Rancher News

• 

  What Is Etcd and How Do You Set Up an Etcd Cluster?
  • sorangutan  

  1
  1
  Posts
  63
  Views

  

  Introduction Etcd is an open-source distributed key-value store created by the CoreOS team, now managed by the Cloud Native Computing Foundation. It is pronounced “et-cee-dee”, making reference to distributing the Unix “/etc” directory, where most global configuration files live, across multiple machines. It serves as the backbone of many distributed systems, providing a reliable way for storing data across a cluster of servers. It works on a variety of operating systems including here Linux, BSD and OS X.
  
  https://rancher.com/blog/2019/2019-01-29-what-is-etcd/
• 

  Explaining security vulnerabilities addressed in Rancher v2.1.6 and v2.0.11
  • sorangutan  

  1
  1
  Posts
  70
  Views

  

  Today we announced releases v2.1.6 and v2.0.11 to address two security vulnerabilities recently discovered in Rancher. The first vulnerability allows users in the Default project of a cluster to escalate privileges to that of a cluster admin through a service account. The second vulnerability allows members to have continued access to create, update, read, and delete namespaces in a project after they have been removed from it. You can view the official CVEs here CVE-2018-20321 and here CVE-2019-6287.
  
  https://rancher.com/blog/2019/2019-01-29-explaining-security-vulnerabilities-addressed-in-rancher-v2-1-6-and-v2-0-11/
• 

  Introduction to Kubernetes Namespaces
  • sorangutan  

  1
  1
  Posts
  66
  Views

  

  Introduction Kubernetes clusters can manage large numbers of unrelated workloads concurrently and organizations often choose to deploy projects created by separate teams to shared clusters. Even with relatively light use, the number of deployed objects can quickly become unmanageable, slowing down operational responsiveness and increasing the chance of dangerous mistakes. Kubernetes uses a concept called namespaces to help address the complexity of organizing objects within a cluster. Namespaces allow you to group objects together so you can filter and control them as a unit.
  
  https://rancher.com/blog/2019/2019-01-28-introduction-to-kubernetes-namespaces/
• 

  101 More Security Best Practices for Kubernetes
  • sorangutan  

  1
  1
  Posts
  75
  Views

  

  101 More Security Best Practices For Kubernetes The CNCF recently released 9 Kubernetes Security Best Practices Everyone Must Follow, in which they outline nine basic actions that they recommend people take with their Kubernetes clusters. Although their recommendations are a good start, the article leans heavily on GKE. For those of you who are committed to using Google’s services, GKE is a good solution. However, others want to run in Amazon, Azure, DigitalOcean, on their own infrastructure, or anywhere else they can think of, and having solutions that point to GKE doesn’t help them.
  
  https://rancher.com/blog/2019/2019-01-17-101-more-kubernetes-security-best-practices/
• 

  Migrating a Rancher 2.1.x Single Node Installation to a High Availability Installation
  • sorangutan  

  1
  1
  Posts
  71
  Views

  

  Rancher offers two installation methods, single node and high availability. Single node installations allow users to quickly deploy a working Rancher 2 installation suitable for short-term development or proof-of-concept purposes. High availability deployments are significantly better suited for long-lived deployments of Rancher. Important Notes Migration from Single Node to HA is not supported by Rancher Labs You should be familiar with the Rancher architecture/troubleshooting in the event that you have issues during this process Prerequisites In order to migrate a single node Rancher installation to a high availability installation, a few facts must be true.
  
  https://rancher.com/blog/2019/2019-01-10-migrating-single-node-2-1-x-to-high-availability/
• 

  Addressing the Kubernetes dashboard and external IP proxying vulnerabilities
  • sorangutan  

  1
  1
  Posts
  78
  Views

  

  Kubernetes announced two patches to address recently discovered security vulnerabilities for both Kubernetes and the Kubernetes dashboard. For more details of the announcements, see the Security Impact of Kubernetes API server external IP address proxying and Security release of dashboard v1.10.1 - CVE-2018-18264. Let’s take a deeper dive into each one and how they can affect your Rancher deployments. Accessing custom TLS certs via the kubernetes dashboard The Kubernetes dashboard vulnerability (CVE-2018-18264) affects dashboard version v1.
  
  https://rancher.com/blog/2019/2019-01-04-kubernetes-dashboard-external-ip-proxying-vulnerabilities/
• 

