scale. Fleet is designed to manage up to a million clusters. It\u2019s also lightweight enough that it works great for a ",(0,n.kt)("a",{parentName:"p",href:"https://fleet.rancher.io/single-cluster-install/"},"single cluster")," too, but it really shines when you get to a ",(0,n.kt)("a",{parentName:"p",href:"https://fleet.rancher.io/multi-cluster-install/"},"large scale"),". By large scale we mean either a lot of clusters, a lot of deployments, or a lot of teams in a single organization."),(0,n.kt)("p",null,"Fleet is a separate project from Rancher, and can be installed on any Kubernetes cluster with Helm."),(0,n.kt)("h2",{id:"architecture"},"Architecture"),(0,n.kt)("p",null,"For information about how Fleet works, see ",(0,n.kt)("a",{parentName:"p",href:"/v2.5/explanations/integrations-in-rancheLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[8952],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>m});var r=n(67294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function c(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},i=Object.keys(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var o=r.createContext({}),l=function(e){var t=r.useContext(o),n=t;return e&&(n="function"==typeof e?e(t):c(c({},t),e)),n},u=function(e){var t=l(e.components);return r.createElement(o.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},p=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,i=e.originalType,o=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),p=l(n),m=a,h=p["".concat(o,".").concat(m)]||p[m]||d[m]||i;return n?r.createElement(h,c(c({ref:t},u),{},{components:n})):r.createElement(h,c({ref:t},u))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=n.length,c=new Array(i);c[0]=p;var s={};for(var o in t)hasOwnProperty.call(t,o)&&(s[o]=t[o]);s.originalType=e,s.mdxType="string"==typeof e?e:a,c[1]=s;for(var l=2;l<i;l++)c[l]=n[l];return r.createElement.apply(null,c)}return r.createElement.apply(null,n)}p.displayName="MDXCreateElement"},18662:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>o,contentTitle:()=>c,default:()=>d,frontMatter:()=>i,metadata:()=>s,toc:()=>l});var r=n(87462),a=(n(67294),n(3905));const i={title:"Install Rancher CIS Benchmark"},c=void 0,s={unversionedId:"how-to-guides/advanced-user-guides/cis-scan-guides/install-rancher-cis-benchmark",id:"how-to-guides/advanced-user-guides/cis-scan-guides/install-rancher-cis-benchmark",title:"Install Rancher CIS Benchmark",description:"1. In the upper left corner, click \u2630 > Cluster Management.",source:"@site/docs/how-to-guides/advanced-user-guides/cis-scan-guides/install-rancher-cis-benchmark.md",sourceDirName:"how-to-guides/advanced-user-guides/cis-scan-guides",slug:"/how-to-guides/advanced-user-guides/cis-scan-guides/install-rancher-cis-benchmark",permalink:"/how-to-guides/advanced-user-guides/cis-scan-guides/install-rancher-cis-benchmark",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/how-to-guides/advanced-user-guides/cis-scan-guides/install-rancher-cis-benchmark.md",tags:[],version:"current",lastUpdatedAt:1679412887,formattedLastUpdatedAt:"Mar 21, 2023",frontMatter:{title:"Install Rancher CIS Benchmark"},sidebar:"tutorialSidebar",previous:{title:"CIS Scan Guides",permalink:"/pages-for-subheaders/cis-scan-guides"},next:{title:"Uninstall Rancher CIS Benchmark",permalink:"/how-to-guides/advanced-user-guides/cis-scan-guides/uninstall-rancher-cis-benchmark"}},o={},l=[],u={toc:l};function d(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},"In the upper left corner, click ",(0,a.kt)("strong",{parentName:"li"},"\u2630 > Cluster Management"),"."),(0,a.kt)("li",{parentName:"ol"},"On the ",(0,a.kt)("strong",{parentName:"li"},"Clusters")," page, go to the cluster where you want to install CIS Benchmark and click ",(0,a.kt)("strong",{parentName:"li"},"Explore"),"."),(0,a.kt)("li",{parentName:"ol"},"In the left navigation bar, click ",(0,a.kt)("strong",{parentName:"li"},"Apps > Charts"),"."),(0,a.kt)("li",{parentName:"ol"},"Click ",(0,a.kt)("strong",{parentName:"li"},"CIS Benchmark")),(0,a.kt)("li",{parentName:"ol"},"Click ",(0,a.kt)("strong",{parentName:"li"},"Install"),".")),(0,a.kt)("p",null,(0,a.kt)("strong",{parentName:"p"},"Result:")," The CIS scan application is deployed on the Kubernetes cluster."),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"CIS Benchmark 4.0.0 and above have PSPs disabled by default. To install CIS Benchmark on a hardened cluster, set ",(0,a.kt)("inlineCode",{parentName:"p"},"golbal.psp.enabled")," to ",(0,a.kt)("inlineCode",{parentName:"p"},"true")," in the values before installing the chart.")))}d.isMDXComponent=!0}}]);
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[8952],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>m});var n=r(67294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function c(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?c(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):c(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},c=Object.keys(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var c=Object.getOwnPropertySymbols(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var o=n.createContext({}),l=function(e){var t=n.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},u=function(e){var t=l(e.components);return n.createElement(o.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},p=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,c=e.originalType,o=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),p=l(r),m=a,h=p["".concat(o,".").concat(m)]||p[m]||d[m]||c;return r?n.createElement(h,i(i({ref:t},u),{},{components:r})):n.createElement(h,i({ref:t},u))}));function m(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var c=r.length,i=new Array(c);i[0]=p;var s={};for(var o in t)hasOwnProperty.call(t,o)&&(s[o]=t[o]);s.originalType=e,s.mdxType="string"==typeof e?e:a,i[1]=s;for(var l=2;l<c;l++)i[l]=r[l];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}p.displayName="MDXCreateElement"},18662:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>d,frontMatter:()=>c,metadata:()=>s,toc:()=>l});var n=r(87462),a=(r(67294),r(3905));const c={title:"Install Rancher CIS Benchmark"},i=void 0,s={unversionedId:"how-to-guides/advanced-user-guides/cis-scan-guides/install-rancher-cis-benchmark",id:"how-to-guides/advanced-user-guides/cis-scan-guides/install-rancher-cis-benchmark",title:"Install Rancher CIS Benchmark",description:"1. In the upper left corner, click \u2630 > Cluster Management.",source:"@site/docs/how-to-guides/advanced-user-guides/cis-scan-guides/install-rancher-cis-benchmark.md",sourceDirName:"how-to-guides/advanced-user-guides/cis-scan-guides",slug:"/how-to-guides/advanced-user-guides/cis-scan-guides/install-rancher-cis-benchmark",permalink:"/how-to-guides/advanced-user-guides/cis-scan-guides/install-rancher-cis-benchmark",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/how-to-guides/advanced-user-guides/cis-scan-guides/install-rancher-cis-benchmark.md",tags:[],version:"current",lastUpdatedAt:1670549188,formattedLastUpdatedAt:"Dec 9, 2022",frontMatter:{title:"Install Rancher CIS Benchmark"},sidebar:"tutorialSidebar",previous:{title:"CIS Scan Guides",permalink:"/pages-for-subheaders/cis-scan-guides"},next:{title:"Uninstall Rancher CIS Benchmark",permalink:"/how-to-guides/advanced-user-guides/cis-scan-guides/uninstall-rancher-cis-benchmark"}},o={},l=[],u={toc:l};function d(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},"In the upper left corner, click ",(0,a.kt)("strong",{parentName:"li"},"\u2630 > Cluster Management"),"."),(0,a.kt)("li",{parentName:"ol"},"On the ",(0,a.kt)("strong",{parentName:"li"},"Clusters")," page, go to the cluster where you want to install CIS Benchmark and click ",(0,a.kt)("strong",{parentName:"li"},"Explore"),"."),(0,a.kt)("li",{parentName:"ol"},"In the left navigation bar, click ",(0,a.kt)("strong",{parentName:"li"},"Apps > Charts"),"."),(0,a.kt)("li",{parentName:"ol"},"Click ",(0,a.kt)("strong",{parentName:"li"},"CIS Benchmark")),(0,a.kt)("li",{parentName:"ol"},"Click ",(0,a.kt)("strong",{parentName:"li"},"Install"),".")),(0,a.kt)("p",null,(0,a.kt)("strong",{parentName:"p"},"Result:")," The CIS scan application is deployed on the Kubernetes cluster."))}d.isMDXComponent=!0}}]);
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[15872],{3905:(e,t,a)=>{a.d(t,{Zo:()=>p,kt:()=>h});var n=a(67294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function o(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function i(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},l=Object.keys(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var s=n.createContext({}),c=function(e){var t=n.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):o(o({},t),e)),a},p=function(e){var t=c(e.components);return n.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,p=i(e,["components","mdxType","originalType","parentName"]),d=c(a),h=r,m=d["".concat(s,".").concat(h)]||d[h]||u[h]||l;return a?n.createElement(m,o(o({ref:t},p),{},{components:a})):n.createElement(m,o({ref:t},p))}));function h(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=a.length,o=new Array(l);o[0]=d;var i={};for(var s in t)hasOwnProperty.call(t,s)&&(i[s]=t[s]);i.originalType=e,i.mdxType="string"==typeof e?e:r,o[1]=i;for(var c=2;c<l;c++)o[c]=a[c];return n.createElement.apply(null,o)}return n.createElement.apply(null,a)}d.displayName="MDXCreateElement"},8931:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>m,frontMatter:()=>l,metadata:()=>i,toc:()=>c});var n=a(87462),r=(a(67294),a(3905));const l={title:"4. Install Rancher"},o=void 0,i={unversionedId:"getting-started/installation-and-upgrade/advanced-options/advanced-use-cases/air-gap-helm2/install-rancher",id:"version-2.0-2.4/getting-started/installation-and-upgrade/advanced-options/advanced-use-cases/air-gap-helm2/install-rancher",title:"4. Install Rancher",description:"This section is about how to deploy Rancher for your air gapped environment. An air gapped environment could be where Rancher server will be installed offline, behind a firewall, or behind a proxy. There are tabs for either a high availability (recommended) or a Docker installation.",source:"@site/versioned_docs/version-2.0-2.4/getting-started/installation-and-upgrade/advanced-options/advanced-use-cases/air-gap-helm2/install-rancher.md",sourceDirName:"getting-started/installation-and-upgrade/advanced-options/advanced-use-cases/air-gap-helm2",slug:"/getting-started/installation-and-upgrade/advanced-options/advanced-use-cases/air-gap-helm2/install-rancher",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/advanced-options/advanced-use-cases/air-gap-helm2/install-rancher",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.0-2.4/getting-started/installation-and-upgrade/advanced-options/advanced-use-cases/air-gap-helm2/install-rancher.md",tags:[],version:"2.0-2.4",lastUpdatedAt:1681151826,formattedLastUpdatedAt:"Apr 10, 2023",frontMatter:{title:"4. Install Rancher"},sidebar:"tutorialSidebar",previous:{title:"3. Install Kubernetes with RKE (Kubernetes Installs Only)",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/advanced-options/advanced-use-cases/air-gap-helm2/launch-kubernetes"},next:{title:"Opening Ports with firewalld",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/advanced-options/advanced-use-cases/open-ports-with-firewalld"}},s={},c=[{value:"A. Add the Helm Chart Repository",id:"a-add-the-helm-chart-repository",level:3},{value:"B. Choose your SSL Configuration",id:"b-choose-your-ssl-configuration",level:3},{value:"C. Render the Rancher Helm Template",id:"c-render-the-rancher-helm-template",level:3},{value:"D. Install Rancher",id:"d-install-rancher",level:3},{value:"E. For Rancher versions before v2.3.0, Configure System Charts",id:"e-for-rancher-versions-before-v230-configure-system-charts",level:3},{value:"Additional Resources",id:"additional-resources",level:3}],p=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",t)},u=p("Tabs"),d=p("TabItem"),h={toc:c};function m(e){let{componLine truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[15872],{3905:(e,t,a)=>{a.d(t,{Zo:()=>p,kt:()=>h});var n=a(67294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function o(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function i(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},l=Object.keys(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var s=n.createContext({}),c=function(e){var t=n.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):o(o({},t),e)),a},p=function(e){var t=c(e.components);return n.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,p=i(e,["components","mdxType","originalType","parentName"]),d=c(a),h=r,m=d["".concat(s,".").concat(h)]||d[h]||u[h]||l;return a?n.createElement(m,o(o({ref:t},p),{},{components:a})):n.createElement(m,o({ref:t},p))}));function h(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=a.length,o=new Array(l);o[0]=d;var i={};for(var s in t)hasOwnProperty.call(t,s)&&(i[s]=t[s]);i.originalType=e,i.mdxType="string"==typeof e?e:r,o[1]=i;for(var c=2;c<l;c++)o[c]=a[c];return n.createElement.apply(null,o)}return n.createElement.apply(null,a)}d.displayName="MDXCreateElement"},8931:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>m,frontMatter:()=>l,metadata:()=>i,toc:()=>c});var n=a(87462),r=(a(67294),a(3905));const l={title:"4. Install Rancher"},o=void 0,i={unversionedId:"getting-started/installation-and-upgrade/advanced-options/advanced-use-cases/air-gap-helm2/install-rancher",id:"version-2.0-2.4/getting-started/installation-and-upgrade/advanced-options/advanced-use-cases/air-gap-helm2/install-rancher",title:"4. Install Rancher",description:"This section is about how to deploy Rancher for your air gapped environment. An air gapped environment could be where Rancher server will be installed offline, behind a firewall, or behind a proxy. There are tabs for either a high availability (recommended) or a Docker installation.",source:"@site/versioned_docs/version-2.0-2.4/getting-started/installation-and-upgrade/advanced-options/advanced-use-cases/air-gap-helm2/install-rancher.md",sourceDirName:"getting-started/installation-and-upgrade/advanced-options/advanced-use-cases/air-gap-helm2",slug:"/getting-started/installation-and-upgrade/advanced-options/advanced-use-cases/air-gap-helm2/install-rancher",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/advanced-options/advanced-use-cases/air-gap-helm2/install-rancher",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.0-2.4/getting-started/installation-and-upgrade/advanced-options/advanced-use-cases/air-gap-helm2/install-rancher.md",tags:[],version:"2.0-2.4",lastUpdatedAt:1670452794,formattedLastUpdatedAt:"Dec 7, 2022",frontMatter:{title:"4. Install Rancher"},sidebar:"tutorialSidebar",previous:{title:"3. Install Kubernetes with RKE (Kubernetes Installs Only)",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/advanced-options/advanced-use-cases/air-gap-helm2/launch-kubernetes"},next:{title:"Opening Ports with firewalld",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/advanced-options/advanced-use-cases/open-ports-with-firewalld"}},s={},c=[{value:"A. Add the Helm Chart Repository",id:"a-add-the-helm-chart-repository",level:3},{value:"B. Choose your SSL Configuration",id:"b-choose-your-ssl-configuration",level:3},{value:"C. Render the Rancher Helm Template",id:"c-render-the-rancher-helm-template",level:3},{value:"D. Install Rancher",id:"d-install-rancher",level:3},{value:"E. For Rancher versions before v2.3.0, Configure System Charts",id:"e-for-rancher-versions-before-v230-configure-system-charts",level:3},{value:"Additional Resources",id:"additional-resources",level:3}],p=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",t)},u=p("Tabs"),d=p("TabItem"),h={toc:c};function m(e){let{componeLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[24836],{3905:(e,t,a)=>{a.d(t,{Zo:()=>p,kt:()=>m});var r=a(67294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function s(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},l=Object.keys(e);for(r=0;r<l.length;r++)a=l[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)a=l[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var o=r.createContext({}),c=function(e){var t=r.useContext(o),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},p=function(e){var t=c(e.components);return r.createElement(o.Provider,{value:t},e.children)},h={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,l=e.originalType,o=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),d=c(a),m=n,u=d["".concat(o,".").concat(m)]||d[m]||h[m]||l;return a?r.createElement(u,i(i({ref:t},p),{},{components:a})):r.createElement(u,i({ref:t},p))}));function m(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var l=a.length,i=new Array(l);i[0]=d;var s={};for(var o in t)hasOwnProperty.call(t,o)&&(s[o]=t[o]);s.originalType=e,s.mdxType="string"==typeof e?e:n,i[1]=s;for(var c=2;c<l;c++)i[c]=a[c];return r.createElement.apply(null,i)}return r.createElement.apply(null,a)}d.displayName="MDXCreateElement"},53091:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>h,frontMatter:()=>l,metadata:()=>s,toc:()=>c});var r=a(87462),n=(a(67294),a(3905));const l={title:"4. Install Rancher"},i=void 0,s={unversionedId:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",id:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",title:"4. Install Rancher",description:"This section is about how to deploy Rancher for your air gapped environment in a high-availability Kubernetes installation. An air gapped environment could be where Rancher server will be installed offline, behind a firewall, or behind a proxy.",source:"@site/docs/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha.md",sourceDirName:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install",slug:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",permalink:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha.md",tags:[],version:"current",lastUpdatedAt:1681239575,formattedLastUpdatedAt:"Apr 11, 2023",frontMatter:{title:"4. Install Rancher"},sidebar:"tutorialSidebar",previous:{title:"3. Install Kubernetes (Skip for Docker Installs)",permalink:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-kubernetes"},next:{title:"Docker Install Commands",permalink:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/docker-install-commands"}},o={},c=[{value:"Privileged Access for Rancher",id:"privileged-access-for-rancher",level:3},{value:"Docker Instructions",id:"docker-instructions",level:2},{value:"Kubernetes Instructions",id:"kubernetes-instructions",level:2},{value:"1. Add the Helm Chart Repository",id:"1-add-the-helm-chart-repository",level:3},{value:"2. Choose your SSL Configuration",id:"2-choose-your-ssl-configuration",level:3},{value:"Helm Chart Options for Air Gap Installations",id:"helm-chart-options-for-air-gap-installations",level:3},{value:"3. Fetch the Cert-Manager Chart",id:"3-fetch-the-cert-manager-chart",level:3},{value:"Option A: Default Self-Signed Certificate",id:"option-a-default-self-signed-certificate",level:4},{value:"1. Add the cert-manager repo",id:"1-add-the-cert-manager-repo",level:5},{value:"2. Fetch the cert-manager chart",id:Line truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[24836],{3905:(e,t,a)=>{a.d(t,{Zo:()=>p,kt:()=>m});var r=a(67294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function s(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},l=Object.keys(e);for(r=0;r<l.length;r++)a=l[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)a=l[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var o=r.createContext({}),c=function(e){var t=r.useContext(o),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},p=function(e){var t=c(e.components);return r.createElement(o.Provider,{value:t},e.children)},h={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,l=e.originalType,o=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),d=c(a),m=n,u=d["".concat(o,".").concat(m)]||d[m]||h[m]||l;return a?r.createElement(u,i(i({ref:t},p),{},{components:a})):r.createElement(u,i({ref:t},p))}));function m(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var l=a.length,i=new Array(l);i[0]=d;var s={};for(var o in t)hasOwnProperty.call(t,o)&&(s[o]=t[o]);s.originalType=e,s.mdxType="string"==typeof e?e:n,i[1]=s;for(var c=2;c<l;c++)i[c]=a[c];return r.createElement.apply(null,i)}return r.createElement.apply(null,a)}d.displayName="MDXCreateElement"},53091:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>h,frontMatter:()=>l,metadata:()=>s,toc:()=>c});var r=a(87462),n=(a(67294),a(3905));const l={title:"4. Install Rancher"},i=void 0,s={unversionedId:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",id:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",title:"4. Install Rancher",description:"This section is about how to deploy Rancher for your air gapped environment in a high-availability Kubernetes installation. An air gapped environment could be where Rancher server will be installed offline, behind a firewall, or behind a proxy.",source:"@site/docs/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha.md",sourceDirName:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install",slug:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",permalink:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha.md",tags:[],version:"current",lastUpdatedAt:1670368110,formattedLastUpdatedAt:"Dec 6, 2022",frontMatter:{title:"4. Install Rancher"},sidebar:"tutorialSidebar",previous:{title:"3. Install Kubernetes (Skip for Docker Installs)",permalink:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-kubernetes"},next:{title:"Docker Install Commands",permalink:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/docker-install-commands"}},o={},c=[{value:"Privileged Access for Rancher",id:"privileged-access-for-rancher",level:3},{value:"Docker Instructions",id:"docker-instructions",level:2},{value:"Kubernetes Instructions",id:"kubernetes-instructions",level:2},{value:"1. Add the Helm Chart Repository",id:"1-add-the-helm-chart-repository",level:3},{value:"2. Choose your SSL Configuration",id:"2-choose-your-ssl-configuration",level:3},{value:"Helm Chart Options for Air Gap Installations",id:"helm-chart-options-for-air-gap-installations",level:3},{value:"3. Fetch the Cert-Manager chart",id:"3-fetch-the-cert-manager-chart",level:3},{value:"Option A: Default Self-Signed Certificate",id:"option-a-default-self-signed-certificate",level:4},{value:"1. Add the cert-manager repo",id:"1-add-the-cert-manager-repo",level:5},{value:"2. Fetch the cert-manager chart",id:"Line truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[35637],{3905:(e,t,a)=>{a.d(t,{Zo:()=>p,kt:()=>d});var n=a(67294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function o(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},l=Object.keys(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var s=n.createContext({}),c=function(e){var t=n.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},p=function(e){var t=c(e.components);return n.createElement(s.Provider,{value:t},e.children)},h={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},u=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),u=c(a),d=r,m=u["".concat(s,".").concat(d)]||u[d]||h[d]||l;return a?n.createElement(m,i(i({ref:t},p),{},{components:a})):n.createElement(m,i({ref:t},p))}));function d(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=a.length,i=new Array(l);i[0]=u;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var c=2;c<l;c++)i[c]=a[c];return n.createElement.apply(null,i)}return n.createElement.apply(null,a)}u.displayName="MDXCreateElement"},87870:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>m,frontMatter:()=>l,metadata:()=>o,toc:()=>c});var n=a(87462),r=(a(67294),a(3905));const l={title:"4. Install Rancher"},i=void 0,o={unversionedId:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",id:"version-2.0-2.4/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",title:"4. Install Rancher",description:"This section is about how to deploy Rancher for your air gapped environment. An air gapped environment could be where Rancher server will be installed offline, behind a firewall, or behind a proxy. There are tabs for either a high availability (recommended) or a Docker installation.",source:"@site/versioned_docs/version-2.0-2.4/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha.md",sourceDirName:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install",slug:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.0-2.4/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha.md",tags:[],version:"2.0-2.4",lastUpdatedAt:1681151826,formattedLastUpdatedAt:"Apr 10, 2023",frontMatter:{title:"4. Install Rancher"},sidebar:"tutorialSidebar",previous:{title:"3. Install Kubernetes (Skip for Docker Installs)",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-kubernetes"},next:{title:"Installing Rancher on a Single Node Using Docker",permalink:"/v2.0-v2.4/pages-for-subheaders/rancher-on-a-single-node-with-docker"}},s={},c=[{value:"1. Add the Helm Chart Repository",id:"1-add-the-helm-chart-repository",level:2},{value:"2. Choose your SSL Configuration",id:"2-choose-your-ssl-configuration",level:2},{value:"3. Render the Rancher Helm Template",id:"3-render-the-rancher-helm-template",level:2},{value:"Option A: Default Self-Signed Certificate",id:"option-a-default-self-signed-certificate",level:3},{value:"4. Install Rancher",id:"4-install-rancher",level:2},{value:"For Self-Signed Certificate Installs, Install Cert-manager",id:"for-self-signed-certificate-installs-install-cert-manager",level:3},{value:"Install Rancher with kubectl",id:"install-rancher-with-kubectl",level:3},{value:"5. For Rancher versions before v2.3.0, Configure System CLine truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[35637],{3905:(e,t,a)=>{a.d(t,{Zo:()=>p,kt:()=>d});var n=a(67294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function o(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},l=Object.keys(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var s=n.createContext({}),c=function(e){var t=n.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},p=function(e){var t=c(e.components);return n.createElement(s.Provider,{value:t},e.children)},h={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},u=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),u=c(a),d=r,m=u["".concat(s,".").concat(d)]||u[d]||h[d]||l;return a?n.createElement(m,i(i({ref:t},p),{},{components:a})):n.createElement(m,i({ref:t},p))}));function d(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=a.length,i=new Array(l);i[0]=u;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var c=2;c<l;c++)i[c]=a[c];return n.createElement.apply(null,i)}return n.createElement.apply(null,a)}u.displayName="MDXCreateElement"},87870:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>m,frontMatter:()=>l,metadata:()=>o,toc:()=>c});var n=a(87462),r=(a(67294),a(3905));const l={title:"4. Install Rancher"},i=void 0,o={unversionedId:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",id:"version-2.0-2.4/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",title:"4. Install Rancher",description:"This section is about how to deploy Rancher for your air gapped environment. An air gapped environment could be where Rancher server will be installed offline, behind a firewall, or behind a proxy. There are tabs for either a high availability (recommended) or a Docker installation.",source:"@site/versioned_docs/version-2.0-2.4/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha.md",sourceDirName:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install",slug:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.0-2.4/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha.md",tags:[],version:"2.0-2.4",lastUpdatedAt:1670452794,formattedLastUpdatedAt:"Dec 7, 2022",frontMatter:{title:"4. Install Rancher"},sidebar:"tutorialSidebar",previous:{title:"3. Install Kubernetes (Skip for Docker Installs)",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-kubernetes"},next:{title:"Installing Rancher on a Single Node Using Docker",permalink:"/v2.0-v2.4/pages-for-subheaders/rancher-on-a-single-node-with-docker"}},s={},c=[{value:"1. Add the Helm Chart Repository",id:"1-add-the-helm-chart-repository",level:2},{value:"2. Choose your SSL Configuration",id:"2-choose-your-ssl-configuration",level:2},{value:"3. Render the Rancher Helm Template",id:"3-render-the-rancher-helm-template",level:2},{value:"Option A: Default Self-Signed Certificate",id:"option-a-default-self-signed-certificate",level:3},{value:"4. Install Rancher",id:"4-install-rancher",level:2},{value:"For Self-Signed Certificate Installs, Install Cert-manager",id:"for-self-signed-certificate-installs-install-cert-manager",level:3},{value:"Install Rancher with kubectl",id:"install-rancher-with-kubectl",level:3},{value:"5. For Rancher versions before v2.3.0, Configure System ChLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[43966],{3905:(t,e,r)=>{r.d(e,{Zo:()=>h,kt:()=>i});var n=r(67294);function a(t,e,r){return e in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r,t}function l(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,n)}return r}function s(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{};e%2?l(Object(r),!0).forEach((function(e){a(t,e,r[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(r)):l(Object(r)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(r,e))}))}return t}function o(t,e){if(null==t)return{};var r,n,a=function(t,e){if(null==t)return{};var r,n,a={},l=Object.keys(t);for(n=0;n<l.length;n++)r=l[n],e.indexOf(r)>=0||(a[r]=t[r]);return a}(t,e);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(t);for(n=0;n<l.length;n++)r=l[n],e.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(t,r)&&(a[r]=t[r])}return a}var u=n.createContext({}),c=function(t){var e=n.useContext(u),r=e;return t&&(r="function"==typeof t?t(e):s(s({},e),t)),r},h=function(t){var e=c(t.components);return n.createElement(u.Provider,{value:e},t.children)},p={inlineCode:"code",wrapper:function(t){var e=t.children;return n.createElement(n.Fragment,{},e)}},k=n.forwardRef((function(t,e){var r=t.components,a=t.mdxType,l=t.originalType,u=t.parentName,h=o(t,["components","mdxType","originalType","parentName"]),k=c(r),i=a,d=k["".concat(u,".").concat(i)]||k[i]||p[i]||l;return r?n.createElement(d,s(s({ref:e},h),{},{components:r})):n.createElement(d,s({ref:e},h))}));function i(t,e){var r=arguments,a=e&&e.mdxType;if("string"==typeof t||a){var l=r.length,s=new Array(l);s[0]=k;var o={};for(var u in e)hasOwnProperty.call(e,u)&&(o[u]=e[u]);o.originalType=t,o.mdxType="string"==typeof t?t:a,s[1]=o;for(var c=2;c<l;c++)s[c]=r[c];return n.createElement.apply(null,s)}return n.createElement.apply(null,r)}k.displayName="MDXCreateElement"},19523:(t,e,r)=>{r.r(e),r.d(e,{contentTitle:()=>s,default:()=>h,frontMatter:()=>l,metadata:()=>o,toc:()=>u});var n=r(87462),a=(r(67294),r(3905));const l={title:"Rancher Documentation Versions"},s=void 0,o={type:"mdx",permalink:"/versions",source:"@site/src/pages/versions.md",title:"Rancher Documentation Versions",description:"Current versions",frontMatter:{title:"Rancher Documentation Versions"}},u=[{value:"Current versions",id:"current-versions",level:3},{value:"Past versions",id:"past-versions",level:3},{value:"Legacy versions (EOL)",id:"legacy-versions-eol",level:3}],c={toc:u};function h(t){let{components:e,...r}=t;return(0,a.kt)("wrapper",(0,n.Z)({},c,r,{components:e,mdxType:"MDXLayout"}),(0,a.kt)("h3",{id:"current-versions"},"Current versions"),(0,a.kt)("p",null,"Below are the documentation and release notes for the currently released version of Rancher 2.7.x:"),(0,a.kt)("table",null,(0,a.kt)("tr",null,(0,a.kt)("td",null,(0,a.kt)("b",null,"v2.7.2")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://ranchermanager.docs.rancher.com/"},"Documentation")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://github.com/rancher/rancher/releases/tag/v2.7.2"},"Release Notes")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://www.suse.com/suse-rancher/support-matrix/all-supported-versions/rancher-v2-7-2/"},"Support Matrix")))),(0,a.kt)("p",null,"Below are the documentation and release notes for the currently released version of Rancher 2.6.x:"),(0,a.kt)("table",null,(0,a.kt)("tr",null,(0,a.kt)("td",null,(0,a.kt)("b",null,"v2.6.11")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://ranchermanager.docs.rancher.com/v2.6"},"Documentation")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://github.com/rancher/rancher/releases/tag/v2.6.11"},"Release Notes")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://www.suse.com/suse-rancher/support-matrix/all-supported-versions/rancher-v2-6-11/"},"Support Matrix")))),(0,a.kt)("h3",{id:"past-versions"},"Past versions"),(0,a.kt)("p",null,"Below are the documentation and release notes for previous versions of Rancher 2.7.x:"),(0,a.kt)("table",null,(0,a.kt)("tr",null,(0,a.kt)("td",null,(0,a.kt)("b",null,"v2.7.1")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://ranchermanager.docs.rancher.com/"},"Documentation")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://github.com/rancher/rancher/releases/tag/v2.7.1"},"Release Notes")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://www.suse.com/suse-rancher/support-matrix/all-supported-versions/rancher-v2-7-1/"},"Support Matrix"))),(0,a.kt)("tr",null,(0,a.kt)("td",null,(0,a.kt)("b",null,"v2.7.0")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://ranchermanager.docs.rancher.com/"},"Documentation")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://github.com/rancher/rancher/releases/tag/v2.7.0"},"ReleLine truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[43966],{3905:(t,e,r)=>{r.d(e,{Zo:()=>h,kt:()=>i});var n=r(67294);function a(t,e,r){return e in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r,t}function l(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,n)}return r}function s(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{};e%2?l(Object(r),!0).forEach((function(e){a(t,e,r[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(r)):l(Object(r)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(r,e))}))}return t}function o(t,e){if(null==t)return{};var r,n,a=function(t,e){if(null==t)return{};var r,n,a={},l=Object.keys(t);for(n=0;n<l.length;n++)r=l[n],e.indexOf(r)>=0||(a[r]=t[r]);return a}(t,e);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(t);for(n=0;n<l.length;n++)r=l[n],e.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(t,r)&&(a[r]=t[r])}return a}var u=n.createContext({}),c=function(t){var e=n.useContext(u),r=e;return t&&(r="function"==typeof t?t(e):s(s({},e),t)),r},h=function(t){var e=c(t.components);return n.createElement(u.Provider,{value:e},t.children)},p={inlineCode:"code",wrapper:function(t){var e=t.children;return n.createElement(n.Fragment,{},e)}},k=n.forwardRef((function(t,e){var r=t.components,a=t.mdxType,l=t.originalType,u=t.parentName,h=o(t,["components","mdxType","originalType","parentName"]),k=c(r),i=a,d=k["".concat(u,".").concat(i)]||k[i]||p[i]||l;return r?n.createElement(d,s(s({ref:e},h),{},{components:r})):n.createElement(d,s({ref:e},h))}));function i(t,e){var r=arguments,a=e&&e.mdxType;if("string"==typeof t||a){var l=r.length,s=new Array(l);s[0]=k;var o={};for(var u in e)hasOwnProperty.call(e,u)&&(o[u]=e[u]);o.originalType=t,o.mdxType="string"==typeof t?t:a,s[1]=o;for(var c=2;c<l;c++)s[c]=r[c];return n.createElement.apply(null,s)}return n.createElement.apply(null,r)}k.displayName="MDXCreateElement"},19523:(t,e,r)=>{r.r(e),r.d(e,{contentTitle:()=>s,default:()=>h,frontMatter:()=>l,metadata:()=>o,toc:()=>u});var n=r(87462),a=(r(67294),r(3905));const l={title:"Rancher Documentation Versions"},s=void 0,o={type:"mdx",permalink:"/versions",source:"@site/src/pages/versions.md",title:"Rancher Documentation Versions",description:"Current versions",frontMatter:{title:"Rancher Documentation Versions"}},u=[{value:"Current versions",id:"current-versions",level:3},{value:"Past versions",id:"past-versions",level:3},{value:"Legacy versions (EOL)",id:"legacy-versions-eol",level:3}],c={toc:u};function h(t){let{components:e,...r}=t;return(0,a.kt)("wrapper",(0,n.Z)({},c,r,{components:e,mdxType:"MDXLayout"}),(0,a.kt)("h3",{id:"current-versions"},"Current versions"),(0,a.kt)("p",null,"Below are the documentation and release notes for the currently released version of Rancher 2.7.x:"),(0,a.kt)("table",null,(0,a.kt)("tr",null,(0,a.kt)("td",null,(0,a.kt)("b",null,"v2.7.1")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://ranchermanager.docs.rancher.com/"},"Documentation")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://github.com/rancher/rancher/releases/tag/v2.7.1"},"Release Notes")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://www.suse.com/suse-rancher/support-matrix/all-supported-versions/rancher-v2-7-1/"},"Support Matrix")))),(0,a.kt)("p",null,"Below are the documentation and release notes for the currently released version of Rancher 2.6.x:"),(0,a.kt)("table",null,(0,a.kt)("tr",null,(0,a.kt)("td",null,(0,a.kt)("b",null,"v2.6.11")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://ranchermanager.docs.rancher.com/v2.6"},"Documentation")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://github.com/rancher/rancher/releases/tag/v2.6.11"},"Release Notes")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://www.suse.com/suse-rancher/support-matrix/all-supported-versions/rancher-v2-6-11/"},"Support Matrix")))),(0,a.kt)("h3",{id:"past-versions"},"Past versions"),(0,a.kt)("p",null,"Below are the documentation and release notes for previous versions of Rancher 2.7.x:"),(0,a.kt)("table",null,(0,a.kt)("tr",null,(0,a.kt)("td",null,(0,a.kt)("b",null,"v2.7.0")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://ranchermanager.docs.rancher.com/"},"Documentation")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://github.com/rancher/rancher/releases/tag/v2.7.0"},"Release Notes")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://www.suse.com/suse-rancher/support-matrix/all-supported-versions/rancher-v2-7-0/"},"Support Matrix")))),(0,a.kt)("br",null),(0,a.kt)("p",null,"Below are the documentation and release notes for previous versions of Rancher 2.6.x:"),(0,a.kt)("table",null,(0,a.kt)("tr",null,(0,a.kt)("td",null,(0,a.kt)("b",null,"v2.6.10")),(0,a.kt)("td",null,(0,a.kt)("a",{href:"https://ran Line truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[38584],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>m});var n=r(67294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function s(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var c=n.createContext({}),l=function(e){var t=n.useContext(c),r=t;return e&&(r="function"==typeof e?e(t):s(s({},t),e)),r},u=function(e){var t=l(e.components);return n.createElement(c.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,i=e.originalType,c=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),d=l(r),m=a,f=d["".concat(c,".").concat(m)]||d[m]||p[m]||i;return r?n.createElement(f,s(s({ref:t},u),{},{components:r})):n.createElement(f,s({ref:t},u))}));function m(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=r.length,s=new Array(i);s[0]=d;var o={};for(var c in t)hasOwnProperty.call(t,c)&&(o[c]=t[c]);o.originalType=e,o.mdxType="string"==typeof e?e:a,s[1]=o;for(var l=2;l<i;l++)s[l]=r[l];return n.createElement.apply(null,s)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},1968:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>c,contentTitle:()=>s,default:()=>p,frontMatter:()=>i,metadata:()=>o,toc:()=>l});var n=r(87462),a=(r(67294),r(3905));const i={title:"Sample PodSecurityConfiguration"},s=void 0,o={unversionedId:"reference-guides/rancher-security/psa-restricted-exemptions",id:"reference-guides/rancher-security/psa-restricted-exemptions",title:"Sample PodSecurityConfiguration",description:"The following PodSecurityConfiguration contains the required Rancher namespace exemptions for a rancher-restricted cluster to run properly.",source:"@site/docs/reference-guides/rancher-security/psa-restricted-exemptions.md",sourceDirName:"reference-guides/rancher-security",slug:"/reference-guides/rancher-security/psa-restricted-exemptions",permalink:"/reference-guides/rancher-security/psa-restricted-exemptions",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/reference-guides/rancher-security/psa-restricted-exemptions.md",tags:[],version:"current",lastUpdatedAt:1679684655,formattedLastUpdatedAt:"Mar 24, 2023",frontMatter:{title:"Sample PodSecurityConfiguration"},sidebar:"tutorialSidebar",previous:{title:"Security Advisories and CVEs",permalink:"/reference-guides/rancher-security/security-advisories-and-cves"},next:{title:"Cloud Marketplace Integration",permalink:"/pages-for-subheaders/cloud-marketplace"}},c={},l=[],u={toc:l};function p(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"The following PodSecurityConfiguration contains the required Rancher namespace exemptions for a ",(0,a.kt)("inlineCode",{parentName:"p"},"rancher-restricted")," cluster to run properly."),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},'apiVersion: apiserver.config.k8s.io/v1\nkind: AdmissionConfiguration\nplugins:\n - name: PodSecurity\n configuration:\n apiVersion: pod-security.admission.config.k8s.io/v1\n kind: PodSecurityConfiguration\n defaults:\n enforce: "restricted"\n enforce-version: "latest"\n audit: "restricted"\n audit-version: "latest"\n warn: "restricted"\n warn-version: "latest"\n exemptions:\n usernames: []\n runtimeClasses: []\n namespaces: [calico-apiserver,\n calico-system,\n cattle-alerting,\n cattle-csp-adapter-system,\n cattle-epinio-system,\n cattle-externalip-system,\n cattle-fleet-local-system,\n cattle-fleet-system,\n cattle-gatekeeper-system,\n cattle-global-data,\n cattle-global-nt,\n cattle-impersonatLine truncated
@@ -1 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[36175],{3905:(e,t,a)=>{a.d(t,{Zo:()=>c,kt:()=>u});var r=a(67294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function i(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function o(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?i(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):i(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function l(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},i=Object.keys(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var s=r.createContext({}),p=function(e){var t=r.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):o(o({},t),e)),a},c=function(e){var t=p(e.components);return r.createElement(s.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},g=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,i=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),g=p(a),u=n,d=g["".concat(s,".").concat(u)]||g[u]||m[u]||i;return a?r.createElement(d,o(o({ref:t},c),{},{components:a})):r.createElement(d,o({ref:t},c))}));function u(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var i=a.length,o=new Array(i);o[0]=g;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:n,o[1]=l;for(var p=2;p<i;p++)o[p]=a[p];return r.createElement.apply(null,o)}return r.createElement.apply(null,a)}g.displayName="MDXCreateElement"},28227:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>m,frontMatter:()=>i,metadata:()=>l,toc:()=>p});var r=a(87462),n=(a(67294),a(3905));const i={title:"Upgrading Cert-Manager with Helm 2"},o=void 0,l={unversionedId:"getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2",id:"version-2.5/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2",title:"Upgrading Cert-Manager with Helm 2",description:"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:",source:"@site/versioned_docs/version-2.5/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2.md",sourceDirName:"getting-started/installation-and-upgrade/resources",slug:"/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2",permalink:"/v2.5/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.5/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2.md",tags:[],version:"2.5",lastUpdatedAt:1663953084,formattedLastUpdatedAt:"Sep 23, 2022",frontMatter:{title:"Upgrading Cert-Manager with Helm 2"},sidebar:"tutorialSidebar",previous:{title:"Upgrading Cert-Manager",permalink:"/v2.5/getting-started/installation-and-upgrade/resources/upgrade-cert-manager"},next:{title:"Updating the Rancher Certificate",permalink:"/v2.5/getting-started/installation-and-upgrade/resources/update-rancher-certificate"}},s={},p=[{value:"Upgrade Cert-Manager Only",id:"upgrade-cert-manager-only",level:2},{value:"Prerequisites",id:"prerequisites",level:3},{value:"Install cert-manager",id:"install-cert-manager",level:3},{value:"Cert-Manager API change and data migration",id:"cert-manager-api-change-and-data-migration",level:2}],c={toc:p};function m(e){let{components:t,...a}=e;return(0,n.kt)("wrapper",(0,r.Z)({},c,a,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("a",{parentName:"li",href:"https://community.letsencrypt.org/t/blocking-old-cert-manager-versions/98753"},"Let's Encrypt will be blocking cert-manager instances older than 0.8.0 starting November 1st 2019.")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("a",{parentName:"li",href:"https://docs.cert Line truncated
