deploy: 25771e2843

assets/js/298b80c5.b6861b3f.js

@@ -324,8 +324,8 @@ const metadata = {
     "editUrl": "https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.8/reference-guides/rancher-security/rancher-security-best-practices.md",
     "tags": [],
     "version": "2.8",
-    "lastUpdatedAt": 1698178257,
-    "formattedLastUpdatedAt": "Oct 24, 2023",
+    "lastUpdatedAt": 1700152502,
+    "formattedLastUpdatedAt": "Nov 16, 2023",
     "frontMatter": {
         "title": "Rancher Security Best Practices"
     },
@@ -345,6 +345,11 @@ const toc = [
         value: 'Restrict Public Access to /version and /rancherversion Path',
         id: 'restrict-public-access-to-version-and-rancherversion-path',
         level: 3
+    },
+    {
+        value: 'Session Management',
+        id: 'session-management',
+        level: 3
     }
 ];
 const layoutProps = {
@@ -374,7 +379,12 @@ function MDXContent(_param) {
     }, `/rancherversion`), `.`), /*#__PURE__*/ (0,_mdx_js_react__WEBPACK_IMPORTED_MODULE_1__/* .mdx */ .kt)("p", null, `See `, /*#__PURE__*/ (0,_mdx_js_react__WEBPACK_IMPORTED_MODULE_1__/* .mdx */ .kt)("a", {
         parentName: "p",
         "href": "https://owasp.org/www-project-web-security-testing-guide/stable/4-Web_Application_Security_Testing/02-Configuration_and_Deployment_Management_Testing/05-Enumerate_Infrastructure_and_Application_Admin_Interfaces.html"
-    }, `OWASP Web Application Security Testing - Enumerate Infrastructure and Application Admin Interfaces`), ` for more information on protecting your server.`));
+    }, `OWASP Web Application Security Testing - Enumerate Infrastructure and Application Admin Interfaces`), ` for more information on protecting your server.`), /*#__PURE__*/ (0,_mdx_js_react__WEBPACK_IMPORTED_MODULE_1__/* .mdx */ .kt)("h3", {
+        "id": "session-management"
+    }, `Session Management`), /*#__PURE__*/ (0,_mdx_js_react__WEBPACK_IMPORTED_MODULE_1__/* .mdx */ .kt)("p", null, `Some environments may require additional security controls for session management. For example, you may want to limit users' concurrent active sessions or restrict which geolocations those sessions can be initiated from. Such features are not supported by Rancher out of the box. `), /*#__PURE__*/ (0,_mdx_js_react__WEBPACK_IMPORTED_MODULE_1__/* .mdx */ .kt)("p", null, `If you require such features, combine Layer 7 firewalls with `, /*#__PURE__*/ (0,_mdx_js_react__WEBPACK_IMPORTED_MODULE_1__/* .mdx */ .kt)("a", {
+        parentName: "p",
+        "href": "/v2.8/pages-for-subheaders/authentication-config#external-vs-local-authentication"
+    }, `external authentication providers`), `.`));
 }
 MDXContent.isMDXComponent = true;
 