  Herd your Rancher Labs multi-cloud strategy with Artifactory
  • sorangutan  

  1
  1
  Posts
  70
  Views

  

  DevOps engineers have grown so reliant on the power and scalability of Kubernetes (K8s) clusters that one server platform can seldom accommodate them all. More and more enterprises now run their containerized applications in clusters across multiple platforms at once, in public clouds and on-prem servers. That can fuel a chaotic stampede in an enterprise-class system - who has control, and which builds do you trust? Rancher offers a solution for managing multiple K8s clusters, and an enhanced Kubernetes distribution with additional features for central control of those clusters.
  
  https://rancher.com/blog/2018/2019-01-02-herd-multi-cloud-kubernetes-strategy-with-artifactory/
• 

  Deploying Elasticsearch Within Kubernetes
  • sorangutan  

  1
  1
  Posts
  77
  Views

  

  Introduction Elasticsearch is an open-source search engine based on Apache Lucene and developed by Elastic. It focuses on features like scalability, resilience, and performance, and companies all around the world, including Mozilla, Facebook, Github, Netflix, eBay, the New York Times, and others, use it every day. Elasticsearch is one of the most popular analytics platforms for large datasets and is present almost everywhere that you find a search engine. It uses a document-oriented approach when manipulating data, and it can parse it in almost real-time while a user is performing a search.
  
  https://rancher.com/blog/2018/2018-11-22-deploying-elasticsearch/
• 

  How to Get Started with Rancher’s New Multi-Tenant Prometheus Support and Alpha Release Process
  • sorangutan  

  1
  1
  Posts
  106
  Views

  

  I recently started at Rancher Labs as the Head of Product Management. I have been in the DevOps space since my time at VMware when we built Cloud Foundry back in 2011. But it wasn’t until 2014, that I started to look at Containers seriously. When Kubernetes launched the next year, it was clear that the enterprises need an easier way to deploy containers in their internal environments. I launched Qubeship.
  
  https://rancher.com/blog/2018/2018-12-12-how-to-multi-tenant-prometheus-and-alpha-process/
• 

  China's biggest windmills are powered by Kubernetes: Interview with Rancher CEO Sheng Liang
  • sorangutan  

  1
  1
  Posts
  85
  Views

  

  Video Transcription Swapnil: Hi, this is Swapnil Bhartiya, and we are here at KubeCon and CloudNativeCon in Shanghai, China, and today we have Sheng Leng from Rancher Labs. Sheng: That’s right. Swapnil: It’s nice to see you. Sheng: Very nice to see you too. Swapnil: It’s been a pleasure, because I’ve been chasing you for a while, so it’s good to be sitting down with you and talking again.
  
  https://rancher.com/blog/2018/2018-12-17-kubernetes-powers-windmills-rancher-ceo-interview/
• 

  Kubernetes on the Edge
  • sorangutan  

  1
  1
  Posts
  95
  Views

  

  Today we announced a partnership with Arm to create a Kubernetes-based platform for IoT, edge, and data center nodes, all powered by Arm servers. The platform includes a port of Rancher Kubernetes Engine (RKE) and RancherOS to Arm Neoverse-based servers. We have also enhanced Rancher 2.1 so that a single Rancher server can manage mixed x86 and Arm 64 nodes. Customers can therefore have x86 clusters running in the data center and Arm clusters running on the edge.
  
  https://rancher.com/blog/2018/2018-12-11-kubernetes-on-the-edge/
• 

  The Story of the First Kubernetes Critical CVE
  • sorangutan  

  1
  1
  Posts
  84
  Views

  

  CVE CVE-2018-1002105 was just announced in Kubernetes. I discovered this issue in early November, but the bug actually goes back a couple years and is a pretty interesting story and technical issue. Since this is the first critical CVE for Kubernetes, it is getting a lot of attention, but I don’t think it’s as bad as most people think. In fact, I think quite the opposite: this CVE shows how strong the community is and how well run it is.
  
  https://rancher.com/blog/2018/2018-12-04-k8s-cve/
• 

  Introduction to Kubernetes Monitoring
  • sorangutan  

  1
  1
  Posts
  70
  Views

  

  Introduction With over 40,000 stars on Github, more than 70,000 commits, and with major contributors like Google and Redhat, Kubernetes has rapidly taken over the container ecosystem to become the true leader of container orchestration platforms. Understanding Kubernetes and Its Abstractions At the infrastructure level, a Kubernetes cluster is a set of physical or virtual machines acting in a specific role. The machines acting in the role of Master act as the brain of all operations and are charged with orchestrating containers that run on all of the Nodes.
  