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[36175],{3905:(e,t,a)=>{a.d(t,{Zo:()=>c,kt:()=>u});var r=a(67294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function i(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function o(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?i(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):i(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function l(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},i=Object.keys(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var s=r.createContext({}),p=function(e){var t=r.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):o(o({},t),e)),a},c=function(e){var t=p(e.components);return r.createElement(s.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},g=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,i=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),g=p(a),u=n,d=g["".concat(s,".").concat(u)]||g[u]||m[u]||i;return a?r.createElement(d,o(o({ref:t},c),{},{components:a})):r.createElement(d,o({ref:t},c))}));function u(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var i=a.length,o=new Array(i);o[0]=g;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:n,o[1]=l;for(var p=2;p<i;p++)o[p]=a[p];return r.createElement.apply(null,o)}return r.createElement.apply(null,a)}g.displayName="MDXCreateElement"},28227:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>m,frontMatter:()=>i,metadata:()=>l,toc:()=>p});var r=a(87462),n=(a(67294),a(3905));const i={title:"Upgrading Cert-Manager with Helm 2"},o=void 0,l={unversionedId:"getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2",id:"version-2.5/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2",title:"Upgrading Cert-Manager with Helm 2",description:"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:",source:"@site/versioned_docs/version-2.5/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2.md",sourceDirName:"getting-started/installation-and-upgrade/resources",slug:"/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2",permalink:"/v2.5/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.5/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2.md",tags:[],version:"2.5",lastUpdatedAt:1681151826,formattedLastUpdatedAt:"Apr 10, 2023",frontMatter:{title:"Upgrading Cert-Manager with Helm 2"},sidebar:"tutorialSidebar",previous:{title:"Upgrading Cert-Manager",permalink:"/v2.5/getting-started/installation-and-upgrade/resources/upgrade-cert-manager"},next:{title:"Updating the Rancher Certificate",permalink:"/v2.5/getting-started/installation-and-upgrade/resources/update-rancher-certificate"}},s={},p=[{value:"Upgrade Cert-Manager Only",id:"upgrade-cert-manager-only",level:2},{value:"Prerequisites",id:"prerequisites",level:3},{value:"Install cert-manager",id:"install-cert-manager",level:3},{value:"Cert-Manager API change and data migration",id:"cert-manager-api-change-and-data-migration",level:2}],c={toc:p};function m(e){let{components:t,...a}=e;return(0,n.kt)("wrapper",(0,r.Z)({},c,a,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("a",{parentName:"li",href:"https://community.letsencrypt.org/t/blocking-old-cert-manager-versions/98753"},"Let's Encrypt will be blocking cert-manager instances older than 0.8.0 starting November 1st 2019.")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("a",{parentName:"li",href:"https://docs.cert Line truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[25764],{56873:e=>{e.exports=JSON.parse('{"pluginId":"default","version":"2.6","label":"v2.6","banner":null,"badge":true,"noIndex":false,"className":"docs-version-2.6","isLast":false,"docsSidebars":{"tutorialSidebar":[{"type":"link","label":"What is Rancher?","href":"/v2.6/","docId":"rancher-manager"},{"type":"category","label":"Getting Started","items":[{"type":"link","label":"Overview","href":"/v2.6/getting-started/overview","docId":"getting-started/overview"},{"type":"category","label":"Quick Start Guides","items":[{"type":"category","label":"Deploy Rancher Manager","items":[{"type":"link","label":"Rancher AWS Quick Start Guide","href":"/v2.6/getting-started/quick-start-guides/deploy-rancher-manager/aws","docId":"getting-started/quick-start-guides/deploy-rancher-manager/aws"},{"type":"link","label":"Rancher AWS Marketplace Quick Start","href":"/v2.6/getting-started/quick-start-guides/deploy-rancher-manager/aws-marketplace","docId":"getting-started/quick-start-guides/deploy-rancher-manager/aws-marketplace"},{"type":"link","label":"Rancher Azure Quick Start Guide","href":"/v2.6/getting-started/quick-start-guides/deploy-rancher-manager/azure","docId":"getting-started/quick-start-guides/deploy-rancher-manager/azure"},{"type":"link","label":"Rancher DigitalOcean Quick Start Guide","href":"/v2.6/getting-started/quick-start-guides/deploy-rancher-manager/digitalocean","docId":"getting-started/quick-start-guides/deploy-rancher-manager/digitalocean"},{"type":"link","label":"Rancher GCP Quick Start Guide","href":"/v2.6/getting-started/quick-start-guides/deploy-rancher-manager/gcp","docId":"getting-started/quick-start-guides/deploy-rancher-manager/gcp"},{"type":"link","label":"Rancher Hetzner Cloud Quick Start Guide","href":"/v2.6/getting-started/quick-start-guides/deploy-rancher-manager/hetzner-cloud","docId":"getting-started/quick-start-guides/deploy-rancher-manager/hetzner-cloud"},{"type":"link","label":"Vagrant Quick Start","href":"/v2.6/getting-started/quick-start-guides/deploy-rancher-manager/vagrant","docId":"getting-started/quick-start-guides/deploy-rancher-manager/vagrant"},{"type":"link","label":"Rancher Equinix Metal Quick Start","href":"/v2.6/getting-started/quick-start-guides/deploy-rancher-manager/equinix-metal","docId":"getting-started/quick-start-guides/deploy-rancher-manager/equinix-metal"},{"type":"link","label":"Helm CLI Quick Start","href":"/v2.6/getting-started/quick-start-guides/deploy-rancher-manager/helm-cli","docId":"getting-started/quick-start-guides/deploy-rancher-manager/helm-cli"}],"collapsed":true,"collapsible":true,"href":"/v2.6/pages-for-subheaders/deploy-rancher-manager"},{"type":"category","label":"Deploy Rancher Workloads","items":[{"type":"link","label":"Workload with Ingress Quick Start","href":"/v2.6/getting-started/quick-start-guides/deploy-workloads/workload-ingress","docId":"getting-started/quick-start-guides/deploy-workloads/workload-ingress"},{"type":"link","label":"Workload with NodePort Quick Start","href":"/v2.6/getting-started/quick-start-guides/deploy-workloads/nodeports","docId":"getting-started/quick-start-guides/deploy-workloads/nodeports"}],"collapsed":true,"collapsible":true,"href":"/v2.6/pages-for-subheaders/deploy-rancher-workloads"}],"collapsed":true,"collapsible":true,"href":"/v2.6/pages-for-subheaders/quick-start-guides"},{"type":"category","label":"Installation and Upgrade","items":[{"type":"category","label":"Installation Requirements","items":[{"type":"link","label":"Installing Docker","href":"/v2.6/getting-started/installation-and-upgrade/installation-requirements/install-docker","docId":"getting-started/installation-and-upgrade/installation-requirements/install-docker"},{"type":"link","label":"Dockershim","href":"/v2.6/getting-started/installation-and-upgrade/installation-requirements/dockershim","docId":"getting-started/installation-and-upgrade/installation-requirements/dockershim"},{"type":"link","label":"Port Requirements","href":"/v2.6/getting-started/installation-and-upgrade/installation-requirements/port-requirements","docId":"getting-started/installation-and-upgrade/installation-requirements/port-requirements"}],"collapsed":true,"collapsible":true,"href":"/v2.6/pages-for-subheaders/installation-requirements"},{"type":"category","label":"Installation References","items":[{"type":"link","label":"Rancher Helm Chart Options","href":"/v2.6/getting-started/installation-and-upgrade/installation-references/helm-chart-options","docId":"getting-started/installation-and-upgrade/installation-references/helm-chart-options"},{"type":"link","label":"TLS Settings","href":"/v2.6/getting-started/installation-and-upgrade/installation-references/tls-settings","docId":"getting-started/installation-and-upgrade/installation-references/tls-settings"},{"type":"link","label":"Feature Flags","href":"/v2.6/getting-started/installation-and-upgrade/installation-references/feature-flags","docILine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[25764],{56873:e=>{e.exports=JSON.parse('{"pluginId":"default","version":"2.6","label":"v2.6","banner":null,"badge":true,"noIndex":false,"className":"docs-version-2.6","isLast":false,"docsSidebars":{"tutorialSidebar":[{"type":"link","label":"What is Rancher?","href":"/v2.6/","docId":"rancher-manager"},{"type":"category","label":"Getting Started","items":[{"type":"link","label":"Overview","href":"/v2.6/getting-started/overview","docId":"getting-started/overview"},{"type":"category","label":"Quick Start Guides","items":[{"type":"category","label":"Deploy Rancher Manager","items":[{"type":"link","label":"Rancher AWS Quick Start Guide","href":"/v2.6/getting-started/quick-start-guides/deploy-rancher-manager/aws","docId":"getting-started/quick-start-guides/deploy-rancher-manager/aws"},{"type":"link","label":"Rancher AWS Marketplace Quick Start","href":"/v2.6/getting-started/quick-start-guides/deploy-rancher-manager/aws-marketplace","docId":"getting-started/quick-start-guides/deploy-rancher-manager/aws-marketplace"},{"type":"link","label":"Rancher Azure Quick Start Guide","href":"/v2.6/getting-started/quick-start-guides/deploy-rancher-manager/azure","docId":"getting-started/quick-start-guides/deploy-rancher-manager/azure"},{"type":"link","label":"Rancher DigitalOcean Quick Start Guide","href":"/v2.6/getting-started/quick-start-guides/deploy-rancher-manager/digitalocean","docId":"getting-started/quick-start-guides/deploy-rancher-manager/digitalocean"},{"type":"link","label":"Rancher GCP Quick Start Guide","href":"/v2.6/getting-started/quick-start-guides/deploy-rancher-manager/gcp","docId":"getting-started/quick-start-guides/deploy-rancher-manager/gcp"},{"type":"link","label":"Rancher Hetzner Cloud Quick Start Guide","href":"/v2.6/getting-started/quick-start-guides/deploy-rancher-manager/hetzner-cloud","docId":"getting-started/quick-start-guides/deploy-rancher-manager/hetzner-cloud"},{"type":"link","label":"Vagrant Quick Start","href":"/v2.6/getting-started/quick-start-guides/deploy-rancher-manager/vagrant","docId":"getting-started/quick-start-guides/deploy-rancher-manager/vagrant"},{"type":"link","label":"Rancher Equinix Metal Quick Start","href":"/v2.6/getting-started/quick-start-guides/deploy-rancher-manager/equinix-metal","docId":"getting-started/quick-start-guides/deploy-rancher-manager/equinix-metal"},{"type":"link","label":"Helm CLI Quick Start","href":"/v2.6/getting-started/quick-start-guides/deploy-rancher-manager/helm-cli","docId":"getting-started/quick-start-guides/deploy-rancher-manager/helm-cli"}],"collapsed":true,"collapsible":true,"href":"/v2.6/pages-for-subheaders/deploy-rancher-manager"},{"type":"category","label":"Deploy Rancher Workloads","items":[{"type":"link","label":"Workload with Ingress Quick Start","href":"/v2.6/getting-started/quick-start-guides/deploy-workloads/workload-ingress","docId":"getting-started/quick-start-guides/deploy-workloads/workload-ingress"},{"type":"link","label":"Workload with NodePort Quick Start","href":"/v2.6/getting-started/quick-start-guides/deploy-workloads/nodeports","docId":"getting-started/quick-start-guides/deploy-workloads/nodeports"}],"collapsed":true,"collapsible":true,"href":"/v2.6/pages-for-subheaders/deploy-rancher-workloads"}],"collapsed":true,"collapsible":true,"href":"/v2.6/pages-for-subheaders/quick-start-guides"},{"type":"category","label":"Installation and Upgrade","items":[{"type":"category","label":"Installation Requirements","items":[{"type":"link","label":"Installing Docker","href":"/v2.6/getting-started/installation-and-upgrade/installation-requirements/install-docker","docId":"getting-started/installation-and-upgrade/installation-requirements/install-docker"},{"type":"link","label":"Dockershim","href":"/v2.6/getting-started/installation-and-upgrade/installation-requirements/dockershim","docId":"getting-started/installation-and-upgrade/installation-requirements/dockershim"},{"type":"link","label":"Port Requirements","href":"/v2.6/getting-started/installation-and-upgrade/installation-requirements/port-requirements","docId":"getting-started/installation-and-upgrade/installation-requirements/port-requirements"}],"collapsed":true,"collapsible":true,"href":"/v2.6/pages-for-subheaders/installation-requirements"},{"type":"category","label":"Installation References","items":[{"type":"link","label":"Rancher Helm Chart Options","href":"/v2.6/getting-started/installation-and-upgrade/installation-references/helm-chart-options","docId":"getting-started/installation-and-upgrade/installation-references/helm-chart-options"},{"type":"link","label":"TLS Settings","href":"/v2.6/getting-started/installation-and-upgrade/installation-references/tls-settings","docId":"getting-started/installation-and-upgrade/installation-references/tls-settings"},{"type":"link","label":"Feature Flags","href":"/v2.6/getting-started/installation-and-upgrade/installation-references/feature-flags","docILine truncated
@@ -1 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[72071],{3905:(e,a,t)=>{t.d(a,{Zo:()=>c,kt:()=>g});var r=t(67294);function n(e,a,t){return a in e?Object.defineProperty(e,a,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[a]=t,e}function o(e,a){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);a&&(r=r.filter((function(a){return Object.getOwnPropertyDescriptor(e,a).enumerable}))),t.push.apply(t,r)}return t}function i(e){for(var a=1;a<arguments.length;a++){var t=null!=arguments[a]?arguments[a]:{};a%2?o(Object(t),!0).forEach((function(a){n(e,a,t[a])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):o(Object(t)).forEach((function(a){Object.defineProperty(e,a,Object.getOwnPropertyDescriptor(t,a))}))}return e}function l(e,a){if(null==e)return{};var t,r,n=function(e,a){if(null==e)return{};var t,r,n={},o=Object.keys(e);for(r=0;r<o.length;r++)t=o[r],a.indexOf(t)>=0||(n[t]=e[t]);return n}(e,a);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)t=o[r],a.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(n[t]=e[t])}return n}var s=r.createContext({}),p=function(e){var a=r.useContext(s),t=a;return e&&(t="function"==typeof e?e(a):i(i({},a),e)),t},c=function(e){var a=p(e.components);return r.createElement(s.Provider,{value:a},e.children)},m={inlineCode:"code",wrapper:function(e){var a=e.children;return r.createElement(r.Fragment,{},a)}},u=r.forwardRef((function(e,a){var t=e.components,n=e.mdxType,o=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),u=p(t),g=n,d=u["".concat(s,".").concat(g)]||u[g]||m[g]||o;return t?r.createElement(d,i(i({ref:a},c),{},{components:t})):r.createElement(d,i({ref:a},c))}));function g(e,a){var t=arguments,n=a&&a.mdxType;if("string"==typeof e||n){var o=t.length,i=new Array(o);i[0]=u;var l={};for(var s in a)hasOwnProperty.call(a,s)&&(l[s]=a[s]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var p=2;p<o;p++)i[p]=t[p];return r.createElement.apply(null,i)}return r.createElement.apply(null,t)}u.displayName="MDXCreateElement"},95092:(e,a,t)=>{t.r(a),t.d(a,{assets:()=>s,contentTitle:()=>i,default:()=>m,frontMatter:()=>o,metadata:()=>l,toc:()=>p});var r=t(87462),n=(t(67294),t(3905));const o={title:"Upgrading Cert-Manager"},i=void 0,l={unversionedId:"getting-started/installation-and-upgrade/resources/upgrade-cert-manager",id:"version-2.0-2.4/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",title:"Upgrading Cert-Manager",description:"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:",source:"@site/versioned_docs/version-2.0-2.4/getting-started/installation-and-upgrade/resources/upgrade-cert-manager.md",sourceDirName:"getting-started/installation-and-upgrade/resources",slug:"/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.0-2.4/getting-started/installation-and-upgrade/resources/upgrade-cert-manager.md",tags:[],version:"2.0-2.4",lastUpdatedAt:1667008130,formattedLastUpdatedAt:"Oct 29, 2022",frontMatter:{title:"Upgrading Cert-Manager"},sidebar:"tutorialSidebar",previous:{title:"About Custom CA Root Certificates",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/resources/custom-ca-root-certificates"},next:{title:"Upgrading Cert-Manager with Helm 2",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2"}},s={},p=[{value:"Upgrade Cert-Manager",id:"upgrade-cert-manager",level:2},{value:"Option A: Upgrade cert-manager with Internet Access",id:"option-a-upgrade-cert-manager-with-internet-access",level:3},{value:"Option B: Upgrade cert-manager in an Air Gap Environment",id:"option-b-upgrade-cert-manager-in-an-air-gap-environment",level:3},{value:"Prerequisites",id:"prerequisites",level:3},{value:"Install cert-manager",id:"install-cert-manager",level:3},{value:"Verify the Deployment",id:"verify-the-deployment",level:3},{value:"Cert-Manager API change and data migration",id:"cert-manager-api-change-and-data-migration",level:2}],c={toc:p};function m(e){let{components:a,...t}=e;return(0,n.kt)("wrapper",(0,r.Z)({},c,t,{components:a,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("Line truncated
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[72071],{3905:(e,a,t)=>{t.d(a,{Zo:()=>c,kt:()=>g});var r=t(67294);function n(e,a,t){return a in e?Object.defineProperty(e,a,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[a]=t,e}function o(e,a){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);a&&(r=r.filter((function(a){return Object.getOwnPropertyDescriptor(e,a).enumerable}))),t.push.apply(t,r)}return t}function i(e){for(var a=1;a<arguments.length;a++){var t=null!=arguments[a]?arguments[a]:{};a%2?o(Object(t),!0).forEach((function(a){n(e,a,t[a])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):o(Object(t)).forEach((function(a){Object.defineProperty(e,a,Object.getOwnPropertyDescriptor(t,a))}))}return e}function l(e,a){if(null==e)return{};var t,r,n=function(e,a){if(null==e)return{};var t,r,n={},o=Object.keys(e);for(r=0;r<o.length;r++)t=o[r],a.indexOf(t)>=0||(n[t]=e[t]);return n}(e,a);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)t=o[r],a.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(n[t]=e[t])}return n}var s=r.createContext({}),p=function(e){var a=r.useContext(s),t=a;return e&&(t="function"==typeof e?e(a):i(i({},a),e)),t},c=function(e){var a=p(e.components);return r.createElement(s.Provider,{value:a},e.children)},m={inlineCode:"code",wrapper:function(e){var a=e.children;return r.createElement(r.Fragment,{},a)}},u=r.forwardRef((function(e,a){var t=e.components,n=e.mdxType,o=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),u=p(t),g=n,d=u["".concat(s,".").concat(g)]||u[g]||m[g]||o;return t?r.createElement(d,i(i({ref:a},c),{},{components:t})):r.createElement(d,i({ref:a},c))}));function g(e,a){var t=arguments,n=a&&a.mdxType;if("string"==typeof e||n){var o=t.length,i=new Array(o);i[0]=u;var l={};for(var s in a)hasOwnProperty.call(a,s)&&(l[s]=a[s]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var p=2;p<o;p++)i[p]=t[p];return r.createElement.apply(null,i)}return r.createElement.apply(null,t)}u.displayName="MDXCreateElement"},95092:(e,a,t)=>{t.r(a),t.d(a,{assets:()=>s,contentTitle:()=>i,default:()=>m,frontMatter:()=>o,metadata:()=>l,toc:()=>p});var r=t(87462),n=(t(67294),t(3905));const o={title:"Upgrading Cert-Manager"},i=void 0,l={unversionedId:"getting-started/installation-and-upgrade/resources/upgrade-cert-manager",id:"version-2.0-2.4/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",title:"Upgrading Cert-Manager",description:"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:",source:"@site/versioned_docs/version-2.0-2.4/getting-started/installation-and-upgrade/resources/upgrade-cert-manager.md",sourceDirName:"getting-started/installation-and-upgrade/resources",slug:"/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.0-2.4/getting-started/installation-and-upgrade/resources/upgrade-cert-manager.md",tags:[],version:"2.0-2.4",lastUpdatedAt:1681151826,formattedLastUpdatedAt:"Apr 10, 2023",frontMatter:{title:"Upgrading Cert-Manager"},sidebar:"tutorialSidebar",previous:{title:"About Custom CA Root Certificates",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/resources/custom-ca-root-certificates"},next:{title:"Upgrading Cert-Manager with Helm 2",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2"}},s={},p=[{value:"Upgrade Cert-Manager",id:"upgrade-cert-manager",level:2},{value:"Option A: Upgrade cert-manager with Internet Access",id:"option-a-upgrade-cert-manager-with-internet-access",level:3},{value:"Option B: Upgrade cert-manager in an Air Gap Environment",id:"option-b-upgrade-cert-manager-in-an-air-gap-environment",level:3},{value:"Prerequisites",id:"prerequisites",level:3},{value:"Install cert-manager",id:"install-cert-manager",level:3},{value:"Verify the Deployment",id:"verify-the-deployment",level:3},{value:"Cert-Manager API change and data migration",id:"cert-manager-api-change-and-data-migration",level:2}],c={toc:p};function m(e){let{components:a,...t}=e;return(0,n.kt)("wrapper",(0,r.Z)({},c,t,{components:a,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("Line truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[43583],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>k});var a=r(67294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function s(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?s(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):s(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},s=Object.keys(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var o=a.createContext({}),c=function(e){var t=a.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},u=function(e){var t=c(e.components);return a.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,s=e.originalType,o=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),d=c(r),k=n,h=d["".concat(o,".").concat(k)]||d[k]||p[k]||s;return r?a.createElement(h,i(i({ref:t},u),{},{components:r})):a.createElement(h,i({ref:t},u))}));function k(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var s=r.length,i=new Array(s);i[0]=d;var l={};for(var o in t)hasOwnProperty.call(t,o)&&(l[o]=t[o]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var c=2;c<s;c++)i[c]=r[c];return a.createElement.apply(null,i)}return a.createElement.apply(null,r)}d.displayName="MDXCreateElement"},36655:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>p,frontMatter:()=>s,metadata:()=>l,toc:()=>c});var a=r(87462),n=(r(67294),r(3905));const s={title:"K3s CIS v1.20 Benchmark - Self-Assessment Guide - Rancher v2.7"},i=void 0,l={unversionedId:"reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-self-assessment-guide-with-cis-v1.20-benchmark",id:"reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-self-assessment-guide-with-cis-v1.20-benchmark",title:"K3s CIS v1.20 Benchmark - Self-Assessment Guide - Rancher v2.7",description:"K3s CIS Kubernetes Benchmark v1.20 - K3s with Kubernetes v1.21",source:"@site/docs/reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-self-assessment-guide-with-cis-v1.20-benchmark.md",sourceDirName:"reference-guides/rancher-security/rancher-v2.7-hardening-guides",slug:"/reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-self-assessment-guide-with-cis-v1.20-benchmark",permalink:"/reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-self-assessment-guide-with-cis-v1.20-benchmark",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-self-assessment-guide-with-cis-v1.20-benchmark.md",tags:[],version:"current",lastUpdatedAt:1664960242,formattedLastUpdatedAt:"Oct 5, 2022",frontMatter:{title:"K3s CIS v1.20 Benchmark - Self-Assessment Guide - Rancher v2.7"},sidebar:"tutorialSidebar",previous:{title:"K3s Hardening Guide with CIS Benchmark",permalink:"/reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-hardening-guide-with-cis-benchmark"},next:{title:"K3s CIS v1.23 Benchmark - Self-Assessment Guide - Rancher v2.7",permalink:"/reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-self-assessment-guide-with-cis-v1.23-benchmark"}},o={},c=[{value:"K3s CIS Kubernetes Benchmark v1.20 - K3s with Kubernetes v1.21",id:"k3s-cis-kubernetes-benchmark-v120---k3s-with-kubernetes-v121",level:3},{value:"Overview",id:"overview",level:4},{value:"Testing controls methodology",id:"testing-controls-methodology",level:4},{value:"Controls",id:"controls",level:3},{value:"1.1 Master Node Configuration Files",id:"11-master-node-configuration-files",level:2},{value:"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)",id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)",id:"112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.3 Ensure that Line truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[38550],{3905:(e,t,a)=>{a.d(t,{Zo:()=>m,kt:()=>u});var r=a(67294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function i(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function s(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?i(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):i(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function l(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},i=Object.keys(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var o=r.createContext({}),p=function(e){var t=r.useContext(o),a=t;return e&&(a="function"==typeof e?e(t):s(s({},t),e)),a},m=function(e){var t=p(e.components);return r.createElement(o.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},h=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,i=e.originalType,o=e.parentName,m=l(e,["components","mdxType","originalType","parentName"]),h=p(a),u=n,c=h["".concat(o,".").concat(u)]||h[u]||d[u]||i;return a?r.createElement(c,s(s({ref:t},m),{},{components:a})):r.createElement(c,s({ref:t},m))}));function u(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var i=a.length,s=new Array(i);s[0]=h;var l={};for(var o in t)hasOwnProperty.call(t,o)&&(l[o]=t[o]);l.originalType=e,l.mdxType="string"==typeof e?e:n,s[1]=l;for(var p=2;p<i;p++)s[p]=a[p];return r.createElement.apply(null,s)}return r.createElement.apply(null,a)}h.displayName="MDXCreateElement"},34008:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>o,contentTitle:()=>s,default:()=>c,frontMatter:()=>i,metadata:()=>l,toc:()=>p});var r=a(87462),n=(a(67294),a(3905));const i={title:"2. Collect and Publish Images to your Private Registry"},s=void 0,l={unversionedId:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images",id:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images",title:"2. Collect and Publish Images to your Private Registry",description:"This section describes how to set up your private registry so that when you install Rancher, Rancher will pull all the required images from this registry.",source:"@site/docs/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images.md",sourceDirName:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install",slug:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images",permalink:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images.md",tags:[],version:"current",lastUpdatedAt:1670452794,formattedLastUpdatedAt:"Dec 7, 2022",frontMatter:{title:"2. Collect and Publish Images to your Private Registry"},sidebar:"tutorialSidebar",previous:{title:"1. Set up Infrastructure and Private Registry",permalink:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/infrastructure-private-registry"},next:{title:"3. Install Kubernetes (Skip for Docker Installs)",permalink:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-kubernetes"}},o={},p=[{value:"Prerequisites",id:"prerequisites",level:3},{value:"1. Find the required assets for your Rancher version",id:"1-find-the-required-assets-for-your-rancher-version",level:3},{value:"2. Collect the cert-manager image",id:"2-collect-the-cert-manager-image",level:3},{value:"3. Save the images to your workstation",id:"3-save-the-images-to-your-workstation",level:3},{value:"4. Populate the private registry",id:"4-populate-the-private-registry",level:3},{value:"Windows Steps",id:"windows-steps",level:2},{value:"Prerequisites",id:"prerequisites-1",level:3},{value:"1. Find the required assets for your Rancher version",id:"1-find-the-required-assets-for-your-rancher-version-1",level:3},{value:"2. Save the images to your Windows Server workstation",id:"2-save-the-images-to-your-windows-server-Line truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[38550],{3905:(e,t,a)=>{a.d(t,{Zo:()=>m,kt:()=>u});var r=a(67294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function i(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function s(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?i(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):i(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function l(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},i=Object.keys(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var o=r.createContext({}),p=function(e){var t=r.useContext(o),a=t;return e&&(a="function"==typeof e?e(t):s(s({},t),e)),a},m=function(e){var t=p(e.components);return r.createElement(o.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},h=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,i=e.originalType,o=e.parentName,m=l(e,["components","mdxType","originalType","parentName"]),h=p(a),u=n,c=h["".concat(o,".").concat(u)]||h[u]||d[u]||i;return a?r.createElement(c,s(s({ref:t},m),{},{components:a})):r.createElement(c,s({ref:t},m))}));function u(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var i=a.length,s=new Array(i);s[0]=h;var l={};for(var o in t)hasOwnProperty.call(t,o)&&(l[o]=t[o]);l.originalType=e,l.mdxType="string"==typeof e?e:n,s[1]=l;for(var p=2;p<i;p++)s[p]=a[p];return r.createElement.apply(null,s)}return r.createElement.apply(null,a)}h.displayName="MDXCreateElement"},34008:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>o,contentTitle:()=>s,default:()=>c,frontMatter:()=>i,metadata:()=>l,toc:()=>p});var r=a(87462),n=(a(67294),a(3905));const i={title:"2. Collect and Publish Images to your Private Registry"},s=void 0,l={unversionedId:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images",id:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images",title:"2. Collect and Publish Images to your Private Registry",description:"This section describes how to set up your private registry so that when you install Rancher, Rancher will pull all the required images from this registry.",source:"@site/docs/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images.md",sourceDirName:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install",slug:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images",permalink:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images.md",tags:[],version:"current",lastUpdatedAt:1681239575,formattedLastUpdatedAt:"Apr 11, 2023",frontMatter:{title:"2. Collect and Publish Images to your Private Registry"},sidebar:"tutorialSidebar",previous:{title:"1. Set up Infrastructure and Private Registry",permalink:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/infrastructure-private-registry"},next:{title:"3. Install Kubernetes (Skip for Docker Installs)",permalink:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-kubernetes"}},o={},p=[{value:"Prerequisites",id:"prerequisites",level:3},{value:"1. Find the required assets for your Rancher version",id:"1-find-the-required-assets-for-your-rancher-version",level:3},{value:"2. Collect the cert-manager image",id:"2-collect-the-cert-manager-image",level:3},{value:"3. Save the images to your workstation",id:"3-save-the-images-to-your-workstation",level:3},{value:"4. Populate the private registry",id:"4-populate-the-private-registry",level:3},{value:"Windows Steps",id:"windows-steps",level:2},{value:"Prerequisites",id:"prerequisites-1",level:3},{value:"1. Find the required assets for your Rancher version",id:"1-find-the-required-assets-for-your-rancher-version-1",level:3},{value:"2. Save the images to your Windows Server workstation",id:"2-save-the-images-to-your-windows-serverLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[5008],{3905:(e,t,a)=>{a.d(t,{Zo:()=>u,kt:()=>d});var n=a(67294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function o(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},l=Object.keys(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var s=n.createContext({}),c=function(e){var t=n.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},u=function(e){var t=c(e.components);return n.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},h=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),h=c(a),d=r,m=h["".concat(s,".").concat(d)]||h[d]||p[d]||l;return a?n.createElement(m,i(i({ref:t},u),{},{components:a})):n.createElement(m,i({ref:t},u))}));function d(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=a.length,i=new Array(l);i[0]=h;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var c=2;c<l;c++)i[c]=a[c];return n.createElement.apply(null,i)}return n.createElement.apply(null,a)}h.displayName="MDXCreateElement"},91882:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>m,frontMatter:()=>l,metadata:()=>o,toc:()=>c});var n=a(87462),r=(a(67294),a(3905));const l={title:"Install/Upgrade Rancher on a Kubernetes Cluster",description:"Learn how to install Rancher in development and production environments. Read about single node and high availability installation"},i=void 0,o={unversionedId:"pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster",id:"pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster",title:"Install/Upgrade Rancher on a Kubernetes Cluster",description:"Learn how to install Rancher in development and production environments. Read about single node and high availability installation",source:"@site/docs/pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster",permalink:"/pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster.md",tags:[],version:"current",lastUpdatedAt:1681239575,formattedLastUpdatedAt:"Apr 11, 2023",frontMatter:{title:"Install/Upgrade Rancher on a Kubernetes Cluster",description:"Learn how to install Rancher in development and production environments. Read about single node and high availability installation"},sidebar:"tutorialSidebar",previous:{title:"Feature Flags",permalink:"/getting-started/installation-and-upgrade/installation-references/feature-flags"},next:{title:"Rollbacks",permalink:"/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rollbacks"}},s={},c=[{value:"Prerequisites",id:"prerequisites",level:2},{value:"Kubernetes Cluster",id:"kubernetes-cluster",level:3},{value:"Ingress Controller",id:"ingress-controller",level:3},{value:"CLI Tools",id:"cli-tools",level:3},{value:"Install the Rancher Helm Chart",id:"install-the-rancher-helm-chart",level:2},{value:"1. Add the Helm Chart Repository",id:"1-add-the-helm-chart-repository",level:3},{value:"2. Create a Namespace for Rancher",id:"2-create-a-namespace-for-rancher",level:3},{value:"3. Choose your SSL Configuration",id:"3-choose-your-ssl-configuration",level:3},{value:"4. Install cert-manager",id:"4-install-cert-manager",level:3},{value:"5. Install Rancher with Helm and Your Chosen Certificate Option",id:"5-install-rancher-with-helm-and-your-chosen-certificate-option",level:3},{value:"6. Verify that the Rancher Server is Successfully Deployed",id:"6-verify-that-the-rancher-server-is-successfully-deployed",level:3},{value:"7. Save Your Options",id:"7-save-your-options",level:3},{value:"Finishing Up",id:"finishing-up",level:3}],u=e=>function(t){return console.Line truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[5008],{3905:(e,t,a)=>{a.d(t,{Zo:()=>u,kt:()=>d});var n=a(67294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function o(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},l=Object.keys(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var s=n.createContext({}),c=function(e){var t=n.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},u=function(e){var t=c(e.components);return n.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},h=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),h=c(a),d=r,m=h["".concat(s,".").concat(d)]||h[d]||p[d]||l;return a?n.createElement(m,i(i({ref:t},u),{},{components:a})):n.createElement(m,i({ref:t},u))}));function d(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=a.length,i=new Array(l);i[0]=h;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var c=2;c<l;c++)i[c]=a[c];return n.createElement.apply(null,i)}return n.createElement.apply(null,a)}h.displayName="MDXCreateElement"},91882:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>m,frontMatter:()=>l,metadata:()=>o,toc:()=>c});var n=a(87462),r=(a(67294),a(3905));const l={title:"Install/Upgrade Rancher on a Kubernetes Cluster",description:"Learn how to install Rancher in development and production environments. Read about single node and high availability installation"},i=void 0,o={unversionedId:"pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster",id:"pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster",title:"Install/Upgrade Rancher on a Kubernetes Cluster",description:"Learn how to install Rancher in development and production environments. Read about single node and high availability installation",source:"@site/docs/pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster",permalink:"/pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster.md",tags:[],version:"current",lastUpdatedAt:1675727047,formattedLastUpdatedAt:"Feb 6, 2023",frontMatter:{title:"Install/Upgrade Rancher on a Kubernetes Cluster",description:"Learn how to install Rancher in development and production environments. Read about single node and high availability installation"},sidebar:"tutorialSidebar",previous:{title:"Feature Flags",permalink:"/getting-started/installation-and-upgrade/installation-references/feature-flags"},next:{title:"Rollbacks",permalink:"/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rollbacks"}},s={},c=[{value:"Prerequisites",id:"prerequisites",level:2},{value:"Kubernetes Cluster",id:"kubernetes-cluster",level:3},{value:"Ingress Controller",id:"ingress-controller",level:3},{value:"CLI Tools",id:"cli-tools",level:3},{value:"Install the Rancher Helm Chart",id:"install-the-rancher-helm-chart",level:2},{value:"1. Add the Helm Chart Repository",id:"1-add-the-helm-chart-repository",level:3},{value:"2. Create a Namespace for Rancher",id:"2-create-a-namespace-for-rancher",level:3},{value:"3. Choose your SSL Configuration",id:"3-choose-your-ssl-configuration",level:3},{value:"4. Install cert-manager",id:"4-install-cert-manager",level:3},{value:"5. Install Rancher with Helm and Your Chosen Certificate Option",id:"5-install-rancher-with-helm-and-your-chosen-certificate-option",level:3},{value:"6. Verify that the Rancher Server is Successfully Deployed",id:"6-verify-that-the-rancher-server-is-successfully-deployed",level:3},{value:"7. Save Your Options",id:"7-save-your-options",level:3},{value:"Finishing Up",id:"finishing-up",level:3}],u=e=>function(t){return console.wLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[87426],{3905:(e,t,n)=>{n.d(t,{Zo:()=>o,kt:()=>h});var r=n(67294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function s(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},i=Object.keys(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var d=r.createContext({}),u=function(e){var t=r.useContext(d),n=t;return e&&(n="function"==typeof e?e(t):s(s({},t),e)),n},o=function(e){var t=u(e.components);return r.createElement(d.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},g=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,i=e.originalType,d=e.parentName,o=l(e,["components","mdxType","originalType","parentName"]),g=u(n),h=a,k=g["".concat(d,".").concat(h)]||g[h]||p[h]||i;return n?r.createElement(k,s(s({ref:t},o),{},{components:n})):r.createElement(k,s({ref:t},o))}));function h(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=n.length,s=new Array(i);s[0]=g;var l={};for(var d in t)hasOwnProperty.call(t,d)&&(l[d]=t[d]);l.originalType=e,l.mdxType="string"==typeof e?e:a,s[1]=l;for(var u=2;u<i;u++)s[u]=n[u];return r.createElement.apply(null,s)}return r.createElement.apply(null,n)}g.displayName="MDXCreateElement"},92147:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>d,contentTitle:()=>s,default:()=>p,frontMatter:()=>i,metadata:()=>l,toc:()=>u});var r=n(87462),a=(n(67294),n(3905));const i={title:"Self-Assessment and Hardening Guides for Rancher"},s=void 0,l={unversionedId:"pages-for-subheaders/rancher-hardening-guides",id:"pages-for-subheaders/rancher-hardening-guides",title:"Self-Assessment and Hardening Guides for Rancher",description:"Rancher provides specific security hardening guides for each supported Rancher version's Kubernetes distributions.",source:"@site/docs/pages-for-subheaders/rancher-hardening-guides.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/rancher-hardening-guides",permalink:"/pages-for-subheaders/rancher-hardening-guides",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/pages-for-subheaders/rancher-hardening-guides.md",tags:[],version:"current",lastUpdatedAt:1678300966,formattedLastUpdatedAt:"Mar 8, 2023",frontMatter:{title:"Self-Assessment and Hardening Guides for Rancher"},sidebar:"tutorialSidebar",previous:{title:"Security",permalink:"/pages-for-subheaders/rancher-security"},next:{title:"RKE Hardening Guide",permalink:"/pages-for-subheaders/rke1-hardening-guide"}},d={},u=[{value:"Rancher Kubernetes Distributions",id:"rancher-kubernetes-distributions",level:2},{value:"Hardening Guides and Benchmark Versions",id:"hardening-guides-and-benchmark-versions",level:2},{value:"RKE Guides",id:"rke-guides",level:3},{value:"RKE2 Guides",id:"rke2-guides",level:3},{value:"K3s Guides",id:"k3s-guides",level:3},{value:"Rancher with SELinux",id:"rancher-with-selinux",level:2}],o={toc:u};function p(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},o,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Rancher provides specific security hardening guides for each supported Rancher version's Kubernetes distributions."),(0,a.kt)("h2",{id:"rancher-kubernetes-distributions"},"Rancher Kubernetes Distributions"),(0,a.kt)("p",null,"Rancher uses the following Kubernetes distributions:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"https://rancher.com/docs/rke/latest/en/"},(0,a.kt)("strong",{parentName:"a"},"RKE")),", Rancher Kubernetes Engine, is a CNCF-certified Kubernetes distribution that runs entirely within Docker containers."),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"https://docs.rke2.io/"},(0,a.kt)("strong",{parentName:"a"},"RKE2"))," is a fully conformant Kubernetes distribution that focuses on security and compliance within the U.S. Federal Government sector."),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"https://docs.k3s.io/"},(0,a.kt)("strong",{parentName:"a"},"K3s"))," is a fully conformant, lightweighLine truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[71416],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>d});var n=r(67294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function i(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},o=Object.keys(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var s=n.createContext({}),p=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):l(l({},t),e)),r},c=function(e){var t=p(e.components);return n.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},h=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,c=i(e,["components","mdxType","originalType","parentName"]),h=p(r),d=a,m=h["".concat(s,".").concat(d)]||h[d]||u[d]||o;return r?n.createElement(m,l(l({ref:t},c),{},{components:r})):n.createElement(m,l({ref:t},c))}));function d(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=r.length,l=new Array(o);l[0]=h;var i={};for(var s in t)hasOwnProperty.call(t,s)&&(i[s]=t[s]);i.originalType=e,i.mdxType="string"==typeof e?e:a,l[1]=i;for(var p=2;p<o;p++)l[p]=r[p];return n.createElement.apply(null,l)}return n.createElement.apply(null,r)}h.displayName="MDXCreateElement"},50973:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>l,default:()=>u,frontMatter:()=>o,metadata:()=>i,toc:()=>p});var n=r(87462),a=(r(67294),r(3905));const o={title:"Fleet - GitOps at Scale"},l=void 0,i={unversionedId:"how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet",id:"how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet",title:"Fleet - GitOps at Scale",description:"Fleet is GitOps at scale. Fleet is designed to manage up to a million clusters. It's also lightweight enough that it works great for a single cluster too, but it really shines when you get to a large scale. By large scale we mean either a lot of clusters, a lot of deployments, or a lot of teams in a single organization.",source:"@site/docs/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet.md",sourceDirName:"how-to-guides/new-user-guides/deploy-apps-across-clusters",slug:"/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet",permalink:"/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet.md",tags:[],version:"current",lastUpdatedAt:1666730461,formattedLastUpdatedAt:"Oct 25, 2022",frontMatter:{title:"Fleet - GitOps at Scale"},sidebar:"tutorialSidebar",previous:{title:"Deploying Applications across Clusters",permalink:"/pages-for-subheaders/deploy-apps-across-clusters"},next:{title:"Multi-cluster Apps",permalink:"/how-to-guides/new-user-guides/deploy-apps-across-clusters/multi-cluster-apps"}},s={},p=[{value:"Architecture",id:"architecture",level:2},{value:"Accessing Fleet in the Rancher UI",id:"accessing-fleet-in-the-rancher-ui",level:2},{value:"Windows Support",id:"windows-support",level:2},{value:"GitHub Repository",id:"github-repository",level:2},{value:"Using Fleet Behind a Proxy",id:"using-fleet-behind-a-proxy",level:2},{value:"Helm Chart Dependencies",id:"helm-chart-dependencies",level:2},{value:"Troubleshooting",id:"troubleshooting",level:2},{value:"Documentation",id:"documentation",level:2}],c={toc:p};function u(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},c,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Fleet is GitOps at scale. Fleet is designed to manage up to a million clusters. It's also lightweight enough that it works great for a ",(0,a.kt)("a",{parentName:"p",href:"https://fleet.rancher.io/single-cluster-install/"},"single cluster")," too, but it really shines when you get to a ",(0,a.kt)("a",{parentName:"p",href:"https://fleet.rancher.io/multi-cluster-install/"},"large scale.")," By large scale we mean either a lot of clusters, a lot of deployments, or a lot of teams in a single organization."),(0,a.kt)("p",null,"Fleet is a separaLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[71416],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>d});var n=r(67294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},o=Object.keys(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var s=n.createContext({}),p=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},u=function(e){var t=p(e.components);return n.createElement(s.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},h=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),h=p(r),d=a,m=h["".concat(s,".").concat(d)]||h[d]||c[d]||o;return r?n.createElement(m,i(i({ref:t},u),{},{components:r})):n.createElement(m,i({ref:t},u))}));function d(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=r.length,i=new Array(o);i[0]=h;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:a,i[1]=l;for(var p=2;p<o;p++)i[p]=r[p];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}h.displayName="MDXCreateElement"},50973:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>c,frontMatter:()=>o,metadata:()=>l,toc:()=>p});var n=r(87462),a=(r(67294),r(3905));const o={title:"Continuous Delivery with Fleet"},i=void 0,l={unversionedId:"how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet",id:"how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet",title:"Continuous Delivery with Fleet",description:"Continuous Delivery with Fleet is GitOps at scale. Fleet is designed to manage up to a million clusters. It's also lightweight enough that it works great for a single cluster too, but it really shines when you get to a large scale. By large scale we mean either a lot of clusters, a lot of deployments, or a lot of teams in a single organization.",source:"@site/docs/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet.md",sourceDirName:"how-to-guides/new-user-guides/deploy-apps-across-clusters",slug:"/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet",permalink:"/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet.md",tags:[],version:"current",lastUpdatedAt:1680627802,formattedLastUpdatedAt:"Apr 4, 2023",frontMatter:{title:"Continuous Delivery with Fleet"},sidebar:"tutorialSidebar",previous:{title:"Deploying Applications across Clusters",permalink:"/pages-for-subheaders/deploy-apps-across-clusters"},next:{title:"Multi-cluster Apps",permalink:"/how-to-guides/new-user-guides/deploy-apps-across-clusters/multi-cluster-apps"}},s={},p=[{value:"Architecture",id:"architecture",level:2},{value:"Accessing Fleet in the Rancher UI",id:"accessing-fleet-in-the-rancher-ui",level:2},{value:"Windows Support",id:"windows-support",level:2},{value:"GitHub Repository",id:"github-repository",level:2},{value:"Using Fleet Behind a Proxy",id:"using-fleet-behind-a-proxy",level:2},{value:"Helm Chart Dependencies",id:"helm-chart-dependencies",level:2},{value:"Troubleshooting",id:"troubleshooting",level:2},{value:"Documentation",id:"documentation",level:2}],u={toc:p};function c(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Continuous Delivery with Fleet is GitOps at scale. Fleet is designed to manage up to a million clusters. It's also lightweight enough that it works great for a ",(0,a.kt)("a",{parentName:"p",href:"https://fleet.rancher.io/single-cluster-install/"},"single cluster")," too, but it really shines when you get to a ",(0,a.kt)("a",{parentName:"p",href:"https://fleet.rancher.io/multi-cluster-install/"},"large scale.")," By large scale we mean either a lot of clusters, a lot of deployments, or a lot of Line truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[86430],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>d});var n=r(67294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},o=Object.keys(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var s=n.createContext({}),p=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},c=function(e){var t=p(e.components);return n.