Self-Assessment and Hardening Guides for SUSE Rancher Prime

Rancher uses the following Kubernetes distributions:

To harden a Kubernetes cluster that’s running a distribution other than those listed, refer to your Kubernetes provider docs.

Each self-assessment guide is accompanied by a hardening guide. These guides were tested alongside the listed Rancher releases. Each self-assessment guides was tested on a specific Kubernetes version and CIS benchmark version. If a CIS benchmark has not been validated for your Kubernetes version, you can use the existing guides until a guide for your version is added.

Security-Enhanced Linux (SELinux) is a kernel module that adds extra access controls and security tools to Linux. Historically used by government agencies, SELinux is now industry-standard. SELinux is enabled by default on RHEL and CentOS.

To use Rancher with SELinux, we recommend installing the rancher-selinux RPM.