Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RKE1 EOL Warning Banner #191

Open
wants to merge 2 commits into
base: main
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions shared/modules/ROOT/partials/en/eol-rke1-warning.adoc
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
[WARNING]
====
Rancher Kubernetes Engine (RKE/RKE1) will reach end of life on **July 31, 2025**. Rancher 2.12.0 and later will no longer support provisioning or managing downstream RKE1 clusters. We recommend replatforming RKE1 clusters to RKE2 to ensure continued support and security updates. Learn more about the transition https://www.suse.com/support/kb/doc/?id=000021518[here].
====
4 changes: 4 additions & 0 deletions shared/modules/ROOT/partials/zh/eol-rke1-warning.adoc
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
[WARNING]
====
Rancher Kubernetes Engine (RKE/RKE1) will reach end of life on **July 31, 2025**. Rancher 2.12.0 and later will no longer support provisioning or managing downstream RKE1 clusters. We recommend replatforming RKE1 clusters to RKE2 to ensure continued support and security updates. Learn more about the transition https://www.suse.com/support/kb/doc/?id=000021518[here].
====
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= Behavior Differences Between RKE1 and {rke2-product-name}

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]

RKE2, also known as RKE Government, is a Kubernetes distribution that focuses on security and compliance for U.S. Federal Government entities. It is considered the next iteration of the Rancher Kubernetes Engine, now known as RKE1.

RKE1 and RKE2 have several slight behavioral differences to note, and this page will highlight some of these at a high level.
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= Setting up Infrastructure for a High Availability RKE Kubernetes Cluster

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]

This tutorial is intended to help you create a high-availability RKE cluster that can be used to install a Rancher server.

[NOTE]
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= Setting up a High-availability RKE Kubernetes Cluster

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]

This section describes how to install a Kubernetes cluster. This cluster should be dedicated to run only the Rancher server.

[NOTE]
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= Applying Templates

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]

You can create a cluster from an RKE template that you created, or from a template that has been xref:rancher-admin/global-configuration/rke1-templates/access-or-share-templates.adoc[shared with you.]

RKE templates can be applied to new clusters.
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= RKE Templates and Infrastructure

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]

In Rancher, RKE templates are used to provision Kubernetes and define Rancher settings, while node templates are used to provision nodes.

Therefore, even if RKE template enforcement is turned on, the end user still has flexibility when picking the underlying hardware when creating a Rancher cluster. The end users of an RKE template can still choose an infrastructure provider and the nodes they want to use.
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,8 @@
= Creating and Revising RKE Templates
:experimental:

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]

This section describes how to manage RKE templates and revisions. You an create, share, update, and delete templates from the *Cluster Management* view under menu:RKE1 Configuration[RKE Templates].

Template updates are handled through a revision system. When template owners want to change or update a template, they create a new revision of the template. Individual revisions cannot be edited. However, if you want to prevent a revision from being used to create a new cluster, you can disable it.
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= About RKE1 Templates

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]

RKE templates are designed to allow DevOps and security teams to standardize and simplify the creation of Kubernetes clusters.

RKE is the https://rancher.com/docs/rke/latest/en/[Rancher Kubernetes Engine,] which is the tool that Rancher uses to provision Kubernetes clusters.
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= RKE Hardening Guides

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]

This document provides prescriptive guidance for how to harden an RKE cluster intended for production, before provisioning it with Rancher. It outlines the configurations and controls required for Center for Information Security (CIS) Kubernetes benchmark controls.

[NOTE]
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,8 @@
= RKE Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.23

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]


This document is a companion to the xref:security/hardening-guides/rke1/rke1.adoc[RKE Hardening Guide], which provides prescriptive guidance on how to harden RKE clusters that are running in production and managed by Rancher. This benchmark guide helps you evaluate the security of a hardened cluster against each control in the CIS Kubernetes Benchmark.

This guide corresponds to the following versions of Rancher, CIS Benchmarks, and Kubernetes:
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= RKE Self-Assessment Guide - CIS Benchmark v1.24 - K8s v1.24

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]

This document is a companion to the xref:security/hardening-guides/rke1/rke1.adoc[RKE Hardening Guide], which provides prescriptive guidance on how to harden RKE clusters that are running in production and managed by Rancher. This benchmark guide helps you evaluate the security of a hardened cluster against each control in the CIS Kubernetes Benchmark.