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},h=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),h=p(r),d=a,m=h["".concat(s,".").concat(d)]||h[d]||u[d]||o;return r?n.createElement(m,i(i({ref:t},c),{},{components:r})):n.createElement(m,i({ref:t},c))}));function d(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=r.length,i=new Array(o);i[0]=h;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:a,i[1]=l;for(var p=2;p<o;p++)i[p]=r[p];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}h.displayName="MDXCreateElement"},15612:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>u,frontMatter:()=>o,metadata:()=>l,toc:()=>p});var n=r(87462),a=(r(67294),r(3905));const o={title:"Fleet - GitOps at Scale"},i=void 0,l={unversionedId:"how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet",id:"version-2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet",title:"Fleet - GitOps at Scale",description:"Fleet is GitOps at scale. Fleet is designed to manage up to a million clusters. It's also lightweight enough that it works great for a single cluster too, but it really shines when you get to a large scale. By large scale we mean either a lot of clusters, a lot of deployments, or a lot of teams in a single organization.",source:"@site/versioned_docs/version-2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet.md",sourceDirName:"how-to-guides/new-user-guides/deploy-apps-across-clusters",slug:"/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet",permalink:"/v2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet.md",tags:[],version:"2.6",lastUpdatedAt:1668452187,formattedLastUpdatedAt:"Nov 14, 2022",frontMatter:{title:"Fleet - GitOps at Scale"},sidebar:"tutorialSidebar",previous:{title:"Deploying Applications across Clusters",permalink:"/v2.6/pages-for-subheaders/deploy-apps-across-clusters"},next:{title:"Multi-cluster Apps",permalink:"/v2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/multi-cluster-apps"}},s={},p=[{value:"Architecture",id:"architecture",level:2},{value:"Accessing Fleet in the Rancher UI",id:"accessing-fleet-in-the-rancher-ui",level:2},{value:"Windows Support",id:"windows-support",level:2},{value:"GitHub Repository",id:"github-repository",level:2},{value:"Using Fleet Behind a Proxy",id:"using-fleet-behind-a-proxy",level:2},{value:"Helm Chart Dependencies",id:"helm-chart-dependencies",level:2},{value:"Troubleshooting",id:"troubleshooting",level:2},{value:"Documentation",id:"documentation",level:2}],c={toc:p};function u(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},c,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Fleet is GitOps at scale. Fleet is designed to manage up to a million clusters. It's also lightweight enough that it works great for a ",(0,a.kt)("a",{parentName:"p",href:"https://fleet.rancher.io/single-cluster-install/"},"single cluster")," too, but it really shines when you get to a ",(0,a.kt)("a",{parentName:"p",href:"https://fleet.rancher.io/multi-cluster-install/"},"large scale.")," By large scale we mean either a lot of clusters, a lot of deployments, or a lot of teaLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[86430],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>d});var n=r(67294);function o(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?a(Object(r),!0).forEach((function(t){o(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):a(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}var s=n.createContext({}),p=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},u=function(e){var t=p(e.components);return n.createElement(s.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},h=n.forwardRef((function(e,t){var r=e.components,o=e.mdxType,a=e.originalType,s=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),h=p(r),d=o,m=h["".concat(s,".").concat(d)]||h[d]||c[d]||a;return r?n.createElement(m,i(i({ref:t},u),{},{components:r})):n.createElement(m,i({ref:t},u))}));function d(e,t){var r=arguments,o=t&&t.mdxType;if("string"==typeof e||o){var a=r.length,i=new Array(a);i[0]=h;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:o,i[1]=l;for(var p=2;p<a;p++)i[p]=r[p];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}h.displayName="MDXCreateElement"},15612:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>c,frontMatter:()=>a,metadata:()=>l,toc:()=>p});var n=r(87462),o=(r(67294),r(3905));const a={title:"Continuous Delivery with Fleet"},i=void 0,l={unversionedId:"how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet",id:"version-2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet",title:"Continuous Delivery with Fleet",description:"Continuous Delivery with Fleet is GitOps at scale. Fleet is designed to manage up to a million clusters. It's also lightweight enough that it works great for a single cluster too, but it really shines when you get to a large scale. By large scale we mean either a lot of clusters, a lot of deployments, or a lot of teams in a single organization.",source:"@site/versioned_docs/version-2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet.md",sourceDirName:"how-to-guides/new-user-guides/deploy-apps-across-clusters",slug:"/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet",permalink:"/v2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet.md",tags:[],version:"2.6",lastUpdatedAt:1680627802,formattedLastUpdatedAt:"Apr 4, 2023",frontMatter:{title:"Continuous Delivery with Fleet"},sidebar:"tutorialSidebar",previous:{title:"Deploying Applications across Clusters",permalink:"/v2.6/pages-for-subheaders/deploy-apps-across-clusters"},next:{title:"Multi-cluster Apps",permalink:"/v2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/multi-cluster-apps"}},s={},p=[{value:"Architecture",id:"architecture",level:2},{value:"Accessing Fleet in the Rancher UI",id:"accessing-fleet-in-the-rancher-ui",level:2},{value:"Windows Support",id:"windows-support",level:2},{value:"GitHub Repository",id:"github-repository",level:2},{value:"Using Fleet Behind a Proxy",id:"using-fleet-behind-a-proxy",level:2},{value:"Helm Chart Dependencies",id:"helm-chart-dependencies",level:2},{value:"Troubleshooting",id:"troubleshooting",level:2},{value:"Documentation",id:"documentation",level:2}],u={toc:p};function c(e){let{components:t,...r}=e;return(0,o.kt)("wrapper",(0,n.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,o.kt)("p",null,"Continuous Delivery with Fleet is GitOps at scale. Fleet is designed to manage up to a million clusters. It's also lightweight enough that it works great for a ",(0,o.kt)("a",{parentName:"p",href:"https://fleet.rancher.io/single-cluster-install/"},"single cluster")," too, but it really shines when you get to a ",(0,o.kt)("a",{parentName:"p",href:"https://fleet.rancher.io/multi-cluster-install/"},"large scale.")," By large scale wLine truncated
@@ -1 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[41002],{3905:(e,r,t)=>{t.d(r,{Zo:()=>l,kt:()=>f});var n=t(67294);function a(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function o(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);r&&(n=n.filter((function(r){return Object.getOwnPropertyDescriptor(e,r).enumerable}))),t.push.apply(t,n)}return t}function i(e){for(var r=1;r<arguments.length;r++){var t=null!=arguments[r]?arguments[r]:{};r%2?o(Object(t),!0).forEach((function(r){a(e,r,t[r])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):o(Object(t)).forEach((function(r){Object.defineProperty(e,r,Object.getOwnPropertyDescriptor(t,r))}))}return e}function s(e,r){if(null==e)return{};var t,n,a=function(e,r){if(null==e)return{};var t,n,a={},o=Object.keys(e);for(n=0;n<o.length;n++)t=o[n],r.indexOf(t)>=0||(a[t]=e[t]);return a}(e,r);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)t=o[n],r.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(a[t]=e[t])}return a}var c=n.createContext({}),p=function(e){var r=n.useContext(c),t=r;return e&&(t="function"==typeof e?e(r):i(i({},r),e)),t},l=function(e){var r=p(e.components);return n.createElement(c.Provider,{value:r},e.children)},u={inlineCode:"code",wrapper:function(e){var r=e.children;return n.createElement(n.Fragment,{},r)}},d=n.forwardRef((function(e,r){var t=e.components,a=e.mdxType,o=e.originalType,c=e.parentName,l=s(e,["components","mdxType","originalType","parentName"]),d=p(t),f=a,h=d["".concat(c,".").concat(f)]||d[f]||u[f]||o;return t?n.createElement(h,i(i({ref:r},l),{},{components:t})):n.createElement(h,i({ref:r},l))}));function f(e,r){var t=arguments,a=r&&r.mdxType;if("string"==typeof e||a){var o=t.length,i=new Array(o);i[0]=d;var s={};for(var c in r)hasOwnProperty.call(r,c)&&(s[c]=r[c]);s.originalType=e,s.mdxType="string"==typeof e?e:a,i[1]=s;for(var p=2;p<o;p++)i[p]=t[p];return n.createElement.apply(null,i)}return n.createElement.apply(null,t)}d.displayName="MDXCreateElement"},14158:(e,r,t)=>{t.r(r),t.d(r,{assets:()=>c,contentTitle:()=>i,default:()=>u,frontMatter:()=>o,metadata:()=>s,toc:()=>p});var n=t(87462),a=(t(67294),t(3905));const o={title:"Integrations in Rancher"},i=void 0,s={unversionedId:"pages-for-subheaders/integrations-in-rancher",id:"version-2.5/pages-for-subheaders/integrations-in-rancher",title:"Integrations in Rancher",description:"Over time, Rancher has accrued several products and projects that have been integrated into the Rancher UI.",source:"@site/versioned_docs/version-2.5/pages-for-subheaders/integrations-in-rancher.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/integrations-in-rancher",permalink:"/v2.5/pages-for-subheaders/integrations-in-rancher",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.5/pages-for-subheaders/integrations-in-rancher.md",tags:[],version:"2.5",lastUpdatedAt:1662663074,formattedLastUpdatedAt:"Sep 8, 2022",frontMatter:{title:"Integrations in Rancher"},sidebar:"tutorialSidebar",previous:{title:"Explanations",permalink:"/v2.5/explanations"},next:{title:"CIS Scans",permalink:"/v2.5/pages-for-subheaders/cis-scans"}},c={},p=[],l={toc:p};function u(e){let{components:r,...t}=e;return(0,a.kt)("wrapper",(0,n.Z)({},l,t,{components:r,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Over time, Rancher has accrued several products and projects that have been integrated into the Rancher UI."),(0,a.kt)("p",null,"Examples of some of these integrations are ",(0,a.kt)("a",{parentName:"p",href:"/v2.5/pages-for-subheaders/fleet-gitops-at-scale"},"Fleet - GitOps at Scale")," and ",(0,a.kt)("a",{parentName:"p",href:"/v2.5/pages-for-subheaders/monitoring-and-alerting"},"Monitoring and Alerting"),"."))}u.isMDXComponent=!0}}]);
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[41002],{3905:(e,r,t)=>{t.d(r,{Zo:()=>l,kt:()=>f});var n=t(67294);function a(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function o(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);r&&(n=n.filter((function(r){return Object.getOwnPropertyDescriptor(e,r).enumerable}))),t.push.apply(t,n)}return t}function i(e){for(var r=1;r<arguments.length;r++){var t=null!=arguments[r]?arguments[r]:{};r%2?o(Object(t),!0).forEach((function(r){a(e,r,t[r])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):o(Object(t)).forEach((function(r){Object.defineProperty(e,r,Object.getOwnPropertyDescriptor(t,r))}))}return e}function s(e,r){if(null==e)return{};var t,n,a=function(e,r){if(null==e)return{};var t,n,a={},o=Object.keys(e);for(n=0;n<o.length;n++)t=o[n],r.indexOf(t)>=0||(a[t]=e[t]);return a}(e,r);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)t=o[n],r.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(a[t]=e[t])}return a}var c=n.createContext({}),p=function(e){var r=n.useContext(c),t=r;return e&&(t="function"==typeof e?e(r):i(i({},r),e)),t},l=function(e){var r=p(e.components);return n.createElement(c.Provider,{value:r},e.children)},u={inlineCode:"code",wrapper:function(e){var r=e.children;return n.createElement(n.Fragment,{},r)}},d=n.forwardRef((function(e,r){var t=e.components,a=e.mdxType,o=e.originalType,c=e.parentName,l=s(e,["components","mdxType","originalType","parentName"]),d=p(t),f=a,h=d["".concat(c,".").concat(f)]||d[f]||u[f]||o;return t?n.createElement(h,i(i({ref:r},l),{},{components:t})):n.createElement(h,i({ref:r},l))}));function f(e,r){var t=arguments,a=r&&r.mdxType;if("string"==typeof e||a){var o=t.length,i=new Array(o);i[0]=d;var s={};for(var c in r)hasOwnProperty.call(r,c)&&(s[c]=r[c]);s.originalType=e,s.mdxType="string"==typeof e?e:a,i[1]=s;for(var p=2;p<o;p++)i[p]=t[p];return n.createElement.apply(null,i)}return n.createElement.apply(null,t)}d.displayName="MDXCreateElement"},14158:(e,r,t)=>{t.r(r),t.d(r,{assets:()=>c,contentTitle:()=>i,default:()=>u,frontMatter:()=>o,metadata:()=>s,toc:()=>p});var n=t(87462),a=(t(67294),t(3905));const o={title:"Integrations in Rancher"},i=void 0,s={unversionedId:"pages-for-subheaders/integrations-in-rancher",id:"version-2.5/pages-for-subheaders/integrations-in-rancher",title:"Integrations in Rancher",description:"Over time, Rancher has accrued several products and projects that have been integrated into the Rancher UI.",source:"@site/versioned_docs/version-2.5/pages-for-subheaders/integrations-in-rancher.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/integrations-in-rancher",permalink:"/v2.5/pages-for-subheaders/integrations-in-rancher",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.5/pages-for-subheaders/integrations-in-rancher.md",tags:[],version:"2.5",lastUpdatedAt:1680728494,formattedLastUpdatedAt:"Apr 5, 2023",frontMatter:{title:"Integrations in Rancher"},sidebar:"tutorialSidebar",previous:{title:"Explanations",permalink:"/v2.5/explanations"},next:{title:"CIS Scans",permalink:"/v2.5/pages-for-subheaders/cis-scans"}},c={},p=[],l={toc:p};function u(e){let{components:r,...t}=e;return(0,a.kt)("wrapper",(0,n.Z)({},l,t,{components:r,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Over time, Rancher has accrued several products and projects that have been integrated into the Rancher UI."),(0,a.kt)("p",null,"Examples of some of these integrations are ",(0,a.kt)("a",{parentName:"p",href:"/v2.5/pages-for-subheaders/fleet-gitops-at-scale"},"Continuous Delivery with Fleet")," and ",(0,a.kt)("a",{parentName:"p",href:"/v2.5/pages-for-subheaders/monitoring-and-alerting"},"Monitoring and Alerting"),"."))}u.isMDXComponent=!0}}]);
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[31584],{3905:(e,n,t)=>{t.d(n,{Zo:()=>u,kt:()=>m});var a=t(67294);function r(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function i(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function o(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?i(Object(t),!0).forEach((function(n){r(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):i(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function s(e,n){if(null==e)return{};var t,a,r=function(e,n){if(null==e)return{};var t,a,r={},i=Object.keys(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||(r[t]=e[t]);return r}(e,n);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(r[t]=e[t])}return r}var l=a.createContext({}),c=function(e){var n=a.useContext(l),t=n;return e&&(t="function"==typeof e?e(n):o(o({},n),e)),t},u=function(e){var n=c(e.components);return a.createElement(l.Provider,{value:n},e.children)},d={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},p=a.forwardRef((function(e,n){var t=e.components,r=e.mdxType,i=e.originalType,l=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),p=c(t),m=r,h=p["".concat(l,".").concat(m)]||p[m]||d[m]||i;return t?a.createElement(h,o(o({ref:n},u),{},{components:t})):a.createElement(h,o({ref:n},u))}));function m(e,n){var t=arguments,r=n&&n.mdxType;if("string"==typeof e||r){var i=t.length,o=new Array(i);o[0]=p;var s={};for(var l in n)hasOwnProperty.call(n,l)&&(s[l]=n[l]);s.originalType=e,s.mdxType="string"==typeof e?e:r,o[1]=s;for(var c=2;c<i;c++)o[c]=t[c];return a.createElement.apply(null,o)}return a.createElement.apply(null,t)}p.displayName="MDXCreateElement"},12844:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>l,contentTitle:()=>o,default:()=>d,frontMatter:()=>i,metadata:()=>s,toc:()=>c});var a=t(87462),r=(t(67294),t(3905));const i={title:"K3s Hardening Guide with CIS Benchmark"},o=void 0,s={unversionedId:"reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-hardening-guide-with-cis-benchmark",id:"reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-hardening-guide-with-cis-benchmark",title:"K3s Hardening Guide with CIS Benchmark",description:"This document provides prescriptive guidance for hardening a production installation of a K3s cluster to be provisioned with Rancher v2.7. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Information Security (CIS).",source:"@site/docs/reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-hardening-guide-with-cis-benchmark.md",sourceDirName:"reference-guides/rancher-security/rancher-v2.7-hardening-guides",slug:"/reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-hardening-guide-with-cis-benchmark",permalink:"/reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-hardening-guide-with-cis-benchmark",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-hardening-guide-with-cis-benchmark.md",tags:[],version:"current",lastUpdatedAt:1664960242,formattedLastUpdatedAt:"Oct 5, 2022",frontMatter:{title:"K3s Hardening Guide with CIS Benchmark"},sidebar:"tutorialSidebar",previous:{title:"Self-Assessment and Hardening Guides for Rancher v2.7",permalink:"/pages-for-subheaders/rancher-v2.7-hardening-guides"},next:{title:"K3s CIS v1.20 Benchmark - Self-Assessment Guide - Rancher v2.7",permalink:"/reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-self-assessment-guide-with-cis-v1.20-benchmark"}},l={},c=[{value:"Overview",id:"overview",level:3},{value:"Host-level Requirements",id:"host-level-requirements",level:2},{value:"Ensure <code>protect-kernel-defaults</code> is set (control 4.2.6)",id:"ensure-protect-kernel-defaults-is-set-control-426",level:3},{value:"Set kernel parameters",id:"set-kernel-parameters",level:4},{value:"Kubernetes Runtime Requirements",id:"kubernetes-runtime-requirements",level:2},{value:"Pod Security Policies (control 5.2)",id:"pod-security-policies-control-52",level:3},{value:"Network Policies (control 5.3.2)",id:"network-policies-control-532",level:3},{value:"API Server audit configuration",id:"api-server-audit-configuration",level:3},{value:"Known Issues",id:"known-issues",level:2},{value:"Control CIS v1.20 - 1.2.13 / CIS v1.23 - 1.2.14",id:"control-cis-v120---1213--cis-v123---1214",level:3},{value:"Control CIS v1.20 1Line truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[3260],{3905:(e,r,t)=>{t.d(r,{Zo:()=>u,kt:()=>d});var a=t(67294);function n(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function s(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);r&&(a=a.filter((function(r){return Object.getOwnPropertyDescriptor(e,r).enumerable}))),t.push.apply(t,a)}return t}function l(e){for(var r=1;r<arguments.length;r++){var t=null!=arguments[r]?arguments[r]:{};r%2?s(Object(t),!0).forEach((function(r){n(e,r,t[r])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):s(Object(t)).forEach((function(r){Object.defineProperty(e,r,Object.getOwnPropertyDescriptor(t,r))}))}return e}function i(e,r){if(null==e)return{};var t,a,n=function(e,r){if(null==e)return{};var t,a,n={},s=Object.keys(e);for(a=0;a<s.length;a++)t=s[a],r.indexOf(t)>=0||(n[t]=e[t]);return n}(e,r);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(a=0;a<s.length;a++)t=s[a],r.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(n[t]=e[t])}return n}var c=a.createContext({}),o=function(e){var r=a.useContext(c),t=r;return e&&(t="function"==typeof e?e(r):l(l({},r),e)),t},u=function(e){var r=o(e.components);return a.createElement(c.Provider,{value:r},e.children)},p={inlineCode:"code",wrapper:function(e){var r=e.children;return a.createElement(a.Fragment,{},r)}},k=a.forwardRef((function(e,r){var t=e.components,n=e.mdxType,s=e.originalType,c=e.parentName,u=i(e,["components","mdxType","originalType","parentName"]),k=o(t),d=n,v=k["".concat(c,".").concat(d)]||k[d]||p[d]||s;return t?a.createElement(v,l(l({ref:r},u),{},{components:t})):a.createElement(v,l({ref:r},u))}));function d(e,r){var t=arguments,n=r&&r.mdxType;if("string"==typeof e||n){var s=t.length,l=new Array(s);l[0]=k;var i={};for(var c in r)hasOwnProperty.call(r,c)&&(i[c]=r[c]);i.originalType=e,i.mdxType="string"==typeof e?e:n,l[1]=i;for(var o=2;o<s;o++)l[o]=t[o];return a.createElement.apply(null,l)}return a.createElement.apply(null,t)}k.displayName="MDXCreateElement"},28967:(e,r,t)=>{t.r(r),t.d(r,{assets:()=>c,contentTitle:()=>l,default:()=>p,frontMatter:()=>s,metadata:()=>i,toc:()=>o});var a=t(87462),n=(t(67294),t(3905));const s={title:"RKE2 CIS v1.6 Benchmark - Self-Assessment Guide - Rancher v2.6"},l=void 0,i={unversionedId:"reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke2-self-assessment-guide-with-cis-v1.6-benchmark",id:"reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke2-self-assessment-guide-with-cis-v1.6-benchmark",title:"RKE2 CIS v1.6 Benchmark - Self-Assessment Guide - Rancher v2.6",description:"CIS v1.6 Kubernetes Benchmark - Rancher v2.6 RKE2 with Kubernetes v1.21 up to v1.23",source:"@site/docs/reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke2-self-assessment-guide-with-cis-v1.6-benchmark.md",sourceDirName:"reference-guides/rancher-security/rancher-v2.6-hardening-guides",slug:"/reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke2-self-assessment-guide-with-cis-v1.6-benchmark",permalink:"/reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke2-self-assessment-guide-with-cis-v1.6-benchmark",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke2-self-assessment-guide-with-cis-v1.6-benchmark.md",tags:[],version:"current",lastUpdatedAt:1663953084,formattedLastUpdatedAt:"Sep 23, 2022",frontMatter:{title:"RKE2 CIS v1.6 Benchmark - Self-Assessment Guide - Rancher v2.6"},sidebar:"tutorialSidebar",previous:{title:"RKE2 Hardening Guide with CIS v1.6 Benchmark",permalink:"/reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke2-hardening-guide-with-cis-v1.6-benchmark"},next:{title:"Self-Assessment and Hardening Guides for Rancher v2.7",permalink:"/pages-for-subheaders/rancher-v2.7-hardening-guides"}},c={},o=[{value:"CIS v1.6 Kubernetes Benchmark - Rancher v2.6 RKE2 with Kubernetes v1.21 up to v1.23",id:"cis-v16-kubernetes-benchmark---rancher-v26-rke2-with-kubernetes-v121-up-to-v123",level:3},{value:"Overview",id:"overview",level:4},{value:"Testing controls methodology",id:"testing-controls-methodology",level:4},{value:"Controls",id:"controls",level:3},{value:"1.1 Master Node Configuration Files",id:"11-master-node-configuration-files",level:2},{value:"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)",id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)",id:"112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.3 Ensure that Line truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[5835],{3905:(e,r,t)=>{t.d(r,{Zo:()=>u,kt:()=>d});var a=t(67294);function n(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function s(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);r&&(a=a.filter((function(r){return Object.getOwnPropertyDescriptor(e,r).enumerable}))),t.push.apply(t,a)}return t}function l(e){for(var r=1;r<arguments.length;r++){var t=null!=arguments[r]?arguments[r]:{};r%2?s(Object(t),!0).forEach((function(r){n(e,r,t[r])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):s(Object(t)).forEach((function(r){Object.defineProperty(e,r,Object.getOwnPropertyDescriptor(t,r))}))}return e}function i(e,r){if(null==e)return{};var t,a,n=function(e,r){if(null==e)return{};var t,a,n={},s=Object.keys(e);for(a=0;a<s.length;a++)t=s[a],r.indexOf(t)>=0||(n[t]=e[t]);return n}(e,r);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(a=0;a<s.length;a++)t=s[a],r.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(n[t]=e[t])}return n}var c=a.createContext({}),o=function(e){var r=a.useContext(c),t=r;return e&&(t="function"==typeof e?e(r):l(l({},r),e)),t},u=function(e){var r=o(e.components);return a.createElement(c.Provider,{value:r},e.children)},p={inlineCode:"code",wrapper:function(e){var r=e.children;return a.createElement(a.Fragment,{},r)}},k=a.forwardRef((function(e,r){var t=e.components,n=e.mdxType,s=e.originalType,c=e.parentName,u=i(e,["components","mdxType","originalType","parentName"]),k=o(t),d=n,h=k["".concat(c,".").concat(d)]||k[d]||p[d]||s;return t?a.createElement(h,l(l({ref:r},u),{},{components:t})):a.createElement(h,l({ref:r},u))}));function d(e,r){var t=arguments,n=r&&r.mdxType;if("string"==typeof e||n){var s=t.length,l=new Array(s);l[0]=k;var i={};for(var c in r)hasOwnProperty.call(r,c)&&(i[c]=r[c]);i.originalType=e,i.mdxType="string"==typeof e?e:n,l[1]=i;for(var o=2;o<s;o++)l[o]=t[o];return a.createElement.apply(null,l)}return a.createElement.apply(null,t)}k.displayName="MDXCreateElement"},80984:(e,r,t)=>{t.r(r),t.d(r,{assets:()=>c,contentTitle:()=>l,default:()=>p,frontMatter:()=>s,metadata:()=>i,toc:()=>o});var a=t(87462),n=(t(67294),t(3905));const s={title:"RKE2 Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.25"},l=void 0,i={unversionedId:"reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.25",id:"reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.25",title:"RKE2 Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.25",description:"This document is a companion to the RKE2 Hardening Guide, which provides prescriptive guidance on how to harden RKE2 clusters that are running in production and managed by Rancher. This benchmark guide helps you evaluate the security of a hardened cluster against each control in the CIS Kubernetes Benchmark.",source:"@site/docs/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.25.md",sourceDirName:"reference-guides/rancher-security/hardening-guides/rke2-hardening-guide",slug:"/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.25",permalink:"/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.25",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.25.md",tags:[],version:"current",lastUpdatedAt:1678300966,formattedLastUpdatedAt:"Mar 8, 2023",frontMatter:{title:"RKE2 Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.25"},sidebar:"tutorialSidebar",previous:{title:"RKE2 Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.24",permalink:"/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.24"},next:{title:"K3s Hardening Guide",permalink:"/pages-for-subheaders/k3s-hardening-guide"}},c={},o=[{value:"Testing Methodology",id:"testing-methodology",level:2},{value:"Controls",id:"controls",level:3},{value:"1.1 Master Node Configuration Files",id:"11-master-node-configuration-files",level:2},{value:"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)",id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)",id:"112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{valLine truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[56200],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>d});var a=r(67294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},o=Object.keys(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var s=a.createContext({}),p=function(e){var t=a.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},c=function(e){var t=p(e.components);return a.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},h=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,o=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),h=p(r),d=n,m=h["".concat(s,".").concat(d)]||h[d]||u[d]||o;return r?a.createElement(m,i(i({ref:t},c),{},{components:r})):a.createElement(m,i({ref:t},c))}));function d(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var o=r.length,i=new Array(o);i[0]=h;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var p=2;p<o;p++)i[p]=r[p];return a.createElement.apply(null,i)}return a.createElement.apply(null,r)}h.displayName="MDXCreateElement"},15991:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>u,frontMatter:()=>o,metadata:()=>l,toc:()=>p});var a=r(87462),n=(r(67294),r(3905));const o={title:"Fleet - GitOps at Scale"},i=void 0,l={unversionedId:"pages-for-subheaders/fleet-gitops-at-scale",id:"pages-for-subheaders/fleet-gitops-at-scale",title:"Fleet - GitOps at Scale",description:"Fleet is GitOps at scale. Fleet is designed to manage up to a million clusters. It\u2019s also lightweight enough that it works great for a single cluster too, but it really shines when you get to a large scale. By large scale we mean either a lot of clusters, a lot of deployments, or a lot of teams in a single organization.",source:"@site/docs/pages-for-subheaders/fleet-gitops-at-scale.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/fleet-gitops-at-scale",permalink:"/pages-for-subheaders/fleet-gitops-at-scale",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/pages-for-subheaders/fleet-gitops-at-scale.md",tags:[],version:"current",lastUpdatedAt:1679670167,formattedLastUpdatedAt:"Mar 24, 2023",frontMatter:{title:"Fleet - GitOps at Scale"},sidebar:"tutorialSidebar",previous:{title:"Creating a Custom Benchmark Version for Running a Cluster Scan",permalink:"/integrations-in-rancher/cis-scans/custom-benchmark"},next:{title:"Architecture",permalink:"/integrations-in-rancher/fleet-gitops-at-scale/architecture"}},s={},p=[{value:"Architecture",id:"architecture",level:2},{value:"Accessing Fleet in the Rancher UI",id:"accessing-fleet-in-the-rancher-ui",level:2},{value:"Windows Support",id:"windows-support",level:2},{value:"GitHub Repository",id:"github-repository",level:2},{value:"Using Fleet Behind a Proxy",id:"using-fleet-behind-a-proxy",level:2},{value:"Helm Chart Dependencies",id:"helm-chart-dependencies",level:2},{value:"Troubleshooting",id:"troubleshooting",level:2},{value:"Documentation",id:"documentation",level:2}],c={toc:p};function u(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,a.Z)({},c,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"Fleet is GitOps at scale. Fleet is designed to manage up to a million clusters. It\u2019s also lightweight enough that it works great for a ",(0,n.kt)("a",{parentName:"p",href:"https://fleet.rancher.io/tut-deployment#single-cluster-examples"},"single cluster")," too, but it really shines when you get to a ",(0,n.kt)("a",{parentName:"p",href:"https://fleet.rancher.io/tut-deployment#multi-cluster-examples"},"large scale"),". By large scale we mean either a lot of clusters, a lot of deployments, or a lot of teams in a single organization."),(0,n.kt)("p",null,"Fleet is a separate project from Rancher, and can be installed on any Kubernetes cluster with Helm."),(0,n.kt)("h2",{id:"architecture"},"ALine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[56200],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>d});var n=r(67294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},o=Object.keys(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var s=n.createContext({}),p=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},c=function(e){var t=p(e.components);return n.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},h=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),h=p(r),d=a,m=h["".concat(s,".").concat(d)]||h[d]||u[d]||o;return r?n.createElement(m,i(i({ref:t},c),{},{components:r})):n.createElement(m,i({ref:t},c))}));function d(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=r.length,i=new Array(o);i[0]=h;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:a,i[1]=l;for(var p=2;p<o;p++)i[p]=r[p];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}h.displayName="MDXCreateElement"},15991:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>u,frontMatter:()=>o,metadata:()=>l,toc:()=>p});var n=r(87462),a=(r(67294),r(3905));const o={title:"Continuous Delivery with Fleet"},i=void 0,l={unversionedId:"pages-for-subheaders/fleet-gitops-at-scale",id:"pages-for-subheaders/fleet-gitops-at-scale",title:"Continuous Delivery with Fleet",description:"Continuous Delivery with Fleet is GitOps at scale. Fleet is designed to manage up to a million clusters. It\u2019s also lightweight enough that it works great for a single cluster too, but it really shines when you get to a large scale. By large scale we mean either a lot of clusters, a lot of deployments, or a lot of teams in a single organization.",source:"@site/docs/pages-for-subheaders/fleet-gitops-at-scale.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/fleet-gitops-at-scale",permalink:"/pages-for-subheaders/fleet-gitops-at-scale",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/pages-for-subheaders/fleet-gitops-at-scale.md",tags:[],version:"current",lastUpdatedAt:1681157830,formattedLastUpdatedAt:"Apr 10, 2023",frontMatter:{title:"Continuous Delivery with Fleet"},sidebar:"tutorialSidebar",previous:{title:"Creating a Custom Benchmark Version for Running a Cluster Scan",permalink:"/integrations-in-rancher/cis-scans/custom-benchmark"},next:{title:"Architecture",permalink:"/integrations-in-rancher/fleet-gitops-at-scale/architecture"}},s={},p=[{value:"Architecture",id:"architecture",level:2},{value:"Accessing Fleet in the Rancher UI",id:"accessing-fleet-in-the-rancher-ui",level:2},{value:"Windows Support",id:"windows-support",level:2},{value:"GitHub Repository",id:"github-repository",level:2},{value:"Using Fleet Behind a Proxy",id:"using-fleet-behind-a-proxy",level:2},{value:"Helm Chart Dependencies",id:"helm-chart-dependencies",level:2},{value:"Troubleshooting",id:"troubleshooting",level:2},{value:"Documentation",id:"documentation",level:2}],c={toc:p};function u(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},c,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Continuous Delivery with Fleet is GitOps at scale. Fleet is designed to manage up to a million clusters. It\u2019s also lightweight enough that it works great for a ",(0,a.kt)("a",{parentName:"p",href:"https://fleet.rancher.io/single-cluster-install/"},"single cluster")," too, but it really shines when you get to a ",(0,a.kt)("a",{parentName:"p",href:"https://fleet.rancher.io/multi-cluster-install/"},"large scale"),". By large scale we mean either a lot of clusters, a lot of deployments, or a lot of teams in a single organization."),(0,a.kt)("p",null,"Fleet is a separate project from Rancher, and can be installed on any Kubernetes cluster with HelLine truncated
@@ -1 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[10889],{3905:(e,a,t)=>{t.d(a,{Zo:()=>c,kt:()=>d});var r=t(67294);function n(e,a,t){return a in e?Object.defineProperty(e,a,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[a]=t,e}function o(e,a){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);a&&(r=r.filter((function(a){return Object.getOwnPropertyDescriptor(e,a).enumerable}))),t.push.apply(t,r)}return t}function i(e){for(var a=1;a<arguments.length;a++){var t=null!=arguments[a]?arguments[a]:{};a%2?o(Object(t),!0).forEach((function(a){n(e,a,t[a])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):o(Object(t)).forEach((function(a){Object.defineProperty(e,a,Object.getOwnPropertyDescriptor(t,a))}))}return e}function l(e,a){if(null==e)return{};var t,r,n=function(e,a){if(null==e)return{};var t,r,n={},o=Object.keys(e);for(r=0;r<o.length;r++)t=o[r],a.indexOf(t)>=0||(n[t]=e[t]);return n}(e,a);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)t=o[r],a.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(n[t]=e[t])}return n}var p=r.createContext({}),s=function(e){var a=r.useContext(p),t=a;return e&&(t="function"==typeof e?e(a):i(i({},a),e)),t},c=function(e){var a=s(e.components);return r.createElement(p.Provider,{value:a},e.children)},m={inlineCode:"code",wrapper:function(e){var a=e.children;return r.createElement(r.Fragment,{},a)}},g=r.forwardRef((function(e,a){var t=e.components,n=e.mdxType,o=e.originalType,p=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),g=s(t),d=n,u=g["".concat(p,".").concat(d)]||g[d]||m[d]||o;return t?r.createElement(u,i(i({ref:a},c),{},{components:t})):r.createElement(u,i({ref:a},c))}));function d(e,a){var t=arguments,n=a&&a.mdxType;if("string"==typeof e||n){var o=t.length,i=new Array(o);i[0]=g;var l={};for(var p in a)hasOwnProperty.call(a,p)&&(l[p]=a[p]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var s=2;s<o;s++)i[s]=t[s];return r.createElement.apply(null,i)}return r.createElement.apply(null,t)}g.displayName="MDXCreateElement"},80352:(e,a,t)=>{t.r(a),t.d(a,{assets:()=>p,contentTitle:()=>i,default:()=>m,frontMatter:()=>o,metadata:()=>l,toc:()=>s});var r=t(87462),n=(t(67294),t(3905));const o={title:"Upgrading Cert-Manager"},i=void 0,l={unversionedId:"getting-started/installation-and-upgrade/resources/upgrade-cert-manager",id:"getting-started/installation-and-upgrade/resources/upgrade-cert-manager",title:"Upgrading Cert-Manager",description:"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:",source:"@site/docs/getting-started/installation-and-upgrade/resources/upgrade-cert-manager.md",sourceDirName:"getting-started/installation-and-upgrade/resources",slug:"/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",permalink:"/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/getting-started/installation-and-upgrade/resources/upgrade-cert-manager.md",tags:[],version:"current",lastUpdatedAt:1667002146,formattedLastUpdatedAt:"Oct 29, 2022",frontMatter:{title:"Upgrading Cert-Manager"},sidebar:"tutorialSidebar",previous:{title:"About Custom CA Root Certificates",permalink:"/getting-started/installation-and-upgrade/resources/custom-ca-root-certificates"},next:{title:"Updating the Rancher Certificate",permalink:"/getting-started/installation-and-upgrade/resources/update-rancher-certificate"}},p={},s=[{value:"Upgrade Cert-Manager",id:"upgrade-cert-manager",level:2},{value:"Option A: Upgrade cert-manager with Internet Access",id:"option-a-upgrade-cert-manager-with-internet-access",level:3},{value:"Option B: Upgrade cert-manager in an Air-Gapped Environment",id:"option-b-upgrade-cert-manager-in-an-air-gapped-environment",level:3},{value:"Prerequisites",id:"prerequisites",level:3},{value:"Install cert-manager",id:"install-cert-manager",level:3},{value:"Option C: Upgrade cert-manager from Versions 1.5 and Below",id:"option-c-upgrade-cert-manager-from-versions-15-and-below",level:3},{value:"Verify the Deployment",id:"verify-the-deployment",level:3},{value:"Cert-Manager API change and data migration",id:"cert-manager-api-change-and-data-migration",level:2}],c={toc:s};function m(e){let{components:a,...t}=e;return(0,n.kt)("wrapper",(0,r.Z)({},c,t,{components:a,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:"),(0,n.kt)("ol",nulLine truncated
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[10889],{3905:(e,a,t)=>{t.d(a,{Zo:()=>c,kt:()=>d});var r=t(67294);function n(e,a,t){return a in e?Object.defineProperty(e,a,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[a]=t,e}function o(e,a){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);a&&(r=r.filter((function(a){return Object.getOwnPropertyDescriptor(e,a).enumerable}))),t.push.apply(t,r)}return t}function i(e){for(var a=1;a<arguments.length;a++){var t=null!=arguments[a]?arguments[a]:{};a%2?o(Object(t),!0).forEach((function(a){n(e,a,t[a])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):o(Object(t)).forEach((function(a){Object.defineProperty(e,a,Object.getOwnPropertyDescriptor(t,a))}))}return e}function l(e,a){if(null==e)return{};var t,r,n=function(e,a){if(null==e)return{};var t,r,n={},o=Object.keys(e);for(r=0;r<o.length;r++)t=o[r],a.indexOf(t)>=0||(n[t]=e[t]);return n}(e,a);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)t=o[r],a.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(n[t]=e[t])}return n}var p=r.createContext({}),s=function(e){var a=r.useContext(p),t=a;return e&&(t="function"==typeof e?e(a):i(i({},a),e)),t},c=function(e){var a=s(e.components);return r.createElement(p.Provider,{value:a},e.children)},m={inlineCode:"code",wrapper:function(e){var a=e.children;return r.createElement(r.Fragment,{},a)}},g=r.forwardRef((function(e,a){var t=e.components,n=e.mdxType,o=e.originalType,p=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),g=s(t),d=n,u=g["".concat(p,".").concat(d)]||g[d]||m[d]||o;return t?r.createElement(u,i(i({ref:a},c),{},{components:t})):r.createElement(u,i({ref:a},c))}));function d(e,a){var t=arguments,n=a&&a.mdxType;if("string"==typeof e||n){var o=t.length,i=new Array(o);i[0]=g;var l={};for(var p in a)hasOwnProperty.call(a,p)&&(l[p]=a[p]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var s=2;s<o;s++)i[s]=t[s];return r.createElement.apply(null,i)}return r.createElement.apply(null,t)}g.displayName="MDXCreateElement"},80352:(e,a,t)=>{t.r(a),t.d(a,{assets:()=>p,contentTitle:()=>i,default:()=>m,frontMatter:()=>o,metadata:()=>l,toc:()=>s});var r=t(87462),n=(t(67294),t(3905));const o={title:"Upgrading Cert-Manager"},i=void 0,l={unversionedId:"getting-started/installation-and-upgrade/resources/upgrade-cert-manager",id:"getting-started/installation-and-upgrade/resources/upgrade-cert-manager",title:"Upgrading Cert-Manager",description:"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:",source:"@site/docs/getting-started/installation-and-upgrade/resources/upgrade-cert-manager.md",sourceDirName:"getting-started/installation-and-upgrade/resources",slug:"/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",permalink:"/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/getting-started/installation-and-upgrade/resources/upgrade-cert-manager.md",tags:[],version:"current",lastUpdatedAt:1681239575,formattedLastUpdatedAt:"Apr 11, 2023",frontMatter:{title:"Upgrading Cert-Manager"},sidebar:"tutorialSidebar",previous:{title:"About Custom CA Root Certificates",permalink:"/getting-started/installation-and-upgrade/resources/custom-ca-root-certificates"},next:{title:"Updating the Rancher Certificate",permalink:"/getting-started/installation-and-upgrade/resources/update-rancher-certificate"}},p={},s=[{value:"Upgrade Cert-Manager",id:"upgrade-cert-manager",level:2},{value:"Option A: Upgrade cert-manager with Internet Access",id:"option-a-upgrade-cert-manager-with-internet-access",level:3},{value:"Option B: Upgrade cert-manager in an Air-Gapped Environment",id:"option-b-upgrade-cert-manager-in-an-air-gapped-environment",level:3},{value:"Prerequisites",id:"prerequisites",level:3},{value:"Install cert-manager",id:"install-cert-manager",level:3},{value:"Option C: Upgrade cert-manager from Versions 1.5 and Below",id:"option-c-upgrade-cert-manager-from-versions-15-and-below",level:3},{value:"Verify the Deployment",id:"verify-the-deployment",level:3},{value:"Cert-Manager API change and data migration",id:"cert-manager-api-change-and-data-migration",level:2}],c={toc:s};function m(e){let{components:a,...t}=e;return(0,n.kt)("wrapper",(0,r.Z)({},c,t,{components:a,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:"),(0,n.kt)("ol",nulLine truncated
@@ -1 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[32959],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>d});var a=n(67294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},o=Object.keys(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var l=a.createContext({}),c=function(e){var t=a.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},u=function(e){var t=c(e.components);return a.createElement(l.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},h=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,o=e.originalType,l=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),h=c(n),d=r,m=h["".concat(l,".").concat(d)]||h[d]||p[d]||o;return n?a.createElement(m,i(i({ref:t},u),{},{components:n})):a.createElement(m,i({ref:t},u))}));function d(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=n.length,i=new Array(o);i[0]=h;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:r,i[1]=s;for(var c=2;c<o;c++)i[c]=n[c];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}h.displayName="MDXCreateElement"},3605:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>l,contentTitle:()=>i,default:()=>m,frontMatter:()=>o,metadata:()=>s,toc:()=>c});var a=n(87462),r=(n(67294),n(3905));const o={title:"Helm CLI Quick Start"},i=void 0,s={unversionedId:"getting-started/quick-start-guides/deploy-rancher-manager/helm-cli",id:"getting-started/quick-start-guides/deploy-rancher-manager/helm-cli",title:"Helm CLI Quick Start",description:"These instructions capture a quick way to set up a proof-of-concept Rancher installation.",source:"@site/docs/getting-started/quick-start-guides/deploy-rancher-manager/helm-cli.md",sourceDirName:"getting-started/quick-start-guides/deploy-rancher-manager",slug:"/getting-started/quick-start-guides/deploy-rancher-manager/helm-cli",permalink:"/getting-started/quick-start-guides/deploy-rancher-manager/helm-cli",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/getting-started/quick-start-guides/deploy-rancher-manager/helm-cli.md",tags:[],version:"current",lastUpdatedAt:1679426796,formattedLastUpdatedAt:"Mar 21, 2023",frontMatter:{title:"Helm CLI Quick Start"},sidebar:"tutorialSidebar",previous:{title:"Rancher Equinix Metal Quick Start",permalink:"/getting-started/quick-start-guides/deploy-rancher-manager/equinix-metal"},next:{title:"Rancher Prime",permalink:"/getting-started/quick-start-guides/deploy-rancher-manager/prime"}},l={},c=[{value:"Install K3s on Linux",id:"install-k3s-on-linux",level:2},{value:"Save the kubeconfig to your workstation",id:"save-the-kubeconfig-to-your-workstation",level:2},{value:"Edit the Rancher server URL in the kubeconfig",id:"edit-the-rancher-server-url-in-the-kubeconfig",level:2},{value:"Install Rancher with Helm",id:"install-rancher-with-helm",level:2}],u=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",t)},p=u("Tabs"),h=u("TabItem"),d={toc:c};function m(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},d,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"These instructions capture a quick way to set up a proof-of-concept Rancher installation."),(0,r.kt)("p",null,"These instructions assume you have a Linux virtual machine that you will communicate with from your local workstation. Rancher will be installed on the Linux machine. You will need to retrieve the IP address of that machine so that you can access Rancher from your local workstation. Rancher is designed to manage Kubernetes clusters remotely, so any Kubernetes cluster that Rancher manages in the future will also need to be able to reach this IP address."),(0,r.kt)("p",null,"We don't recommend installing Rancher locally because it creates a networking problem. Installing Rancher on localhost does not allow Rancher to communicate Line truncated
