Rancher
Container orchestratorrancher
Management plane that provisions and governs many Kubernetes clusters with central authentication and project-level RBAC.
- Provider
- default
- Category
- Compute
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| autoscaling | boolean | — | no | false | ▸ false |
| centralizedAuthentication | boolean | — | no | true | inherited |
| managed | boolean | — | no | false | ▸ false |
| managesMultipleClusters | boolean | — | no | true | inherited |
| networkPolicy | boolean | — | no | — | inherited |
| nodeCount | integer | — | no | — | inherited |
| privateControlPlane | boolean | — | no | — | inherited |
| provisionedDistribution | enum | rke2 | k3s | imported | no | rke2 | inherited |
| rbac | boolean | — | no | — | ▸ true |
| version | string | — | no | — | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
stateful-node-without-zone-redundancy
A stateful compute node pinned to exactly one availability zone disappears with that zone, and its state goes with it. Nodes inside a cell are exempt, because there the cell is deliberately single-zone and redundancy comes from the other cells.
- — all of these hold:
- — the node's `stateless` is false
- — the node sits inside exactly 1 availability-zone group
- — this does not hold:
- — the node sits inside at least one cell group
nodes:
- { id: "rancher", component: "rancher" }Container Service for Kubernetesalibaba-ackAmazon Elastic Container Serviceaws-ecsAmazon Elastic Kubernetes Serviceaws-eksRed Hat OpenShift Service on AWSaws-rosaAzure Kubernetes Serviceazure-aksAzure Kubernetes Fleet Managerazure-kubernetes-fleet-managerAzure Red Hat OpenShiftazure-red-hat-openshiftAzure Service Fabricazure-service-fabricCloudflare Containerscloudflare-containersGeneric container orchestratorcontainer-orchestratorCoreWeavecoreweaveDocker Swarmdocker-swarmk0sk0sK3sk3sKarmadakarmadaKuberneteskubernetesMicroK8smicrok8sHashiCorp NomadnomadRed Hat OpenShiftopenshiftDigitalOcean Kubernetesdigitalocean-kubernetesGoogle Distributed Cloud (software only) for bare metalgoogle-distributed-cloud-bare-metalGoogle Distributed Cloud (software only) for VMwaregoogle-distributed-cloud-vmwareGoogle Kubernetes Enginegoogle-gkeGKE Autopilotgoogle-gke-autopilotGKE Enterprise fleetgoogle-gke-enterpriseGKE Multi-Cloudgoogle-gke-multi-cloudCluster Services for OpenShiftgoogle-openshift-cluster-servicesIBM Cloud Kubernetes Serviceibm-kubernetes-serviceRed Hat OpenShift on IBM Cloudibm-openshiftIBM Cloud Satelliteibm-satelliteOCI Kubernetes Engineoci-kubernetes-engineOKE Virtual Node Pooloci-oke-virtual-node-poolOpenStack Magnumopenstack-magnumOpenStack Zunopenstack-zunOUTSCALE Kubernetes as a Serviceoutscale-oks
# yaml-language-server: $schema=../../schema/component.schema.json # Rancher, a management plane for many Kubernetes clusters. Per "Role-Based Access Control (RBAC)" global, # cluster and project roles are implemented on top of Kubernetes RBAC and enforced by Kubernetes, so a # Rancher-managed estate is RBAC-governed out of the box. schemaVersion: "1" type: "component" id: "rancher" kind: "container-orchestrator" provider: "default" docs: "https://ranchermanager.docs.rancher.com/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac" defaults: managed: false autoscaling: false rbac: true properties: managesMultipleClusters: type: "boolean" default: true provisionedDistribution: type: "enum" values: ["rke2", "k3s", "imported"] default: "rke2" centralizedAuthentication: type: "boolean" default: true