assets/js/6f674679.36559ccf.js

@@ -324,8 +324,8 @@ const metadata = {
     "editUrl": "https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.7/reference-guides/rancher-security/rancher-security-best-practices.md",
     "tags": [],
     "version": "2.7",
-    "lastUpdatedAt": 1698178257,
-    "formattedLastUpdatedAt": "Oct 24, 2023",
+    "lastUpdatedAt": 1700152502,
+    "formattedLastUpdatedAt": "Nov 16, 2023",
     "frontMatter": {
         "title": "Rancher Security Best Practices"
     },
@@ -345,6 +345,11 @@ const toc = [
         value: 'Restrict Public Access to /version and /rancherversion Path',
         id: 'restrict-public-access-to-version-and-rancherversion-path',
         level: 3
+    },
+    {
+        value: 'Session Management',
+        id: 'session-management',
+        level: 3
     }
 ];
 const layoutProps = {
@@ -374,7 +379,12 @@ function MDXContent(_param) {
     }, `/rancherversion`), `.`), /*#__PURE__*/ (0,_mdx_js_react__WEBPACK_IMPORTED_MODULE_1__/* .mdx */ .kt)("p", null, `See `, /*#__PURE__*/ (0,_mdx_js_react__WEBPACK_IMPORTED_MODULE_1__/* .mdx */ .kt)("a", {
         parentName: "p",
         "href": "https://owasp.org/www-project-web-security-testing-guide/stable/4-Web_Application_Security_Testing/02-Configuration_and_Deployment_Management_Testing/05-Enumerate_Infrastructure_and_Application_Admin_Interfaces.html"
-    }, `OWASP Web Application Security Testing - Enumerate Infrastructure and Application Admin Interfaces`), ` for more information on protecting your server.`));
+    }, `OWASP Web Application Security Testing - Enumerate Infrastructure and Application Admin Interfaces`), ` for more information on protecting your server.`), /*#__PURE__*/ (0,_mdx_js_react__WEBPACK_IMPORTED_MODULE_1__/* .mdx */ .kt)("h3", {
+        "id": "session-management"
+    }, `Session Management`), /*#__PURE__*/ (0,_mdx_js_react__WEBPACK_IMPORTED_MODULE_1__/* .mdx */ .kt)("p", null, `Some environments may require additional security controls for session management. For example, you may want to limit users' concurrent active sessions or restrict which geolocations those sessions can be initiated from. Such features are not supported by Rancher out of the box. `), /*#__PURE__*/ (0,_mdx_js_react__WEBPACK_IMPORTED_MODULE_1__/* .mdx */ .kt)("p", null, `If you require such features, combine Layer 7 firewalls with `, /*#__PURE__*/ (0,_mdx_js_react__WEBPACK_IMPORTED_MODULE_1__/* .mdx */ .kt)("a", {
+        parentName: "p",
+        "href": "/v2.7/pages-for-subheaders/authentication-config#external-vs-local-authentication"
+    }, `external authentication providers`), `.`));
 }
 MDXContent.isMDXComponent = true;
 

assets/js/ebcf519c.f78bee61.js

@@ -324,8 +324,8 @@ const metadata = {
     "editUrl": "https://github.com/rancher/rancher-docs/edit/main/docs/reference-guides/rancher-security/rancher-security-best-practices.md",
     "tags": [],
     "version": "current",
-    "lastUpdatedAt": 1698177973,
-    "formattedLastUpdatedAt": "Oct 24, 2023",
+    "lastUpdatedAt": 1700152502,
+    "formattedLastUpdatedAt": "Nov 16, 2023",
     "frontMatter": {
         "title": "Rancher Security Best Practices"
     },
@@ -345,6 +345,11 @@ const toc = [
         value: 'Restrict Public Access to /version and /rancherversion Path',
         id: 'restrict-public-access-to-version-and-rancherversion-path',
         level: 3
+    },
+    {
+        value: 'Session Management',
+        id: 'session-management',
+        level: 3
     }
 ];
 const layoutProps = {
@@ -374,7 +379,12 @@ function MDXContent(_param) {
     }, `/rancherversion`), `.`), /*#__PURE__*/ (0,_mdx_js_react__WEBPACK_IMPORTED_MODULE_1__/* .mdx */ .kt)("p", null, `See `, /*#__PURE__*/ (0,_mdx_js_react__WEBPACK_IMPORTED_MODULE_1__/* .mdx */ .kt)("a", {
         parentName: "p",
         "href": "https://owasp.org/www-project-web-security-testing-guide/stable/4-Web_Application_Security_Testing/02-Configuration_and_Deployment_Management_Testing/05-Enumerate_Infrastructure_and_Application_Admin_Interfaces.html"
-    }, `OWASP Web Application Security Testing - Enumerate Infrastructure and Application Admin Interfaces`), ` for more information on protecting your server.`));
+    }, `OWASP Web Application Security Testing - Enumerate Infrastructure and Application Admin Interfaces`), ` for more information on protecting your server.`), /*#__PURE__*/ (0,_mdx_js_react__WEBPACK_IMPORTED_MODULE_1__/* .mdx */ .kt)("h3", {
+        "id": "session-management"
+    }, `Session Management`), /*#__PURE__*/ (0,_mdx_js_react__WEBPACK_IMPORTED_MODULE_1__/* .mdx */ .kt)("p", null, `Some environments may require additional security controls for session management. For example, you may want to limit users' concurrent active sessions or restrict which geolocations those sessions can be initiated from. Such features are not supported by Rancher out of the box. `), /*#__PURE__*/ (0,_mdx_js_react__WEBPACK_IMPORTED_MODULE_1__/* .mdx */ .kt)("p", null, `If you require such features, combine Layer 7 firewalls with `, /*#__PURE__*/ (0,_mdx_js_react__WEBPACK_IMPORTED_MODULE_1__/* .mdx */ .kt)("a", {
+        parentName: "p",
+        "href": "/pages-for-subheaders/authentication-config#external-vs-local-authentication"
+    }, `external authentication providers`), `.`));
 }
 MDXContent.isMDXComponent = true;
 