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[32959],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>d});var a=n(67294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},o=Object.keys(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var l=a.createContext({}),c=function(e){var t=a.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},u=function(e){var t=c(e.components);return a.createElement(l.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},h=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,o=e.originalType,l=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),h=c(n),d=r,m=h["".concat(l,".").concat(d)]||h[d]||p[d]||o;return n?a.createElement(m,i(i({ref:t},u),{},{components:n})):a.createElement(m,i({ref:t},u))}));function d(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=n.length,i=new Array(o);i[0]=h;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:r,i[1]=s;for(var c=2;c<o;c++)i[c]=n[c];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}h.displayName="MDXCreateElement"},3605:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>l,contentTitle:()=>i,default:()=>m,frontMatter:()=>o,metadata:()=>s,toc:()=>c});var a=n(87462),r=(n(67294),n(3905));const o={title:"Helm CLI Quick Start"},i=void 0,s={unversionedId:"getting-started/quick-start-guides/deploy-rancher-manager/helm-cli",id:"getting-started/quick-start-guides/deploy-rancher-manager/helm-cli",title:"Helm CLI Quick Start",description:"These instructions capture a quick way to set up a proof-of-concept Rancher installation.",source:"@site/docs/getting-started/quick-start-guides/deploy-rancher-manager/helm-cli.md",sourceDirName:"getting-started/quick-start-guides/deploy-rancher-manager",slug:"/getting-started/quick-start-guides/deploy-rancher-manager/helm-cli",permalink:"/getting-started/quick-start-guides/deploy-rancher-manager/helm-cli",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/getting-started/quick-start-guides/deploy-rancher-manager/helm-cli.md",tags:[],version:"current",lastUpdatedAt:1681157830,formattedLastUpdatedAt:"Apr 10, 2023",frontMatter:{title:"Helm CLI Quick Start"},sidebar:"tutorialSidebar",previous:{title:"Rancher Equinix Metal Quick Start",permalink:"/getting-started/quick-start-guides/deploy-rancher-manager/equinix-metal"},next:{title:"Rancher Prime",permalink:"/getting-started/quick-start-guides/deploy-rancher-manager/prime"}},l={},c=[{value:"Install K3s on Linux",id:"install-k3s-on-linux",level:2},{value:"Save the kubeconfig to your workstation",id:"save-the-kubeconfig-to-your-workstation",level:2},{value:"Edit the Rancher server URL in the kubeconfig",id:"edit-the-rancher-server-url-in-the-kubeconfig",level:2},{value:"Install Rancher with Helm",id:"install-rancher-with-helm",level:2}],u=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",t)},p=u("Tabs"),h=u("TabItem"),d={toc:c};function m(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},d,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"These instructions capture a quick way to set up a proof-of-concept Rancher installation."),(0,r.kt)("p",null,"These instructions assume you have a Linux virtual machine that you will communicate with from your local workstation. Rancher will be installed on the Linux machine. You will need to retrieve the IP address of that machine so that you can access Rancher from your local workstation. Rancher is designed to manage Kubernetes clusters remotely, so any Kubernetes cluster that Rancher manages in the future will also need to be able to reach this IP address."),(0,r.kt)("p",null,"We don't recommend installing Rancher locally because it creates a networking problem. Installing Rancher on localhost does not allow Rancher to communicate Line truncated
@@ -1 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[18911],{3905:(e,t,a)=>{a.d(t,{Zo:()=>p,kt:()=>u});var r=a(67294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function o(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?o(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):o(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function l(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},o=Object.keys(e);for(r=0;r<o.length;r++)a=o[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)a=o[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var s=r.createContext({}),c=function(e){var t=r.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},p=function(e){var t=c(e.components);return r.createElement(s.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},g=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,o=e.originalType,s=e.parentName,p=l(e,["components","mdxType","originalType","parentName"]),g=c(a),u=n,d=g["".concat(s,".").concat(u)]||g[u]||m[u]||o;return a?r.createElement(d,i(i({ref:t},p),{},{components:a})):r.createElement(d,i({ref:t},p))}));function u(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var o=a.length,i=new Array(o);i[0]=g;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var c=2;c<o;c++)i[c]=a[c];return r.createElement.apply(null,i)}return r.createElement.apply(null,a)}g.displayName="MDXCreateElement"},19641:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>m,frontMatter:()=>o,metadata:()=>l,toc:()=>c});var r=a(87462),n=(a(67294),a(3905));const o={title:"Upgrading Cert-Manager with Helm 2"},i=void 0,l={unversionedId:"getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2",id:"version-2.0-2.4/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2",title:"Upgrading Cert-Manager with Helm 2",description:"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:",source:"@site/versioned_docs/version-2.0-2.4/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2.md",sourceDirName:"getting-started/installation-and-upgrade/resources",slug:"/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.0-2.4/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2.md",tags:[],version:"2.0-2.4",lastUpdatedAt:1663953084,formattedLastUpdatedAt:"Sep 23, 2022",frontMatter:{title:"Upgrading Cert-Manager with Helm 2"},sidebar:"tutorialSidebar",previous:{title:"Upgrading Cert-Manager",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/resources/upgrade-cert-manager"},next:{title:"Updating the Rancher Certificate",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/resources/update-rancher-certificate"}},s={},c=[{value:"Upgrade Cert-Manager Only",id:"upgrade-cert-manager-only",level:2},{value:"Prerequisites",id:"prerequisites",level:3},{value:"Install cert-manager",id:"install-cert-manager",level:3},{value:"Cert-Manager API change and data migration",id:"cert-manager-api-change-and-data-migration",level:2}],p={toc:c};function m(e){let{components:t,...a}=e;return(0,n.kt)("wrapper",(0,r.Z)({},p,a,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("a",{parentName:"li",href:"https://community.letsencrypt.org/t/blocking-old-cert-manager-versions/98753"},"Let's Encrypt will be blocking cert-manager instances older than 0.8.0 starting November 1st 2019.")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("a",{parentNaLine truncated
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[18911],{3905:(e,t,a)=>{a.d(t,{Zo:()=>c,kt:()=>u});var r=a(67294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function o(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?o(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):o(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function l(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},o=Object.keys(e);for(r=0;r<o.length;r++)a=o[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)a=o[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var s=r.createContext({}),p=function(e){var t=r.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},c=function(e){var t=p(e.components);return r.createElement(s.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},g=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,o=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),g=p(a),u=n,d=g["".concat(s,".").concat(u)]||g[u]||m[u]||o;return a?r.createElement(d,i(i({ref:t},c),{},{components:a})):r.createElement(d,i({ref:t},c))}));function u(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var o=a.length,i=new Array(o);i[0]=g;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var p=2;p<o;p++)i[p]=a[p];return r.createElement.apply(null,i)}return r.createElement.apply(null,a)}g.displayName="MDXCreateElement"},19641:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>m,frontMatter:()=>o,metadata:()=>l,toc:()=>p});var r=a(87462),n=(a(67294),a(3905));const o={title:"Upgrading Cert-Manager with Helm 2"},i=void 0,l={unversionedId:"getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2",id:"version-2.0-2.4/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2",title:"Upgrading Cert-Manager with Helm 2",description:"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:",source:"@site/versioned_docs/version-2.0-2.4/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2.md",sourceDirName:"getting-started/installation-and-upgrade/resources",slug:"/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.0-2.4/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2.md",tags:[],version:"2.0-2.4",lastUpdatedAt:1681151826,formattedLastUpdatedAt:"Apr 10, 2023",frontMatter:{title:"Upgrading Cert-Manager with Helm 2"},sidebar:"tutorialSidebar",previous:{title:"Upgrading Cert-Manager",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/resources/upgrade-cert-manager"},next:{title:"Updating the Rancher Certificate",permalink:"/v2.0-v2.4/getting-started/installation-and-upgrade/resources/update-rancher-certificate"}},s={},p=[{value:"Upgrade Cert-Manager Only",id:"upgrade-cert-manager-only",level:2},{value:"Prerequisites",id:"prerequisites",level:3},{value:"Install cert-manager",id:"install-cert-manager",level:3},{value:"Cert-Manager API change and data migration",id:"cert-manager-api-change-and-data-migration",level:2}],c={toc:p};function m(e){let{components:t,...a}=e;return(0,n.kt)("wrapper",(0,r.Z)({},c,a,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("a",{parentName:"li",href:"https://community.letsencrypt.org/t/blocking-old-cert-manager-versions/98753"},"Let's Encrypt will be blocking cert-manager instances older than 0.8.0 starting November 1st 2019.")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("a",{parentNaLine truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[28612],{3905:(e,t,r)=>{r.d(t,{Zo:()=>i,kt:()=>f});var s=r(67294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);t&&(s=s.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,s)}return r}function o(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?a(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):a(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,s,n=function(e,t){if(null==e)return{};var r,s,n={},a=Object.keys(e);for(s=0;s<a.length;s++)r=a[s],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(s=0;s<a.length;s++)r=a[s],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var p=s.createContext({}),c=function(e){var t=s.useContext(p),r=t;return e&&(r="function"==typeof e?e(t):o(o({},t),e)),r},i=function(e){var t=c(e.components);return s.createElement(p.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return s.createElement(s.Fragment,{},t)}},d=s.forwardRef((function(e,t){var r=e.components,n=e.mdxType,a=e.originalType,p=e.parentName,i=l(e,["components","mdxType","originalType","parentName"]),d=c(r),f=n,m=d["".concat(p,".").concat(f)]||d[f]||u[f]||a;return r?s.createElement(m,o(o({ref:t},i),{},{components:r})):s.createElement(m,o({ref:t},i))}));function f(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var a=r.length,o=new Array(a);o[0]=d;var l={};for(var p in t)hasOwnProperty.call(t,p)&&(l[p]=t[p]);l.originalType=e,l.mdxType="string"==typeof e?e:n,o[1]=l;for(var c=2;c<a;c++)o[c]=r[c];return s.createElement.apply(null,o)}return s.createElement.apply(null,r)}d.displayName="MDXCreateElement"},21559:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>p,contentTitle:()=>o,default:()=>u,frontMatter:()=>a,metadata:()=>l,toc:()=>c});var s=r(87462),n=(r(67294),r(3905));const a={title:"Deploying Applications across Clusters"},o=void 0,l={unversionedId:"pages-for-subheaders/deploy-apps-across-clusters",id:"version-2.6/pages-for-subheaders/deploy-apps-across-clusters",title:"Deploying Applications across Clusters",description:"Fleet",source:"@site/versioned_docs/version-2.6/pages-for-subheaders/deploy-apps-across-clusters.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/deploy-apps-across-clusters",permalink:"/v2.6/pages-for-subheaders/deploy-apps-across-clusters",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.6/pages-for-subheaders/deploy-apps-across-clusters.md",tags:[],version:"2.6",lastUpdatedAt:1668452187,formattedLastUpdatedAt:"Nov 14, 2022",frontMatter:{title:"Deploying Applications across Clusters"},sidebar:"tutorialSidebar",previous:{title:"Creating Apps",permalink:"/v2.6/how-to-guides/new-user-guides/helm-charts-in-rancher/create-apps"},next:{title:"Fleet - GitOps at Scale",permalink:"/v2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet"}},p={},c=[{value:"Fleet",id:"fleet",level:3},{value:"Multi-cluster Apps",id:"multi-cluster-apps",level:3}],i={toc:c};function u(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,s.Z)({},i,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("h3",{id:"fleet"},"Fleet"),(0,n.kt)("p",null,"Rancher v2.5 introduced Fleet, a new way to deploy applications across clusters."),(0,n.kt)("p",null,"Fleet is GitOps at scale. For more information, refer to the ",(0,n.kt)("a",{parentName:"p",href:"/v2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet"},"Fleet section.")),(0,n.kt)("h3",{id:"multi-cluster-apps"},"Multi-cluster Apps"),(0,n.kt)("p",null,"In Rancher before v2.5, the multi-cluster apps feature was used to deploy applications across clusters. The multi-cluster apps feature is deprecated, but still available in Rancher v2.5."),(0,n.kt)("p",null,"Refer to the documentation ",(0,n.kt)("a",{parentName:"p",href:"/v2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/multi-cluster-apps"},"here.")))}u.isMDXComponent=!0}}]);
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[28612],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>f});var s=r(67294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);t&&(s=s.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,s)}return r}function a(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,s,n=function(e,t){if(null==e)return{};var r,s,n={},o=Object.keys(e);for(s=0;s<o.length;s++)r=o[s],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(s=0;s<o.length;s++)r=o[s],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var p=s.createContext({}),i=function(e){var t=s.useContext(p),r=t;return e&&(r="function"==typeof e?e(t):a(a({},t),e)),r},c=function(e){var t=i(e.components);return s.createElement(p.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return s.createElement(s.Fragment,{},t)}},d=s.forwardRef((function(e,t){var r=e.components,n=e.mdxType,o=e.originalType,p=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),d=i(r),f=n,y=d["".concat(p,".").concat(f)]||d[f]||u[f]||o;return r?s.createElement(y,a(a({ref:t},c),{},{components:r})):s.createElement(y,a({ref:t},c))}));function f(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var o=r.length,a=new Array(o);a[0]=d;var l={};for(var p in t)hasOwnProperty.call(t,p)&&(l[p]=t[p]);l.originalType=e,l.mdxType="string"==typeof e?e:n,a[1]=l;for(var i=2;i<o;i++)a[i]=r[i];return s.createElement.apply(null,a)}return s.createElement.apply(null,r)}d.displayName="MDXCreateElement"},21559:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>p,contentTitle:()=>a,default:()=>u,frontMatter:()=>o,metadata:()=>l,toc:()=>i});var s=r(87462),n=(r(67294),r(3905));const o={title:"Deploying Applications across Clusters"},a=void 0,l={unversionedId:"pages-for-subheaders/deploy-apps-across-clusters",id:"version-2.6/pages-for-subheaders/deploy-apps-across-clusters",title:"Deploying Applications across Clusters",description:"Fleet",source:"@site/versioned_docs/version-2.6/pages-for-subheaders/deploy-apps-across-clusters.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/deploy-apps-across-clusters",permalink:"/v2.6/pages-for-subheaders/deploy-apps-across-clusters",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.6/pages-for-subheaders/deploy-apps-across-clusters.md",tags:[],version:"2.6",lastUpdatedAt:1680627802,formattedLastUpdatedAt:"Apr 4, 2023",frontMatter:{title:"Deploying Applications across Clusters"},sidebar:"tutorialSidebar",previous:{title:"Creating Apps",permalink:"/v2.6/how-to-guides/new-user-guides/helm-charts-in-rancher/create-apps"},next:{title:"Continuous Delivery with Fleet",permalink:"/v2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet"}},p={},i=[{value:"Fleet",id:"fleet",level:3},{value:"Multi-cluster Apps",id:"multi-cluster-apps",level:3}],c={toc:i};function u(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,s.Z)({},c,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("h3",{id:"fleet"},"Fleet"),(0,n.kt)("p",null,"Rancher v2.5 introduced Fleet, a new way to deploy applications across clusters."),(0,n.kt)("p",null,"Continuous Delivery with Fleet is GitOps at scale. For more information, refer to the ",(0,n.kt)("a",{parentName:"p",href:"/v2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet"},"Fleet section.")),(0,n.kt)("h3",{id:"multi-cluster-apps"},"Multi-cluster Apps"),(0,n.kt)("p",null,"In Rancher before v2.5, the multi-cluster apps feature was used to deploy applications across clusters. The multi-cluster apps feature is deprecated, but still available in Rancher v2.5."),(0,n.kt)("p",null,"Refer to the documentation ",(0,n.kt)("a",{parentName:"p",href:"/v2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/multi-cluster-apps"},"here.")))}u.isMDXComponent=!0}}]);
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[98879],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>k});var a=r(67294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function s(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?s(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):s(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},s=Object.keys(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var l=a.createContext({}),u=function(e){var t=a.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},c=function(e){var t=u(e.components);return a.createElement(l.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,s=e.originalType,l=e.parentName,c=o(e,["components","mdxType","originalType","parentName"]),d=u(r),k=n,m=d["".concat(l,".").concat(k)]||d[k]||p[k]||s;return r?a.createElement(m,i(i({ref:t},c),{},{components:r})):a.createElement(m,i({ref:t},c))}));function k(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var s=r.length,i=new Array(s);i[0]=d;var o={};for(var l in t)hasOwnProperty.call(t,l)&&(o[l]=t[l]);o.originalType=e,o.mdxType="string"==typeof e?e:n,i[1]=o;for(var u=2;u<s;u++)i[u]=r[u];return a.createElement.apply(null,i)}return a.createElement.apply(null,r)}d.displayName="MDXCreateElement"},60501:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>i,default:()=>p,frontMatter:()=>s,metadata:()=>o,toc:()=>u});var a=r(87462),n=(r(67294),r(3905));const s={title:"RKE Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.24"},i=void 0,o={unversionedId:"reference-guides/rancher-security/hardening-guides/rke1-hardening-guide/rke1-self-assessment-guide-with-cis-v1.23-k8s-v1.24",id:"reference-guides/rancher-security/hardening-guides/rke1-hardening-guide/rke1-self-assessment-guide-with-cis-v1.23-k8s-v1.24",title:"RKE Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.24",description:"This document is a companion to the RKE Hardening Guide, which provides prescriptive guidance on how to harden RKE clusters that are running in production and managed by Rancher. This benchmark guide helps you evaluate the security of a hardened cluster against each control in the CIS Kubernetes Benchmark.",source:"@site/docs/reference-guides/rancher-security/hardening-guides/rke1-hardening-guide/rke1-self-assessment-guide-with-cis-v1.23-k8s-v1.24.md",sourceDirName:"reference-guides/rancher-security/hardening-guides/rke1-hardening-guide",slug:"/reference-guides/rancher-security/hardening-guides/rke1-hardening-guide/rke1-self-assessment-guide-with-cis-v1.23-k8s-v1.24",permalink:"/reference-guides/rancher-security/hardening-guides/rke1-hardening-guide/rke1-self-assessment-guide-with-cis-v1.23-k8s-v1.24",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/reference-guides/rancher-security/hardening-guides/rke1-hardening-guide/rke1-self-assessment-guide-with-cis-v1.23-k8s-v1.24.md",tags:[],version:"current",lastUpdatedAt:1678300966,formattedLastUpdatedAt:"Mar 8, 2023",frontMatter:{title:"RKE Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.24"},sidebar:"tutorialSidebar",previous:{title:"RKE Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.23",permalink:"/reference-guides/rancher-security/hardening-guides/rke1-hardening-guide/rke1-self-assessment-guide-with-cis-v1.23-k8s-v1.23"},next:{title:"RKE Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.25",permalink:"/reference-guides/rancher-security/hardening-guides/rke1-hardening-guide/rke1-self-assessment-guide-with-cis-v1.23-k8s-v1.25"}},l={},u=[{value:"Testing Methodology",id:"testing-methodology",level:2},{value:"Controls",id:"controls",level:3},{value:"1.1 Control Plane Node Configuration Files",id:"11-control-plane-node-configuration-files",level:2},{value:"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)",id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.2 Ensure that the API server pod specification file ownership is set to roLine truncated
@@ -1 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[37858],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>f});var n=r(67294);function o(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?a(Object(r),!0).forEach((function(t){o(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):a(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function c(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}var s=n.createContext({}),l=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},u=function(e){var t=l(e.components);return n.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,o=e.mdxType,a=e.originalType,s=e.parentName,u=c(e,["components","mdxType","originalType","parentName"]),d=l(r),f=o,h=d["".concat(s,".").concat(f)]||d[f]||p[f]||a;return r?n.createElement(h,i(i({ref:t},u),{},{components:r})):n.createElement(h,i({ref:t},u))}));function f(e,t){var r=arguments,o=t&&t.mdxType;if("string"==typeof e||o){var a=r.length,i=new Array(a);i[0]=d;var c={};for(var s in t)hasOwnProperty.call(t,s)&&(c[s]=t[s]);c.originalType=e,c.mdxType="string"==typeof e?e:o,i[1]=c;for(var l=2;l<a;l++)i[l]=r[l];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},79992:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>p,frontMatter:()=>a,metadata:()=>c,toc:()=>l});var n=r(87462),o=(r(67294),r(3905));const a={title:"Architecture"},i=void 0,c={unversionedId:"integrations-in-rancher/fleet-gitops-at-scale/architecture",id:"version-2.6/integrations-in-rancher/fleet-gitops-at-scale/architecture",title:"Architecture",description:"Fleet can manage deployments from git of raw Kubernetes YAML, Helm charts, or Kustomize or any combination of the three. Regardless of the source, all resources are dynamically turned into Helm charts, and Helm is used as the engine to deploy everything in the cluster. This gives you a high degree of control, consistency, and auditability. Fleet focuses not only on the ability to scale, but to give one a high degree of control and visibility to exactly what is installed on the cluster.",source:"@site/versioned_docs/version-2.6/integrations-in-rancher/fleet-gitops-at-scale/architecture.md",sourceDirName:"integrations-in-rancher/fleet-gitops-at-scale",slug:"/integrations-in-rancher/fleet-gitops-at-scale/architecture",permalink:"/v2.6/integrations-in-rancher/fleet-gitops-at-scale/architecture",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.6/integrations-in-rancher/fleet-gitops-at-scale/architecture.md",tags:[],version:"2.6",lastUpdatedAt:1668452187,formattedLastUpdatedAt:"Nov 14, 2022",frontMatter:{title:"Architecture"},sidebar:"tutorialSidebar",previous:{title:"Fleet - GitOps at Scale",permalink:"/v2.6/pages-for-subheaders/fleet-gitops-at-scale"},next:{title:"Windows Support",permalink:"/v2.6/integrations-in-rancher/fleet-gitops-at-scale/windows-support"}},s={},l=[],u={toc:l};function p(e){let{components:t,...a}=e;return(0,o.kt)("wrapper",(0,n.Z)({},u,a,{components:t,mdxType:"MDXLayout"}),(0,o.kt)("p",null,"Fleet can manage deployments from git of raw Kubernetes YAML, Helm charts, or Kustomize or any combination of the three. Regardless of the source, all resources are dynamically turned into Helm charts, and Helm is used as the engine to deploy everything in the cluster. This gives you a high degree of control, consistency, and auditability. Fleet focuses not only on the ability to scale, but to give one a high degree of control and visibility to exactly what is installed on the cluster."),(0,o.kt)("p",null,(0,o.kt)("img",{alt:"Architecture",src:r(14956).Z,width:"1366",height:"960"})))}p.isMDXComponent=!0},14956:(e,t,r)=>{r.d(t,{Z:()=>n});const n=r.p+"assets/images/fleet-architecture-f708ce634648101dc98f451dcd59fe84.svg"}}]);
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[37858],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>f});var n=r(67294);function o(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function a(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){o(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function c(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}var s=n.createContext({}),l=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):a(a({},t),e)),r},u=function(e){var t=l(e.components);return n.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,o=e.mdxType,i=e.originalType,s=e.parentName,u=c(e,["components","mdxType","originalType","parentName"]),d=l(r),f=o,h=d["".concat(s,".").concat(f)]||d[f]||p[f]||i;return r?n.createElement(h,a(a({ref:t},u),{},{components:r})):n.createElement(h,a({ref:t},u))}));function f(e,t){var r=arguments,o=t&&t.mdxType;if("string"==typeof e||o){var i=r.length,a=new Array(i);a[0]=d;var c={};for(var s in t)hasOwnProperty.call(t,s)&&(c[s]=t[s]);c.originalType=e,c.mdxType="string"==typeof e?e:o,a[1]=c;for(var l=2;l<i;l++)a[l]=r[l];return n.createElement.apply(null,a)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},79992:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>a,default:()=>p,frontMatter:()=>i,metadata:()=>c,toc:()=>l});var n=r(87462),o=(r(67294),r(3905));const i={title:"Architecture"},a=void 0,c={unversionedId:"integrations-in-rancher/fleet-gitops-at-scale/architecture",id:"version-2.6/integrations-in-rancher/fleet-gitops-at-scale/architecture",title:"Architecture",description:"Fleet can manage deployments from git of raw Kubernetes YAML, Helm charts, or Kustomize or any combination of the three. Regardless of the source, all resources are dynamically turned into Helm charts, and Helm is used as the engine to deploy everything in the cluster. This gives you a high degree of control, consistency, and auditability. Fleet focuses not only on the ability to scale, but to give one a high degree of control and visibility to exactly what is installed on the cluster.",source:"@site/versioned_docs/version-2.6/integrations-in-rancher/fleet-gitops-at-scale/architecture.md",sourceDirName:"integrations-in-rancher/fleet-gitops-at-scale",slug:"/integrations-in-rancher/fleet-gitops-at-scale/architecture",permalink:"/v2.6/integrations-in-rancher/fleet-gitops-at-scale/architecture",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.6/integrations-in-rancher/fleet-gitops-at-scale/architecture.md",tags:[],version:"2.6",lastUpdatedAt:1668452187,formattedLastUpdatedAt:"Nov 14, 2022",frontMatter:{title:"Architecture"},sidebar:"tutorialSidebar",previous:{title:"Continuous Delivery with Fleet",permalink:"/v2.6/pages-for-subheaders/fleet-gitops-at-scale"},next:{title:"Windows Support",permalink:"/v2.6/integrations-in-rancher/fleet-gitops-at-scale/windows-support"}},s={},l=[],u={toc:l};function p(e){let{components:t,...i}=e;return(0,o.kt)("wrapper",(0,n.Z)({},u,i,{components:t,mdxType:"MDXLayout"}),(0,o.kt)("p",null,"Fleet can manage deployments from git of raw Kubernetes YAML, Helm charts, or Kustomize or any combination of the three. Regardless of the source, all resources are dynamically turned into Helm charts, and Helm is used as the engine to deploy everything in the cluster. This gives you a high degree of control, consistency, and auditability. Fleet focuses not only on the ability to scale, but to give one a high degree of control and visibility to exactly what is installed on the cluster."),(0,o.kt)("p",null,(0,o.kt)("img",{alt:"Architecture",src:r(14956).Z,width:"1366",height:"960"})))}p.isMDXComponent=!0},14956:(e,t,r)=>{r.d(t,{Z:()=>n});const n=r.p+"assets/images/fleet-architecture-f708ce634648101dc98f451dcd59fe84.svg"}}]);
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[37810],{3905:(e,n,t)=>{t.d(n,{Zo:()=>u,kt:()=>m});var a=t(67294);function r(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function i(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function o(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?i(Object(t),!0).forEach((function(n){r(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):i(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function s(e,n){if(null==e)return{};var t,a,r=function(e,n){if(null==e)return{};var t,a,r={},i=Object.keys(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||(r[t]=e[t]);return r}(e,n);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(r[t]=e[t])}return r}var l=a.createContext({}),c=function(e){var n=a.useContext(l),t=n;return e&&(t="function"==typeof e?e(n):o(o({},n),e)),t},u=function(e){var n=c(e.components);return a.createElement(l.Provider,{value:n},e.children)},d={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},p=a.forwardRef((function(e,n){var t=e.components,r=e.mdxType,i=e.originalType,l=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),p=c(t),m=r,_=p["".concat(l,".").concat(m)]||p[m]||d[m]||i;return t?a.createElement(_,o(o({ref:n},u),{},{components:t})):a.createElement(_,o({ref:n},u))}));function m(e,n){var t=arguments,r=n&&n.mdxType;if("string"==typeof e||r){var i=t.length,o=new Array(i);o[0]=p;var s={};for(var l in n)hasOwnProperty.call(n,l)&&(s[l]=n[l]);s.originalType=e,s.mdxType="string"==typeof e?e:r,o[1]=s;for(var c=2;c<i;c++)o[c]=t[c];return a.createElement.apply(null,o)}return a.createElement.apply(null,t)}p.displayName="MDXCreateElement"},2282:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>l,contentTitle:()=>o,default:()=>_,frontMatter:()=>i,metadata:()=>s,toc:()=>c});var a=t(87462),r=(t(67294),t(3905));const i={title:"RKE Hardening Guide"},o=void 0,s={unversionedId:"pages-for-subheaders/rke1-hardening-guide",id:"pages-for-subheaders/rke1-hardening-guide",title:"RKE Hardening Guide",description:"This document provides prescriptive guidance for how to harden an RKE cluster intended for production, before provisioning it with Rancher. It outlines the configurations and controls required for Center for Information Security (CIS) Kubernetes benchmark controls.",source:"@site/docs/pages-for-subheaders/rke1-hardening-guide.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/rke1-hardening-guide",permalink:"/pages-for-subheaders/rke1-hardening-guide",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/pages-for-subheaders/rke1-hardening-guide.md",tags:[],version:"current",lastUpdatedAt:1681222703,formattedLastUpdatedAt:"Apr 11, 2023",frontMatter:{title:"RKE Hardening Guide"},sidebar:"tutorialSidebar",previous:{title:"Self-Assessment and Hardening Guides for Rancher",permalink:"/pages-for-subheaders/rancher-hardening-guides"},next:{title:"RKE Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.23",permalink:"/reference-guides/rancher-security/hardening-guides/rke1-hardening-guide/rke1-self-assessment-guide-with-cis-v1.23-k8s-v1.23"}},l={},c=[{value:"Host-level requirements",id:"host-level-requirements",level:2},{value:"Configure Kernel Runtime Parameters",id:"configure-kernel-runtime-parameters",level:3},{value:"Configure <code>etcd</code> user and group",id:"configure-etcd-user-and-group",level:3},{value:"Create <code>etcd</code> user and group",id:"create-etcd-user-and-group",level:4},{value:"Kubernetes runtime requirements",id:"kubernetes-runtime-requirements",level:2},{value:"Configure <code>default</code> Service Account",id:"configure-default-service-account",level:3},{value:"Set <code>automountServiceAccountToken</code> to <code>false</code> for <code>default</code> service accounts",id:"set-automountserviceaccounttoken-to-false-for-default-service-accounts",level:4},{value:"Configure Network Policy",id:"configure-network-policy",level:3},{value:"Ensure that all Namespaces have Network Policies defined",id:"ensure-that-all-namespaces-have-network-policies-defined",level:4},{value:"Known Limitations",id:"known-limitations",level:2},{value:"Reference Hardened RKE <code>cluster.yml</code> Configuration",id:"reference-hardened-rke-clusteryml-configuration",level:2},{value:"Reference Hardened RKE Cluster Template Configuration",id:"reference-hardened-rke-cluster-template-configuration",level:2},{value:"Conclusion",id:"conclusion",level:2}],u=e=>function(nLine truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[56648],{3905:(e,t,a)=>{a.d(t,{Zo:()=>m,kt:()=>u});var r=a(67294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function i(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function s(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?i(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):i(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function l(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},i=Object.keys(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var o=r.createContext({}),p=function(e){var t=r.useContext(o),a=t;return e&&(a="function"==typeof e?e(t):s(s({},t),e)),a},m=function(e){var t=p(e.components);return r.createElement(o.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},h=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,i=e.originalType,o=e.parentName,m=l(e,["components","mdxType","originalType","parentName"]),h=p(a),u=n,c=h["".concat(o,".").concat(u)]||h[u]||d[u]||i;return a?r.createElement(c,s(s({ref:t},m),{},{components:a})):r.createElement(c,s({ref:t},m))}));function u(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var i=a.length,s=new Array(i);s[0]=h;var l={};for(var o in t)hasOwnProperty.call(t,o)&&(l[o]=t[o]);l.originalType=e,l.mdxType="string"==typeof e?e:n,s[1]=l;for(var p=2;p<i;p++)s[p]=a[p];return r.createElement.apply(null,s)}return r.createElement.apply(null,a)}h.displayName="MDXCreateElement"},2920:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>o,contentTitle:()=>s,default:()=>c,frontMatter:()=>i,metadata:()=>l,toc:()=>p});var r=a(87462),n=(a(67294),a(3905));const i={title:"2. Collect and Publish Images to your Private Registry"},s=void 0,l={unversionedId:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images",id:"version-2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images",title:"2. Collect and Publish Images to your Private Registry",description:"This section describes how to set up your private registry so that when you install Rancher, Rancher will pull all the required images from this registry.",source:"@site/versioned_docs/version-2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images.md",sourceDirName:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install",slug:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images",permalink:"/v2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images.md",tags:[],version:"2.6",lastUpdatedAt:1670452794,formattedLastUpdatedAt:"Dec 7, 2022",frontMatter:{title:"2. Collect and Publish Images to your Private Registry"},sidebar:"tutorialSidebar",previous:{title:"1. Set up Infrastructure and Private Registry",permalink:"/v2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/infrastructure-private-registry"},next:{title:"3. Install Kubernetes (Skip for Docker Installs)",permalink:"/v2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-kubernetes"}},o={},p=[{value:"Prerequisites",id:"prerequisites",level:3},{value:"1. Find the required assets for your Rancher version",id:"1-find-the-required-assets-for-your-rancher-version",level:3},{value:"2. Collect the cert-manager image",id:"2-collect-the-cert-manager-image",level:3},{value:"3. Save the images to your workstation",id:"3-save-the-images-to-your-workstation",level:3},{value:"4. Populate the private registry",id:"4-populate-the-private-registry",level:3},{value:"Windows Steps",id:"windows-steps",level:2},{value:"Prerequisites",id:"prerequisites-1",level:3},{value:"1. Find the required assets for your Rancher version",id:"1-find-the-required-assets-for-your-rancher-version-1",level:3},{value:"2. Save the images to your WindowsLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[56648],{3905:(e,t,a)=>{a.d(t,{Zo:()=>m,kt:()=>u});var r=a(67294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function i(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function s(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?i(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):i(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function l(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},i=Object.keys(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var o=r.createContext({}),p=function(e){var t=r.useContext(o),a=t;return e&&(a="function"==typeof e?e(t):s(s({},t),e)),a},m=function(e){var t=p(e.components);return r.createElement(o.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},h=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,i=e.originalType,o=e.parentName,m=l(e,["components","mdxType","originalType","parentName"]),h=p(a),u=n,c=h["".concat(o,".").concat(u)]||h[u]||d[u]||i;return a?r.createElement(c,s(s({ref:t},m),{},{components:a})):r.createElement(c,s({ref:t},m))}));function u(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var i=a.length,s=new Array(i);s[0]=h;var l={};for(var o in t)hasOwnProperty.call(t,o)&&(l[o]=t[o]);l.originalType=e,l.mdxType="string"==typeof e?e:n,s[1]=l;for(var p=2;p<i;p++)s[p]=a[p];return r.createElement.apply(null,s)}return r.createElement.apply(null,a)}h.displayName="MDXCreateElement"},2920:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>o,contentTitle:()=>s,default:()=>c,frontMatter:()=>i,metadata:()=>l,toc:()=>p});var r=a(87462),n=(a(67294),a(3905));const i={title:"2. Collect and Publish Images to your Private Registry"},s=void 0,l={unversionedId:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images",id:"version-2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images",title:"2. Collect and Publish Images to your Private Registry",description:"This section describes how to set up your private registry so that when you install Rancher, Rancher will pull all the required images from this registry.",source:"@site/versioned_docs/version-2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images.md",sourceDirName:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install",slug:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images",permalink:"/v2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/publish-images.md",tags:[],version:"2.6",lastUpdatedAt:1681239575,formattedLastUpdatedAt:"Apr 11, 2023",frontMatter:{title:"2. Collect and Publish Images to your Private Registry"},sidebar:"tutorialSidebar",previous:{title:"1. Set up Infrastructure and Private Registry",permalink:"/v2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/infrastructure-private-registry"},next:{title:"3. Install Kubernetes (Skip for Docker Installs)",permalink:"/v2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-kubernetes"}},o={},p=[{value:"Prerequisites",id:"prerequisites",level:3},{value:"1. Find the required assets for your Rancher version",id:"1-find-the-required-assets-for-your-rancher-version",level:3},{value:"2. Collect the cert-manager image",id:"2-collect-the-cert-manager-image",level:3},{value:"3. Save the images to your workstation",id:"3-save-the-images-to-your-workstation",level:3},{value:"4. Populate the private registry",id:"4-populate-the-private-registry",level:3},{value:"Windows Steps",id:"windows-steps",level:2},{value:"Prerequisites",id:"prerequisites-1",level:3},{value:"1. Find the required assets for your Rancher version",id:"1-find-the-required-assets-for-your-rancher-version-1",level:3},{value:"2. Save the images to your WindowLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[71955],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>k});var a=r(67294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function s(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?s(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):s(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},s=Object.keys(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var o=a.createContext({}),c=function(e){var t=a.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},u=function(e){var t=c(e.components);return a.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,s=e.originalType,o=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),d=c(r),k=n,h=d["".concat(o,".").concat(k)]||d[k]||p[k]||s;return r?a.createElement(h,i(i({ref:t},u),{},{components:r})):a.createElement(h,i({ref:t},u))}));function k(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var s=r.length,i=new Array(s);i[0]=d;var l={};for(var o in t)hasOwnProperty.call(t,o)&&(l[o]=t[o]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var c=2;c<s;c++)i[c]=r[c];return a.createElement.apply(null,i)}return a.createElement.apply(null,r)}d.displayName="MDXCreateElement"},76812:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>p,frontMatter:()=>s,metadata:()=>l,toc:()=>c});var a=r(87462),n=(r(67294),r(3905));const s={title:"K3s Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.23"},i=void 0,l={unversionedId:"reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.23",id:"reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.23",title:"K3s Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.23",description:"This document is a companion to the K3s Hardening Guide, which provides prescriptive guidance on how to harden K3s clusters that are running in production and managed by Rancher. This benchmark guide helps you evaluate the security of a hardened cluster against each control in the CIS Kubernetes Benchmark.",source:"@site/docs/reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.23.md",sourceDirName:"reference-guides/rancher-security/hardening-guides/k3s-hardening-guide",slug:"/reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.23",permalink:"/reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.23",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.23.md",tags:[],version:"current",lastUpdatedAt:1678300966,formattedLastUpdatedAt:"Mar 8, 2023",frontMatter:{title:"K3s Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.23"},sidebar:"tutorialSidebar",previous:{title:"K3s Hardening Guide",permalink:"/pages-for-subheaders/k3s-hardening-guide"},next:{title:"K3s Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.24",permalink:"/reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.24"}},o={},c=[{value:"Testing Methodology",id:"testing-methodology",level:2},{value:"Controls",id:"controls",level:3},{value:"1.1 Control Plane Node Configuration Files",id:"11-control-plane-node-configuration-files",level:2},{value:"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)",id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)",id:"112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.Line truncated
@@ -1 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[69966],{24151:e=>{e.exports=JSON.parse('{"pluginId":"default","version":"2.5","label":"v2.5","banner":"unmaintained","badge":true,"noIndex":false,"className":"docs-version-2.5","isLast":false,"docsSidebars":{"tutorialSidebar":[{"type":"link","label":"Rancher 2.5","href":"/v2.5/","docId":"rancher-manager"},{"type":"category","label":"Getting Started","items":[{"type":"category","label":"Introduction","items":[{"type":"link","label":"Overview","href":"/v2.5/getting-started/introduction/overview","docId":"getting-started/introduction/overview"},{"type":"link","label":"What Are Divio Docs?","href":"/v2.5/getting-started/introduction/what-are-divio-docs","docId":"getting-started/introduction/what-are-divio-docs"}],"collapsed":true,"collapsible":true,"href":"/v2.5/pages-for-subheaders/introduction"},{"type":"category","label":"Quick Start Guides","items":[{"type":"category","label":"Deploy Rancher Manager","items":[{"type":"link","label":"Rancher AWS Quick Start Guide","href":"/v2.5/getting-started/quick-start-guides/deploy-rancher-manager/aws","docId":"getting-started/quick-start-guides/deploy-rancher-manager/aws"},{"type":"link","label":"Rancher Azure Quick Start Guide","href":"/v2.5/getting-started/quick-start-guides/deploy-rancher-manager/azure","docId":"getting-started/quick-start-guides/deploy-rancher-manager/azure"},{"type":"link","label":"Rancher DigitalOcean Quick Start Guide","href":"/v2.5/getting-started/quick-start-guides/deploy-rancher-manager/digitalocean","docId":"getting-started/quick-start-guides/deploy-rancher-manager/digitalocean"},{"type":"link","label":"Rancher GCP Quick Start Guide","href":"/v2.5/getting-started/quick-start-guides/deploy-rancher-manager/gcp","docId":"getting-started/quick-start-guides/deploy-rancher-manager/gcp"},{"type":"link","label":"Vagrant Quick Start","href":"/v2.5/getting-started/quick-start-guides/deploy-rancher-manager/vagrant","docId":"getting-started/quick-start-guides/deploy-rancher-manager/vagrant"},{"type":"link","label":"Manual Quick Start","href":"/v2.5/getting-started/quick-start-guides/deploy-rancher-manager/helm-cli","docId":"getting-started/quick-start-guides/deploy-rancher-manager/helm-cli"}],"collapsed":true,"collapsible":true,"href":"/v2.5/pages-for-subheaders/deploy-rancher-manager"},{"type":"category","label":"Deploy Rancher Workloads","items":[{"type":"link","label":"Workload with Ingress Quick Start","href":"/v2.5/getting-started/quick-start-guides/deploy-workloads/workload-ingress","docId":"getting-started/quick-start-guides/deploy-workloads/workload-ingress"},{"type":"link","label":"Workload with NodePort Quick Start","href":"/v2.5/getting-started/quick-start-guides/deploy-workloads/nodeports","docId":"getting-started/quick-start-guides/deploy-workloads/nodeports"}],"collapsed":true,"collapsible":true,"href":"/v2.5/pages-for-subheaders/deploy-rancher-workloads"}],"collapsed":true,"collapsible":true,"href":"/v2.5/pages-for-subheaders/quick-start-guides"},{"type":"category","label":"Installation and Upgrade","items":[{"type":"category","label":"Installation Requirements","items":[{"type":"link","label":"Installing Docker","href":"/v2.5/getting-started/installation-and-upgrade/installation-requirements/install-docker","docId":"getting-started/installation-and-upgrade/installation-requirements/install-docker"},{"type":"link","label":"Port Requirements","href":"/v2.5/getting-started/installation-and-upgrade/installation-requirements/port-requirements","docId":"getting-started/installation-and-upgrade/installation-requirements/port-requirements"}],"collapsed":true,"collapsible":true,"href":"/v2.5/pages-for-subheaders/installation-requirements"},{"type":"category","label":"Install/Upgrade on a Kubernetes Cluster","items":[{"type":"link","label":"Rollbacks","href":"/v2.5/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rollbacks","docId":"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rollbacks"},{"type":"link","label":"Upgrades","href":"/v2.5/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/upgrades","docId":"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/upgrades"},{"type":"link","label":"Rendering the Helm Template in an Air Gapped Environment","href":"/v2.5/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/air-gapped-upgrades","docId":"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/air-gapped-upgrades"},{"type":"link","label":"Installing Rancher on Amazon EKS","href":"/v2.5/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rancher-on-amazon-eks","docId":"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rancher-on-amazon-eks"},{"type":"link","label":"Installing Rancher on Azure Kubernetes Service","href":"/v2.5Line truncated
