The Logo of Rancher: an Open Source Kubernetes Multi Cluster Management Platform
  • Why Rancher?
    • Why Rancher?
    • Why Kubernetes?
    • How We strengthen Kubernetes​
    • Our Difference​
  • Products
    • Rancher
    • K3s
    • RKE
    • Harvester
    • Longhorn
  • Docs
  • Learn
    • Learn the Basics
    • Grow Your Skills
    • Get Certified
    • Documentation
    • Blogs
  • Community
    • Slack
    • Blogs
    • Join the Community
    • GitHub
    • Events & Webinars
    • Community Projects
  • Government
  • Pricing
  • Get started
  • Government
  • Pricing
Rancher Logo
  • Why RANCHER?
    • Why Rancher Why Rancher? How Rancher makes container adoption simple. Why Kubernetes Why Kubernetes? Discover the benefits of Kubernetes. How We strengthen Kubernetes How We strengthen Kubernetes​ How we are different than our competitors. Our Difference​ Our Difference​ Learn about our support offerings for Rancher.
  • Products
      • Rancher Cow Logo in color The world's most popular Kubernetes Management platform. k3s Lightweight production-grade Kubernetes built for the edge. rke Rancher Kubernetes Engine built for hybrid environments. Harvester A Kubernetes-native Hyperconverged infrastructure. Longhorn Cloud-native distributed storage platform for Kubernetes.
  • Docs
  • Learn
      • Slack Learn the Basics Foundational knowledge to get you started with Kubernetes. Slack Grow Your Skills Free classes and meetups to grow your container and Kubernetes knowledge. Slack Get Certified Certified Administrator course for Rancher. Slack Documentation Technical documentation and quick start guides. Slack Blogs Articles and industry knowledge from experts and guest authors.
  • Community
      • Slack Slack Join the Rancher Slack Channel. Blogs Blogs Articles and industry knowledge from experts and guest authors. GitHub GitHub Join the Rancher GitHub. Events & Webinars Events & Webinars Rancher events, online trainings and webinars.
      • Events & Webinars

        Community Projects

        See more fully-certified CNCF projects from Rancher.
        • K3s
        • Longhorn
        • Kubewarden
        • Rancher Desktop
        • Epinio
  • Get started
  • Rancher 2.6 (Latest)
    • RKE
    • Rancher 2.6 (Latest)
    • Rancher 2.5
    • Rancher 2.0-2.4
    • Rancher 1.6
    • RancherOS
Guides
  • Overview
    • Architecture
    • Architecture Recommendations
    • Kubernetes Concepts
  • Rancher Deployment Quick Start Guides
    • Deploying Rancher Server
      • Rancher AWS Quick Start Guide
      • Rancher AWS Marketplace Quick Start
      • Rancher Azure Quick Start Guide
      • Rancher DigitalOcean Quick Start Guide
      • Rancher GCP Quick Start Guide
      • Rancher Hetzner Cloud Quick Start Guide
      • Rancher Outscale Quick Start Guide
      • Vagrant Quick Start
      • Rancher Equinix Metal Quick Start
      • Helm CLI Quick Start
    • Deploying Workloads
      • Workload with Ingress Quick Start
      • Workload with NodePort Quick Start
  • Installing/Upgrading Rancher
    • Installation Requirements
      • Installing Docker
      • Dockershim
      • Port Requirements
    • Install/Upgrade Rancher on a Kubernetes Cluster
      • Rancher Helm Chart Options
      • Upgrades
        • Air Gap Upgrade
      • Rollbacks
    • Other Installation Methods
      • Air Gapped Helm CLI Install
        • 1. Set up Infrastructure and Private Registry
        • 2. Collect and Publish Images to your Private Registry
        • 3. Install Kubernetes (Skip for Docker Installs)
        • 4. Install Rancher
          • Docker Install Commands
      • Installing Rancher on a Single Node Using Docker
        • Certificate Troubleshooting
        • Advanced Options for Docker Installs
        • HTTP Proxy Configuration
        • Upgrading Rancher Installed with Docker
        • Rolling Back Rancher Installed with Docker
      • Installing Rancher behind an HTTP Proxy
        • 1. Set up Infrastructure
        • 2. Install Kubernetes
        • 3. Install Rancher
    • Resources
      • About Custom CA Root Certificates
      • Choosing a Rancher Version
      • Adding TLS Secrets
      • Helm Version Requirements
      • TLS Settings
      • Don't have a Kubernetes cluster? Try one of these tutorials.
