This is unreleased documentation for SUSE® Rancher Manager v2.15 (Unreleased).

Overview

The core CAPI controller manifest is embedded in a ConfigMap, which simplifies operation in air-gapped environments.

SUSE® Rancher Prime: Cluster API is automatically deployed as a system component in the cattle-turtles-system namespace. This includes:

  • The rancher-turtles-controller-manager pod, which handles all CAPI-related resources.

  • Core CAPI CRDs and the core CAPI controller.

  • The CAPIProvider custom resource, which allows declarative definition of CAPI providers.

Security

As defined by Supply-chain Levels for Software Artifacts (SLSA), SLSA is a set of incrementally adoptable guidelines for supply chain security, established by industry consensus. The specification set by SLSA is useful for both software producers and consumers: producers can follow SLSA’s guidelines to make their software supply chain more secure, and consumers can use SLSA to make decisions about whether to trust a software package.

SUSE® Rancher Prime: Cluster API meets SLSA Level 3 requirements as an appropriate hardened build platform, with consistent build processes, and provenance distribution. For more information, visit the SUSE® Rancher Prime: Cluster API Security document.

Installing CAPI Providers

With SUSE® Rancher Prime: Cluster API embedded in Rancher, CAPI providers are no longer bundled by default. Providers are managed declaratively using the CAPIProvider custom resource.

This is a required component and must be installed for cluster provisioning functionality to work. It is not recommended that you uninstall SUSE® Rancher Prime: Cluster API.

A separate providers chart for Prime users is available for installing certified providers. For more information, refer to Install certified providers.

For example, to define a provider:

apiVersion: turtles-capi.cattle.io/v1alpha1
kind: CAPIProvider
metadata:
  name: aws
  namespace: cattle-turtles-system
spec:
  type: infrastructure
  name: aws

Refer to the CAPIProvider reference for the full list of configuration options.