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[69966],{24151:e=>{e.exports=JSON.parse('{"pluginId":"default","version":"2.5","label":"v2.5","banner":"unmaintained","badge":true,"noIndex":false,"className":"docs-version-2.5","isLast":false,"docsSidebars":{"tutorialSidebar":[{"type":"link","label":"Rancher 2.5","href":"/v2.5/","docId":"rancher-manager"},{"type":"category","label":"Getting Started","items":[{"type":"category","label":"Introduction","items":[{"type":"link","label":"Overview","href":"/v2.5/getting-started/introduction/overview","docId":"getting-started/introduction/overview"},{"type":"link","label":"What Are Divio Docs?","href":"/v2.5/getting-started/introduction/what-are-divio-docs","docId":"getting-started/introduction/what-are-divio-docs"}],"collapsed":true,"collapsible":true,"href":"/v2.5/pages-for-subheaders/introduction"},{"type":"category","label":"Quick Start Guides","items":[{"type":"category","label":"Deploy Rancher Manager","items":[{"type":"link","label":"Rancher AWS Quick Start Guide","href":"/v2.5/getting-started/quick-start-guides/deploy-rancher-manager/aws","docId":"getting-started/quick-start-guides/deploy-rancher-manager/aws"},{"type":"link","label":"Rancher Azure Quick Start Guide","href":"/v2.5/getting-started/quick-start-guides/deploy-rancher-manager/azure","docId":"getting-started/quick-start-guides/deploy-rancher-manager/azure"},{"type":"link","label":"Rancher DigitalOcean Quick Start Guide","href":"/v2.5/getting-started/quick-start-guides/deploy-rancher-manager/digitalocean","docId":"getting-started/quick-start-guides/deploy-rancher-manager/digitalocean"},{"type":"link","label":"Rancher GCP Quick Start Guide","href":"/v2.5/getting-started/quick-start-guides/deploy-rancher-manager/gcp","docId":"getting-started/quick-start-guides/deploy-rancher-manager/gcp"},{"type":"link","label":"Vagrant Quick Start","href":"/v2.5/getting-started/quick-start-guides/deploy-rancher-manager/vagrant","docId":"getting-started/quick-start-guides/deploy-rancher-manager/vagrant"},{"type":"link","label":"Manual Quick Start","href":"/v2.5/getting-started/quick-start-guides/deploy-rancher-manager/helm-cli","docId":"getting-started/quick-start-guides/deploy-rancher-manager/helm-cli"}],"collapsed":true,"collapsible":true,"href":"/v2.5/pages-for-subheaders/deploy-rancher-manager"},{"type":"category","label":"Deploy Rancher Workloads","items":[{"type":"link","label":"Workload with Ingress Quick Start","href":"/v2.5/getting-started/quick-start-guides/deploy-workloads/workload-ingress","docId":"getting-started/quick-start-guides/deploy-workloads/workload-ingress"},{"type":"link","label":"Workload with NodePort Quick Start","href":"/v2.5/getting-started/quick-start-guides/deploy-workloads/nodeports","docId":"getting-started/quick-start-guides/deploy-workloads/nodeports"}],"collapsed":true,"collapsible":true,"href":"/v2.5/pages-for-subheaders/deploy-rancher-workloads"}],"collapsed":true,"collapsible":true,"href":"/v2.5/pages-for-subheaders/quick-start-guides"},{"type":"category","label":"Installation and Upgrade","items":[{"type":"category","label":"Installation Requirements","items":[{"type":"link","label":"Installing Docker","href":"/v2.5/getting-started/installation-and-upgrade/installation-requirements/install-docker","docId":"getting-started/installation-and-upgrade/installation-requirements/install-docker"},{"type":"link","label":"Port Requirements","href":"/v2.5/getting-started/installation-and-upgrade/installation-requirements/port-requirements","docId":"getting-started/installation-and-upgrade/installation-requirements/port-requirements"}],"collapsed":true,"collapsible":true,"href":"/v2.5/pages-for-subheaders/installation-requirements"},{"type":"category","label":"Install/Upgrade on a Kubernetes Cluster","items":[{"type":"link","label":"Rollbacks","href":"/v2.5/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rollbacks","docId":"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rollbacks"},{"type":"link","label":"Upgrades","href":"/v2.5/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/upgrades","docId":"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/upgrades"},{"type":"link","label":"Rendering the Helm Template in an Air Gapped Environment","href":"/v2.5/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/air-gapped-upgrades","docId":"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/air-gapped-upgrades"},{"type":"link","label":"Installing Rancher on Amazon EKS","href":"/v2.5/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rancher-on-amazon-eks","docId":"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rancher-on-amazon-eks"},{"type":"link","label":"Installing Rancher on Azure Kubernetes Service","href":"/v2.5Line truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[99853],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>k});var a=r(67294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function s(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?s(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):s(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},s=Object.keys(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var o=a.createContext({}),c=function(e){var t=a.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},u=function(e){var t=c(e.components);return a.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,s=e.originalType,o=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),d=c(r),k=n,h=d["".concat(o,".").concat(k)]||d[k]||p[k]||s;return r?a.createElement(h,i(i({ref:t},u),{},{components:r})):a.createElement(h,i({ref:t},u))}));function k(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var s=r.length,i=new Array(s);i[0]=d;var l={};for(var o in t)hasOwnProperty.call(t,o)&&(l[o]=t[o]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var c=2;c<s;c++)i[c]=r[c];return a.createElement.apply(null,i)}return a.createElement.apply(null,r)}d.displayName="MDXCreateElement"},2316:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>p,frontMatter:()=>s,metadata:()=>l,toc:()=>c});var a=r(87462),n=(r(67294),r(3905));const s={title:"K3s CIS v1.23 Benchmark - Self-Assessment Guide - Rancher v2.7"},i=void 0,l={unversionedId:"reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-self-assessment-guide-with-cis-v1.23-benchmark",id:"reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-self-assessment-guide-with-cis-v1.23-benchmark",title:"K3s CIS v1.23 Benchmark - Self-Assessment Guide - Rancher v2.7",description:"K3s CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24",source:"@site/docs/reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-self-assessment-guide-with-cis-v1.23-benchmark.md",sourceDirName:"reference-guides/rancher-security/rancher-v2.7-hardening-guides",slug:"/reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-self-assessment-guide-with-cis-v1.23-benchmark",permalink:"/reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-self-assessment-guide-with-cis-v1.23-benchmark",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-self-assessment-guide-with-cis-v1.23-benchmark.md",tags:[],version:"current",lastUpdatedAt:1664960242,formattedLastUpdatedAt:"Oct 5, 2022",frontMatter:{title:"K3s CIS v1.23 Benchmark - Self-Assessment Guide - Rancher v2.7"},sidebar:"tutorialSidebar",previous:{title:"K3s CIS v1.20 Benchmark - Self-Assessment Guide - Rancher v2.7",permalink:"/reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-self-assessment-guide-with-cis-v1.20-benchmark"},next:{title:"SELinux RPM",permalink:"/pages-for-subheaders/selinux-rpm"}},o={},c=[{value:"K3s CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24",id:"k3s-cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124",level:3},{value:"Overview",id:"overview",level:4},{value:"Testing controls methodology",id:"testing-controls-methodology",level:4},{value:"Controls",id:"controls",level:3},{value:"1.1 Control Plane Node Configuration Files",id:"11-control-plane-node-configuration-files",level:2},{value:"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)",id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)",id:"112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.3 Ensure that the controller manager pod specification file permissions Line truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[67198],{3905:(e,t,a)=>{a.d(t,{Zo:()=>p,kt:()=>m});var r=a(67294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function s(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},l=Object.keys(e);for(r=0;r<l.length;r++)a=l[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)a=l[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var o=r.createContext({}),c=function(e){var t=r.useContext(o),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},p=function(e){var t=c(e.components);return r.createElement(o.Provider,{value:t},e.children)},h={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,l=e.originalType,o=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),d=c(a),m=n,u=d["".concat(o,".").concat(m)]||d[m]||h[m]||l;return a?r.createElement(u,i(i({ref:t},p),{},{components:a})):r.createElement(u,i({ref:t},p))}));function m(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var l=a.length,i=new Array(l);i[0]=d;var s={};for(var o in t)hasOwnProperty.call(t,o)&&(s[o]=t[o]);s.originalType=e,s.mdxType="string"==typeof e?e:n,i[1]=s;for(var c=2;c<l;c++)i[c]=a[c];return r.createElement.apply(null,i)}return r.createElement.apply(null,a)}d.displayName="MDXCreateElement"},54473:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>u,frontMatter:()=>l,metadata:()=>s,toc:()=>c});var r=a(87462),n=(a(67294),a(3905));const l={title:"4. Install Rancher"},i=void 0,s={unversionedId:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",id:"version-2.5/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",title:"4. Install Rancher",description:"This section is about how to deploy Rancher for your air gapped environment in a high-availability Kubernetes installation. An air gapped environment could be where Rancher server will be installed offline, behind a firewall, or behind a proxy.",source:"@site/versioned_docs/version-2.5/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha.md",sourceDirName:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install",slug:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",permalink:"/v2.5/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.5/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha.md",tags:[],version:"2.5",lastUpdatedAt:1670452794,formattedLastUpdatedAt:"Dec 7, 2022",frontMatter:{title:"4. Install Rancher"},sidebar:"tutorialSidebar",previous:{title:"3. Install Kubernetes (Skip for Docker Installs)",permalink:"/v2.5/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-kubernetes"},next:{title:"Docker Install Commands",permalink:"/v2.5/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/docker-install-commands"}},o={},c=[{value:"Privileged Access for Rancher v2.5+",id:"privileged-access-for-rancher-v25",level:3},{value:"Docker Instructions",id:"docker-instructions",level:2},{value:"Kubernetes Instructions",id:"kubernetes-instructions",level:2},{value:"1. Add the Helm Chart Repository",id:"1-add-the-helm-chart-repository",level:2},{value:"2. Choose your SSL Configuration",id:"2-choose-your-ssl-configuration",level:2},{value:"Helm Chart Options for Air Gap Installations",id:"helm-chart-options-for-air-gap-installations",level:2},{value:"3. Render the Rancher Helm Template",id:"3-render-the-rancher-helm-template",level:2},{value:"Option A: Default Self-Signed Certificate",id:"option-a-default-self-signed-certificate",level:2},{value:"1. Add the cert-manager repo",idLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[67198],{3905:(e,t,a)=>{a.d(t,{Zo:()=>p,kt:()=>m});var r=a(67294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function s(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},l=Object.keys(e);for(r=0;r<l.length;r++)a=l[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)a=l[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var o=r.createContext({}),c=function(e){var t=r.useContext(o),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},p=function(e){var t=c(e.components);return r.createElement(o.Provider,{value:t},e.children)},h={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,l=e.originalType,o=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),d=c(a),m=n,u=d["".concat(o,".").concat(m)]||d[m]||h[m]||l;return a?r.createElement(u,i(i({ref:t},p),{},{components:a})):r.createElement(u,i({ref:t},p))}));function m(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var l=a.length,i=new Array(l);i[0]=d;var s={};for(var o in t)hasOwnProperty.call(t,o)&&(s[o]=t[o]);s.originalType=e,s.mdxType="string"==typeof e?e:n,i[1]=s;for(var c=2;c<l;c++)i[c]=a[c];return r.createElement.apply(null,i)}return r.createElement.apply(null,a)}d.displayName="MDXCreateElement"},54473:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>u,frontMatter:()=>l,metadata:()=>s,toc:()=>c});var r=a(87462),n=(a(67294),a(3905));const l={title:"4. Install Rancher"},i=void 0,s={unversionedId:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",id:"version-2.5/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",title:"4. Install Rancher",description:"This section is about how to deploy Rancher for your air gapped environment in a high-availability Kubernetes installation. An air gapped environment could be where Rancher server will be installed offline, behind a firewall, or behind a proxy.",source:"@site/versioned_docs/version-2.5/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha.md",sourceDirName:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install",slug:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",permalink:"/v2.5/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.5/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha.md",tags:[],version:"2.5",lastUpdatedAt:1681151826,formattedLastUpdatedAt:"Apr 10, 2023",frontMatter:{title:"4. Install Rancher"},sidebar:"tutorialSidebar",previous:{title:"3. Install Kubernetes (Skip for Docker Installs)",permalink:"/v2.5/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-kubernetes"},next:{title:"Docker Install Commands",permalink:"/v2.5/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/docker-install-commands"}},o={},c=[{value:"Privileged Access for Rancher v2.5+",id:"privileged-access-for-rancher-v25",level:3},{value:"Docker Instructions",id:"docker-instructions",level:2},{value:"Kubernetes Instructions",id:"kubernetes-instructions",level:2},{value:"1. Add the Helm Chart Repository",id:"1-add-the-helm-chart-repository",level:2},{value:"2. Choose your SSL Configuration",id:"2-choose-your-ssl-configuration",level:2},{value:"Helm Chart Options for Air Gap Installations",id:"helm-chart-options-for-air-gap-installations",level:2},{value:"3. Render the Rancher Helm Template",id:"3-render-the-rancher-helm-template",level:2},{value:"Option A: Default Self-Signed Certificate",id:"option-a-default-self-signed-certificate",level:2},{value:"1. Add the cert-manager repo",iLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[29429],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>k});var a=r(67294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function s(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?s(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):s(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},s=Object.keys(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var o=a.createContext({}),c=function(e){var t=a.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},u=function(e){var t=c(e.components);return a.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,s=e.originalType,o=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),d=c(r),k=n,h=d["".concat(o,".").concat(k)]||d[k]||p[k]||s;return r?a.createElement(h,i(i({ref:t},u),{},{components:r})):a.createElement(h,i({ref:t},u))}));function k(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var s=r.length,i=new Array(s);i[0]=d;var l={};for(var o in t)hasOwnProperty.call(t,o)&&(l[o]=t[o]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var c=2;c<s;c++)i[c]=r[c];return a.createElement.apply(null,i)}return a.createElement.apply(null,r)}d.displayName="MDXCreateElement"},6477:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>p,frontMatter:()=>s,metadata:()=>l,toc:()=>c});var a=r(87462),n=(r(67294),r(3905));const s={title:"K3s Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.25"},i=void 0,l={unversionedId:"reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.25",id:"reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.25",title:"K3s Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.25",description:"This document is a companion to the K3s Hardening Guide, which provides prescriptive guidance on how to harden K3s clusters that are running in production and managed by Rancher. This benchmark guide helps you evaluate the security of a hardened cluster against each control in the CIS Kubernetes Benchmark.",source:"@site/docs/reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.25.md",sourceDirName:"reference-guides/rancher-security/hardening-guides/k3s-hardening-guide",slug:"/reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.25",permalink:"/reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.25",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.25.md",tags:[],version:"current",lastUpdatedAt:1678300966,formattedLastUpdatedAt:"Mar 8, 2023",frontMatter:{title:"K3s Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.25"},sidebar:"tutorialSidebar",previous:{title:"K3s Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.24",permalink:"/reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.24"},next:{title:"SELinux RPM",permalink:"/pages-for-subheaders/selinux-rpm"}},o={},c=[{value:"Testing Methodology",id:"testing-methodology",level:2},{value:"Controls",id:"controls",level:3},{value:"1.1 Control Plane Node Configuration Files",id:"11-control-plane-node-configuration-files",level:2},{value:"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)",id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)",id:"112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.3 Ensure that tLine truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[93850],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>p});var r=n(67294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function s(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},i=Object.keys(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var u=r.createContext({}),d=function(e){var t=r.useContext(u),n=t;return e&&(n="function"==typeof e?e(t):s(s({},t),e)),n},c=function(e){var t=d(e.components);return r.createElement(u.Provider,{value:t},e.children)},o={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},h=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,i=e.originalType,u=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),h=d(n),p=a,m=h["".concat(u,".").concat(p)]||h[p]||o[p]||i;return n?r.createElement(m,s(s({ref:t},c),{},{components:n})):r.createElement(m,s({ref:t},c))}));function p(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=n.length,s=new Array(i);s[0]=h;var l={};for(var u in t)hasOwnProperty.call(t,u)&&(l[u]=t[u]);l.originalType=e,l.mdxType="string"==typeof e?e:a,s[1]=l;for(var d=2;d<i;d++)s[d]=n[d];return r.createElement.apply(null,s)}return r.createElement.apply(null,n)}h.displayName="MDXCreateElement"},78904:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>u,contentTitle:()=>s,default:()=>o,frontMatter:()=>i,metadata:()=>l,toc:()=>d});var r=n(87462),a=(n(67294),n(3905));const i={title:"Self-Assessment and Hardening Guides for Rancher v2.7"},s=void 0,l={unversionedId:"pages-for-subheaders/rancher-v2.7-hardening-guides",id:"pages-for-subheaders/rancher-v2.7-hardening-guides",title:"Self-Assessment and Hardening Guides for Rancher v2.7",description:"Rancher provides specific security hardening guides for each supported Rancher's Kubernetes distributions.",source:"@site/docs/pages-for-subheaders/rancher-v2.7-hardening-guides.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/rancher-v2.7-hardening-guides",permalink:"/pages-for-subheaders/rancher-v2.7-hardening-guides",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/pages-for-subheaders/rancher-v2.7-hardening-guides.md",tags:[],version:"current",lastUpdatedAt:1664960242,formattedLastUpdatedAt:"Oct 5, 2022",frontMatter:{title:"Self-Assessment and Hardening Guides for Rancher v2.7"},sidebar:"tutorialSidebar",previous:{title:"RKE2 CIS v1.6 Benchmark - Self-Assessment Guide - Rancher v2.6",permalink:"/reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke2-self-assessment-guide-with-cis-v1.6-benchmark"},next:{title:"K3s Hardening Guide with CIS Benchmark",permalink:"/reference-guides/rancher-security/rancher-v2.7-hardening-guides/k3s-hardening-guide-with-cis-benchmark"}},u={},d=[{value:"Rancher Kubernetes Distributions",id:"rancher-kubernetes-distributions",level:2},{value:"Hardening Guides and Benchmark Versions",id:"hardening-guides-and-benchmark-versions",level:2},{value:"RKE Guides",id:"rke-guides",level:3},{value:"RKE2 Guides",id:"rke2-guides",level:3},{value:"K3s Guides",id:"k3s-guides",level:3},{value:"Rancher with SELinux",id:"rancher-with-selinux",level:2}],c={toc:d};function o(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Rancher provides specific security hardening guides for each supported Rancher's Kubernetes distributions."),(0,a.kt)("h2",{id:"rancher-kubernetes-distributions"},"Rancher Kubernetes Distributions"),(0,a.kt)("p",null,"Rancher uses the following Kubernetes distributions:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"https://rancher.com/docs/rke/latest/en/"},(0,a.kt)("strong",{parentName:"a"},"RKE")),", Rancher Kubernetes Engine, is a CNCF-certified Kubernetes distribution that runs entirely within Docker containers."),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"https://docs.rke2.io/"},(0,a.kt)("strong",{parentName:"a"},"RKE2"))," is a fully conformant Kubernetes distribution that focuses oLine truncated
@@ -1 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[54772],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>f});var n=r(67294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function c(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},o=Object.keys(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var s=n.createContext({}),l=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},u=function(e){var t=l(e.components);return n.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,u=c(e,["components","mdxType","originalType","parentName"]),d=l(r),f=a,h=d["".concat(s,".").concat(f)]||d[f]||p[f]||o;return r?n.createElement(h,i(i({ref:t},u),{},{components:r})):n.createElement(h,i({ref:t},u))}));function f(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=r.length,i=new Array(o);i[0]=d;var c={};for(var s in t)hasOwnProperty.call(t,s)&&(c[s]=t[s]);c.originalType=e,c.mdxType="string"==typeof e?e:a,i[1]=c;for(var l=2;l<o;l++)i[l]=r[l];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},34763:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>p,frontMatter:()=>o,metadata:()=>c,toc:()=>l});var n=r(87462),a=(r(67294),r(3905));const o={title:"Architecture"},i=void 0,c={unversionedId:"explanations/integrations-in-rancher/fleet-gitops-at-scale/architecture",id:"version-2.5/explanations/integrations-in-rancher/fleet-gitops-at-scale/architecture",title:"Architecture",description:"Fleet can manage deployments from git of raw Kubernetes YAML, Helm charts, or Kustomize or any combination of the three. Regardless of the source, all resources are dynamically turned into Helm charts, and Helm is used as the engine to deploy everything in the cluster. This gives you a high degree of control, consistency, and auditability. Fleet focuses not only on the ability to scale, but to give one a high degree of control and visibility to exactly what is installed on the cluster.",source:"@site/versioned_docs/version-2.5/explanations/integrations-in-rancher/fleet-gitops-at-scale/architecture.md",sourceDirName:"explanations/integrations-in-rancher/fleet-gitops-at-scale",slug:"/explanations/integrations-in-rancher/fleet-gitops-at-scale/architecture",permalink:"/v2.5/explanations/integrations-in-rancher/fleet-gitops-at-scale/architecture",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.5/explanations/integrations-in-rancher/fleet-gitops-at-scale/architecture.md",tags:[],version:"2.5",lastUpdatedAt:1663953084,formattedLastUpdatedAt:"Sep 23, 2022",frontMatter:{title:"Architecture"},sidebar:"tutorialSidebar",previous:{title:"Fleet - GitOps at Scale",permalink:"/v2.5/pages-for-subheaders/fleet-gitops-at-scale"},next:{title:"Windows Support",permalink:"/v2.5/explanations/integrations-in-rancher/fleet-gitops-at-scale/windows-support"}},s={},l=[],u={toc:l};function p(e){let{components:t,...o}=e;return(0,a.kt)("wrapper",(0,n.Z)({},u,o,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Fleet can manage deployments from git of raw Kubernetes YAML, Helm charts, or Kustomize or any combination of the three. Regardless of the source, all resources are dynamically turned into Helm charts, and Helm is used as the engine to deploy everything in the cluster. This gives you a high degree of control, consistency, and auditability. Fleet focuses not only on the ability to scale, but to give one a high degree of control and visibility to exactly what is installed on the cluster."),(0,a.kt)("p",null,(0,a.kt)("img",{alt:"Architecture",src:r(14956).Z,width:"1366",height:"960"})))}p.isMDXComponent=!0},14956:(e,t,r)=>{r.d(t,{Z:()=>n});const n=r.p+"assets/images/fleet-architecture-f708ce634648101dc98f451dcd59fe84.svg"}}]);
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[54772],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>f});var n=r(67294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},o=Object.keys(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var c=n.createContext({}),l=function(e){var t=n.useContext(c),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},u=function(e){var t=l(e.components);return n.createElement(c.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,o=e.originalType,c=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),d=l(r),f=a,h=d["".concat(c,".").concat(f)]||d[f]||p[f]||o;return r?n.createElement(h,i(i({ref:t},u),{},{components:r})):n.createElement(h,i({ref:t},u))}));function f(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=r.length,i=new Array(o);i[0]=d;var s={};for(var c in t)hasOwnProperty.call(t,c)&&(s[c]=t[c]);s.originalType=e,s.mdxType="string"==typeof e?e:a,i[1]=s;for(var l=2;l<o;l++)i[l]=r[l];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},34763:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>c,contentTitle:()=>i,default:()=>p,frontMatter:()=>o,metadata:()=>s,toc:()=>l});var n=r(87462),a=(r(67294),r(3905));const o={title:"Architecture"},i=void 0,s={unversionedId:"explanations/integrations-in-rancher/fleet-gitops-at-scale/architecture",id:"version-2.5/explanations/integrations-in-rancher/fleet-gitops-at-scale/architecture",title:"Architecture",description:"Fleet can manage deployments from git of raw Kubernetes YAML, Helm charts, or Kustomize or any combination of the three. Regardless of the source, all resources are dynamically turned into Helm charts, and Helm is used as the engine to deploy everything in the cluster. This gives you a high degree of control, consistency, and auditability. Fleet focuses not only on the ability to scale, but to give one a high degree of control and visibility to exactly what is installed on the cluster.",source:"@site/versioned_docs/version-2.5/explanations/integrations-in-rancher/fleet-gitops-at-scale/architecture.md",sourceDirName:"explanations/integrations-in-rancher/fleet-gitops-at-scale",slug:"/explanations/integrations-in-rancher/fleet-gitops-at-scale/architecture",permalink:"/v2.5/explanations/integrations-in-rancher/fleet-gitops-at-scale/architecture",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.5/explanations/integrations-in-rancher/fleet-gitops-at-scale/architecture.md",tags:[],version:"2.5",lastUpdatedAt:1663953084,formattedLastUpdatedAt:"Sep 23, 2022",frontMatter:{title:"Architecture"},sidebar:"tutorialSidebar",previous:{title:"Continuous Delivery with Fleet",permalink:"/v2.5/pages-for-subheaders/fleet-gitops-at-scale"},next:{title:"Windows Support",permalink:"/v2.5/explanations/integrations-in-rancher/fleet-gitops-at-scale/windows-support"}},c={},l=[],u={toc:l};function p(e){let{components:t,...o}=e;return(0,a.kt)("wrapper",(0,n.Z)({},u,o,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Fleet can manage deployments from git of raw Kubernetes YAML, Helm charts, or Kustomize or any combination of the three. Regardless of the source, all resources are dynamically turned into Helm charts, and Helm is used as the engine to deploy everything in the cluster. This gives you a high degree of control, consistency, and auditability. Fleet focuses not only on the ability to scale, but to give one a high degree of control and visibility to exactly what is installed on the cluster."),(0,a.kt)("p",null,(0,a.kt)("img",{alt:"Architecture",src:r(14956).Z,width:"1366",height:"960"})))}p.isMDXComponent=!0},14956:(e,t,r)=>{r.d(t,{Z:()=>n});const n=r.p+"assets/images/fleet-architecture-f708ce634648101dc98f451dcd59fe84.svg"}}]);
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[10955],{3905:(e,n,t)=>{t.d(n,{Zo:()=>u,kt:()=>m});var a=t(67294);function r(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function i(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function s(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?i(Object(t),!0).forEach((function(n){r(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):i(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function o(e,n){if(null==e)return{};var t,a,r=function(e,n){if(null==e)return{};var t,a,r={},i=Object.keys(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||(r[t]=e[t]);return r}(e,n);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(r[t]=e[t])}return r}var l=a.createContext({}),c=function(e){var n=a.useContext(l),t=n;return e&&(t="function"==typeof e?e(n):s(s({},n),e)),t},u=function(e){var n=c(e.components);return a.createElement(l.Provider,{value:n},e.children)},p={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},d=a.forwardRef((function(e,n){var t=e.components,r=e.mdxType,i=e.originalType,l=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),d=c(t),m=r,k=d["".concat(l,".").concat(m)]||d[m]||p[m]||i;return t?a.createElement(k,s(s({ref:n},u),{},{components:t})):a.createElement(k,s({ref:n},u))}));function m(e,n){var t=arguments,r=n&&n.mdxType;if("string"==typeof e||r){var i=t.length,s=new Array(i);s[0]=d;var o={};for(var l in n)hasOwnProperty.call(n,l)&&(o[l]=n[l]);o.originalType=e,o.mdxType="string"==typeof e?e:r,s[1]=o;for(var c=2;c<i;c++)s[c]=t[c];return a.createElement.apply(null,s)}return a.createElement.apply(null,t)}d.displayName="MDXCreateElement"},26410:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>l,contentTitle:()=>s,default:()=>k,frontMatter:()=>i,metadata:()=>o,toc:()=>c});var a=t(87462),r=(t(67294),t(3905));const i={title:"K3s Hardening Guide"},s=void 0,o={unversionedId:"pages-for-subheaders/k3s-hardening-guide",id:"pages-for-subheaders/k3s-hardening-guide",title:"K3s Hardening Guide",description:"This document provides prescriptive guidance for how to harden a K3s cluster intended for production, before provisioning it with Rancher. It outlines the configurations and controls required for Center for Information Security (CIS) Kubernetes benchmark controls.",source:"@site/docs/pages-for-subheaders/k3s-hardening-guide.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/k3s-hardening-guide",permalink:"/pages-for-subheaders/k3s-hardening-guide",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/pages-for-subheaders/k3s-hardening-guide.md",tags:[],version:"current",lastUpdatedAt:1681222703,formattedLastUpdatedAt:"Apr 11, 2023",frontMatter:{title:"K3s Hardening Guide"},sidebar:"tutorialSidebar",previous:{title:"RKE2 Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.25",permalink:"/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.25"},next:{title:"K3s Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.23",permalink:"/reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.23"}},l={},c=[{value:"Host-level Requirements",id:"host-level-requirements",level:2},{value:"Ensure <code>protect-kernel-defaults</code> is set",id:"ensure-protect-kernel-defaults-is-set",level:3},{value:"Set kernel parameters",id:"set-kernel-parameters",level:3},{value:"Kubernetes Runtime Requirements",id:"kubernetes-runtime-requirements",level:2},{value:"Pod Security",id:"pod-security",level:3},{value:"Network Policies",id:"network-policies",level:3},{value:"API Server audit configuration",id:"api-server-audit-configuration",level:3},{value:"Controller Manager Requirements",id:"controller-manager-requirements",level:3},{value:"Configure <code>default</code> Service Account",id:"configure-default-service-account",level:3},{value:"Reference Hardened K3s Template Configuration",id:"reference-hardened-k3s-template-configuration",level:2},{value:"Conclusion",id:"conclusion",level:2}],u=e=>function(n){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",n)},p=u("Tabs"),d=u("TabItem"),m={toc:c};function k(e){let{components:n,...t}=e;return(0,r.kt)("wrapper",(0,a.Z)({},m,t,{components:n,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This document provides prescriptive guidance for how to hardenLine truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[80053],{1109:e=>{e.exports=JSON.parse('{"pluginId":"default","version":"current","label":"v2.7","banner":null,"badge":true,"noIndex":false,"className":"docs-version-current","isLast":true,"docsSidebars":{"tutorialSidebar":[{"type":"link","label":"What is Rancher?","href":"/","docId":"rancher-manager"},{"type":"category","label":"Getting Started","items":[{"type":"link","label":"Overview","href":"/getting-started/overview","docId":"getting-started/overview"},{"type":"category","label":"Quick Start Guides","items":[{"type":"category","label":"Deploy Rancher Manager","items":[{"type":"link","label":"Rancher AWS Quick Start Guide","href":"/getting-started/quick-start-guides/deploy-rancher-manager/aws","docId":"getting-started/quick-start-guides/deploy-rancher-manager/aws"},{"type":"link","label":"Rancher Azure Quick Start Guide","href":"/getting-started/quick-start-guides/deploy-rancher-manager/azure","docId":"getting-started/quick-start-guides/deploy-rancher-manager/azure"},{"type":"link","label":"Rancher DigitalOcean Quick Start Guide","href":"/getting-started/quick-start-guides/deploy-rancher-manager/digitalocean","docId":"getting-started/quick-start-guides/deploy-rancher-manager/digitalocean"},{"type":"link","label":"Rancher GCP Quick Start Guide","href":"/getting-started/quick-start-guides/deploy-rancher-manager/gcp","docId":"getting-started/quick-start-guides/deploy-rancher-manager/gcp"},{"type":"link","label":"Rancher Hetzner Cloud Quick Start Guide","href":"/getting-started/quick-start-guides/deploy-rancher-manager/hetzner-cloud","docId":"getting-started/quick-start-guides/deploy-rancher-manager/hetzner-cloud"},{"type":"link","label":"Vagrant Quick Start","href":"/getting-started/quick-start-guides/deploy-rancher-manager/vagrant","docId":"getting-started/quick-start-guides/deploy-rancher-manager/vagrant"},{"type":"link","label":"Rancher Equinix Metal Quick Start","href":"/getting-started/quick-start-guides/deploy-rancher-manager/equinix-metal","docId":"getting-started/quick-start-guides/deploy-rancher-manager/equinix-metal"},{"type":"link","label":"Helm CLI Quick Start","href":"/getting-started/quick-start-guides/deploy-rancher-manager/helm-cli","docId":"getting-started/quick-start-guides/deploy-rancher-manager/helm-cli"}],"collapsed":true,"collapsible":true,"href":"/pages-for-subheaders/deploy-rancher-manager"},{"type":"link","label":"Rancher Prime","href":"/getting-started/quick-start-guides/deploy-rancher-manager/prime","docId":"getting-started/quick-start-guides/deploy-rancher-manager/prime"},{"type":"category","label":"Deploy Rancher Workloads","items":[{"type":"link","label":"Workload with Ingress Quick Start","href":"/getting-started/quick-start-guides/deploy-workloads/workload-ingress","docId":"getting-started/quick-start-guides/deploy-workloads/workload-ingress"},{"type":"link","label":"Workload with NodePort Quick Start","href":"/getting-started/quick-start-guides/deploy-workloads/nodeports","docId":"getting-started/quick-start-guides/deploy-workloads/nodeports"}],"collapsed":true,"collapsible":true,"href":"/pages-for-subheaders/deploy-rancher-workloads"}],"collapsed":true,"collapsible":true,"href":"/pages-for-subheaders/quick-start-guides"},{"type":"category","label":"Installation and Upgrade","items":[{"type":"category","label":"Installation Requirements","items":[{"type":"link","label":"Installing Docker","href":"/getting-started/installation-and-upgrade/installation-requirements/install-docker","docId":"getting-started/installation-and-upgrade/installation-requirements/install-docker"},{"type":"link","label":"Dockershim","href":"/getting-started/installation-and-upgrade/installation-requirements/dockershim","docId":"getting-started/installation-and-upgrade/installation-requirements/dockershim"},{"type":"link","label":"Port Requirements","href":"/getting-started/installation-and-upgrade/installation-requirements/port-requirements","docId":"getting-started/installation-and-upgrade/installation-requirements/port-requirements"}],"collapsed":true,"collapsible":true,"href":"/pages-for-subheaders/installation-requirements"},{"type":"category","label":"Installation References","items":[{"type":"link","label":"Rancher Helm Chart Options","href":"/getting-started/installation-and-upgrade/installation-references/helm-chart-options","docId":"getting-started/installation-and-upgrade/installation-references/helm-chart-options"},{"type":"link","label":"TLS Settings","href":"/getting-started/installation-and-upgrade/installation-references/tls-settings","docId":"getting-started/installation-and-upgrade/installation-references/tls-settings"},{"type":"link","label":"Feature Flags","href":"/getting-started/installation-and-upgrade/installation-references/feature-flags","docId":"getting-started/installation-and-upgrade/installation-references/feature-flags"}],"collapsed":true,"collapsible":true,"href":"/pages-for-subheadersLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[80053],{1109:e=>{e.exports=JSON.parse('{"pluginId":"default","version":"current","label":"v2.7","banner":null,"badge":true,"noIndex":false,"className":"docs-version-current","isLast":true,"docsSidebars":{"tutorialSidebar":[{"type":"link","label":"What is Rancher?","href":"/","docId":"rancher-manager"},{"type":"category","label":"Getting Started","items":[{"type":"link","label":"Overview","href":"/getting-started/overview","docId":"getting-started/overview"},{"type":"category","label":"Quick Start Guides","items":[{"type":"category","label":"Deploy Rancher Manager","items":[{"type":"link","label":"Rancher AWS Quick Start Guide","href":"/getting-started/quick-start-guides/deploy-rancher-manager/aws","docId":"getting-started/quick-start-guides/deploy-rancher-manager/aws"},{"type":"link","label":"Rancher Azure Quick Start Guide","href":"/getting-started/quick-start-guides/deploy-rancher-manager/azure","docId":"getting-started/quick-start-guides/deploy-rancher-manager/azure"},{"type":"link","label":"Rancher DigitalOcean Quick Start Guide","href":"/getting-started/quick-start-guides/deploy-rancher-manager/digitalocean","docId":"getting-started/quick-start-guides/deploy-rancher-manager/digitalocean"},{"type":"link","label":"Rancher GCP Quick Start Guide","href":"/getting-started/quick-start-guides/deploy-rancher-manager/gcp","docId":"getting-started/quick-start-guides/deploy-rancher-manager/gcp"},{"type":"link","label":"Rancher Hetzner Cloud Quick Start Guide","href":"/getting-started/quick-start-guides/deploy-rancher-manager/hetzner-cloud","docId":"getting-started/quick-start-guides/deploy-rancher-manager/hetzner-cloud"},{"type":"link","label":"Vagrant Quick Start","href":"/getting-started/quick-start-guides/deploy-rancher-manager/vagrant","docId":"getting-started/quick-start-guides/deploy-rancher-manager/vagrant"},{"type":"link","label":"Rancher Equinix Metal Quick Start","href":"/getting-started/quick-start-guides/deploy-rancher-manager/equinix-metal","docId":"getting-started/quick-start-guides/deploy-rancher-manager/equinix-metal"},{"type":"link","label":"Helm CLI Quick Start","href":"/getting-started/quick-start-guides/deploy-rancher-manager/helm-cli","docId":"getting-started/quick-start-guides/deploy-rancher-manager/helm-cli"}],"collapsed":true,"collapsible":true,"href":"/pages-for-subheaders/deploy-rancher-manager"},{"type":"link","label":"Rancher Prime","href":"/getting-started/quick-start-guides/deploy-rancher-manager/prime","docId":"getting-started/quick-start-guides/deploy-rancher-manager/prime"},{"type":"category","label":"Deploy Rancher Workloads","items":[{"type":"link","label":"Workload with Ingress Quick Start","href":"/getting-started/quick-start-guides/deploy-workloads/workload-ingress","docId":"getting-started/quick-start-guides/deploy-workloads/workload-ingress"},{"type":"link","label":"Workload with NodePort Quick Start","href":"/getting-started/quick-start-guides/deploy-workloads/nodeports","docId":"getting-started/quick-start-guides/deploy-workloads/nodeports"}],"collapsed":true,"collapsible":true,"href":"/pages-for-subheaders/deploy-rancher-workloads"}],"collapsed":true,"collapsible":true,"href":"/pages-for-subheaders/quick-start-guides"},{"type":"category","label":"Installation and Upgrade","items":[{"type":"category","label":"Installation Requirements","items":[{"type":"link","label":"Installing Docker","href":"/getting-started/installation-and-upgrade/installation-requirements/install-docker","docId":"getting-started/installation-and-upgrade/installation-requirements/install-docker"},{"type":"link","label":"Dockershim","href":"/getting-started/installation-and-upgrade/installation-requirements/dockershim","docId":"getting-started/installation-and-upgrade/installation-requirements/dockershim"},{"type":"link","label":"Port Requirements","href":"/getting-started/installation-and-upgrade/installation-requirements/port-requirements","docId":"getting-started/installation-and-upgrade/installation-requirements/port-requirements"}],"collapsed":true,"collapsible":true,"href":"/pages-for-subheaders/installation-requirements"},{"type":"category","label":"Installation References","items":[{"type":"link","label":"Rancher Helm Chart Options","href":"/getting-started/installation-and-upgrade/installation-references/helm-chart-options","docId":"getting-started/installation-and-upgrade/installation-references/helm-chart-options"},{"type":"link","label":"TLS Settings","href":"/getting-started/installation-and-upgrade/installation-references/tls-settings","docId":"getting-started/installation-and-upgrade/installation-references/tls-settings"},{"type":"link","label":"Feature Flags","href":"/getting-started/installation-and-upgrade/installation-references/feature-flags","docId":"getting-started/installation-and-upgrade/installation-references/feature-flags"}],"collapsed":true,"collapsible":true,"href":"/pages-for-subheadersLine truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[16442],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>h});var r=n(67294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var c=r.createContext({}),l=function(e){var t=r.useContext(c),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},p=function(e){var t=l(e.components);return r.createElement(c.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},u=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,o=e.originalType,c=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),u=l(n),h=a,k=u["".concat(c,".").concat(h)]||u[h]||m[h]||o;return n?r.createElement(k,i(i({ref:t},p),{},{components:n})):r.createElement(k,i({ref:t},p))}));function h(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=n.length,i=new Array(o);i[0]=u;var s={};for(var c in t)hasOwnProperty.call(t,c)&&(s[c]=t[c]);s.originalType=e,s.mdxType="string"==typeof e?e:a,i[1]=s;for(var l=2;l<o;l++)i[l]=n[l];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}u.displayName="MDXCreateElement"},63241:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>c,contentTitle:()=>i,default:()=>m,frontMatter:()=>o,metadata:()=>s,toc:()=>l});var r=n(87462),a=(n(67294),n(3905));const o={title:"Creating a Custom Benchmark Version for Running a Cluster Scan"},i=void 0,s={unversionedId:"integrations-in-rancher/cis-scans/custom-benchmark",id:"integrations-in-rancher/cis-scans/custom-benchmark",title:"Creating a Custom Benchmark Version for Running a Cluster Scan",description:"Each Benchmark Version defines a set of test configuration files that define the CIS tests to be run by the kube-bench tool.",source:"@site/docs/integrations-in-rancher/cis-scans/custom-benchmark.md",sourceDirName:"integrations-in-rancher/cis-scans",slug:"/integrations-in-rancher/cis-scans/custom-benchmark",permalink:"/integrations-in-rancher/cis-scans/custom-benchmark",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/integrations-in-rancher/cis-scans/custom-benchmark.md",tags:[],version:"current",lastUpdatedAt:1666730461,formattedLastUpdatedAt:"Oct 25, 2022",frontMatter:{title:"Creating a Custom Benchmark Version for Running a Cluster Scan"},sidebar:"tutorialSidebar",previous:{title:"Skipped and Not Applicable Tests",permalink:"/integrations-in-rancher/cis-scans/skipped-and-not-applicable-tests"},next:{title:"Fleet - GitOps at Scale",permalink:"/pages-for-subheaders/fleet-gitops-at-scale"}},c={},l=[{value:"1. Prepare the Custom Benchmark Version ConfigMap",id:"1-prepare-the-custom-benchmark-version-configmap",level:3},{value:"2. Add a Custom Benchmark Version to a Cluster",id:"2-add-a-custom-benchmark-version-to-a-cluster",level:3},{value:"3. Create a New Profile for the Custom Benchmark Version",id:"3-create-a-new-profile-for-the-custom-benchmark-version",level:3},{value:"4. Run a Scan Using the Custom Benchmark Version",id:"4-run-a-scan-using-the-custom-benchmark-version",level:3}],p={toc:l};function m(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Each Benchmark Version defines a set of test configuration files that define the CIS tests to be run by the ",(0,a.kt)("a",{href:"https://github.com/aquasecurity/kube-bench",target:"_blank"},"kube-bench")," tool.\nThe ",(0,a.kt)("inlineCode",{parentName:"p"},"rancher-cis-benchmark")," application installs a few default Benchmark Versions which are listed under CIS Benchmark application menu."),(0,a.kt)("p",null,"But there could be some Kubernetes cluster setups that require custom configurations of the Benchmark tests. For example, the path to the Kubernetes config files or certs might be different than the standard location where the upstream CIS Benchmarks look for them."),(0,a.kt)("p",null,"It is now possible to create a custom Benchmark VersionLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[16442],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>h});var r=n(67294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var c=r.createContext({}),l=function(e){var t=r.useContext(c),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},p=function(e){var t=l(e.components);return r.createElement(c.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},u=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,o=e.originalType,c=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),u=l(n),h=a,k=u["".concat(c,".").concat(h)]||u[h]||m[h]||o;return n?r.createElement(k,i(i({ref:t},p),{},{components:n})):r.createElement(k,i({ref:t},p))}));function h(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=n.length,i=new Array(o);i[0]=u;var s={};for(var c in t)hasOwnProperty.call(t,c)&&(s[c]=t[c]);s.originalType=e,s.mdxType="string"==typeof e?e:a,i[1]=s;for(var l=2;l<o;l++)i[l]=n[l];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}u.displayName="MDXCreateElement"},63241:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>c,contentTitle:()=>i,default:()=>m,frontMatter:()=>o,metadata:()=>s,toc:()=>l});var r=n(87462),a=(n(67294),n(3905));const o={title:"Creating a Custom Benchmark Version for Running a Cluster Scan"},i=void 0,s={unversionedId:"integrations-in-rancher/cis-scans/custom-benchmark",id:"integrations-in-rancher/cis-scans/custom-benchmark",title:"Creating a Custom Benchmark Version for Running a Cluster Scan",description:"Each Benchmark Version defines a set of test configuration files that define the CIS tests to be run by the kube-bench tool.",source:"@site/docs/integrations-in-rancher/cis-scans/custom-benchmark.md",sourceDirName:"integrations-in-rancher/cis-scans",slug:"/integrations-in-rancher/cis-scans/custom-benchmark",permalink:"/integrations-in-rancher/cis-scans/custom-benchmark",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/integrations-in-rancher/cis-scans/custom-benchmark.md",tags:[],version:"current",lastUpdatedAt:1666730461,formattedLastUpdatedAt:"Oct 25, 2022",frontMatter:{title:"Creating a Custom Benchmark Version for Running a Cluster Scan"},sidebar:"tutorialSidebar",previous:{title:"Skipped and Not Applicable Tests",permalink:"/integrations-in-rancher/cis-scans/skipped-and-not-applicable-tests"},next:{title:"Continuous Delivery with Fleet",permalink:"/pages-for-subheaders/fleet-gitops-at-scale"}},c={},l=[{value:"1. Prepare the Custom Benchmark Version ConfigMap",id:"1-prepare-the-custom-benchmark-version-configmap",level:3},{value:"2. Add a Custom Benchmark Version to a Cluster",id:"2-add-a-custom-benchmark-version-to-a-cluster",level:3},{value:"3. Create a New Profile for the Custom Benchmark Version",id:"3-create-a-new-profile-for-the-custom-benchmark-version",level:3},{value:"4. Run a Scan Using the Custom Benchmark Version",id:"4-run-a-scan-using-the-custom-benchmark-version",level:3}],p={toc:l};function m(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Each Benchmark Version defines a set of test configuration files that define the CIS tests to be run by the ",(0,a.kt)("a",{href:"https://github.com/aquasecurity/kube-bench",target:"_blank"},"kube-bench")," tool.\nThe ",(0,a.kt)("inlineCode",{parentName:"p"},"rancher-cis-benchmark")," application installs a few default Benchmark Versions which are listed under CIS Benchmark application menu."),(0,a.kt)("p",null,"But there could be some Kubernetes cluster setups that require custom configurations of the Benchmark tests. For example, the path to the Kubernetes config files or certs might be different than the standard location where the upstream CIS Benchmarks look for them."),(0,a.kt)("p",null,"It is now possible to create a custom Benchmark Line truncated