        • About High-availability Installations
        • Set up K3s for Rancher
        • Set up RKE2 for Rancher
        • Amazon EKS
        • AKS
        • GKE
        • Set up RKE Kubernetes
        • Infrastructure Tutorials
          • Set up Infrastructure for a High Availability K3s Kubernetes Cluster
          • Set up Infrastructure for a High Availability RKE2 Kubernetes Cluster
          • Set up Infrastructure for a High Availability RKE Kubernetes Cluster
          • Setting up Nodes in Amazon EC2
          • Setting up a MySQL Database in Amazon RDS
          • Setting up an NGINX Load Balancer
          • Setting up Amazon ELB Network Load Balancer
      • Upgrading Cert-Manager
      • Updating the Rancher Certificate
      • Enabling Experimental Features
        • Allow Unsupported Storage Drivers
        • UI for Istio Virtual Services and Destination Rules
        • Continuous Delivery
      • Setting up Local System Charts for Air Gapped Installations
      • Troubleshooting the Rancher Server Kubernetes Cluster
      • Bootstrap Password
      • Advanced
        • Opening Ports with firewalld
        • Tuning etcd for Large Installations
        • Running on ARM64 (Experimental)
        • Enabling the API Audit Log to Record System Events
        • Docker Install with TLS Termination at Layer-7 NGINX Load Balancer
    • Cloud Marketplace Integration
      • AWS Marketplace Integration
        • Prerequisites
        • Installing the Adapter
        • Uninstalling The Adapter
        • Common Issues
      • Supportconfig bundle
  • Best Practices Guide
    • Rancher Server
      • On-Premises Rancher in vSphere
      • Rancher Deployment Strategy
      • Tips for Running Rancher
    • Rancher Managed Clusters
      • Logging Best Practices
      • Monitoring Best Practices
      • Tips for Setting Up Containers
      • Rancher Managed Clusters in vSphere
  • Backups and Disaster Recovery
    • Backing up Rancher
    • Restoring Rancher
    • Migrating Rancher to a New Cluster
    • Configuration
      • Backup
      • Restore
      • Storage
    • Examples
    • Docker Installs
      • Backups
      • Restores
  • Authentication, Permissions and Global Configuration
    • Authentication
      • Users and Groups
      • Configuring Google OAuth
      • Local Authentication
      • Configuring Active Directory (AD)
      • Configuring OpenLDAP
        • OpenLDAP Configuration Reference
      • Configuring FreeIPA
      • Configuring Azure AD
      • Configuring GitHub
      • Configuring Keycloak (OIDC)
      • Configuring Keycloak (SAML)
      • Configuring PingIdentity (SAML)
      • Configuring Microsoft Active Directory Federation Service (SAML)
        • 1. Configuring Microsoft AD FS for Rancher
        • 2. Configuring Rancher for Microsoft AD FS
      • Configuring Okta (SAML)
      • Configuring Shibboleth (SAML)
        • Group Permissions with Shibboleth and OpenLDAP
    • Role-Based Access Control (RBAC)
      • Global Permissions
      • Cluster and Project Roles
      • Custom Roles
      • Locked Roles
    • Upgrading Kubernetes without Upgrading Rancher
    • Configuring a Global Default Private Registry
    • Pod Security Policies
    • Provisioning Drivers
      • Cluster Drivers
      • Node Drivers
    • RKE Templates
      • Example Scenarios
      • Template Creator Permissions
      • Access and Sharing
      • Creating and Revising RKE Templates
      • Template Enforcement
      • Overriding Template Settings
      • Applying Templates
      • Example YAML
      • RKE Templates and Infrastructure
    • Custom Branding
    • Cluster Templates
  • Setting up Kubernetes Clusters in Rancher
    • Node Requirements for Rancher Managed Clusters
    • Checklist for Production-Ready Clusters
      • Recommended Cluster Architecture
      • Roles for Nodes in Kubernetes
    • Setting up Clusters from Hosted Kubernetes Providers
      • Google Kubernetes Engine
      • Amazon EKS
        • Minimum EKS Permissions
      • Azure Kubernetes Service
      • Alibaba Cloud Container Service for Kubernetes
      • Tencent Kubernetes Engine
      • Huawei Cloud Kubernetes Service
    • Launching Kubernetes with Rancher