This guide corresponds to the following versions of Rancher, CIS Benchmarks, and Kubernetes:
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= RKE Self-Assessment Guide - CIS Benchmark v1.7 - K8s v1.25/v1.26/v1.27

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]

This document is a companion to the xref:security/hardening-guides/rke1/rke1.adoc[RKE Hardening Guide], which provides prescriptive guidance on how to harden RKE clusters that are running in production and managed by Rancher. This benchmark guide helps you evaluate the security of a hardened cluster against each control in the CIS Kubernetes Benchmark.

This guide corresponds to the following versions of Rancher, CIS Benchmarks, and Kubernetes:
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= RKE1 和 {rke2-product-name} 差​​异

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]

RKE2,也称为 RKE Government,是一个完全符合标准的 Kubernetes 发行版,它专注于安全性和合规性。它被认为是 Rancher Kubernetes Engine(即 RKE1)的下一个迭代。

RKE1 和 RKE2 有一些细微的差异,本文将重点介绍这些差异。
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= 为高可用 RKE Kubernetes 集群设置基础设施

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]

本教程旨在帮助你创建一个高可用的 RKE 集群,用于安装 Rancher Server。

[NOTE]
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= 配置高可用的 RKE Kubernetes 集群

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]

本文介绍如何安装 Kubernetes 集群。该集群应专用于运行 Rancher Server。

[NOTE]
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= 应用模板

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]

你可以使用你自己创建的 RKE 模板来创建集群,也可以使用xref:rancher-admin/global-configuration/rke1-templates/access-or-share-templates.adoc[与你共享的模板]来创建集群。

RKE 模板可以应用于新集群。
Expand Down
Original file line number Diff line number Diff line change
@@ -1,4 +1,6 @@
= RKE 模板和基础设施
= RKE 模板

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]和基础设施

在 Rancher 中,RKE 模板用于配置 Kubernetes 和定义 Rancher 设置,而节点模板则用于配置节点。

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,8 @@
= 创建和修改 RKE 模板
:experimental:

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]

本节介绍如何管理 RKE 模板和修订版。你可以从 menu:RKE1 配置[RKE 模板]下的**集群管理**视图创建、共享、更新和删除模板。

模板更新通过修订系统处理。当模板所有者想要更改或更新模板时,他们会创建模板的新版本。单个修订无法编辑。但是,如果你想防止使用修订来创建新集群,你可以禁用它。
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= RKE 模板

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]

RKE 模板旨在让 DevOps 和安全团队标准化和简化 Kubernetes 集群创建的流程。

RKE 的全称是 https://rancher.com/docs/rke/latest/en/[Rancher Kubernetes Engine],它是 Rancher 用来配置 Kubernetes 集群的工具。
Expand Down Expand Up @@ -39,7 +41,9 @@ RKE 模板可以在 Rancher UI 中创建或以 YAML 格式定义。当你使用

RKE 模板的<<_附加组件,附加组件>>的功能特别强大,因为它允许多种自定义选项。

== RKE 模板的范围
== RKE 模板

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]的范围

Rancher 配置的集群支持 RKE 模板。模板可用于配置自定义集群或由基础设施提供商启动的集群。

Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= RKE 加固指南

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]

本文档提供了针对生产环境的 RKE 集群进行加固的具体指导,以便在使用 Rancher 部署之前进行配置。它概述了满足信息安全中心(Center for Information Security, CIS)Kubernetes benchmark controls 所需的配置和控制。

[NOTE]
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= RKE 自我评估指南 - CIS Benchmark v1.23 - K8s v1.23

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]

本文档是 xref:security/hardening-guides/rke1/rke1.adoc[RKE 加固指南]的配套文档,该指南提供了关于如何加固正在生产环境中运行并由 Rancher 管理的 RKE 集群的指导方针。本 benchmark 指南可帮助你根据 CIS Kubernetes Benchmark 中的每个 control 来评估加固集群的安全性。

本指南对应以下版本的 Rancher、CIS Benchmarks 和 Kubernetes:
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= RKE 自我评估指南 - CIS Benchmark v1.24 - K8s v1.24

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]

本文档是 xref:security/hardening-guides/rke1/rke1.adoc[RKE 加固指南]的配套文档,该指南提供了关于如何加固正在生产环境中运行并由 Rancher 管理的 RKE 集群的指导方针。本 benchmark 指南可帮助你根据 CIS Kubernetes Benchmark 中的每个 control 来评估加固集群的安全性。