@@ -1 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[67986],{3905:(e,a,t)=>{t.d(a,{Zo:()=>c,kt:()=>g});var r=t(67294);function n(e,a,t){return a in e?Object.defineProperty(e,a,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[a]=t,e}function o(e,a){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);a&&(r=r.filter((function(a){return Object.getOwnPropertyDescriptor(e,a).enumerable}))),t.push.apply(t,r)}return t}function i(e){for(var a=1;a<arguments.length;a++){var t=null!=arguments[a]?arguments[a]:{};a%2?o(Object(t),!0).forEach((function(a){n(e,a,t[a])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):o(Object(t)).forEach((function(a){Object.defineProperty(e,a,Object.getOwnPropertyDescriptor(t,a))}))}return e}function l(e,a){if(null==e)return{};var t,r,n=function(e,a){if(null==e)return{};var t,r,n={},o=Object.keys(e);for(r=0;r<o.length;r++)t=o[r],a.indexOf(t)>=0||(n[t]=e[t]);return n}(e,a);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)t=o[r],a.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(n[t]=e[t])}return n}var s=r.createContext({}),p=function(e){var a=r.useContext(s),t=a;return e&&(t="function"==typeof e?e(a):i(i({},a),e)),t},c=function(e){var a=p(e.components);return r.createElement(s.Provider,{value:a},e.children)},m={inlineCode:"code",wrapper:function(e){var a=e.children;return r.createElement(r.Fragment,{},a)}},u=r.forwardRef((function(e,a){var t=e.components,n=e.mdxType,o=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),u=p(t),g=n,d=u["".concat(s,".").concat(g)]||u[g]||m[g]||o;return t?r.createElement(d,i(i({ref:a},c),{},{components:t})):r.createElement(d,i({ref:a},c))}));function g(e,a){var t=arguments,n=a&&a.mdxType;if("string"==typeof e||n){var o=t.length,i=new Array(o);i[0]=u;var l={};for(var s in a)hasOwnProperty.call(a,s)&&(l[s]=a[s]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var p=2;p<o;p++)i[p]=t[p];return r.createElement.apply(null,i)}return r.createElement.apply(null,t)}u.displayName="MDXCreateElement"},18620:(e,a,t)=>{t.r(a),t.d(a,{assets:()=>s,contentTitle:()=>i,default:()=>m,frontMatter:()=>o,metadata:()=>l,toc:()=>p});var r=t(87462),n=(t(67294),t(3905));const o={title:"Upgrading Cert-Manager"},i=void 0,l={unversionedId:"getting-started/installation-and-upgrade/resources/upgrade-cert-manager",id:"version-2.5/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",title:"Upgrading Cert-Manager",description:"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:",source:"@site/versioned_docs/version-2.5/getting-started/installation-and-upgrade/resources/upgrade-cert-manager.md",sourceDirName:"getting-started/installation-and-upgrade/resources",slug:"/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",permalink:"/v2.5/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.5/getting-started/installation-and-upgrade/resources/upgrade-cert-manager.md",tags:[],version:"2.5",lastUpdatedAt:1667002159,formattedLastUpdatedAt:"Oct 29, 2022",frontMatter:{title:"Upgrading Cert-Manager"},sidebar:"tutorialSidebar",previous:{title:"About Custom CA Root Certificates",permalink:"/v2.5/getting-started/installation-and-upgrade/resources/custom-ca-root-certificates"},next:{title:"Upgrading Cert-Manager with Helm 2",permalink:"/v2.5/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2"}},s={},p=[{value:"Upgrade Cert-Manager",id:"upgrade-cert-manager",level:2},{value:"Option A: Upgrade cert-manager with Internet Access",id:"option-a-upgrade-cert-manager-with-internet-access",level:3},{value:"Option B: Upgrade cert-manager in an Air Gap Environment",id:"option-b-upgrade-cert-manager-in-an-air-gap-environment",level:3},{value:"Prerequisites",id:"prerequisites",level:3},{value:"Install cert-manager",id:"install-cert-manager",level:3},{value:"Verify the Deployment",id:"verify-the-deployment",level:3},{value:"Cert-Manager API change and data migration",id:"cert-manager-api-change-and-data-migration",level:2}],c={toc:p};function m(e){let{components:a,...t}=e;return(0,n.kt)("wrapper",(0,r.Z)({},c,t,{components:a,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("a",{parentName:"li",href:"httpsLine truncated
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[67986],{3905:(e,a,t)=>{t.d(a,{Zo:()=>c,kt:()=>g});var r=t(67294);function n(e,a,t){return a in e?Object.defineProperty(e,a,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[a]=t,e}function o(e,a){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);a&&(r=r.filter((function(a){return Object.getOwnPropertyDescriptor(e,a).enumerable}))),t.push.apply(t,r)}return t}function i(e){for(var a=1;a<arguments.length;a++){var t=null!=arguments[a]?arguments[a]:{};a%2?o(Object(t),!0).forEach((function(a){n(e,a,t[a])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):o(Object(t)).forEach((function(a){Object.defineProperty(e,a,Object.getOwnPropertyDescriptor(t,a))}))}return e}function l(e,a){if(null==e)return{};var t,r,n=function(e,a){if(null==e)return{};var t,r,n={},o=Object.keys(e);for(r=0;r<o.length;r++)t=o[r],a.indexOf(t)>=0||(n[t]=e[t]);return n}(e,a);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)t=o[r],a.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(n[t]=e[t])}return n}var s=r.createContext({}),p=function(e){var a=r.useContext(s),t=a;return e&&(t="function"==typeof e?e(a):i(i({},a),e)),t},c=function(e){var a=p(e.components);return r.createElement(s.Provider,{value:a},e.children)},m={inlineCode:"code",wrapper:function(e){var a=e.children;return r.createElement(r.Fragment,{},a)}},u=r.forwardRef((function(e,a){var t=e.components,n=e.mdxType,o=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),u=p(t),g=n,d=u["".concat(s,".").concat(g)]||u[g]||m[g]||o;return t?r.createElement(d,i(i({ref:a},c),{},{components:t})):r.createElement(d,i({ref:a},c))}));function g(e,a){var t=arguments,n=a&&a.mdxType;if("string"==typeof e||n){var o=t.length,i=new Array(o);i[0]=u;var l={};for(var s in a)hasOwnProperty.call(a,s)&&(l[s]=a[s]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var p=2;p<o;p++)i[p]=t[p];return r.createElement.apply(null,i)}return r.createElement.apply(null,t)}u.displayName="MDXCreateElement"},18620:(e,a,t)=>{t.r(a),t.d(a,{assets:()=>s,contentTitle:()=>i,default:()=>m,frontMatter:()=>o,metadata:()=>l,toc:()=>p});var r=t(87462),n=(t(67294),t(3905));const o={title:"Upgrading Cert-Manager"},i=void 0,l={unversionedId:"getting-started/installation-and-upgrade/resources/upgrade-cert-manager",id:"version-2.5/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",title:"Upgrading Cert-Manager",description:"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:",source:"@site/versioned_docs/version-2.5/getting-started/installation-and-upgrade/resources/upgrade-cert-manager.md",sourceDirName:"getting-started/installation-and-upgrade/resources",slug:"/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",permalink:"/v2.5/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.5/getting-started/installation-and-upgrade/resources/upgrade-cert-manager.md",tags:[],version:"2.5",lastUpdatedAt:1681151826,formattedLastUpdatedAt:"Apr 10, 2023",frontMatter:{title:"Upgrading Cert-Manager"},sidebar:"tutorialSidebar",previous:{title:"About Custom CA Root Certificates",permalink:"/v2.5/getting-started/installation-and-upgrade/resources/custom-ca-root-certificates"},next:{title:"Upgrading Cert-Manager with Helm 2",permalink:"/v2.5/getting-started/installation-and-upgrade/resources/upgrade-cert-manager-helm-2"}},s={},p=[{value:"Upgrade Cert-Manager",id:"upgrade-cert-manager",level:2},{value:"Option A: Upgrade cert-manager with Internet Access",id:"option-a-upgrade-cert-manager-with-internet-access",level:3},{value:"Option B: Upgrade cert-manager in an Air Gap Environment",id:"option-b-upgrade-cert-manager-in-an-air-gap-environment",level:3},{value:"Prerequisites",id:"prerequisites",level:3},{value:"Install cert-manager",id:"install-cert-manager",level:3},{value:"Verify the Deployment",id:"verify-the-deployment",level:3},{value:"Cert-Manager API change and data migration",id:"cert-manager-api-change-and-data-migration",level:2}],c={toc:p};function m(e){let{components:a,...t}=e;return(0,n.kt)("wrapper",(0,r.Z)({},c,t,{components:a,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("a",{parentName:"li",href:"httpsLine truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[60862],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>k});var a=r(67294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function s(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?s(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):s(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},s=Object.keys(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var l=a.createContext({}),u=function(e){var t=a.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},c=function(e){var t=u(e.components);return a.createElement(l.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,s=e.originalType,l=e.parentName,c=o(e,["components","mdxType","originalType","parentName"]),d=u(r),k=n,m=d["".concat(l,".").concat(k)]||d[k]||p[k]||s;return r?a.createElement(m,i(i({ref:t},c),{},{components:r})):a.createElement(m,i({ref:t},c))}));function k(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var s=r.length,i=new Array(s);i[0]=d;var o={};for(var l in t)hasOwnProperty.call(t,l)&&(o[l]=t[l]);o.originalType=e,o.mdxType="string"==typeof e?e:n,i[1]=o;for(var u=2;u<s;u++)i[u]=r[u];return a.createElement.apply(null,i)}return a.createElement.apply(null,r)}d.displayName="MDXCreateElement"},99926:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>i,default:()=>p,frontMatter:()=>s,metadata:()=>o,toc:()=>u});var a=r(87462),n=(r(67294),r(3905));const s={title:"RKE CIS v1.6 Benchmark - Self-Assessment Guide - Rancher v2.6"},i=void 0,o={unversionedId:"reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke1-self-assessment-guide-with-cis-v1.6-benchmark",id:"reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke1-self-assessment-guide-with-cis-v1.6-benchmark",title:"RKE CIS v1.6 Benchmark - Self-Assessment Guide - Rancher v2.6",description:"RKE CIS v1.6 Kubernetes Benchmark - Rancher v2.6 with Kubernetes v1.18 to v1.23",source:"@site/docs/reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke1-self-assessment-guide-with-cis-v1.6-benchmark.md",sourceDirName:"reference-guides/rancher-security/rancher-v2.6-hardening-guides",slug:"/reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke1-self-assessment-guide-with-cis-v1.6-benchmark",permalink:"/reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke1-self-assessment-guide-with-cis-v1.6-benchmark",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke1-self-assessment-guide-with-cis-v1.6-benchmark.md",tags:[],version:"current",lastUpdatedAt:1663953084,formattedLastUpdatedAt:"Sep 23, 2022",frontMatter:{title:"RKE CIS v1.6 Benchmark - Self-Assessment Guide - Rancher v2.6"},sidebar:"tutorialSidebar",previous:{title:"RKE Hardening Guide with CIS v1.6 Benchmark",permalink:"/reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke1-hardening-guide-with-cis-v1.6-benchmark"},next:{title:"RKE2 Hardening Guide with CIS v1.6 Benchmark",permalink:"/reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke2-hardening-guide-with-cis-v1.6-benchmark"}},l={},u=[{value:"RKE CIS v1.6 Kubernetes Benchmark - Rancher v2.6 with Kubernetes v1.18 to v1.23",id:"rke-cis-v16-kubernetes-benchmark---rancher-v26-with-kubernetes-v118-to-v123",level:3},{value:"Overview",id:"overview",level:4},{value:"Testing controls methodology",id:"testing-controls-methodology",level:4},{value:"Controls",id:"controls",level:3},{value:"1.1 Master Node Configuration Files",id:"11-master-node-configuration-files",level:2},{value:"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)",id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)",id:"112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated",lLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[77842],{3905:(e,t,a)=>{a.d(t,{Zo:()=>c,kt:()=>h});var r=a(67294);function i(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function n(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function o(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?n(Object(a),!0).forEach((function(t){i(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):n(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function s(e,t){if(null==e)return{};var a,r,i=function(e,t){if(null==e)return{};var a,r,i={},n=Object.keys(e);for(r=0;r<n.length;r++)a=n[r],t.indexOf(a)>=0||(i[a]=e[a]);return i}(e,t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);for(r=0;r<n.length;r++)a=n[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(i[a]=e[a])}return i}var l=r.createContext({}),p=function(e){var t=r.useContext(l),a=t;return e&&(a="function"==typeof e?e(t):o(o({},t),e)),a},c=function(e){var t=p(e.components);return r.createElement(l.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},m=r.forwardRef((function(e,t){var a=e.components,i=e.mdxType,n=e.originalType,l=e.parentName,c=s(e,["components","mdxType","originalType","parentName"]),m=p(a),h=i,d=m["".concat(l,".").concat(h)]||m[h]||u[h]||n;return a?r.createElement(d,o(o({ref:t},c),{},{components:a})):r.createElement(d,o({ref:t},c))}));function h(e,t){var a=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var n=a.length,o=new Array(n);o[0]=m;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:i,o[1]=s;for(var p=2;p<n;p++)o[p]=a[p];return r.createElement.apply(null,o)}return r.createElement.apply(null,a)}m.displayName="MDXCreateElement"},22935:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>l,contentTitle:()=>o,default:()=>u,frontMatter:()=>n,metadata:()=>s,toc:()=>p});var r=a(87462),i=(a(67294),a(3905));const n={title:"Multi-cluster Apps"},o=void 0,s={unversionedId:"how-to-guides/new-user-guides/deploy-apps-across-clusters/multi-cluster-apps",id:"version-2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/multi-cluster-apps",title:"Multi-cluster Apps",description:"As of Rancher v2.5, multi-cluster apps are deprecated. We now recommend using Fleet for deploying apps across clusters.",source:"@site/versioned_docs/version-2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/multi-cluster-apps.md",sourceDirName:"how-to-guides/new-user-guides/deploy-apps-across-clusters",slug:"/how-to-guides/new-user-guides/deploy-apps-across-clusters/multi-cluster-apps",permalink:"/v2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/multi-cluster-apps",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/multi-cluster-apps.md",tags:[],version:"2.6",lastUpdatedAt:1668452187,formattedLastUpdatedAt:"Nov 14, 2022",frontMatter:{title:"Multi-cluster Apps"},sidebar:"tutorialSidebar",previous:{title:"Continuous Delivery with Fleet",permalink:"/v2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet"},next:{title:"Backups and Disaster Recovery",permalink:"/v2.6/pages-for-subheaders/backup-restore-and-disaster-recovery"}},l={},p=[{value:"Prerequisites",id:"prerequisites",level:2},{value:"Permissions",id:"permissions",level:3},{value:"Enable Legacy Features",id:"enable-legacy-features",level:3},{value:"Launching a Multi-Cluster App",id:"launching-a-multi-cluster-app",level:2},{value:"Multi-cluster App Configuration Options",id:"multi-cluster-app-configuration-options",level:2},{value:"Targets",id:"targets",level:3},{value:"Upgrades",id:"upgrades",level:3},{value:"Roles",id:"roles",level:3},{value:"Application Configuration Options",id:"application-configuration-options",level:2},{value:"Using a questions.yml file",id:"using-a-questionsyml-file",level:3},{value:"Key Value Pairs for Native Helm Charts",id:"key-value-pairs-for-native-helm-charts",level:3},{value:"Members",id:"members",level:3},{value:"Overriding Application Configuration Options for Specific Projects",id:"overriding-application-configuration-options-for-specific-projects",level:3},{value:"Upgrading Multi-Cluster App Roles and Projects",id:"upgrading-multi-cluster-app-roles-and-projects",level:2},{value:"Multi-Cluster Application Management",id:"multi-cluster-application-management",level:2},{value:"Deleting a Multi-Cluster Application",id:"deleting-a-multi-cluster-application",level:2}],c={toc:p};function u(e){letLine truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[77842],{3905:(e,t,a)=>{a.d(t,{Zo:()=>c,kt:()=>h});var r=a(67294);function i(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function n(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function o(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?n(Object(a),!0).forEach((function(t){i(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):n(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function s(e,t){if(null==e)return{};var a,r,i=function(e,t){if(null==e)return{};var a,r,i={},n=Object.keys(e);for(r=0;r<n.length;r++)a=n[r],t.indexOf(a)>=0||(i[a]=e[a]);return i}(e,t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);for(r=0;r<n.length;r++)a=n[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(i[a]=e[a])}return i}var l=r.createContext({}),p=function(e){var t=r.useContext(l),a=t;return e&&(a="function"==typeof e?e(t):o(o({},t),e)),a},c=function(e){var t=p(e.components);return r.createElement(l.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},m=r.forwardRef((function(e,t){var a=e.components,i=e.mdxType,n=e.originalType,l=e.parentName,c=s(e,["components","mdxType","originalType","parentName"]),m=p(a),h=i,d=m["".concat(l,".").concat(h)]||m[h]||u[h]||n;return a?r.createElement(d,o(o({ref:t},c),{},{components:a})):r.createElement(d,o({ref:t},c))}));function h(e,t){var a=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var n=a.length,o=new Array(n);o[0]=m;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:i,o[1]=s;for(var p=2;p<n;p++)o[p]=a[p];return r.createElement.apply(null,o)}return r.createElement.apply(null,a)}m.displayName="MDXCreateElement"},22935:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>l,contentTitle:()=>o,default:()=>u,frontMatter:()=>n,metadata:()=>s,toc:()=>p});var r=a(87462),i=(a(67294),a(3905));const n={title:"Multi-cluster Apps"},o=void 0,s={unversionedId:"how-to-guides/new-user-guides/deploy-apps-across-clusters/multi-cluster-apps",id:"version-2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/multi-cluster-apps",title:"Multi-cluster Apps",description:"As of Rancher v2.5, multi-cluster apps are deprecated. We now recommend using Fleet for deploying apps across clusters.",source:"@site/versioned_docs/version-2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/multi-cluster-apps.md",sourceDirName:"how-to-guides/new-user-guides/deploy-apps-across-clusters",slug:"/how-to-guides/new-user-guides/deploy-apps-across-clusters/multi-cluster-apps",permalink:"/v2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/multi-cluster-apps",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/multi-cluster-apps.md",tags:[],version:"2.6",lastUpdatedAt:1668452187,formattedLastUpdatedAt:"Nov 14, 2022",frontMatter:{title:"Multi-cluster Apps"},sidebar:"tutorialSidebar",previous:{title:"Fleet - GitOps at Scale",permalink:"/v2.6/how-to-guides/new-user-guides/deploy-apps-across-clusters/fleet"},next:{title:"Backups and Disaster Recovery",permalink:"/v2.6/pages-for-subheaders/backup-restore-and-disaster-recovery"}},l={},p=[{value:"Prerequisites",id:"prerequisites",level:2},{value:"Permissions",id:"permissions",level:3},{value:"Enable Legacy Features",id:"enable-legacy-features",level:3},{value:"Launching a Multi-Cluster App",id:"launching-a-multi-cluster-app",level:2},{value:"Multi-cluster App Configuration Options",id:"multi-cluster-app-configuration-options",level:2},{value:"Targets",id:"targets",level:3},{value:"Upgrades",id:"upgrades",level:3},{value:"Roles",id:"roles",level:3},{value:"Application Configuration Options",id:"application-configuration-options",level:2},{value:"Using a questions.yml file",id:"using-a-questionsyml-file",level:3},{value:"Key Value Pairs for Native Helm Charts",id:"key-value-pairs-for-native-helm-charts",level:3},{value:"Members",id:"members",level:3},{value:"Overriding Application Configuration Options for Specific Projects",id:"overriding-application-configuration-options-for-specific-projects",level:3},{value:"Upgrading Multi-Cluster App Roles and Projects",id:"upgrading-multi-cluster-app-roles-and-projects",level:2},{value:"Multi-Cluster Application Management",id:"multi-cluster-application-management",level:2},{value:"Deleting a Multi-Cluster Application",id:"deleting-a-multi-cluster-application",level:2}],c={toc:p};function u(e){let{componLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[64733],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>m});var n=r(67294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var s=n.createContext({}),c=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):l(l({},t),e)),r},u=function(e){var t=c(e.components);return n.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,i=e.originalType,s=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),d=c(r),m=a,g=d["".concat(s,".").concat(m)]||d[m]||p[m]||i;return r?n.createElement(g,l(l({ref:t},u),{},{components:r})):n.createElement(g,l({ref:t},u))}));function m(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=r.length,l=new Array(i);l[0]=d;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:a,l[1]=o;for(var c=2;c<i;c++)l[c]=r[c];return n.createElement.apply(null,l)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},64413:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>l,default:()=>p,frontMatter:()=>i,metadata:()=>o,toc:()=>c});var n=r(87462),a=(r(67294),r(3905));const i={title:"User Preferences"},l=void 0,o={unversionedId:"reference-guides/user-settings/user-preferences",id:"reference-guides/user-settings/user-preferences",title:"User Preferences",description:"You can set preferences to personalize your Rancher experience. To change preference settings:",source:"@site/docs/reference-guides/user-settings/user-preferences.md",sourceDirName:"reference-guides/user-settings",slug:"/reference-guides/user-settings/user-preferences",permalink:"/reference-guides/user-settings/user-preferences",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/reference-guides/user-settings/user-preferences.md",tags:[],version:"current",lastUpdatedAt:1680125772,formattedLastUpdatedAt:"Mar 29, 2023",frontMatter:{title:"User Preferences"},sidebar:"tutorialSidebar",previous:{title:"Managing Cloud Credentials",permalink:"/reference-guides/user-settings/manage-cloud-credentials"},next:{title:"CLI with Rancher",permalink:"/pages-for-subheaders/cli-with-rancher"}},s={},c=[{value:"Language",id:"language",level:2},{value:"Theme",id:"theme",level:2},{value:"Login Landing Page",id:"login-landing-page",level:2},{value:"Display Settings",id:"display-settings",level:2},{value:"Confirmation Setting",id:"confirmation-setting",level:2},{value:"Advanced Features",id:"advanced-features",level:2},{value:"YAML Editor Key Mapping",id:"yaml-editor-key-mapping",level:2},{value:"Helm Charts",id:"helm-charts",level:2}],u={toc:c};function p(e){let{components:t,...i}=e;return(0,a.kt)("wrapper",(0,n.Z)({},u,i,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"You can set preferences to personalize your Rancher experience. To change preference settings:"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},"Click on your user avatar in the upper right corner."),(0,a.kt)("li",{parentName:"ol"},"Click ",(0,a.kt)("strong",{parentName:"li"},"Preferences"),".")),(0,a.kt)("h2",{id:"language"},"Language"),(0,a.kt)("p",null,"Choose your language for the Rancher UI. Options include:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"English"),(0,a.kt)("li",{parentName:"ul"},"\u7b80\u4f53\u4e2d\u6587 (Simplified Chinese)")),(0,a.kt)("h2",{id:"theme"},"Theme"),(0,a.kt)("p",null,"Choose your background color for the Rancher UI. If you choose ",(0,a.kt)("strong",{parentName:"p"},"Auto"),", the background color changes from light to dark at 6 PM, and then changes back at 6 AM."),(0,a.kt)("h2",{id:"login-landing-page"},"Login Landing Page"),(0,a.kt)("p",null,"Choose the page displayed after logging in. Options include:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"The home page."Line truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[64733],{3905:(e,r,t)=>{t.d(r,{Zo:()=>p,kt:()=>f});var n=t(67294);function a(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function s(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);r&&(n=n.filter((function(r){return Object.getOwnPropertyDescriptor(e,r).enumerable}))),t.push.apply(t,n)}return t}function o(e){for(var r=1;r<arguments.length;r++){var t=null!=arguments[r]?arguments[r]:{};r%2?s(Object(t),!0).forEach((function(r){a(e,r,t[r])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):s(Object(t)).forEach((function(r){Object.defineProperty(e,r,Object.getOwnPropertyDescriptor(t,r))}))}return e}function c(e,r){if(null==e)return{};var t,n,a=function(e,r){if(null==e)return{};var t,n,a={},s=Object.keys(e);for(n=0;n<s.length;n++)t=s[n],r.indexOf(t)>=0||(a[t]=e[t]);return a}(e,r);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(n=0;n<s.length;n++)t=s[n],r.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(a[t]=e[t])}return a}var i=n.createContext({}),u=function(e){var r=n.useContext(i),t=r;return e&&(t="function"==typeof e?e(r):o(o({},r),e)),t},p=function(e){var r=u(e.components);return n.createElement(i.Provider,{value:r},e.children)},l={inlineCode:"code",wrapper:function(e){var r=e.children;return n.createElement(n.Fragment,{},r)}},d=n.forwardRef((function(e,r){var t=e.components,a=e.mdxType,s=e.originalType,i=e.parentName,p=c(e,["components","mdxType","originalType","parentName"]),d=u(t),f=a,g=d["".concat(i,".").concat(f)]||d[f]||l[f]||s;return t?n.createElement(g,o(o({ref:r},p),{},{components:t})):n.createElement(g,o({ref:r},p))}));function f(e,r){var t=arguments,a=r&&r.mdxType;if("string"==typeof e||a){var s=t.length,o=new Array(s);o[0]=d;var c={};for(var i in r)hasOwnProperty.call(r,i)&&(c[i]=r[i]);c.originalType=e,c.mdxType="string"==typeof e?e:a,o[1]=c;for(var u=2;u<s;u++)o[u]=t[u];return n.createElement.apply(null,o)}return n.createElement.apply(null,t)}d.displayName="MDXCreateElement"},64413:(e,r,t)=>{t.r(r),t.d(r,{assets:()=>i,contentTitle:()=>o,default:()=>l,frontMatter:()=>s,metadata:()=>c,toc:()=>u});var n=t(87462),a=(t(67294),t(3905));const s={title:"User Preferences"},o=void 0,c={unversionedId:"reference-guides/user-settings/user-preferences",id:"reference-guides/user-settings/user-preferences",title:"User Preferences",description:"Each user can choose preferences to personalize their Rancher experience. To change preference settings, open the User Settings menu and then select Preferences.",source:"@site/docs/reference-guides/user-settings/user-preferences.md",sourceDirName:"reference-guides/user-settings",slug:"/reference-guides/user-settings/user-preferences",permalink:"/reference-guides/user-settings/user-preferences",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/reference-guides/user-settings/user-preferences.md",tags:[],version:"current",lastUpdatedAt:1663953084,formattedLastUpdatedAt:"Sep 23, 2022",frontMatter:{title:"User Preferences"},sidebar:"tutorialSidebar",previous:{title:"Managing Cloud Credentials",permalink:"/reference-guides/user-settings/manage-cloud-credentials"},next:{title:"CLI with Rancher",permalink:"/pages-for-subheaders/cli-with-rancher"}},i={},u=[{value:"Theme",id:"theme",level:2},{value:"My Account",id:"my-account",level:2},{value:"Table Row per Page",id:"table-row-per-page",level:2}],p={toc:u};function l(e){let{components:r,...t}=e;return(0,a.kt)("wrapper",(0,n.Z)({},p,t,{components:r,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Each user can choose preferences to personalize their Rancher experience. To change preference settings, open the ",(0,a.kt)("strong",{parentName:"p"},"User Settings")," menu and then select ",(0,a.kt)("strong",{parentName:"p"},"Preferences"),"."),(0,a.kt)("h2",{id:"theme"},"Theme"),(0,a.kt)("p",null,"Choose your background color for the Rancher UI. If you choose ",(0,a.kt)("strong",{parentName:"p"},"Auto"),", the background color changes from light to dark at 6 PM, and then changes back at 6 AM."),(0,a.kt)("h2",{id:"my-account"},"My Account"),(0,a.kt)("p",null,"This section displays the ",(0,a.kt)("strong",{parentName:"p"},"Name")," (your display name) and ",(0,a.kt)("strong",{parentName:"p"},"Username")," (your login) used for your session. To change your login's current password, click the ",(0,a.kt)("strong",{parentName:"p"},"Change Password")," button."),(0,a.kt)("h2",{id:"table-row-per-page"},"Table Row per Page"),(0,a.kt)("p",null,"On pages that display system objects like clusters or deployments in a table, you can set the number of objects that display on the page before you must paginate. The default setting is ",(0,a.kt)("inlineCode",{parentName:"p"},"50"),"."))}l.isMDXComponent=!0}}]);
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[59700],{3905:(e,t,a)=>{a.d(t,{Zo:()=>u,kt:()=>m});var n=a(67294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function i(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function o(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?i(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):i(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function p(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},i=Object.keys(e);for(n=0;n<i.length;n++)a=i[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)a=i[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var l=n.createContext({}),s=function(e){var t=n.useContext(l),a=t;return e&&(a="function"==typeof e?e(t):o(o({},t),e)),a},u=function(e){var t=s(e.components);return n.createElement(l.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},h=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,i=e.originalType,l=e.parentName,u=p(e,["components","mdxType","originalType","parentName"]),h=s(a),m=r,d=h["".concat(l,".").concat(m)]||h[m]||c[m]||i;return a?n.createElement(d,o(o({ref:t},u),{},{components:a})):n.createElement(d,o({ref:t},u))}));function m(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var i=a.length,o=new Array(i);o[0]=h;var p={};for(var l in t)hasOwnProperty.call(t,l)&&(p[l]=t[l]);p.originalType=e,p.mdxType="string"==typeof e?e:r,o[1]=p;for(var s=2;s<i;s++)o[s]=a[s];return n.createElement.apply(null,o)}return n.createElement.apply(null,a)}h.displayName="MDXCreateElement"},84473:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>l,contentTitle:()=>o,default:()=>c,frontMatter:()=>i,metadata:()=>p,toc:()=>s});var n=a(87462),r=(a(67294),a(3905));const i={title:"Configure Azure AD"},o=void 0,p={unversionedId:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad",id:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad",title:"Configure Azure AD",description:"Microsoft Graph API",source:"@site/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad.md",sourceDirName:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config",slug:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad.md",tags:[],version:"current",lastUpdatedAt:1681157830,formattedLastUpdatedAt:"Apr 10, 2023",frontMatter:{title:"Configure Azure AD"},sidebar:"tutorialSidebar",previous:{title:"Configure FreeIPA",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-freeipa"},next:{title:"Configure GitHub",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-github"}},l={},s=[{value:"Microsoft Graph API",id:"microsoft-graph-api",level:2},{value:"New User Setup",id:"new-user-setup",level:3},{value:"Azure Active Directory Configuration Outline",id:"azure-active-directory-configuration-outline",level:4},{value:"1. Register Rancher with Azure",id:"1-register-rancher-with-azure",level:4},{value:"2. Create a new client secret",id:"2-create-a-new-client-secret",level:4},{value:"3. Set Required Permissions for Rancher",id:"3-set-required-permissions-for-rancher",level:4},{value:"4. Copy Azure Application Data",id:"4-copy-azure-application-data",level:4},{value:"5. Configure Azure AD in Rancher",id:"5-configure-azure-ad-in-rancher",level:4},{value:"Migrating from Azure AD Graph API to Microsoft Graph API",id:"migrating-from-azure-ad-graph-api-to-microsoft-graph-api",level:3},{value:"Updating Endpoints in the Rancher UI",id:"updating-endpoints-in-the-rancher-ui",level:4},{value:"Air-Gapped Environments",id:"air-gapped-environments",level:4},{value:"Rolling Back the Migration",id:"rollingLine truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[59700],{3905:(e,t,a)=>{a.d(t,{Zo:()=>u,kt:()=>m});var n=a(67294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function i(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function o(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?i(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):i(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function p(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},i=Object.keys(e);for(n=0;n<i.length;n++)a=i[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)a=i[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var l=n.createContext({}),s=function(e){var t=n.useContext(l),a=t;return e&&(a="function"==typeof e?e(t):o(o({},t),e)),a},u=function(e){var t=s(e.components);return n.createElement(l.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},h=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,i=e.originalType,l=e.parentName,u=p(e,["components","mdxType","originalType","parentName"]),h=s(a),m=r,d=h["".concat(l,".").concat(m)]||h[m]||c[m]||i;return a?n.createElement(d,o(o({ref:t},u),{},{components:a})):n.createElement(d,o({ref:t},u))}));function m(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var i=a.length,o=new Array(i);o[0]=h;var p={};for(var l in t)hasOwnProperty.call(t,l)&&(p[l]=t[l]);p.originalType=e,p.mdxType="string"==typeof e?e:r,o[1]=p;for(var s=2;s<i;s++)o[s]=a[s];return n.createElement.apply(null,o)}return n.createElement.apply(null,a)}h.displayName="MDXCreateElement"},84473:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>l,contentTitle:()=>o,default:()=>c,frontMatter:()=>i,metadata:()=>p,toc:()=>s});var n=a(87462),r=(a(67294),a(3905));const i={title:"Configure Azure AD"},o=void 0,p={unversionedId:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad",id:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad",title:"Configure Azure AD",description:"Microsoft Graph API",source:"@site/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad.md",sourceDirName:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config",slug:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad.md",tags:[],version:"current",lastUpdatedAt:1680088482,formattedLastUpdatedAt:"Mar 29, 2023",frontMatter:{title:"Configure Azure AD"},sidebar:"tutorialSidebar",previous:{title:"Configure FreeIPA",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-freeipa"},next:{title:"Configure GitHub",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-github"}},l={},s=[{value:"Microsoft Graph API",id:"microsoft-graph-api",level:2},{value:"New User Setup",id:"new-user-setup",level:3},{value:"Azure Active Directory Configuration Outline",id:"azure-active-directory-configuration-outline",level:4},{value:"1. Register Rancher with Azure",id:"1-register-rancher-with-azure",level:4},{value:"2. Create a new client secret",id:"2-create-a-new-client-secret",level:4},{value:"3. Set Required Permissions for Rancher",id:"3-set-required-permissions-for-rancher",level:4},{value:"4. Copy Azure Application Data",id:"4-copy-azure-application-data",level:4},{value:"5. Configure Azure AD in Rancher",id:"5-configure-azure-ad-in-rancher",level:4},{value:"Migrating from Azure AD Graph API to Microsoft Graph API",id:"migrating-from-azure-ad-graph-api-to-microsoft-graph-api",level:3},{value:"Updating Endpoints in the Rancher UI",id:"updating-endpoints-in-the-rancher-ui",level:4},{value:"Air-Gapped Environments",id:"air-gapped-environments",level:4},{value:"Rolling Back the Migration",id:"rollingLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[15069],{3905:(e,t,a)=>{a.d(t,{Zo:()=>u,kt:()=>m});var n=a(67294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function o(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?o(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):o(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function s(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},o=Object.keys(e);for(n=0;n<o.length;n++)a=o[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)a=o[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var l=n.createContext({}),p=function(e){var t=n.useContext(l),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},u=function(e){var t=p(e.components);return n.createElement(l.