  https://rancher.com/blog/2018/2018-10-18-monitoring-kubernetes/
• 

  Deploying and Scaling Jenkins on Kubernetes
  • sorangutan  

  1
  1
  Posts
  99
  Views

  

  Introduction Jenkins is an open-source continuous integration and continuous delivery tool, which can be used to automate building, testing, and deploying software. It is widely considered the most popular automation server, being used by more than a million users worldwide. Some advantages of Jenkins include: Open-source software with extensive community support Java-based codebase, making it portable to all major platforms A rich ecosystem of more than 1000 plugins Jenkins works well with all popular Source Control Management systems (Git, SVN, Mercurial and CVS), popular build tools (Ant, Maven, Grunt), shell scripts and Windows batch commands, as well as testing frameworks and report generators.
  
  https://rancher.com/blog/2018/2018-11-27-scaling-jenkins/
• 

  What is CI/CD?
  • sorangutan  

  1
  1
  Posts
  100
  Views

  

  The demands of modern software development combined with complexities of deploying to varied infrastructure can make creating applications a tedious process. As applications grow in size and scope, and development teams become more distributed and diverse, the overall process required to produce and release software quickly and consistently becomes more difficult. To address these issues, teams began exploring new strategies to automate their build, test, and release processes to help deploy new changes to production faster.
  
  https://rancher.com/blog/2018/2018-11-14-what-is-cicd/
• 

  Announcing Added Support for Leading Kubernetes Services in China
  • sorangutan  

  1
  1
  Posts
  100
  Views

  

  Today we are proud to announce support for all leading Kubernetes services in China. Rancher now has added support for Huawei Cloud Container Engine (CCE), Alibaba Cloud Container Service for Kubernetes (ACK) and Tencent Kubernetes Engine (TKE). Rancher continues to be the unequivocal choice for enterprises running containers and Kubernetes in production. As enterprises continue to adopt Kubernetes at a global level, it is vital that we continue to expand our support.
  
  https://rancher.com/blog/2018/2018-11-14-rancher-announces-china-cloud-provider-support/
• 

  Using JFrog Artifactory as Docker Image Repository
  • sorangutan  

  1
  1
  Posts
  92
  Views

  

  This article is a continuation of Deploying JFrog Artifactory with Rancher. In this chapter we’ll demonstrate how to use JFrog Artifactory as a private repository for your own Docker images. NOTE: This feature of JFrog Artifactory requires a license, but you can get a 30-day trial and use it to follow along. Prepare GCP for the Deployment If you plan to use Artifactory as a repository for Docker outside of your local network, you’ll need a public IP address.
  
  https://rancher.com/blog/2018/2018-11-05-jfrog-artifactory-part-two/
• 

  Deploying JFrog Artifactory with Rancher, Part One
  • sorangutan  

  1
  1
  Posts
  105
  Views

  

  Deploying JFrog Artifactory with Rancher, Part One JFrog Artifactory is a universal artifact repository that supports all major packaging formats, build tools and continuous integration (CI) servers. It holds all of your binary content in a single location and presents an interface that makes it easy to upload, find, and use binaries throughout the application development and delivery process. In this article we’ll walk through using Rancher to deploy and manage JFrog Artifactory on a Kubernetes cluster.
  
  https://rancher.com/blog/2018/2018-10-29-jfrog-artifactory-p1/
• 

  Forrester identifies Rancher as a Leader in Enterprise Container Management.
  • sorangutan  

  1
  1
  Posts
  98
  Views

  

  Last week we got some exciting news here at Rancher, when the analyst firm Forrester published a report that identified Rancher as in its “leaders” category for Enterprise Container Management Software. Rancher was identified as a leader along with Docker Enterprise Edition and RedHat OpenShift, and was specifically called out for excelling in providing multi-cluster Kubernetes management. The analysts ranked Docker EE first giving it high marks for supporting both Swarm and Kubernetes and providing leadership for the Docker open source community, and scored OpenShift highly for how well it integrates with the RedHat ecosystem of products, and for providing an integrated developer experience.
  
  https://rancher.com/blog/2018/2018-10-22-forrester-rancher-leader-enterprise-container-management/