      • Launching Kubernetes on New Nodes in an Infrastructure Provider
        • Amazon EC2
          • EC2 Node Template Configuration
          • EC2 Machine Configuration Reference
        • DigitalOcean
          • DigitalOcean Node Template Configuration
          • DigitalOcean Machine Configuration
        • Azure
          • Azure Node Template Configuration
          • Azure Machine Configuration
        • Nutanix
          • Provisioning Kubernetes Clusters in Nutanix AOS
          • Nutanix Node Template Configuration
        • vSphere
          • Provisioning Kubernetes Clusters in vSphere
          • VSphere Node Template Configuration
          • Creating Credentials in the vSphere Console
          • Creating a vSphere Virtual Machine Template
      • Launching Kubernetes on Existing Custom Nodes
        • Rancher Agent Options
      • Launching Kubernetes on Windows Clusters
        • Configuration for Storage Classes in Azure
        • RKE1 to RKE2 Windows Migration Guidance
        • Windows and Linux Cluster Feature Parity
        • Networking Requirements for Host Gateway (L2bridge)
      • RKE Cluster Configuration
      • Setting up Cloud Providers
        • Setting up the Amazon Cloud Provider
        • Setting up the Azure Cloud Provider
        • Setting up the Google Compute Engine Cloud Provider
        • Setting up the vSphere Cloud Provider
          • In-tree Cloud Provider
          • Out-of-tree Cloud Provider
            • Migrating vSphere In-tree Volumes to CSI
      • Rancher Agents
      • Behavior Differences Between RKE1 and RKE2
    • Registering Existing Clusters
  • Cluster Administration
    • Cluster Access
      • Access a Cluster with Kubectl and kubeconfig
      • How the Authorized Cluster Endpoint Works
      • Adding Users to Clusters
    • Cluster Autoscaler
      • Cluster Autoscaler with AWS EC2 Auto Scaling Groups
    • Upgrading and Rolling Back Kubernetes
    • Adding a Pod Security Policy
    • Cluster Configuration
      • RKE Cluster Configuration
      • EKS Cluster Configuration
      • GKE Cluster Configuration
        • Private Clusters
      • AKS Cluster Configuration
      • RKE2 Cluster Configuration
      • K3s Cluster Configuration
      • Syncing
    • Nodes and Node Pools
    • Kubernetes Persistent Storage: Volumes and Storage Classes
      • How Persistent Storage Works
      • Setting up Existing Storage
      • Dynamically Provisioning New Storage in Rancher
      • Using an External Ceph Driver
      • Provisioning Storage Examples
        • Creating Persistent Storage in Amazon's EBS
        • NFS Storage
        • vSphere Storage
      • GlusterFS Volumes
      • iSCSI Volumes
    • Projects and Kubernetes Namespaces with Rancher
    • Tools for Logging, Monitoring, and Visibility
    • Cloning Clusters
    • Certificate Rotation
    • Encryption Key Rotation
    • Backing up a Cluster
    • Restoring a Cluster from Backup
    • Removing Kubernetes Components from Nodes
    • Assigning Pod Security Policies
  • Project Administration
    • Adding Users to Projects
    • Project Resource Quotas
      • How Resource Quotas Work in Rancher Projects
      • Overriding the Default Limit for a Namespace
      • Setting Container Default Resource Limits
      • Resource Quota Type Reference
    • Namespaces
    • Tools for Logging, Monitoring, and Visibility
    • Rancher's CI/CD Pipelines
    • Pod Security Policies
  • Harvester Integration
  • Pipelines
    • Concepts
    • Pipeline Configuration Reference
    • Example Repositories
    • Example YAML File
    • Configuring Persistent Data for Pipeline Components
  • Helm Charts in Rancher
    • Creating Apps
  • Deploying Applications across Clusters
    • Fleet - GitOps at Scale
      • Architecture
      • Windows Support
      • Using Fleet Behind a Proxy
    • Multi-cluster Apps
  • Monitoring/Alerting
    • How Monitoring Works
    • RBAC
    • Built-in Dashboards
    • Guides
      • Enable Monitoring
      • Uninstall Monitoring
      • Setting up Monitoring for a Workload
      • Customizing Grafana Dashboards
      • Persistent Grafana Dashboards
      • Debugging High Memory Usage
      • Migrating to Rancher v2.5+ Monitoring