本指南对应以下版本的 Rancher、CIS Benchmarks 和 Kubernetes:
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= RKE 自我评估指南 - CIS Benchmark v1.7 - K8s v1.25/v1.26/v1.27

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]

本文档是 xref:security/hardening-guides/rke1/rke1.adoc[RKE 加固指南]的配套文档,该指南提供了关于如何加固正在生产环境中运行并由 Rancher 管理的 RKE 集群的指导方针。本 benchmark 指南可帮助你根据 CIS Kubernetes Benchmark 中的每个 control 来评估加固集群的安全性。

本指南对应以下版本的 Rancher、CIS Benchmarks 和 Kubernetes:
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= Behavior Differences Between RKE1 and {rke2-product-name}

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]

RKE2, also known as RKE Government, is a Kubernetes distribution that focuses on security and compliance for U.S. Federal Government entities. It is considered the next iteration of the Rancher Kubernetes Engine, now known as RKE1.

RKE1 and RKE2 have several slight behavioral differences to note, and this page will highlight some of these at a high level.
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= Setting up Infrastructure for a High Availability RKE Kubernetes Cluster

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]

This tutorial is intended to help you create a high-availability RKE cluster that can be used to install a Rancher server.

[NOTE]
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= Setting up a High-availability RKE Kubernetes Cluster

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]

This section describes how to install a Kubernetes cluster. This cluster should be dedicated to run only the Rancher server.

[NOTE]
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= Applying Templates

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]

You can create a cluster from an RKE template that you created, or from a template that has been xref:rancher-admin/global-configuration/rke1-templates/access-or-share-templates.adoc[shared with you.]

RKE templates can be applied to new clusters.
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= RKE Templates and Infrastructure

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]

In Rancher, RKE templates are used to provision Kubernetes and define Rancher settings, while node templates are used to provision nodes.

Therefore, even if RKE template enforcement is turned on, the end user still has flexibility when picking the underlying hardware when creating a Rancher cluster. The end users of an RKE template can still choose an infrastructure provider and the nodes they want to use.
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,8 @@
= Creating and Revising RKE Templates
:experimental:

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]

This section describes how to manage RKE templates and revisions. You an create, share, update, and delete templates from the *Cluster Management* view under menu:RKE1 Configuration[RKE Templates].

Template updates are handled through a revision system. When template owners want to change or update a template, they create a new revision of the template. Individual revisions cannot be edited. However, if you want to prevent a revision from being used to create a new cluster, you can disable it.
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= About RKE1 Templates

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]

RKE templates are designed to allow DevOps and security teams to standardize and simplify the creation of Kubernetes clusters.

RKE is the https://rancher.com/docs/rke/latest/en/[Rancher Kubernetes Engine,] which is the tool that Rancher uses to provision Kubernetes clusters.
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= RKE Hardening Guides

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]

This document provides prescriptive guidance for how to harden an RKE cluster intended for production, before provisioning it with Rancher. It outlines the configurations and controls required for Center for Information Security (CIS) Kubernetes benchmark controls.

[NOTE]
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,8 @@
= RKE Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.23

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]


This document is a companion to the xref:security/hardening-guides/rke1/rke1.adoc[RKE Hardening Guide], which provides prescriptive guidance on how to harden RKE clusters that are running in production and managed by Rancher. This benchmark guide helps you evaluate the security of a hardened cluster against each control in the CIS Kubernetes Benchmark.

This guide corresponds to the following versions of Rancher, CIS Benchmarks, and Kubernetes:
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= RKE Self-Assessment Guide - CIS Benchmark v1.24 - K8s v1.24

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]

This document is a companion to the xref:security/hardening-guides/rke1/rke1.adoc[RKE Hardening Guide], which provides prescriptive guidance on how to harden RKE clusters that are running in production and managed by Rancher. This benchmark guide helps you evaluate the security of a hardened cluster against each control in the CIS Kubernetes Benchmark.

This guide corresponds to the following versions of Rancher, CIS Benchmarks, and Kubernetes:
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= RKE Self-Assessment Guide - CIS Benchmark v1.7 - K8s v1.25/v1.26/v1.27

include::shared:ROOT:partial$en/eol-rke1-warning.adoc[]

This document is a companion to the xref:security/hardening-guides/rke1/rke1.adoc[RKE Hardening Guide], which provides prescriptive guidance on how to harden RKE clusters that are running in production and managed by Rancher. This benchmark guide helps you evaluate the security of a hardened cluster against each control in the CIS Kubernetes Benchmark.