how-to-guides/advanced-user-guides/manage-projects/manage-project-resource-quotas/about-project-resource-quotas.html

@@ -15,8 +15,8 @@
 
 <script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" charset="UTF-8" data-domain-script="0f98beb0-fc4c-417d-a42e-564e2cae42d2" async></script>
 <script src="/scripts/optanonwrapper.js" async></script><link rel="stylesheet" href="/assets/css/styles.d66e0677.css">
-<link rel="preload" href="/assets/js/runtime~main.544b1ed0.js" as="script">
-<link rel="preload" href="/assets/js/main.1ebe4fa3.js" as="script">
+<link rel="preload" href="/assets/js/runtime~main.08ca0902.js" as="script">
+<link rel="preload" href="/assets/js/main.c92b0877.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-57KS2MW" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
@@ -30,7 +30,7 @@ will assign a resource quota that has a <strong>zero</strong> amount for any res
 requested quota limit, use the <code>field.cattle.io/resourceQuota</code> annotation.</p><p>Note that Rancher will only override limits for resources that are defined on the project quota.</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">apiVersion: v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kind: Namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">metadata:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  annotations:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    field.cattle.io/projectId: [your-cluster-ID]:[your-project-ID]</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    field.cattle.io/resourceQuota: &#x27;{&quot;limit&quot;:{&quot;limitsCpu&quot;:&quot;100m&quot;, &quot;configMaps&quot;: &quot;50&quot;}}&#x27;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  name: my-ns</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>In this example, if the project&#x27;s quota does not include configMaps in its list of resources, then Rancher will ignore <code>configMaps</code> in this override.</p><p>Users are advised to create dedicated <code>ResourceQuota</code> objects in namespaces to configure additional custom limits for resources not defined on the project.
 Resource quotas are native Kubernetes objects, and Rancher will ignore user-defined quotas in namespaces belonging to a project with a quota,
 thus giving users more control.</p><p>The following table explains the key differences between the two quota types.</p><table><thead><tr><th>Rancher Resource Quotas</th><th>Kubernetes Resource Quotas</th></tr></thead><tbody><tr><td>Applies to projects and namespace.</td><td>Applies to namespaces only.</td></tr><tr><td>Creates resource pool for all namespaces in project.</td><td>Applies static resource limits to individual namespaces.</td></tr><tr><td>Applies resource quotas to namespaces through propagation.</td><td>Applies only to the assigned namespace.</td></tr></tbody></table></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/rancher/rancher-docs/edit/main/docs/how-to-guides/advanced-user-guides/manage-projects/manage-project-resource-quotas/about-project-resource-quotas.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-10-12T17:26:54.000Z">Oct 12, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/pages-for-subheaders/manage-project-resource-quotas"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Project Resource Quotas</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/how-to-guides/advanced-user-guides/manage-projects/manage-project-resource-quotas/override-default-limit-in-namespaces"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Overriding the Default Limit for a Namespace</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 SUSE Rancher. All Rights Reserved.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.544b1ed0.js"></script>
-<script src="/assets/js/main.1ebe4fa3.js"></script>
+<script src="/assets/js/runtime~main.08ca0902.js"></script>
+<script src="/assets/js/main.c92b0877.js"></script>
 </body>
 </html>