    • Configuration
      • Receivers
      • Routes
      • ServiceMonitors and PodMonitors
      • Helm Chart Options
      • Examples
      • Advanced Configuration
        • Alertmanager Configuration
        • Prometheus Configuration
        • Configuring PrometheusRules
    • Windows Support
    • PromQL Expression Reference
    • Prometheus Federator
      • RBAC
      • Guides
        • Enable Prometheus Federator
        • Uninstall Prometheus Federator
        • Customizing Grafana Dashboards
        • Setting up Prometheus Federator for a Workload
        • Installing Project Monitors
  • Istio
    • CPU and Memory Allocations
    • Setup Guide
      • 1. Enable Istio in the Cluster
      • 2. Enable Istio in a Namespace
      • 3. Add Deployments and Services with the Istio Sidecar
      • 4. Set up the Istio Gateway
      • 5. Set up Istio's Components for Traffic Management
      • 6. Generate and View Traffic
    • Configuration Options
      • Enable Istio with Pod Security Policies
      • Selectors and Scrape Configs
      • Additional Steps for Installing Istio on an RKE2 Cluster
      • Additional Steps for Project Network Isolation
    • Role-based Access Control
    • Disabling Istio
  • Logging
    • Architecture
    • Migrating to Rancher v2.5 Logging
    • Role-based Access Control
    • Helm Chart Options
    • Custom Resource Configuration
      • Flows and ClusterFlows
      • Outputs and ClusterOutputs
    • Working with Taints and Tolerations
  • OPA Gatekeeper
  • CIS Scans
    • Configuration
    • RBAC
    • Skipped and Not Applicable Tests
    • Creating a Custom Benchmark Version for Running a Cluster Scan
  • Kubernetes Resources
    • Kubernetes Workloads and Pods
      • Deploying Workloads
      • Rolling Back Workloads
      • Upgrading Workloads
      • Adding a Sidecar
    • The Horizontal Pod Autoscaler
      • Background Information on HPAs
      • Managing HPAs with the Rancher UI
      • Managing HPAs with kubectl
      • Testing HPAs with kubectl
    • Set Up Load Balancer and Ingress Controller within Rancher
      • Layer 4 and Layer 7 Load Balancing
      • Adding Ingresses
      • Ingress Configuration
    • Services
    • Encrypting HTTP Communication
    • ConfigMaps
    • Secrets
    • Kubernetes Registry and Docker Registry
  • Longhorn Storage
  • Security
    • Rancher v2.6 Hardening Guides
      • RKE Hardening Guide with CIS v1.6 Benchmark
      • RKE2 Hardening Guide with CIS v1.6 Benchmark
      • RKE CIS v1.6 Benchmark - Self-Assessment Guide - Rancher v2.6
      • RKE2 CIS v1.6 Benchmark - Self-Assessment Guide - Rancher v2.6
    • SELinux RPM
    • Kubernetes Security Best Practices
    • Security Scans
    • Security Advisories and CVEs
  • CLI with Rancher
  • NeuVector Integration
  • System Tools
  • User Settings
    • API Keys
    • Managing Node Templates
    • Managing Cloud Credentials
    • User Preferences
  • API
    • API Tokens
  • FAQ
    • Deprecated Features in Rancher
    • Installing and Configuring kubectl
    • Dockershim
    • Networking
      • Container Network Interface (CNI) Providers
    • Technical
    • Security
    • Telemetry
    • Rancher is No Longer Needed
  • Troubleshooting
    • Kubernetes Components
      • Troubleshooting etcd Nodes
      • Troubleshooting Controlplane Nodes
      • Troubleshooting nginx-proxy
      • Troubleshooting Worker Nodes and Generic Components
    • Kubernetes resources
    • Networking
    • DNS
    • Rancher HA
    • Registered clusters
    • Logging
    • User ID Tracking in Audit Logs
    • Rotation of Expired Webhook Certificates
  • Contributing to Rancher
? Need Help?  Get free intro and advanced online training ×
Get the Latest News
Connect with us
  • Twitter Link
  • Linkedin Link
  • Facebook Link
  • Youtube Link
  • Github Link
  • Slack Link
  • Products
  • Rancher
  • Harvester
  • RKE
  • K3s
  • Longhorn
  • Learn
  • Learn the Basics
  • Grow Your Skills
  • Get Certified
  • Documentation
  • COMMUNITY
  • Slack
  • Github
  • Forums
  • Blogs
  • About
  • About Rancher
  • About SUSE
  • SUSE Customer Center
  • Partners
  • Events
  • Contact Us
  • © Copyright 2022 Rancher. All Rights Reserved.
  • Privacy Policy