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,o=e.originalType,l=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),d=p(a),m=r,h=d["".concat(l,".").concat(m)]||d[m]||c[m]||o;return a?n.createElement(h,i(i({ref:t},u),{},{components:a})):n.createElement(h,i({ref:t},u))}));function m(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=a.length,i=new Array(o);i[0]=d;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:r,i[1]=s;for(var p=2;p<o;p++)i[p]=a[p];return n.createElement.apply(null,i)}return n.createElement.apply(null,a)}d.displayName="MDXCreateElement"},1683:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>l,contentTitle:()=>i,default:()=>c,frontMatter:()=>o,metadata:()=>s,toc:()=>p});var n=a(87462),r=(a(67294),a(3905));const o={title:"Pod Security Standards (PSS) & Pod Security Admission (PSA)"},i=void 0,s={unversionedId:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards",id:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards",title:"Pod Security Standards (PSS) & Pod Security Admission (PSA)",description:"Pod Security Standards (PSS) and Pod Security Admission (PSA) define security restrictions for a broad set of workloads.",source:"@site/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards.md",sourceDirName:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration",slug:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards.md",tags:[],version:"current",lastUpdatedAt:1681173729,formattedLastUpdatedAt:"Apr 11, 2023",frontMatter:{title:"Pod Security Standards (PSS) & Pod Security Admission (PSA)"},sidebar:"tutorialSidebar",previous:{title:"Pod Security Policies",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies"},next:{title:"Pod Security Admission (PSA) Configuration Templates",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/psa-config-templates"}},l={},p=[{value:"Upgrade to Pod Security Standards (PSS)",id:"upgrade-to-pod-security-standards-pss",level:2},{value:"Removing PodSecurityPolicies from Rancher-Maintained Apps &amp; Marketplace Workloads",id:"remove-psp-rancher-workloads",level:3},{value:"Cleaning Up Releases After a Kubernetes v1.25 Upgrade",id:"cleaning-up-releases-after-a-kubernetes-v125-upgrade",level:3},{value:"Install <code>helm-mapkubeapis</code>",id:"install-helm-mapkubeapis",level:4},{value:"Cleaning Up Broken Releases",id:"cleaning-up-broken-releases",level:4},{value:"Upgrading Charts to a Version That Supports Kubernetes v1.25",id:"upgrading-charts-to-a-version-that-supports-kubernetes-v125",level:4},{value:"Pod Security Admission Configuration Templates",id:"psa-config-templates",level:2},{value:"Rancher on PSA-restricted Clusters",id:"rancher-on-psa-restricted-clusters",level:3}],u={toc:p};function c(e){let{components:t,...a}=e;returLine truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[74442],{3905:(e,t,a)=>{a.d(t,{Zo:()=>p,kt:()=>m});var r=a(67294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function s(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},l=Object.keys(e);for(r=0;r<l.length;r++)a=l[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)a=l[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var o=r.createContext({}),c=function(e){var t=r.useContext(o),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},p=function(e){var t=c(e.components);return r.createElement(o.Provider,{value:t},e.children)},h={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,l=e.originalType,o=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),d=c(a),m=n,u=d["".concat(o,".").concat(m)]||d[m]||h[m]||l;return a?r.createElement(u,i(i({ref:t},p),{},{components:a})):r.createElement(u,i({ref:t},p))}));function m(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var l=a.length,i=new Array(l);i[0]=d;var s={};for(var o in t)hasOwnProperty.call(t,o)&&(s[o]=t[o]);s.originalType=e,s.mdxType="string"==typeof e?e:n,i[1]=s;for(var c=2;c<l;c++)i[c]=a[c];return r.createElement.apply(null,i)}return r.createElement.apply(null,a)}d.displayName="MDXCreateElement"},54102:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>h,frontMatter:()=>l,metadata:()=>s,toc:()=>c});var r=a(87462),n=(a(67294),a(3905));const l={title:"4. Install Rancher"},i=void 0,s={unversionedId:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",id:"version-2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",title:"4. Install Rancher",description:"This section is about how to deploy Rancher for your air gapped environment in a high-availability Kubernetes installation. An air gapped environment could be where Rancher server will be installed offline, behind a firewall, or behind a proxy.",source:"@site/versioned_docs/version-2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha.md",sourceDirName:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install",slug:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",permalink:"/v2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha.md",tags:[],version:"2.6",lastUpdatedAt:1670337321,formattedLastUpdatedAt:"Dec 6, 2022",frontMatter:{title:"4. Install Rancher"},sidebar:"tutorialSidebar",previous:{title:"3. Install Kubernetes (Skip for Docker Installs)",permalink:"/v2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-kubernetes"},next:{title:"Docker Install Commands",permalink:"/v2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/docker-install-commands"}},o={},c=[{value:"Privileged Access for Rancher",id:"privileged-access-for-rancher",level:3},{value:"Docker Instructions",id:"docker-instructions",level:2},{value:"Kubernetes Instructions",id:"kubernetes-instructions",level:2},{value:"1. Add the Helm Chart Repository",id:"1-add-the-helm-chart-repository",level:3},{value:"2. Choose your SSL Configuration",id:"2-choose-your-ssl-configuration",level:3},{value:"Helm Chart Options for Air Gap Installations",id:"helm-chart-options-for-air-gap-installations",level:3},{value:"3. Fetch the Cert-Manager chart",id:"3-fetch-the-cert-manager-chart",level:3},{value:"Option A: Default Self-Signed Certificate",id:"option-a-default-self-signed-certificate",level:4},{value:"1. Add the cert-manager repo",id:"1-add-the-cert-mLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[74442],{3905:(e,t,a)=>{a.d(t,{Zo:()=>p,kt:()=>m});var r=a(67294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function s(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},l=Object.keys(e);for(r=0;r<l.length;r++)a=l[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)a=l[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var o=r.createContext({}),c=function(e){var t=r.useContext(o),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},p=function(e){var t=c(e.components);return r.createElement(o.Provider,{value:t},e.children)},h={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,l=e.originalType,o=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),d=c(a),m=n,u=d["".concat(o,".").concat(m)]||d[m]||h[m]||l;return a?r.createElement(u,i(i({ref:t},p),{},{components:a})):r.createElement(u,i({ref:t},p))}));function m(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var l=a.length,i=new Array(l);i[0]=d;var s={};for(var o in t)hasOwnProperty.call(t,o)&&(s[o]=t[o]);s.originalType=e,s.mdxType="string"==typeof e?e:n,i[1]=s;for(var c=2;c<l;c++)i[c]=a[c];return r.createElement.apply(null,i)}return r.createElement.apply(null,a)}d.displayName="MDXCreateElement"},54102:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>h,frontMatter:()=>l,metadata:()=>s,toc:()=>c});var r=a(87462),n=(a(67294),a(3905));const l={title:"4. Install Rancher"},i=void 0,s={unversionedId:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",id:"version-2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",title:"4. Install Rancher",description:"This section is about how to deploy Rancher for your air gapped environment in a high-availability Kubernetes installation. An air gapped environment could be where Rancher server will be installed offline, behind a firewall, or behind a proxy.",source:"@site/versioned_docs/version-2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha.md",sourceDirName:"getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install",slug:"/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",permalink:"/v2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-rancher-ha.md",tags:[],version:"2.6",lastUpdatedAt:1681151826,formattedLastUpdatedAt:"Apr 10, 2023",frontMatter:{title:"4. Install Rancher"},sidebar:"tutorialSidebar",previous:{title:"3. Install Kubernetes (Skip for Docker Installs)",permalink:"/v2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/install-kubernetes"},next:{title:"Docker Install Commands",permalink:"/v2.6/getting-started/installation-and-upgrade/other-installation-methods/air-gapped-helm-cli-install/docker-install-commands"}},o={},c=[{value:"Privileged Access for Rancher",id:"privileged-access-for-rancher",level:3},{value:"Docker Instructions",id:"docker-instructions",level:2},{value:"Kubernetes Instructions",id:"kubernetes-instructions",level:2},{value:"1. Add the Helm Chart Repository",id:"1-add-the-helm-chart-repository",level:3},{value:"2. Choose your SSL Configuration",id:"2-choose-your-ssl-configuration",level:3},{value:"Helm Chart Options for Air Gap Installations",id:"helm-chart-options-for-air-gap-installations",level:3},{value:"3. Fetch the Cert-Manager chart",id:"3-fetch-the-cert-manager-chart",level:3},{value:"Option A: Default Self-Signed Certificate",id:"option-a-default-self-signed-certificate",level:4},{value:"1. Add the cert-manager repo",id:"1-add-the-cert-Line truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[71625],{3905:(e,t,a)=>{a.d(t,{Zo:()=>m,kt:()=>d});var n=a(67294);function i(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function r(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function l(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?r(Object(a),!0).forEach((function(t){i(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):r(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function o(e,t){if(null==e)return{};var a,n,i=function(e,t){if(null==e)return{};var a,n,i={},r=Object.keys(e);for(n=0;n<r.length;n++)a=r[n],t.indexOf(a)>=0||(i[a]=e[a]);return i}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(n=0;n<r.length;n++)a=r[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(i[a]=e[a])}return i}var s=n.createContext({}),p=function(e){var t=n.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):l(l({},t),e)),a},m=function(e){var t=p(e.components);return n.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},c=n.forwardRef((function(e,t){var a=e.components,i=e.mdxType,r=e.originalType,s=e.parentName,m=o(e,["components","mdxType","originalType","parentName"]),c=p(a),d=i,g=c["".concat(s,".").concat(d)]||c[d]||u[d]||r;return a?n.createElement(g,l(l({ref:t},m),{},{components:a})):n.createElement(g,l({ref:t},m))}));function d(e,t){var a=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var r=a.length,l=new Array(r);l[0]=c;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:i,l[1]=o;for(var p=2;p<r;p++)l[p]=a[p];return n.createElement.apply(null,l)}return n.createElement.apply(null,a)}c.displayName="MDXCreateElement"},82762:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>l,default:()=>g,frontMatter:()=>r,metadata:()=>o,toc:()=>p});var n=a(87462),i=(a(67294),a(3905));const r={title:"Pod Security Admission (PSA) Configuration Templates"},l=void 0,o={unversionedId:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/psa-config-templates",id:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/psa-config-templates",title:"Pod Security Admission (PSA) Configuration Templates",description:"Pod Security admission (PSA) configuration templates are a Rancher custom-defined resource (CRD), available in Rancher v2.7.2 and above. The templates provide pre-defined security configurations that you can apply to a cluster:",source:"@site/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/psa-config-templates.md",sourceDirName:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration",slug:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/psa-config-templates",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/psa-config-templates",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/psa-config-templates.md",tags:[],version:"current",lastUpdatedAt:1680621511,formattedLastUpdatedAt:"Apr 4, 2023",frontMatter:{title:"Pod Security Admission (PSA) Configuration Templates"},sidebar:"tutorialSidebar",previous:{title:"Pod Security Standards (PSS) & Pod Security Admission (PSA)",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards"},next:{title:"Configuring a Global Default Private Registry",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/global-default-private-registry"}},s={},p=[{value:"Assign a Pod Security Admissions (PSA) Configuration Template",id:"assign-a-pod-security-admissions-psa-configuration-template",level:2},{value:"Assign a Template During Cluster Creation",id:"assign-a-template-during-cluster-creation",level:3},{value:"Assign a Template to an Existing Cluster",id:"assign-a-template-to-an-existing-cluster",level:3},{value:"Hardening the Cluster",id:"hardening-the-cluster",level:3},{value:"Assign a Template to an Existing Cluster",id:"assign-a-template-to-an-existing-cluster-1",level:3},{value:"Add or Edit a Pod Security Admissions (PSA) Configuration Template",id:"add-or-edit-a-pod-security-admissions-psa-configuration-template",level:2},{value:"Allow Non-Admin Users to Manage PSA Templates",id:"allow-non-admin-users-to-manage-psa-templates",level:3},{valueLine truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[73014],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>h});var i=r(67294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);t&&(i=i.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,i)}return r}function a(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,i,n=function(e,t){if(null==e)return{};var r,i,n={},o=Object.keys(e);for(i=0;i<o.length;i++)r=o[i],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(i=0;i<o.length;i++)r=o[i],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var l=i.createContext({}),c=function(e){var t=i.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):a(a({},t),e)),r},u=function(e){var t=c(e.components);return i.createElement(l.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return i.createElement(i.Fragment,{},t)}},d=i.forwardRef((function(e,t){var r=e.components,n=e.mdxType,o=e.originalType,l=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),d=c(r),h=n,g=d["".concat(l,".").concat(h)]||d[h]||p[h]||o;return r?i.createElement(g,a(a({ref:t},u),{},{components:r})):i.createElement(g,a({ref:t},u))}));function h(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var o=r.length,a=new Array(o);a[0]=d;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:n,a[1]=s;for(var c=2;c<o;c++)a[c]=r[c];return i.createElement.apply(null,a)}return i.createElement.apply(null,r)}d.displayName="MDXCreateElement"},24301:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>a,default:()=>p,frontMatter:()=>o,metadata:()=>s,toc:()=>c});var i=r(87462),n=(r(67294),r(3905));const o={title:"Pod Security Policies"},a=void 0,s={unversionedId:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies",id:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies",title:"Pod Security Policies",description:"Pod Security Policies (or PSPs) are objects that control security-sensitive aspects of pod specification (like root privileges).",source:"@site/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies.md",sourceDirName:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration",slug:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies.md",tags:[],version:"current",lastUpdatedAt:1666730461,formattedLastUpdatedAt:"Oct 25, 2022",frontMatter:{title:"Pod Security Policies"},sidebar:"tutorialSidebar",previous:{title:"Example Scenarios",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/about-rke1-templates/example-use-cases"},next:{title:"Configuring a Global Default Private Registry",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/global-default-private-registry"}},l={},c=[{value:"How PSPs Work",id:"how-psps-work",level:2},{value:"Default PSPs",id:"default-psps",level:2},{value:"Restricted-NoRoot",id:"restricted-noroot",level:3},{value:"Restricted",id:"restricted",level:3},{value:"Unrestricted",id:"unrestricted",level:3},{value:"Creating PSPs",id:"creating-psps",level:2},{value:"Requirements",id:"requirements",level:3},{value:"Creating PSPs in the Rancher UI",id:"creating-psps-in-the-rancher-ui",level:3},{value:"Configuration",id:"configuration",level:2}],u={toc:c};function p(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,i.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,(0,n.kt)("em",{parentName:"p"},"Pod Security Policies")," (or PSPs) are objects that control security-sensitive aspects of pod specification (like root privileges)."),(0,n.kt)("p",null,"If a pod does not meet the conditions specified in the PSP, Kubernetes will not allow it to start, and Rancher will display an error message of ",(0,n.kt)(Line truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[73014],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>h});var n=r(67294);function i(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function a(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,n,i=function(e,t){if(null==e)return{};var r,n,i={},o=Object.keys(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(i[r]=e[r])}return i}var l=n.createContext({}),c=function(e){var t=n.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):a(a({},t),e)),r},u=function(e){var t=c(e.components);return n.createElement(l.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,i=e.mdxType,o=e.originalType,l=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),d=c(r),h=i,m=d["".concat(l,".").concat(h)]||d[h]||p[h]||o;return r?n.createElement(m,a(a({ref:t},u),{},{components:r})):n.createElement(m,a({ref:t},u))}));function h(e,t){var r=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var o=r.length,a=new Array(o);a[0]=d;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:i,a[1]=s;for(var c=2;c<o;c++)a[c]=r[c];return n.createElement.apply(null,a)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},24301:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>a,default:()=>p,frontMatter:()=>o,metadata:()=>s,toc:()=>c});var n=r(87462),i=(r(67294),r(3905));const o={title:"Pod Security Policies"},a=void 0,s={unversionedId:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies",id:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies",title:"Pod Security Policies",description:"Pod Security Policy is only available in Kubernetes until v1.24. Pod Security Standards are the built-in alternative.",source:"@site/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies.md",sourceDirName:"how-to-guides/new-user-guides/authentication-permissions-and-global-configuration",slug:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies.md",tags:[],version:"current",lastUpdatedAt:1678743484,formattedLastUpdatedAt:"Mar 13, 2023",frontMatter:{title:"Pod Security Policies"},sidebar:"tutorialSidebar",previous:{title:"Example Scenarios",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/about-rke1-templates/example-use-cases"},next:{title:"Pod Security Standards (PSS) & Pod Security Admission (PSA)",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards"}},l={},c=[{value:"How PSPs Work",id:"how-psps-work",level:2},{value:"Default PSPs",id:"default-psps",level:2},{value:"Restricted-NoRoot",id:"restricted-noroot",level:3},{value:"Restricted",id:"restricted",level:3},{value:"Unrestricted",id:"unrestricted",level:3},{value:"Creating PSPs",id:"creating-psps",level:2},{value:"Requirements",id:"requirements",level:3},{value:"Creating PSPs in the Rancher UI",id:"creating-psps-in-the-rancher-ui",level:3},{value:"Configuration",id:"configuration",level:2}],u={toc:c};function p(e){let{components:t,...r}=e;return(0,i.kt)("wrapper",(0,n.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("admonition",{type:"caution"},(0,i.kt)("p",{parentName:"admonition"},"Pod Security Policy is only available in Kubernetes until v1.24. ",(0,i.kt)("a",{parentName:"p",href:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards"},"Pod Security Standards")," are the built-in alternative.")),(0,i.kt)("p",nuLine truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[56876],{3905:(e,n,t)=>{t.d(n,{Zo:()=>d,kt:()=>_});var r=t(67294);function a(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function o(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);n&&(r=r.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,r)}return t}function i(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?o(Object(t),!0).forEach((function(n){a(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):o(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function s(e,n){if(null==e)return{};var t,r,a=function(e,n){if(null==e)return{};var t,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)t=o[r],n.indexOf(t)>=0||(a[t]=e[t]);return a}(e,n);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)t=o[r],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(a[t]=e[t])}return a}var l=r.createContext({}),c=function(e){var n=r.useContext(l),t=n;return e&&(t="function"==typeof e?e(n):i(i({},n),e)),t},d=function(e){var n=c(e.components);return r.createElement(l.Provider,{value:n},e.children)},u={inlineCode:"code",wrapper:function(e){var n=e.children;return r.createElement(r.Fragment,{},n)}},p=r.forwardRef((function(e,n){var t=e.components,a=e.mdxType,o=e.originalType,l=e.parentName,d=s(e,["components","mdxType","originalType","parentName"]),p=c(t),_=a,m=p["".concat(l,".").concat(_)]||p[_]||u[_]||o;return t?r.createElement(m,i(i({ref:n},d),{},{components:t})):r.createElement(m,i({ref:n},d))}));function _(e,n){var t=arguments,a=n&&n.mdxType;if("string"==typeof e||a){var o=t.length,i=new Array(o);i[0]=p;var s={};for(var l in n)hasOwnProperty.call(n,l)&&(s[l]=n[l]);s.originalType=e,s.mdxType="string"==typeof e?e:a,i[1]=s;for(var c=2;c<o;c++)i[c]=t[c];return r.createElement.apply(null,i)}return r.createElement.apply(null,t)}p.displayName="MDXCreateElement"},48635:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>l,contentTitle:()=>i,default:()=>u,frontMatter:()=>o,metadata:()=>s,toc:()=>c});var r=t(87462),a=(t(67294),t(3905));const o={title:"RKE Hardening Guide with CIS v1.6 Benchmark"},i=void 0,s={unversionedId:"reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke1-hardening-guide-with-cis-v1.6-benchmark",id:"reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke1-hardening-guide-with-cis-v1.6-benchmark",title:"RKE Hardening Guide with CIS v1.6 Benchmark",description:"This document provides prescriptive guidance for hardening a production installation of a RKE cluster to be used with Rancher v2.6. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Information Security (CIS).",source:"@site/docs/reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke1-hardening-guide-with-cis-v1.6-benchmark.md",sourceDirName:"reference-guides/rancher-security/rancher-v2.6-hardening-guides",slug:"/reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke1-hardening-guide-with-cis-v1.6-benchmark",permalink:"/reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke1-hardening-guide-with-cis-v1.6-benchmark",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke1-hardening-guide-with-cis-v1.6-benchmark.md",tags:[],version:"current",lastUpdatedAt:1666730461,formattedLastUpdatedAt:"Oct 25, 2022",frontMatter:{title:"RKE Hardening Guide with CIS v1.6 Benchmark"},sidebar:"tutorialSidebar",previous:{title:"Self-Assessment and Hardening Guides for Rancher v2.6",permalink:"/pages-for-subheaders/rancher-v2.6-hardening-guides"},next:{title:"RKE CIS v1.6 Benchmark - Self-Assessment Guide - Rancher v2.6",permalink:"/reference-guides/rancher-security/rancher-v2.6-hardening-guides/rke1-self-assessment-guide-with-cis-v1.6-benchmark"}},l={},c=[{value:"Overview",id:"overview",level:3},{value:"Known Issues",id:"known-issues",level:4},{value:"Configure Kernel Runtime Parameters",id:"configure-kernel-runtime-parameters",level:3},{value:"Configure <code>etcd</code> user and group",id:"configure-etcd-user-and-group",level:3},{value:"Create <code>etcd</code> user and group",id:"create-etcd-user-and-group",level:4},{value:"Configure <code>default</code> Service Account",id:"configure-default-service-account",level:3},{value:"Set <code>automountServiceAccountToken</code> to <code>false</code> for <code>default</code> service accounts",id:"set-automountserviceaccounttoken-to-false-for-default-service-accounts",level:4},{value:"Configure Network Policy",id:"configure-network-policy",level:3},{value:"Ensure that all Namespaces have Network Policies defLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[30608],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>f});var n=r(67294);function o(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?a(Object(r),!0).forEach((function(t){o(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):a(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function c(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}var s=n.createContext({}),l=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},u=function(e){var t=l(e.components);return n.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,o=e.mdxType,a=e.originalType,s=e.parentName,u=c(e,["components","mdxType","originalType","parentName"]),d=l(r),f=o,h=d["".concat(s,".").concat(f)]||d[f]||p[f]||a;return r?n.createElement(h,i(i({ref:t},u),{},{components:r})):n.createElement(h,i({ref:t},u))}));function f(e,t){var r=arguments,o=t&&t.mdxType;if("string"==typeof e||o){var a=r.length,i=new Array(a);i[0]=d;var c={};for(var s in t)hasOwnProperty.call(t,s)&&(c[s]=t[s]);c.originalType=e,c.mdxType="string"==typeof e?e:o,i[1]=c;for(var l=2;l<a;l++)i[l]=r[l];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},55411:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>p,frontMatter:()=>a,metadata:()=>c,toc:()=>l});var n=r(87462),o=(r(67294),r(3905));const a={title:"Architecture"},i=void 0,c={unversionedId:"integrations-in-rancher/fleet-gitops-at-scale/architecture",id:"integrations-in-rancher/fleet-gitops-at-scale/architecture",title:"Architecture",description:"Fleet can manage deployments from git of raw Kubernetes YAML, Helm charts, or Kustomize or any combination of the three. Regardless of the source, all resources are dynamically turned into Helm charts, and Helm is used as the engine to deploy everything in the cluster. This gives you a high degree of control, consistency, and auditability. Fleet focuses not only on the ability to scale, but to give one a high degree of control and visibility to exactly what is installed on the cluster.",source:"@site/docs/integrations-in-rancher/fleet-gitops-at-scale/architecture.md",sourceDirName:"integrations-in-rancher/fleet-gitops-at-scale",slug:"/integrations-in-rancher/fleet-gitops-at-scale/architecture",permalink:"/integrations-in-rancher/fleet-gitops-at-scale/architecture",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/integrations-in-rancher/fleet-gitops-at-scale/architecture.md",tags:[],version:"current",lastUpdatedAt:1666730461,formattedLastUpdatedAt:"Oct 25, 2022",frontMatter:{title:"Architecture"},sidebar:"tutorialSidebar",previous:{title:"Continuous Delivery with Fleet",permalink:"/pages-for-subheaders/fleet-gitops-at-scale"},next:{title:"Windows Support",permalink:"/integrations-in-rancher/fleet-gitops-at-scale/windows-support"}},s={},l=[],u={toc:l};function p(e){let{components:t,...a}=e;return(0,o.kt)("wrapper",(0,n.Z)({},u,a,{components:t,mdxType:"MDXLayout"}),(0,o.kt)("p",null,"Fleet can manage deployments from git of raw Kubernetes YAML, Helm charts, or Kustomize or any combination of the three. Regardless of the source, all resources are dynamically turned into Helm charts, and Helm is used as the engine to deploy everything in the cluster. This gives you a high degree of control, consistency, and auditability. Fleet focuses not only on the ability to scale, but to give one a high degree of control and visibility to exactly what is installed on the cluster."),(0,o.kt)("p",null,(0,o.kt)("img",{alt:"Architecture",src:r(14956).Z,width:"1366",height:"960"})))}p.isMDXComponent=!0},14956:(e,t,r)=>{r.d(t,{Z:()=>n});const n=r.p+"assets/images/fleet-architecture-f708ce634648101dc98f451dcd59fe84.svg"}}]);
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[30608],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>f});var n=r(67294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function c(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},o=Object.keys(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var s=n.createContext({}),l=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},u=function(e){var t=l(e.components);return n.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,u=c(e,["components","mdxType","originalType","parentName"]),d=l(r),f=a,h=d["".concat(s,".").concat(f)]||d[f]||p[f]||o;return r?n.createElement(h,i(i({ref:t},u),{},{components:r})):n.createElement(h,i({ref:t},u))}));function f(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=r.length,i=new Array(o);i[0]=d;var c={};for(var s in t)hasOwnProperty.call(t,s)&&(c[s]=t[s]);c.originalType=e,c.mdxType="string"==typeof e?e:a,i[1]=c;for(var l=2;l<o;l++)i[l]=r[l];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},55411:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>p,frontMatter:()=>o,metadata:()=>c,toc:()=>l});var n=r(87462),a=(r(67294),r(3905));const o={title:"Architecture"},i=void 0,c={unversionedId:"integrations-in-rancher/fleet-gitops-at-scale/architecture",id:"integrations-in-rancher/fleet-gitops-at-scale/architecture",title:"Architecture",description:"Fleet can manage deployments from git of raw Kubernetes YAML, Helm charts, or Kustomize or any combination of the three. Regardless of the source, all resources are dynamically turned into Helm charts, and Helm is used as the engine to deploy everything in the cluster. This gives you a high degree of control, consistency, and auditability. Fleet focuses not only on the ability to scale, but to give one a high degree of control and visibility to exactly what is installed on the cluster.",source:"@site/docs/integrations-in-rancher/fleet-gitops-at-scale/architecture.md",sourceDirName:"integrations-in-rancher/fleet-gitops-at-scale",slug:"/integrations-in-rancher/fleet-gitops-at-scale/architecture",permalink:"/integrations-in-rancher/fleet-gitops-at-scale/architecture",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/integrations-in-rancher/fleet-gitops-at-scale/architecture.md",tags:[],version:"current",lastUpdatedAt:1666730461,formattedLastUpdatedAt:"Oct 25, 2022",frontMatter:{title:"Architecture"},sidebar:"tutorialSidebar",previous:{title:"Fleet - GitOps at Scale",permalink:"/pages-for-subheaders/fleet-gitops-at-scale"},next:{title:"Windows Support",permalink:"/integrations-in-rancher/fleet-gitops-at-scale/windows-support"}},s={},l=[],u={toc:l};function p(e){let{components:t,...o}=e;return(0,a.kt)("wrapper",(0,n.Z)({},u,o,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Fleet can manage deployments from git of raw Kubernetes YAML, Helm charts, or Kustomize or any combination of the three. Regardless of the source, all resources are dynamically turned into Helm charts, and Helm is used as the engine to deploy everything in the cluster. This gives you a high degree of control, consistency, and auditability. Fleet focuses not only on the ability to scale, but to give one a high degree of control and visibility to exactly what is installed on the cluster."),(0,a.kt)("p",null,(0,a.kt)("img",{alt:"Architecture",src:r(14956).Z,width:"1366",height:"960"})))}p.isMDXComponent=!0},14956:(e,t,r)=>{r.d(t,{Z:()=>n});const n=r.p+"assets/images/fleet-architecture-f708ce634648101dc98f451dcd59fe84.svg"}}]);
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[37784],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>h});var r=n(67294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function i(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),u=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},c=function(e){var t=u(e.components);return r.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,s=e.parentName,c=i(e,["components","mdxType","originalType","parentName"]),d=u(n),h=a,g=d["".concat(s,".").concat(h)]||d[h]||p[h]||l;return n?r.createElement(g,o(o({ref:t},c),{},{components:n})):r.createElement(g,o({ref:t},c))}));function h(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,o=new Array(l);o[0]=d;var i={};for(var s in t)hasOwnProperty.call(t,s)&&(i[s]=t[s]);i.originalType=e,i.mdxType="string"==typeof e?e:a,o[1]=i;for(var u=2;u<l;u++)o[u]=n[u];return r.createElement.apply(null,o)}return r.createElement.apply(null,n)}d.displayName="MDXCreateElement"},9350:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>g,frontMatter:()=>l,metadata:()=>i,toc:()=>u});var r=n(87462),a=(n(67294),n(3905));const l={title:"Installing Rancher on a Google Kubernetes Engine Cluster"},o=void 0,i={unversionedId:"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rancher-on-gke",id:"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rancher-on-gke",title:"Installing Rancher on a Google Kubernetes Engine Cluster",description:"In this section, you'll learn how to install Rancher using Google Kubernetes Engine.",source:"@site/docs/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rancher-on-gke.md",sourceDirName:"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster",slug:"/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rancher-on-gke",permalink:"/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rancher-on-gke",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rancher-on-gke.md",tags:[],version:"current",lastUpdatedAt:1675726989,formattedLastUpdatedAt:"Feb 6, 2023",frontMatter:{title:"Installing Rancher on a Google Kubernetes Engine Cluster"},sidebar:"tutorialSidebar",previous:{title:"Installing Rancher on Azure Kubernetes Service",permalink:"/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rancher-on-aks"},next:{title:"Upgrade a Hardened Custom/Imported Cluster to Kubernetes v1.25",permalink:"/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/upgrade-a-hardened-cluster-to-k8s-v1-25"}},s={},u=[{value:"Prerequisites",id:"prerequisites",level:2},{value:"1. Enable the Kubernetes Engine API",id:"1-enable-the-kubernetes-engine-api",level:2},{value:"2. Open the Cloud Shell",id:"2-open-the-cloud-shell",level:2},{value:"Cloud Shell",id:"cloud-shell",level:3},{value:"Local Shell",id:"local-shell",level:3},{value:"3. Configure the gcloud CLI",id:"3-configure-the-gcloud-cli",level:2},{value:"4. Confirm that gcloud is configured correctly",id:"4-confirm-that-gcloud-is-configured-correctly",level:2},{value:"5. Create a GKE Cluster",id:"5-create-a-gke-cluster",level:2},{value:"6. Get Authentication Credentials",id:"6-get-authentication-credentials",level:2},{value:"7. Install an Ingress",id:"7-install-an-ingress",level:2},{value:"8. Get the Load Balancer IP",id:"8-get-the-load-balancer-ip",level:2},{value:"9. Set up DNS",id:"9-set-up-dns",level:2},{value:"10. Install the Rancher Helm chart",id:"10-install-the-rancher-helm-chart",level:2}],c=e=>function(t){return consolLine truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[37784],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>h});var r=n(67294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function i(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),u=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},c=function(e){var t=u(e.components);return r.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,s=e.parentName,c=i(e,["components","mdxType","originalType","parentName"]),d=u(n),h=a,g=d["".concat(s,".").concat(h)]||d[h]||p[h]||l;return n?r.createElement(g,o(o({ref:t},c),{},{components:n})):r.createElement(g,o({ref:t},c))}));function h(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,o=new Array(l);o[0]=d;var i={};for(var s in t)hasOwnProperty.call(t,s)&&(i[s]=t[s]);i.originalType=e,i.mdxType="string"==typeof e?e:a,o[1]=i;for(var u=2;u<l;u++)o[u]=n[u];return r.createElement.apply(null,o)}return r.createElement.apply(null,n)}d.displayName="MDXCreateElement"},9350:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>g,frontMatter:()=>l,metadata:()=>i,toc:()=>u});var r=n(87462),a=(n(67294),n(3905));const l={title:"Installing Rancher on a Google Kubernetes Engine Cluster"},o=void 0,i={unversionedId:"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rancher-on-gke",id:"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rancher-on-gke",title:"Installing Rancher on a Google Kubernetes Engine Cluster",description:"In this section, you'll learn how to install Rancher using Google Kubernetes Engine.",source:"@site/docs/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rancher-on-gke.md",sourceDirName:"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster",slug:"/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rancher-on-gke",permalink:"/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rancher-on-gke",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rancher-on-gke.md",tags:[],version:"current",lastUpdatedAt:1675726989,formattedLastUpdatedAt:"Feb 6, 2023",frontMatter:{title:"Installing Rancher on a Google Kubernetes Engine Cluster"},sidebar:"tutorialSidebar",previous:{title:"Installing Rancher on Azure Kubernetes Service",permalink:"/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rancher-on-aks"},next:{title:"Troubleshooting the Rancher Server Kubernetes Cluster",permalink:"/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/troubleshooting"}},s={},u=[{value:"Prerequisites",id:"prerequisites",level:2},{value:"1. Enable the Kubernetes Engine API",id:"1-enable-the-kubernetes-engine-api",level:2},{value:"2. Open the Cloud Shell",id:"2-open-the-cloud-shell",level:2},{value:"Cloud Shell",id:"cloud-shell",level:3},{value:"Local Shell",id:"local-shell",level:3},{value:"3. Configure the gcloud CLI",id:"3-configure-the-gcloud-cli",level:2},{value:"4. Confirm that gcloud is configured correctly",id:"4-confirm-that-gcloud-is-configured-correctly",level:2},{value:"5. Create a GKE Cluster",id:"5-create-a-gke-cluster",level:2},{value:"6. Get Authentication Credentials",id:"6-get-authentication-credentials",level:2},{value:"7. Install an Ingress",id:"7-install-an-ingress",level:2},{value:"8. Get the Load Balancer IP",id:"8-get-the-load-balancer-ip",level:2},{value:"9. Set up DNS",id:"9-set-up-dns",level:2},{value:"10. Install the Rancher Helm chart",id:"10-install-the-rancher-helm-chart",level:2}],c=e=>function(t){return console.warn("Component "+e+" was not iLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[44153],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>k});var a=r(67294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function s(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?s(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):s(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},s=Object.keys(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var o=a.createContext({}),c=function(e){var t=a.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},u=function(e){var t=c(e.components);return a.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,s=e.originalType,o=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),d=c(r),k=n,h=d["".concat(o,".").concat(k)]||d[k]||p[k]||s;return r?a.createElement(h,i(i({ref:t},u),{},{components:r})):a.createElement(h,i({ref:t},u))}));function k(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var s=r.length,i=new Array(s);i[0]=d;var l={};for(var o in t)hasOwnProperty.call(t,o)&&(l[o]=t[o]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var c=2;c<s;c++)i[c]=r[c];return a.createElement.apply(null,i)}return a.createElement.apply(null,r)}d.displayName="MDXCreateElement"},38633:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>p,frontMatter:()=>s,metadata:()=>l,toc:()=>c});var a=r(87462),n=(r(67294),r(3905));const s={title:"K3s Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.24"},i=void 0,l={unversionedId:"reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.24",id:"reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.24",title:"K3s Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.24",description:"This document is a companion to the K3s Hardening Guide, which provides prescriptive guidance on how to harden K3s clusters that are running in production and managed by Rancher. This benchmark guide helps you evaluate the security of a hardened cluster against each control in the CIS Kubernetes Benchmark.",source:"@site/docs/reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.24.md",sourceDirName:"reference-guides/rancher-security/hardening-guides/k3s-hardening-guide",slug:"/reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.24",permalink:"/reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.24",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.24.md",tags:[],version:"current",lastUpdatedAt:1678300966,formattedLastUpdatedAt:"Mar 8, 2023",frontMatter:{title:"K3s Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.24"},sidebar:"tutorialSidebar",previous:{title:"K3s Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.23",permalink:"/reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.23"},next:{title:"K3s Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.25",permalink:"/reference-guides/rancher-security/hardening-guides/k3s-hardening-guide/k3s-self-assessment-guide-with-cis-v1.23-k8s-v1.25"}},o={},c=[{value:"Testing Methodology",id:"testing-methodology",level:2},{value:"Controls",id:"controls",level:3},{value:"1.1 Control Plane Node Configuration Files",id:"11-control-plane-node-configuration-files",level:2},{value:"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)",id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (AutomateLine truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[6592],{3905:(e,t,a)=>{a.d(t,{Zo:()=>u,kt:()=>m});var n=a(67294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function o(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function l(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?o(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):o(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function i(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},o=Object.keys(e);for(n=0;n<o.length;n++)a=o[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)a=o[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var s=n.createContext({}),p=function(e){var t=n.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):l(l({},t),e)),a},u=function(e){var t=p(e.components);return n.createElement(s.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},h=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,o=e.originalType,s=e.parentName,u=i(e,["components","mdxType","originalType","parentName"]),h=p(a),m=r,c=h["".concat(s,".").concat(m)]||h[m]||d[m]||o;return a?n.createElement(c,l(l({ref:t},u),{},{components:a})):n.createElement(c,l({ref:t},u))}));function m(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=a.length,l=new Array(o);l[0]=h;var i={};for(var s in t)hasOwnProperty.call(t,s)&&(i[s]=t[s]);i.originalType=e,i.mdxType="string"==typeof e?e:r,l[1]=i;for(var p=2;p<o;p++)l[p]=a[p];return n.createElement.apply(null,l)}return n.createElement.apply(null,a)}h.displayName="MDXCreateElement"},4627:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>l,default:()=>d,frontMatter:()=>o,metadata:()=>i,toc:()=>p});var n=a(87462),r=(a(67294),a(3905));const o={title:"Helm Charts in Rancher"},l=void 0,i={unversionedId:"pages-for-subheaders/helm-charts-in-rancher",id:"pages-for-subheaders/helm-charts-in-rancher",title:"Helm Charts in Rancher",description:"In this section, you'll learn how to manage Helm chart repositories and applications in Rancher. Helm chart repositories are managed using Apps. It uses a catalog-like system to import bundles of charts from repositories and then uses those charts to either deploy custom Helm applications or Rancher's tools such as Monitoring or Istio. Rancher tools come as pre-loaded repositories which deploy as standalone Helm charts. Any additional repositories are only added to the current cluster.",source:"@site/docs/pages-for-subheaders/helm-charts-in-rancher.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/helm-charts-in-rancher",permalink:"/pages-for-subheaders/helm-charts-in-rancher",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/pages-for-subheaders/helm-charts-in-rancher.md",tags:[],version:"current",lastUpdatedAt:1670549188,formattedLastUpdatedAt:"Dec 9, 2022",frontMatter:{title:"Helm Charts in Rancher"},sidebar:"tutorialSidebar",previous:{title:"Kubernetes Registry and Container Image Registry",permalink:"/how-to-guides/new-user-guides/kubernetes-resources-setup/kubernetes-and-docker-registries"},next:{title:"Creating Apps",permalink:"/how-to-guides/new-user-guides/helm-charts-in-rancher/create-apps"}},s={},p=[{value:"Changes in Rancher v2.6",id:"changes-in-rancher-v26",level:3},{value:"Charts",id:"charts",level:3},{value:"Repositories",id:"repositories",level:3},{value:"Helm Compatibility",id:"helm-compatibility",level:3},{value:"Deployment and Upgrades",id:"deployment-and-upgrades",level:3},{value:"Changes in Rancher v2.6.3",id:"changes-in-rancher-v263",level:4},{value:"Limitations",id:"limitations",level:3}],u={toc:p};function d(e){let{components:t,...a}=e;return(0,r.kt)("wrapper",(0,n.Z)({},u,a,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"In this section, you'll learn how to manage Helm chart repositories and applications in Rancher. Helm chart repositories are managed using ",(0,r.kt)("strong",{parentName:"p"},"Apps"),". It uses a catalog-like system to import bundles of charts from repositories and then uses those charts to either deploy custom Helm applications or Rancher's tools such as Monitoring or Istio. Rancher tools come as pre-loaded repositories which deploy as standalone Helm charts. Any additional repositories are only added to the current cluster."),(0,r.kt)("h3",{id:"changes-in-rancher-v26"},"Changes in Rancher v2.6")Line truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[6592],{3905:(e,t,a)=>{a.d(t,{Zo:()=>u,kt:()=>m});var r=a(67294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function o(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function l(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?o(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):o(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function i(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},o=Object.keys(e);for(r=0;r<o.length;r++)a=o[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)a=o[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var s=r.createContext({}),p=function(e){var t=r.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):l(l({},t),e)),a},u=function(e){var t=p(e.components);return r.createElement(s.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},h=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,o=e.originalType,s=e.parentName,u=i(e,["components","mdxType","originalType","parentName"]),h=p(a),m=n,c=h["".concat(s,".").concat(m)]||h[m]||d[m]||o;return a?r.createElement(c,l(l({ref:t},u),{},{components:a})):r.createElement(c,l({ref:t},u))}));function m(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var o=a.length,l=new Array(o);l[0]=h;var i={};for(var s in t)hasOwnProperty.call(t,s)&&(i[s]=t[s]);i.originalType=e,i.mdxType="string"==typeof e?e:n,l[1]=i;for(var p=2;p<o;p++)l[p]=a[p];return r.createElement.apply(null,l)}return r.createElement.apply(null,a)}h.displayName="MDXCreateElement"},4627:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>l,default:()=>d,frontMatter:()=>o,metadata:()=>i,toc:()=>p});var r=a(87462),n=(a(67294),a(3905));const o={title:"Helm Charts in Rancher"},l=void 0,i={unversionedId:"pages-for-subheaders/helm-charts-in-rancher",id:"pages-for-subheaders/helm-charts-in-rancher",title:"Helm Charts in Rancher",description:"In this section, you'll learn how to manage Helm chart repositories and applications in Rancher. Helm chart repositories are managed using Apps. It uses a catalog-like system to import bundles of charts from repositories and then uses those charts to either deploy custom Helm applications or Rancher's tools such as Monitoring or Istio. Rancher tools come as pre-loaded repositories which deploy as standalone Helm charts. Any additional repositories are only added to the current cluster.",source:"@site/docs/pages-for-subheaders/helm-charts-in-rancher.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/helm-charts-in-rancher",permalink:"/pages-for-subheaders/helm-charts-in-rancher",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/pages-for-subheaders/helm-charts-in-rancher.md",tags:[],version:"current",lastUpdatedAt:1680112734,formattedLastUpdatedAt:"Mar 29, 2023",frontMatter:{title:"Helm Charts in Rancher"},sidebar:"tutorialSidebar",previous:{title:"Kubernetes Registry and Container Image Registry",permalink:"/how-to-guides/new-user-guides/kubernetes-resources-setup/kubernetes-and-docker-registries"},next:{title:"Creating Apps",permalink:"/how-to-guides/new-user-guides/helm-charts-in-rancher/create-apps"}},s={},p=[{value:"Changes in Rancher v2.6",id:"changes-in-rancher-v26",level:3},{value:"Prerelease Versions",id:"prerelease-versions",level:3},{value:"Charts",id:"charts",level:3},{value:"Repositories",id:"repositories",level:3},{value:"Helm Compatibility",id:"helm-compatibility",level:3},{value:"Deployment and Upgrades",id:"deployment-and-upgrades",level:3},{value:"Changes in Rancher v2.6.3",id:"changes-in-rancher-v263",level:4},{value:"Limitations",id:"limitations",level:3}],u={toc:p};function d(e){let{components:t,...a}=e;return(0,n.kt)("wrapper",(0,r.Z)({},u,a,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"In this section, you'll learn how to manage Helm chart repositories and applications in Rancher. Helm chart repositories are managed using ",(0,n.kt)("strong",{parentName:"p"},"Apps"),". It uses a catalog-like system to import bundles of charts from repositories and then uses those charts to either deploy custom Helm applications or Rancher's tools such as Monitoring or Istio. Rancher tools come as pre-loaded repositories which deploy as standalone Helm charts. Any additional repositories are only added to the current cluster."),(0,n.kLine truncated
