From 8345d274492e2796a62f69793810f0ca1e5b41db Mon Sep 17 00:00:00 2001 From: cluse Date: Tue, 1 Dec 2020 19:52:22 -0700 Subject: [PATCH] Edit landing page for Rancher v2.5 security guides --- .../v2.x/en/security/rancher-2.5/_index.md | 21 ++++++++++++------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/content/rancher/v2.x/en/security/rancher-2.5/_index.md b/content/rancher/v2.x/en/security/rancher-2.5/_index.md index 8640b28ec10..49918270c93 100644 --- a/content/rancher/v2.x/en/security/rancher-2.5/_index.md +++ b/content/rancher/v2.x/en/security/rancher-2.5/_index.md @@ -3,27 +3,32 @@ title: Rancher v2.5 weight: 1 --- -For Rancher v2.5, the guides are organized differntly than previous guides. Since Rancher v2.5 can be deployed on any Kubernetes cluster, the guides are broken up based on Rancher's Kubernetes distributions. To harden a Kubernetes cluster outside of Rancher's distributions, refer to your Kubernetes provider docs. +Rancher v2.5 introduced the capability to deploy Rancher on any Kubernetes cluster. For that reason, we now provide separate security hardening guides for Rancher deployments on each of Rancher's Kubernetes distributions. Rancher has the following Kubernetes distributions: -* RKE -* k3s -* RKE2 +- [**RKE,**](https://rancher.com/docs/rke/latest/en/) Rancher Kubernetes Engine, is a CNCF-certified Kubernetes distribution that runs entirely within Docker containers. +- [**K3s,**]({{}}/k3s/latest/en/) Lightweight Kubernetes, is easy to install, with half the memory of upstream Kubernetes, all in a binary of less than 100 MB. +- [**RKE2**](https://docs.rke2.io/) is a fully conformant Kubernetes distribution that focuses on security and compliance within the U.S. Federal Government sector. -### Guides +To harden a Kubernetes cluster outside of Rancher's distributions, refer to your Kubernetes provider docs. + +# Guides These guides have been tested along with the Rancher v2.5 release. Each self assessment guide is accompanied with a hardening guide and tested on a specific Kubernetes version and CIS benchmark version. If a CIS benchmark has not been validated for your Kubernetes version, you can choose to use the existing guides until a newer version is added. - -#### RKE Guides +### RKE Guides Kubernetes Version | CIS Benchmark Version | Self Assessment Guide | Hardening Guides ---|---|---|--- Kubernetes v1.15+ | CIS v1.5 | [Link](./1.5-benchmark-2.5) | [Link](./1.5-hardening-2.5) -#### RKE2 Guides +### RKE2 Guides Kubernetes Version | CIS Benchmark Version | Self Assessment Guide | Hardening Guides ---|---|---|--- Kubernetes v1.18 | CIS v1.5 | [Link](https://docs.rke2.io/security/cis_self_assessment/) | [Link](https://docs.rke2.io/security/hardening_guide/) + +### K3s Guides + +The K3s security guides will be added soon.