equivalent to a worker node. It is the node where the Contrail vRouter is providing the data plane function. Network control plane The network control plane provides the core SDN capability. It uses BGP components on the worker nodes. • The network data plane refers to the packet transmit and receive function on every node, especially on worker nodes where the workloads reside. The pods that perform the node. contrail-k8s-controller Control Plane Node This pod performs the Kubernetes control loop function to reconcile networking resources. It constantly monitors networking resources to make sure the

Initialization Vector KAS Key Agreement Scheme KAT Known Answer Test KDF Key Derivation Function KTS Key Transport Scheme KW Key Wrap NDRNG Non-Deterministic Random Number Generator Master Secret Shared Secret; 48 bytes of pseudorandom data Internally derived via key derivation function defined in [SP 800-135 r1] KDF (TLS) Output via API in plaintext CTR_DRBG V Seed) 128 bits space from unauthorized access. 7.8 Key Zeroization The module is passed keys as part of a function call from a calling application and does not store keys persistently. The calling application is

community with the knowledge that our passionate subject matter experts have. Emerging Tech — Function as a Service (FaaS) — Serverless/Container as a Service — Platform as a Service (PaaS) — Security

be applied as the default. Role bindings need to be in place to allow system services to still function. 1.7.1 - Do not admit privileged containers (Not Scored) 1.7.2 - Do not admit containers wishing

Kubernetes clusters. 3.2.2.2 OpenShift OpenShift uses Security Context Constraints to perform the function of a Pod Security Policy object in Kubernetes. It contains a robust implementation of the SCC