@@ -1 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[37013],{3905:(e,a,t)=>{t.d(a,{Zo:()=>c,kt:()=>d});var r=t(67294);function n(e,a,t){return a in e?Object.defineProperty(e,a,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[a]=t,e}function o(e,a){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);a&&(r=r.filter((function(a){return Object.getOwnPropertyDescriptor(e,a).enumerable}))),t.push.apply(t,r)}return t}function i(e){for(var a=1;a<arguments.length;a++){var t=null!=arguments[a]?arguments[a]:{};a%2?o(Object(t),!0).forEach((function(a){n(e,a,t[a])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):o(Object(t)).forEach((function(a){Object.defineProperty(e,a,Object.getOwnPropertyDescriptor(t,a))}))}return e}function l(e,a){if(null==e)return{};var t,r,n=function(e,a){if(null==e)return{};var t,r,n={},o=Object.keys(e);for(r=0;r<o.length;r++)t=o[r],a.indexOf(t)>=0||(n[t]=e[t]);return n}(e,a);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)t=o[r],a.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(n[t]=e[t])}return n}var p=r.createContext({}),s=function(e){var a=r.useContext(p),t=a;return e&&(t="function"==typeof e?e(a):i(i({},a),e)),t},c=function(e){var a=s(e.components);return r.createElement(p.Provider,{value:a},e.children)},m={inlineCode:"code",wrapper:function(e){var a=e.children;return r.createElement(r.Fragment,{},a)}},g=r.forwardRef((function(e,a){var t=e.components,n=e.mdxType,o=e.originalType,p=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),g=s(t),d=n,u=g["".concat(p,".").concat(d)]||g[d]||m[d]||o;return t?r.createElement(u,i(i({ref:a},c),{},{components:t})):r.createElement(u,i({ref:a},c))}));function d(e,a){var t=arguments,n=a&&a.mdxType;if("string"==typeof e||n){var o=t.length,i=new Array(o);i[0]=g;var l={};for(var p in a)hasOwnProperty.call(a,p)&&(l[p]=a[p]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var s=2;s<o;s++)i[s]=t[s];return r.createElement.apply(null,i)}return r.createElement.apply(null,t)}g.displayName="MDXCreateElement"},47580:(e,a,t)=>{t.r(a),t.d(a,{assets:()=>p,contentTitle:()=>i,default:()=>m,frontMatter:()=>o,metadata:()=>l,toc:()=>s});var r=t(87462),n=(t(67294),t(3905));const o={title:"Upgrading Cert-Manager"},i=void 0,l={unversionedId:"getting-started/installation-and-upgrade/resources/upgrade-cert-manager",id:"version-2.6/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",title:"Upgrading Cert-Manager",description:"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:",source:"@site/versioned_docs/version-2.6/getting-started/installation-and-upgrade/resources/upgrade-cert-manager.md",sourceDirName:"getting-started/installation-and-upgrade/resources",slug:"/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",permalink:"/v2.6/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.6/getting-started/installation-and-upgrade/resources/upgrade-cert-manager.md",tags:[],version:"2.6",lastUpdatedAt:1668452187,formattedLastUpdatedAt:"Nov 14, 2022",frontMatter:{title:"Upgrading Cert-Manager"},sidebar:"tutorialSidebar",previous:{title:"About Custom CA Root Certificates",permalink:"/v2.6/getting-started/installation-and-upgrade/resources/custom-ca-root-certificates"},next:{title:"Updating the Rancher Certificate",permalink:"/v2.6/getting-started/installation-and-upgrade/resources/update-rancher-certificate"}},p={},s=[{value:"Upgrade Cert-Manager",id:"upgrade-cert-manager",level:2},{value:"Option A: Upgrade cert-manager with Internet Access",id:"option-a-upgrade-cert-manager-with-internet-access",level:3},{value:"Option B: Upgrade cert-manager in an Air-Gapped Environment",id:"option-b-upgrade-cert-manager-in-an-air-gapped-environment",level:3},{value:"Prerequisites",id:"prerequisites",level:3},{value:"Install cert-manager",id:"install-cert-manager",level:3},{value:"Option C: Upgrade cert-manager from Versions 1.5 and Below",id:"option-c-upgrade-cert-manager-from-versions-15-and-below",level:3},{value:"Verify the Deployment",id:"verify-the-deployment",level:3},{value:"Cert-Manager API change and data migration",id:"cert-manager-api-change-and-data-migration",level:2}],c={toc:s};function m(e){let{components:a,...t}=e;return(0,n.kt)("wrapper",(0,r.Z)({},c,t,{components:a,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take actLine truncated
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[37013],{3905:(e,a,t)=>{t.d(a,{Zo:()=>c,kt:()=>g});var r=t(67294);function n(e,a,t){return a in e?Object.defineProperty(e,a,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[a]=t,e}function o(e,a){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);a&&(r=r.filter((function(a){return Object.getOwnPropertyDescriptor(e,a).enumerable}))),t.push.apply(t,r)}return t}function i(e){for(var a=1;a<arguments.length;a++){var t=null!=arguments[a]?arguments[a]:{};a%2?o(Object(t),!0).forEach((function(a){n(e,a,t[a])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):o(Object(t)).forEach((function(a){Object.defineProperty(e,a,Object.getOwnPropertyDescriptor(t,a))}))}return e}function l(e,a){if(null==e)return{};var t,r,n=function(e,a){if(null==e)return{};var t,r,n={},o=Object.keys(e);for(r=0;r<o.length;r++)t=o[r],a.indexOf(t)>=0||(n[t]=e[t]);return n}(e,a);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)t=o[r],a.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(n[t]=e[t])}return n}var p=r.createContext({}),s=function(e){var a=r.useContext(p),t=a;return e&&(t="function"==typeof e?e(a):i(i({},a),e)),t},c=function(e){var a=s(e.components);return r.createElement(p.Provider,{value:a},e.children)},m={inlineCode:"code",wrapper:function(e){var a=e.children;return r.createElement(r.Fragment,{},a)}},d=r.forwardRef((function(e,a){var t=e.components,n=e.mdxType,o=e.originalType,p=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),d=s(t),g=n,u=d["".concat(p,".").concat(g)]||d[g]||m[g]||o;return t?r.createElement(u,i(i({ref:a},c),{},{components:t})):r.createElement(u,i({ref:a},c))}));function g(e,a){var t=arguments,n=a&&a.mdxType;if("string"==typeof e||n){var o=t.length,i=new Array(o);i[0]=d;var l={};for(var p in a)hasOwnProperty.call(a,p)&&(l[p]=a[p]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var s=2;s<o;s++)i[s]=t[s];return r.createElement.apply(null,i)}return r.createElement.apply(null,t)}d.displayName="MDXCreateElement"},47580:(e,a,t)=>{t.r(a),t.d(a,{assets:()=>p,contentTitle:()=>i,default:()=>m,frontMatter:()=>o,metadata:()=>l,toc:()=>s});var r=t(87462),n=(t(67294),t(3905));const o={title:"Upgrading Cert-Manager"},i=void 0,l={unversionedId:"getting-started/installation-and-upgrade/resources/upgrade-cert-manager",id:"version-2.6/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",title:"Upgrading Cert-Manager",description:"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take action on if you have an HA deployment of Rancher:",source:"@site/versioned_docs/version-2.6/getting-started/installation-and-upgrade/resources/upgrade-cert-manager.md",sourceDirName:"getting-started/installation-and-upgrade/resources",slug:"/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",permalink:"/v2.6/getting-started/installation-and-upgrade/resources/upgrade-cert-manager",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.6/getting-started/installation-and-upgrade/resources/upgrade-cert-manager.md",tags:[],version:"2.6",lastUpdatedAt:1681239575,formattedLastUpdatedAt:"Apr 11, 2023",frontMatter:{title:"Upgrading Cert-Manager"},sidebar:"tutorialSidebar",previous:{title:"About Custom CA Root Certificates",permalink:"/v2.6/getting-started/installation-and-upgrade/resources/custom-ca-root-certificates"},next:{title:"Updating the Rancher Certificate",permalink:"/v2.6/getting-started/installation-and-upgrade/resources/update-rancher-certificate"}},p={},s=[{value:"Upgrade Cert-Manager",id:"upgrade-cert-manager",level:2},{value:"Option A: Upgrade cert-manager with Internet Access",id:"option-a-upgrade-cert-manager-with-internet-access",level:3},{value:"Option B: Upgrade cert-manager in an Air-Gapped Environment",id:"option-b-upgrade-cert-manager-in-an-air-gapped-environment",level:3},{value:"Prerequisites",id:"prerequisites",level:3},{value:"Install cert-manager",id:"install-cert-manager",level:3},{value:"Option C: Upgrade cert-manager from Versions 1.5 and Below",id:"option-c-upgrade-cert-manager-from-versions-15-and-below",level:3},{value:"Verify the Deployment",id:"verify-the-deployment",level:3},{value:"Cert-Manager API change and data migration",id:"cert-manager-api-change-and-data-migration",level:2}],c={toc:s};function m(e){let{components:a,...t}=e;return(0,n.kt)("wrapper",(0,r.Z)({},c,t,{components:a,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"Rancher uses cert-manager to automatically generate and renew TLS certificates for HA deployments of Rancher. As of Fall 2019, three important changes to cert-manager are set to occur that you need to take actLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[65767],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>h});var r=n(67294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var l=r.createContext({}),c=function(e){var t=r.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},p=function(e){var t=c(e.components);return r.createElement(l.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},u=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,o=e.originalType,l=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),u=c(n),h=a,k=u["".concat(l,".").concat(h)]||u[h]||m[h]||o;return n?r.createElement(k,i(i({ref:t},p),{},{components:n})):r.createElement(k,i({ref:t},p))}));function h(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=n.length,i=new Array(o);i[0]=u;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:a,i[1]=s;for(var c=2;c<o;c++)i[c]=n[c];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}u.displayName="MDXCreateElement"},96210:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>l,contentTitle:()=>i,default:()=>m,frontMatter:()=>o,metadata:()=>s,toc:()=>c});var r=n(87462),a=(n(67294),n(3905));const o={title:"Creating a Custom Benchmark Version for Running a Cluster Scan"},i=void 0,s={unversionedId:"explanations/integrations-in-rancher/cis-scans/custom-benchmark",id:"version-2.5/explanations/integrations-in-rancher/cis-scans/custom-benchmark",title:"Creating a Custom Benchmark Version for Running a Cluster Scan",description:"Available as of v2.5.4",source:"@site/versioned_docs/version-2.5/explanations/integrations-in-rancher/cis-scans/custom-benchmark.md",sourceDirName:"explanations/integrations-in-rancher/cis-scans",slug:"/explanations/integrations-in-rancher/cis-scans/custom-benchmark",permalink:"/v2.5/explanations/integrations-in-rancher/cis-scans/custom-benchmark",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.5/explanations/integrations-in-rancher/cis-scans/custom-benchmark.md",tags:[],version:"2.5",lastUpdatedAt:1663953084,formattedLastUpdatedAt:"Sep 23, 2022",frontMatter:{title:"Creating a Custom Benchmark Version for Running a Cluster Scan"},sidebar:"tutorialSidebar",previous:{title:"Skipped and Not Applicable Tests",permalink:"/v2.5/explanations/integrations-in-rancher/cis-scans/skipped-and-not-applicable-tests"},next:{title:"Continuous Delivery with Fleet",permalink:"/v2.5/pages-for-subheaders/fleet-gitops-at-scale"}},l={},c=[{value:"1. Prepare the Custom Benchmark Version ConfigMap",id:"1-prepare-the-custom-benchmark-version-configmap",level:3},{value:"2. Add a Custom Benchmark Version to a Cluster",id:"2-add-a-custom-benchmark-version-to-a-cluster",level:3},{value:"3. Create a New Profile for the Custom Benchmark Version",id:"3-create-a-new-profile-for-the-custom-benchmark-version",level:3},{value:"4. Run a Scan Using the Custom Benchmark Version",id:"4-run-a-scan-using-the-custom-benchmark-version",level:3}],p={toc:c};function m(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,(0,a.kt)("em",{parentName:"p"},"Available as of v2.5.4")),(0,a.kt)("p",null,"Each Benchmark Version defines a set of test configuration files that define the CIS tests to be run by the ",(0,a.kt)("a",{href:"https://github.com/aquasecurity/kube-bench",target:"_blank"},"kube-bench")," tool.\nThe ",(0,a.kt)("inlineCode",{parentName:"p"},"rancher-cis-benchmark")," application installs a few default Benchmark Versions which are listed under CIS Benchmark application menu."),(0,a.kt)("p",null,"But there could be some Kubernetes cluster setups that require custom configurations of the Benchmark tests. For example, the path to the Kubernetes config files or certs might be different Line truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[65767],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>h});var r=n(67294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var l=r.createContext({}),c=function(e){var t=r.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},p=function(e){var t=c(e.components);return r.createElement(l.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},u=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,o=e.originalType,l=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),u=c(n),h=a,k=u["".concat(l,".").concat(h)]||u[h]||m[h]||o;return n?r.createElement(k,i(i({ref:t},p),{},{components:n})):r.createElement(k,i({ref:t},p))}));function h(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=n.length,i=new Array(o);i[0]=u;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:a,i[1]=s;for(var c=2;c<o;c++)i[c]=n[c];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}u.displayName="MDXCreateElement"},96210:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>l,contentTitle:()=>i,default:()=>m,frontMatter:()=>o,metadata:()=>s,toc:()=>c});var r=n(87462),a=(n(67294),n(3905));const o={title:"Creating a Custom Benchmark Version for Running a Cluster Scan"},i=void 0,s={unversionedId:"explanations/integrations-in-rancher/cis-scans/custom-benchmark",id:"version-2.5/explanations/integrations-in-rancher/cis-scans/custom-benchmark",title:"Creating a Custom Benchmark Version for Running a Cluster Scan",description:"Available as of v2.5.4",source:"@site/versioned_docs/version-2.5/explanations/integrations-in-rancher/cis-scans/custom-benchmark.md",sourceDirName:"explanations/integrations-in-rancher/cis-scans",slug:"/explanations/integrations-in-rancher/cis-scans/custom-benchmark",permalink:"/v2.5/explanations/integrations-in-rancher/cis-scans/custom-benchmark",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.5/explanations/integrations-in-rancher/cis-scans/custom-benchmark.md",tags:[],version:"2.5",lastUpdatedAt:1663953084,formattedLastUpdatedAt:"Sep 23, 2022",frontMatter:{title:"Creating a Custom Benchmark Version for Running a Cluster Scan"},sidebar:"tutorialSidebar",previous:{title:"Skipped and Not Applicable Tests",permalink:"/v2.5/explanations/integrations-in-rancher/cis-scans/skipped-and-not-applicable-tests"},next:{title:"Fleet - GitOps at Scale",permalink:"/v2.5/pages-for-subheaders/fleet-gitops-at-scale"}},l={},c=[{value:"1. Prepare the Custom Benchmark Version ConfigMap",id:"1-prepare-the-custom-benchmark-version-configmap",level:3},{value:"2. Add a Custom Benchmark Version to a Cluster",id:"2-add-a-custom-benchmark-version-to-a-cluster",level:3},{value:"3. Create a New Profile for the Custom Benchmark Version",id:"3-create-a-new-profile-for-the-custom-benchmark-version",level:3},{value:"4. Run a Scan Using the Custom Benchmark Version",id:"4-run-a-scan-using-the-custom-benchmark-version",level:3}],p={toc:c};function m(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,(0,a.kt)("em",{parentName:"p"},"Available as of v2.5.4")),(0,a.kt)("p",null,"Each Benchmark Version defines a set of test configuration files that define the CIS tests to be run by the ",(0,a.kt)("a",{href:"https://github.com/aquasecurity/kube-bench",target:"_blank"},"kube-bench")," tool.\nThe ",(0,a.kt)("inlineCode",{parentName:"p"},"rancher-cis-benchmark")," application installs a few default Benchmark Versions which are listed under CIS Benchmark application menu."),(0,a.kt)("p",null,"But there could be some Kubernetes cluster setups that require custom configurations of the Benchmark tests. For example, the path to the Kubernetes config files or certs might be different than thLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[54355],{3905:(e,t,a)=>{a.d(t,{Zo:()=>u,kt:()=>h});var n=a(67294);function A(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function r(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function o(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?r(Object(a),!0).forEach((function(t){A(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):r(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function i(e,t){if(null==e)return{};var a,n,A=function(e,t){if(null==e)return{};var a,n,A={},r=Object.keys(e);for(n=0;n<r.length;n++)a=r[n],t.indexOf(a)>=0||(A[a]=e[a]);return A}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(n=0;n<r.length;n++)a=r[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(A[a]=e[a])}return A}var l=n.createContext({}),s=function(e){var t=n.useContext(l),a=t;return e&&(a="function"==typeof e?e(t):o(o({},t),e)),a},u=function(e){var t=s(e.components);return n.createElement(l.Provider,{value:t},e.children)},g={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},c=n.forwardRef((function(e,t){var a=e.components,A=e.mdxType,r=e.originalType,l=e.parentName,u=i(e,["components","mdxType","originalType","parentName"]),c=s(a),h=A,p=c["".concat(l,".").concat(h)]||c[h]||g[h]||r;return a?n.createElement(p,o(o({ref:t},u),{},{components:a})):n.createElement(p,o({ref:t},u))}));function h(e,t){var a=arguments,A=t&&t.mdxType;if("string"==typeof e||A){var r=a.length,o=new Array(r);o[0]=c;var i={};for(var l in t)hasOwnProperty.call(t,l)&&(i[l]=t[l]);i.originalType=e,i.mdxType="string"==typeof e?e:A,o[1]=i;for(var s=2;s<r;s++)o[s]=a[s];return n.createElement.apply(null,o)}return n.createElement.apply(null,a)}c.displayName="MDXCreateElement"},89830:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>l,contentTitle:()=>o,default:()=>g,frontMatter:()=>r,metadata:()=>i,toc:()=>s});var n=a(87462),A=(a(67294),a(3905));const r={title:"Authentication Config",weight:10},o=void 0,i={unversionedId:"pages-for-subheaders/authentication-config",id:"pages-for-subheaders/authentication-config",title:"Authentication Config",description:"One of the key features that Rancher adds to Kubernetes is centralized user authentication. This feature allows your users to use one set of credentials to authenticate with any of your Kubernetes clusters.",source:"@site/docs/pages-for-subheaders/authentication-config.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/authentication-config",permalink:"/pages-for-subheaders/authentication-config",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/pages-for-subheaders/authentication-config.md",tags:[],version:"current",lastUpdatedAt:1678401467,formattedLastUpdatedAt:"Mar 9, 2023",frontMatter:{title:"Authentication Config",weight:10},sidebar:"tutorialSidebar",previous:{title:"Authentication, Permissions and Global Configuration",permalink:"/pages-for-subheaders/authentication-permissions-and-global-configuration"},next:{title:"Users and Groups",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/manage-users-and-groups"}},l={},s=[{value:"External vs. Local Authentication",id:"external-vs-local-authentication",level:2},{value:"Users and Groups",id:"users-and-groups",level:2},{value:"Scope of Rancher Authorization",id:"scope-of-rancher-authorization",level:2},{value:"External Authentication Configuration and Principal Users",id:"external-authentication-configuration-and-principal-users",level:2},{value:"Disabling An Auth Provider",id:"disabling-an-auth-provider",level:2},{value:"Running Resource Cleanup Manually",id:"running-resource-cleanup-manually",level:3}],u={toc:s};function g(e){let{components:t,...r}=e;return(0,A.kt)("wrapper",(0,n.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,A.kt)("p",null,"One of the key features that Rancher adds to Kubernetes is centralized user authentication. This feature allows your users to use one set of credentials to authenticate with any of your Kubernetes clusters."),(0,A.kt)("p",null,"This centralized user authentication is accomplished using the Rancher authentication proxy, which is installed along with the rest of Rancher. This proxy authenticates your users and forwards their requests to your Kubernetes clusters using a service account."),(0,A.kt)("h2",{id:"external-vs-local-authentication"},"External vs. Local Authentication"),(0,A.kt)("p",null,"The Rancher authentication proxy integrates with the following external authentication servLine truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[54355],{3905:(e,t,A)=>{A.d(t,{Zo:()=>u,kt:()=>h});var a=A(67294);function n(e,t,A){return t in e?Object.defineProperty(e,t,{value:A,enumerable:!0,configurable:!0,writable:!0}):e[t]=A,e}function r(e,t){var A=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),A.push.apply(A,a)}return A}function o(e){for(var t=1;t<arguments.length;t++){var A=null!=arguments[t]?arguments[t]:{};t%2?r(Object(A),!0).forEach((function(t){n(e,t,A[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(A)):r(Object(A)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(A,t))}))}return e}function i(e,t){if(null==e)return{};var A,a,n=function(e,t){if(null==e)return{};var A,a,n={},r=Object.keys(e);for(a=0;a<r.length;a++)A=r[a],t.indexOf(A)>=0||(n[A]=e[A]);return n}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(a=0;a<r.length;a++)A=r[a],t.indexOf(A)>=0||Object.prototype.propertyIsEnumerable.call(e,A)&&(n[A]=e[A])}return n}var l=a.createContext({}),s=function(e){var t=a.useContext(l),A=t;return e&&(A="function"==typeof e?e(t):o(o({},t),e)),A},u=function(e){var t=s(e.components);return a.createElement(l.Provider,{value:t},e.children)},g={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},c=a.forwardRef((function(e,t){var A=e.components,n=e.mdxType,r=e.originalType,l=e.parentName,u=i(e,["components","mdxType","originalType","parentName"]),c=s(A),h=n,p=c["".concat(l,".").concat(h)]||c[h]||g[h]||r;return A?a.createElement(p,o(o({ref:t},u),{},{components:A})):a.createElement(p,o({ref:t},u))}));function h(e,t){var A=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var r=A.length,o=new Array(r);o[0]=c;var i={};for(var l in t)hasOwnProperty.call(t,l)&&(i[l]=t[l]);i.originalType=e,i.mdxType="string"==typeof e?e:n,o[1]=i;for(var s=2;s<r;s++)o[s]=A[s];return a.createElement.apply(null,o)}return a.createElement.apply(null,A)}c.displayName="MDXCreateElement"},89830:(e,t,A)=>{A.r(t),A.d(t,{assets:()=>l,contentTitle:()=>o,default:()=>g,frontMatter:()=>r,metadata:()=>i,toc:()=>s});var a=A(87462),n=(A(67294),A(3905));const r={title:"Authentication Config",weight:10},o=void 0,i={unversionedId:"pages-for-subheaders/authentication-config",id:"pages-for-subheaders/authentication-config",title:"Authentication Config",description:"One of the key features that Rancher adds to Kubernetes is centralized user authentication. This feature allows your users to use one set of credentials to authenticate with any of your Kubernetes clusters.",source:"@site/docs/pages-for-subheaders/authentication-config.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/authentication-config",permalink:"/pages-for-subheaders/authentication-config",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/pages-for-subheaders/authentication-config.md",tags:[],version:"current",lastUpdatedAt:1670902488,formattedLastUpdatedAt:"Dec 13, 2022",frontMatter:{title:"Authentication Config",weight:10},sidebar:"tutorialSidebar",previous:{title:"Authentication, Permissions and Global Configuration",permalink:"/pages-for-subheaders/authentication-permissions-and-global-configuration"},next:{title:"Users and Groups",permalink:"/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/manage-users-and-groups"}},l={},s=[{value:"External vs. Local Authentication",id:"external-vs-local-authentication",level:2},{value:"Users and Groups",id:"users-and-groups",level:2},{value:"Scope of Rancher Authorization",id:"scope-of-rancher-authorization",level:2},{value:"External Authentication Configuration and Principal Users",id:"external-authentication-configuration-and-principal-users",level:2}],u={toc:s};function g(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,a.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"One of the key features that Rancher adds to Kubernetes is centralized user authentication. This feature allows your users to use one set of credentials to authenticate with any of your Kubernetes clusters."),(0,n.kt)("p",null,"This centralized user authentication is accomplished using the Rancher authentication proxy, which is installed along with the rest of Rancher. This proxy authenticates your users and forwards their requests to your Kubernetes clusters using a service account."),(0,n.kt)("h2",{id:"external-vs-local-authentication"},"External vs. Local Authentication"),(0,n.kt)("p",null,"The Rancher authentication proxy integrates with the following external authentication services."),(0,n.kt)("table",null,(0,n.kt)("thead",{parentName:"table"},(0,n.kt)("tr",{parentName:"thead"},(0,n.kt)("th",{parentName:"tr",align:null},"Auth Service"))),(0,Line truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[81113],{3905:(e,t,a)=>{a.d(t,{Zo:()=>l,kt:()=>u});var r=a(67294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function i(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function s(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?i(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):i(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function c(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},i=Object.keys(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var o=r.createContext({}),h=function(e){var t=r.useContext(o),a=t;return e&&(a="function"==typeof e?e(t):s(s({},t),e)),a},l=function(e){var t=h(e.components);return r.createElement(o.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},p=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,i=e.originalType,o=e.parentName,l=c(e,["components","mdxType","originalType","parentName"]),p=h(a),u=n,m=p["".concat(o,".").concat(u)]||p[u]||d[u]||i;return a?r.createElement(m,s(s({ref:t},l),{},{components:a})):r.createElement(m,s({ref:t},l))}));function u(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var i=a.length,s=new Array(i);s[0]=p;var c={};for(var o in t)hasOwnProperty.call(t,o)&&(c[o]=t[o]);c.originalType=e,c.mdxType="string"==typeof e?e:n,s[1]=c;for(var h=2;h<i;h++)s[h]=a[h];return r.createElement.apply(null,s)}return r.createElement.apply(null,a)}p.displayName="MDXCreateElement"},54538:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>o,contentTitle:()=>s,default:()=>d,frontMatter:()=>i,metadata:()=>c,toc:()=>h});var r=a(87462),n=(a(67294),a(3905));const i={title:"Security Advisories and CVEs"},s=void 0,c={unversionedId:"reference-guides/rancher-security/security-advisories-and-cves",id:"reference-guides/rancher-security/security-advisories-and-cves",title:"Security Advisories and CVEs",description:"Rancher is committed to informing the community of security issues in our products. Rancher will publish security advisories and CVEs (Common Vulnerabilities and Exposures) for issues we have resolved. New security advisories are also published in Rancher's GitHub security page.",source:"@site/docs/reference-guides/rancher-security/security-advisories-and-cves.md",sourceDirName:"reference-guides/rancher-security",slug:"/reference-guides/rancher-security/security-advisories-and-cves",permalink:"/reference-guides/rancher-security/security-advisories-and-cves",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/reference-guides/rancher-security/security-advisories-and-cves.md",tags:[],version:"current",lastUpdatedAt:1674667369,formattedLastUpdatedAt:"Jan 25, 2023",frontMatter:{title:"Security Advisories and CVEs"},sidebar:"tutorialSidebar",previous:{title:"Kubernetes Security Best Practices",permalink:"/reference-guides/rancher-security/kubernetes-security-best-practices"},next:{title:"Cloud Marketplace Integration",permalink:"/pages-for-subheaders/cloud-marketplace"}},o={},h=[],l={toc:h};function d(e){let{components:t,...a}=e;return(0,n.kt)("wrapper",(0,r.Z)({},l,a,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"Rancher is committed to informing the community of security issues in our products. Rancher will publish security advisories and CVEs (Common Vulnerabilities and Exposures) for issues we have resolved. New security advisories are also published in Rancher's GitHub ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/rancher/rancher/security/advisories"},"security page"),"."),(0,n.kt)("table",null,(0,n.kt)("thead",{parentName:"table"},(0,n.kt)("tr",{parentName:"thead"},(0,n.kt)("th",{parentName:"tr",align:null},"ID"),(0,n.kt)("th",{parentName:"tr",align:null},"Description"),(0,n.kt)("th",{parentName:"tr",align:null},"Date"),(0,n.kt)("th",{parentName:"tr",align:null},"Resolution"))),(0,n.kt)("tbody",{parentName:"table"},(0,n.kt)("tr",{parentName:"tbody"},(0,n.kt)("td",{parentName:"tr",align:null},(0,n.kt)("a",{parentName:"td",href:"https://github.com/rancher/rancher/security/advisories/GHSA-34p5-jp77-fcrc"},"CVE-2022-43758")),(0,n.kt)("td",{parentName:"tr",align:null},"An issue was discovered in Rancher from versions 2.5.0 up to and including 2.5.16, 2.6.0 up to and including 2.6.9 and 2.7.0, where a cLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[81113],{3905:(e,t,a)=>{a.d(t,{Zo:()=>l,kt:()=>u});var r=a(67294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function i(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function s(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?i(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):i(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function c(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},i=Object.keys(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var o=r.createContext({}),h=function(e){var t=r.useContext(o),a=t;return e&&(a="function"==typeof e?e(t):s(s({},t),e)),a},l=function(e){var t=h(e.components);return r.createElement(o.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},p=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,i=e.originalType,o=e.parentName,l=c(e,["components","mdxType","originalType","parentName"]),p=h(a),u=n,m=p["".concat(o,".").concat(u)]||p[u]||d[u]||i;return a?r.createElement(m,s(s({ref:t},l),{},{components:a})):r.createElement(m,s({ref:t},l))}));function u(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var i=a.length,s=new Array(i);s[0]=p;var c={};for(var o in t)hasOwnProperty.call(t,o)&&(c[o]=t[o]);c.originalType=e,c.mdxType="string"==typeof e?e:n,s[1]=c;for(var h=2;h<i;h++)s[h]=a[h];return r.createElement.apply(null,s)}return r.createElement.apply(null,a)}p.displayName="MDXCreateElement"},54538:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>o,contentTitle:()=>s,default:()=>d,frontMatter:()=>i,metadata:()=>c,toc:()=>h});var r=a(87462),n=(a(67294),a(3905));const i={title:"Security Advisories and CVEs"},s=void 0,c={unversionedId:"reference-guides/rancher-security/security-advisories-and-cves",id:"reference-guides/rancher-security/security-advisories-and-cves",title:"Security Advisories and CVEs",description:"Rancher is committed to informing the community of security issues in our products. Rancher will publish security advisories and CVEs (Common Vulnerabilities and Exposures) for issues we have resolved. New security advisories are also published in Rancher's GitHub security page.",source:"@site/docs/reference-guides/rancher-security/security-advisories-and-cves.md",sourceDirName:"reference-guides/rancher-security",slug:"/reference-guides/rancher-security/security-advisories-and-cves",permalink:"/reference-guides/rancher-security/security-advisories-and-cves",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/reference-guides/rancher-security/security-advisories-and-cves.md",tags:[],version:"current",lastUpdatedAt:1674667369,formattedLastUpdatedAt:"Jan 25, 2023",frontMatter:{title:"Security Advisories and CVEs"},sidebar:"tutorialSidebar",previous:{title:"Kubernetes Security Best Practices",permalink:"/reference-guides/rancher-security/kubernetes-security-best-practices"},next:{title:"Sample PodSecurityConfiguration",permalink:"/reference-guides/rancher-security/psa-restricted-exemptions"}},o={},h=[],l={toc:h};function d(e){let{components:t,...a}=e;return(0,n.kt)("wrapper",(0,r.Z)({},l,a,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"Rancher is committed to informing the community of security issues in our products. Rancher will publish security advisories and CVEs (Common Vulnerabilities and Exposures) for issues we have resolved. New security advisories are also published in Rancher's GitHub ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/rancher/rancher/security/advisories"},"security page"),"."),(0,n.kt)("table",null,(0,n.kt)("thead",{parentName:"table"},(0,n.kt)("tr",{parentName:"thead"},(0,n.kt)("th",{parentName:"tr",align:null},"ID"),(0,n.kt)("th",{parentName:"tr",align:null},"Description"),(0,n.kt)("th",{parentName:"tr",align:null},"Date"),(0,n.kt)("th",{parentName:"tr",align:null},"Resolution"))),(0,n.kt)("tbody",{parentName:"table"},(0,n.kt)("tr",{parentName:"tbody"},(0,n.kt)("td",{parentName:"tr",align:null},(0,n.kt)("a",{parentName:"td",href:"https://github.com/rancher/rancher/security/advisories/GHSA-34p5-jp77-fcrc"},"CVE-2022-43758")),(0,n.kt)("td",{parentName:"tr",align:null},"An issue was discovered in Rancher from versions 2.5.0 up to and including 2.5.16, 2.6.0 up to and including 2.6Line truncated
-1
View File
@@ -1 +0,0 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[3181],{3905:(e,t,n)=>{n.d(t,{Zo:()=>d,kt:()=>p});var r=n(67294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function s(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?s(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):s(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function i(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},s=Object.keys(e);for(r=0;r<s.length;r++)n=s[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(r=0;r<s.length;r++)n=s[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var l=r.createContext({}),c=function(e){var t=r.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},d=function(e){var t=c(e.components);return r.createElement(l.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},h=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,s=e.originalType,l=e.parentName,d=i(e,["components","mdxType","originalType","parentName"]),h=c(n),p=a,k=h["".concat(l,".").concat(p)]||h[p]||u[p]||s;return n?r.createElement(k,o(o({ref:t},d),{},{components:n})):r.createElement(k,o({ref:t},d))}));function p(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var s=n.length,o=new Array(s);o[0]=h;var i={};for(var l in t)hasOwnProperty.call(t,l)&&(i[l]=t[l]);i.originalType=e,i.mdxType="string"==typeof e?e:a,o[1]=i;for(var c=2;c<s;c++)o[c]=n[c];return r.createElement.apply(null,o)}return r.createElement.apply(null,n)}h.displayName="MDXCreateElement"},36056:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>l,contentTitle:()=>o,default:()=>u,frontMatter:()=>s,metadata:()=>i,toc:()=>c});var r=n(87462),a=(n(67294),n(3905));const s={title:"Troubleshooting the Rancher Server Kubernetes Cluster"},o=void 0,i={unversionedId:"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/troubleshooting",id:"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/troubleshooting",title:"Troubleshooting the Rancher Server Kubernetes Cluster",description:"This section describes how to troubleshoot an installation of Rancher on a Kubernetes cluster.",source:"@site/docs/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/troubleshooting.md",sourceDirName:"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster",slug:"/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/troubleshooting",permalink:"/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/troubleshooting",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/troubleshooting.md",tags:[],version:"current",lastUpdatedAt:1663953084,formattedLastUpdatedAt:"Sep 23, 2022",frontMatter:{title:"Troubleshooting the Rancher Server Kubernetes Cluster"},sidebar:"tutorialSidebar",previous:{title:"Installing Rancher on a Google Kubernetes Engine Cluster",permalink:"/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rancher-on-gke"},next:{title:"Other Installation Methods",permalink:"/pages-for-subheaders/other-installation-methods"}},l={},c=[{value:"Relevant Namespaces",id:"relevant-namespaces",level:3},{value:"&quot;default backend - 404&quot;",id:"default-backend---404",level:3},{value:"Check if Rancher is Running",id:"check-if-rancher-is-running",level:3},{value:"Check the Rancher Logs",id:"check-the-rancher-logs",level:3},{value:"Cert CN is &quot;Kubernetes Ingress Controller Fake Certificate&quot;",id:"cert-cn-is-kubernetes-ingress-controller-fake-certificate",level:3},{value:"Checking for issues with cert-manager issued certs (Rancher Generated or LetsEncrypt)",id:"checking-for-issues-with-cert-manager-issued-certs-rancher-generated-or-letsencrypt",level:3},{value:"Checking for Issues with Your Own SSL Certs",id:"checking-for-issues-with-your-own-ssl-certs",level:3},{value:"No matches for kind &quot;Issuer&quot;",id:"no-matches-for-kind-issuer",level:3},{value:"Canal Pods show READY 2/3",id:"canal-pods-show-ready-23",level:3},{value:"nginx-ingress-controller Pods show RESTARTS",id:"nginx-ingress-controller-pods-show-restarts",level:3},{value:"Failed to dial to /var/run/docker.sock: ssh:Line truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[3181],{3905:(e,t,n)=>{n.d(t,{Zo:()=>d,kt:()=>p});var r=n(67294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function s(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?s(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):s(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function i(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},s=Object.keys(e);for(r=0;r<s.length;r++)n=s[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(r=0;r<s.length;r++)n=s[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var l=r.createContext({}),c=function(e){var t=r.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},d=function(e){var t=c(e.components);return r.createElement(l.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},h=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,s=e.originalType,l=e.parentName,d=i(e,["components","mdxType","originalType","parentName"]),h=c(n),p=a,k=h["".concat(l,".").concat(p)]||h[p]||u[p]||s;return n?r.createElement(k,o(o({ref:t},d),{},{components:n})):r.createElement(k,o({ref:t},d))}));function p(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var s=n.length,o=new Array(s);o[0]=h;var i={};for(var l in t)hasOwnProperty.call(t,l)&&(i[l]=t[l]);i.originalType=e,i.mdxType="string"==typeof e?e:a,o[1]=i;for(var c=2;c<s;c++)o[c]=n[c];return r.createElement.apply(null,o)}return r.createElement.apply(null,n)}h.displayName="MDXCreateElement"},36056:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>l,contentTitle:()=>o,default:()=>u,frontMatter:()=>s,metadata:()=>i,toc:()=>c});var r=n(87462),a=(n(67294),n(3905));const s={title:"Troubleshooting the Rancher Server Kubernetes Cluster"},o=void 0,i={unversionedId:"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/troubleshooting",id:"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/troubleshooting",title:"Troubleshooting the Rancher Server Kubernetes Cluster",description:"This section describes how to troubleshoot an installation of Rancher on a Kubernetes cluster.",source:"@site/docs/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/troubleshooting.md",sourceDirName:"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster",slug:"/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/troubleshooting",permalink:"/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/troubleshooting",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/troubleshooting.md",tags:[],version:"current",lastUpdatedAt:1663953084,formattedLastUpdatedAt:"Sep 23, 2022",frontMatter:{title:"Troubleshooting the Rancher Server Kubernetes Cluster"},sidebar:"tutorialSidebar",previous:{title:"Upgrade a Hardened Custom/Imported Cluster to Kubernetes v1.25",permalink:"/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/upgrade-a-hardened-cluster-to-k8s-v1-25"},next:{title:"Other Installation Methods",permalink:"/pages-for-subheaders/other-installation-methods"}},l={},c=[{value:"Relevant Namespaces",id:"relevant-namespaces",level:3},{value:"&quot;default backend - 404&quot;",id:"default-backend---404",level:3},{value:"Check if Rancher is Running",id:"check-if-rancher-is-running",level:3},{value:"Check the Rancher Logs",id:"check-the-rancher-logs",level:3},{value:"Cert CN is &quot;Kubernetes Ingress Controller Fake Certificate&quot;",id:"cert-cn-is-kubernetes-ingress-controller-fake-certificate",level:3},{value:"Checking for issues with cert-manager issued certs (Rancher Generated or LetsEncrypt)",id:"checking-for-issues-with-cert-manager-issued-certs-rancher-generated-or-letsencrypt",level:3},{value:"Checking for Issues with Your Own SSL Certs",id:"checking-for-issues-with-your-own-ssl-certs",level:3},{value:"No matches for kind &quot;Issuer&quot;",id:"no-matches-for-kind-issuer",level:3},{value:"Canal Pods show READY 2/3",id:"canal-pods-show-ready-23",level:3},{value:"nginx-ingress-controller Pods show RESTARTS",id:"nginx-ingress-controller-pods-show-restarts",level:3},{value:"Failed to diaLine truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[54422],{3905:(e,t,r)=>{r.d(t,{Zo:()=>d,kt:()=>m});var n=r(67294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function i(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},o=Object.keys(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var s=n.createContext({}),u=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):l(l({},t),e)),r},d=function(e){var t=u(e.components);return n.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},c=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,d=i(e,["components","mdxType","originalType","parentName"]),c=u(r),m=a,g=c["".concat(s,".").concat(m)]||c[m]||p[m]||o;return r?n.createElement(g,l(l({ref:t},d),{},{components:r})):n.createElement(g,l({ref:t},d))}));function m(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=r.length,l=new Array(o);l[0]=c;var i={};for(var s in t)hasOwnProperty.call(t,s)&&(i[s]=t[s]);i.originalType=e,i.mdxType="string"==typeof e?e:a,l[1]=i;for(var u=2;u<o;u++)l[u]=r[u];return n.createElement.apply(null,l)}return n.createElement.apply(null,r)}c.displayName="MDXCreateElement"},63287:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>l,default:()=>g,frontMatter:()=>o,metadata:()=>i,toc:()=>u});var n=r(87462),a=(r(67294),r(3905));const o={title:"Upgrade a Hardened Custom/Imported Cluster to Kubernetes v1.25"},l=void 0,i={unversionedId:"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/upgrade-a-hardened-cluster-to-k8s-v1-25",id:"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/upgrade-a-hardened-cluster-to-k8s-v1-25",title:"Upgrade a Hardened Custom/Imported Cluster to Kubernetes v1.25",description:"Kubernetes v1.25 changes how clusters describe and implement security policies. From this version forward, Pod Security Policies (PSPs) are no longer available. Kubernetes v1.25 replaces them with new security objects: Pod Security Standards (PSS), and Pod Security Admissions (PSAs).",source:"@site/docs/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/upgrade-a-hardened-cluster-to-k8s-v1-25.md",sourceDirName:"getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster",slug:"/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/upgrade-a-hardened-cluster-to-k8s-v1-25",permalink:"/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/upgrade-a-hardened-cluster-to-k8s-v1-25",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/docs/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/upgrade-a-hardened-cluster-to-k8s-v1-25.md",tags:[],version:"current",lastUpdatedAt:1679495913,formattedLastUpdatedAt:"Mar 22, 2023",frontMatter:{title:"Upgrade a Hardened Custom/Imported Cluster to Kubernetes v1.25"},sidebar:"tutorialSidebar",previous:{title:"Installing Rancher on a Google Kubernetes Engine Cluster",permalink:"/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rancher-on-gke"},next:{title:"Troubleshooting the Rancher Server Kubernetes Cluster",permalink:"/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/troubleshooting"}},s={},u=[{value:"Upgrading Imported Hardened Clusters to Kubernetes v1.25 or Later",id:"upgrading-imported-hardened-clusters-to-kubernetes-v125-or-later",level:2},{value:"Upgrading Custom Hardened Clusters to Kubernetes v1.25 or Later",id:"upgrading-custom-hardened-clusters-to-kubernetes-v125-or-later",level:2}],d=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,a.kt)("div",t)},p=d("Tabs"),c=d("TabItem"),m={toc:u};function g(e){let{components:t,...o}=e;return(0,a.kt)("wrapper",(0,n.Z)({},m,o,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Kubernetes Line truncated
+1
View File
@@ -0,0 +1 @@
"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[83435],{3905:(e,t,a)=>{a.d(t,{Zo:()=>u,kt:()=>d});var n=a(67294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function o(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},l=Object.keys(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var s=n.createContext({}),c=function(e){var t=n.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},u=function(e){var t=c(e.components);return n.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},h=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),h=c(a),d=r,m=h["".concat(s,".").concat(d)]||h[d]||p[d]||l;return a?n.createElement(m,i(i({ref:t},u),{},{components:a})):n.createElement(m,i({ref:t},u))}));function d(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=a.length,i=new Array(l);i[0]=h;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var c=2;c<l;c++)i[c]=a[c];return n.createElement.apply(null,i)}return n.createElement.apply(null,a)}h.displayName="MDXCreateElement"},92144:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>m,frontMatter:()=>l,metadata:()=>o,toc:()=>c});var n=a(87462),r=(a(67294),a(3905));const l={title:"Install/Upgrade Rancher on a Kubernetes Cluster",description:"Learn how to install Rancher in development and production environments. Read about single node and high availability installation"},i=void 0,o={unversionedId:"pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster",id:"version-2.6/pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster",title:"Install/Upgrade Rancher on a Kubernetes Cluster",description:"Learn how to install Rancher in development and production environments. Read about single node and high availability installation",source:"@site/versioned_docs/version-2.6/pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster.md",sourceDirName:"pages-for-subheaders",slug:"/pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster",permalink:"/v2.6/pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.6/pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster.md",tags:[],version:"2.6",lastUpdatedAt:1681151826,formattedLastUpdatedAt:"Apr 10, 2023",frontMatter:{title:"Install/Upgrade Rancher on a Kubernetes Cluster",description:"Learn how to install Rancher in development and production environments. Read about single node and high availability installation"},sidebar:"tutorialSidebar",previous:{title:"Feature Flags",permalink:"/v2.6/getting-started/installation-and-upgrade/installation-references/feature-flags"},next:{title:"Rollbacks",permalink:"/v2.6/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/rollbacks"}},s={},c=[{value:"Prerequisites",id:"prerequisites",level:2},{value:"Kubernetes Cluster",id:"kubernetes-cluster",level:3},{value:"Ingress Controller",id:"ingress-controller",level:3},{value:"CLI Tools",id:"cli-tools",level:3},{value:"Install the Rancher Helm Chart",id:"install-the-rancher-helm-chart",level:2},{value:"1. Add the Helm Chart Repository",id:"1-add-the-helm-chart-repository",level:3},{value:"2. Create a Namespace for Rancher",id:"2-create-a-namespace-for-rancher",level:3},{value:"3. Choose your SSL Configuration",id:"3-choose-your-ssl-configuration",level:3},{value:"4. Install cert-manager",id:"4-install-cert-manager",level:3},{value:"5. Install Rancher with Helm and Your Chosen Certificate Option",id:"5-install-rancher-with-helm-and-your-chosen-certificate-option",level:3},{value:"6. Verify that the Rancher Server is Successfully Deployed",id:"6-verify-that-the-rancher-server-is-successfully-deployed",level:3},{value:"7. Save Your Options",id:"7-save-your-options",level:3},{value:"FinishLine truncated
Loaded 100 of 3665 files, more files were not shown because too many files have changed in this diff. Show more