This guide corresponds to the following versions of Rancher, CIS Benchmarks, and Kubernetes:
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= RKE1 和 {rke2-product-name} 差​​异

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]

RKE2,也称为 RKE Government,是一个完全符合标准的 Kubernetes 发行版,它专注于安全性和合规性。它被认为是 Rancher Kubernetes Engine(即 RKE1)的下一个迭代。

RKE1 和 RKE2 有一些细微的差异,本文将重点介绍这些差异。
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= 为高可用 RKE Kubernetes 集群设置基础设施

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]

本教程旨在帮助你创建一个高可用的 RKE 集群,用于安装 Rancher Server。

[NOTE]
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= 配置高可用的 RKE Kubernetes 集群

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]

本文介绍如何安装 Kubernetes 集群。该集群应专用于运行 Rancher Server。

[NOTE]
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= 应用模板

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]

你可以使用你自己创建的 RKE 模板来创建集群,也可以使用xref:rancher-admin/global-configuration/rke1-templates/access-or-share-templates.adoc[与你共享的模板]来创建集群。

RKE 模板可以应用于新集群。
Expand Down
Original file line number Diff line number Diff line change
@@ -1,4 +1,6 @@
= RKE 模板和基础设施
= RKE 模板

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]和基础设施

在 Rancher 中,RKE 模板用于配置 Kubernetes 和定义 Rancher 设置,而节点模板则用于配置节点。

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,8 @@
= 创建和修改 RKE 模板
:experimental:

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]

本节介绍如何管理 RKE 模板和修订版。你可以从 menu:RKE1 配置[RKE 模板]下的**集群管理**视图创建、共享、更新和删除模板。

模板更新通过修订系统处理。当模板所有者想要更改或更新模板时,他们会创建模板的新版本。单个修订无法编辑。但是,如果你想防止使用修订来创建新集群,你可以禁用它。
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= RKE 模板

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]

RKE 模板旨在让 DevOps 和安全团队标准化和简化 Kubernetes 集群创建的流程。

RKE 的全称是 https://rancher.com/docs/rke/latest/en/[Rancher Kubernetes Engine],它是 Rancher 用来配置 Kubernetes 集群的工具。
Expand Down Expand Up @@ -39,7 +41,9 @@ RKE 模板可以在 Rancher UI 中创建或以 YAML 格式定义。当你使用

RKE 模板的<<_附加组件,附加组件>>的功能特别强大,因为它允许多种自定义选项。

== RKE 模板的范围
== RKE 模板

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]的范围

Rancher 配置的集群支持 RKE 模板。模板可用于配置自定义集群或由基础设施提供商启动的集群。

Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= RKE 加固指南

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]

本文档提供了针对生产环境的 RKE 集群进行加固的具体指导,以便在使用 Rancher 部署之前进行配置。它概述了满足信息安全中心(Center for Information Security, CIS)Kubernetes benchmark controls 所需的配置和控制。

[NOTE]
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= RKE 自我评估指南 - CIS Benchmark v1.23 - K8s v1.23

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]

本文档是 xref:security/hardening-guides/rke1/rke1.adoc[RKE 加固指南]的配套文档,该指南提供了关于如何加固正在生产环境中运行并由 Rancher 管理的 RKE 集群的指导方针。本 benchmark 指南可帮助你根据 CIS Kubernetes Benchmark 中的每个 control 来评估加固集群的安全性。

本指南对应以下版本的 Rancher、CIS Benchmarks 和 Kubernetes:
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
= RKE 自我评估指南 - CIS Benchmark v1.24 - K8s v1.24

include::shared:ROOT:partial$zh/eol-rke1-warning.adoc[]

本文档是 xref:security/hardening-guides/rke1/rke1.adoc[RKE 加固指南]的配套文档,该指南提供了关于如何加固正在生产环境中运行并由 Rancher 管理的 RKE 集群的指导方针。本 benchmark 指南可帮助你根据 CIS Kubernetes Benchmark 中的每个 control 来评估加固集群的安全性。

本指南对应以下版本的 Rancher、CIS Benchmarks 和 Kubernetes:
Expand Down
Loading