GLYPH<SM590000> Secret and configuration management GLYPH<SM590000> Master : Controls Kubernetes nodes. All task assignments originate in a master. GLYPH<SM590000> Node : Perform the requested, assigned tasks. Controlled by masters. GLYPH<SM590000> Pod : Group of one or more containers that are deployed to a single node. All containers in  a pod share an IP address, IPC, hostname, and other resources. Pods abstract the  network and storage away from the underlying container. GLYPH<SM590000> Replication controller : Controls how many identical copies of a pod can be running  somewhere on the cluster. GLYPH<SM590000> Service : Decouples work definitions from the pods. Proxies for the Kubernetes service  automatically get service requests to the right pod. GLYPH<SM590000> Kubelet : A service that runs on nodes, reads the container manifests, and ensures that  the defined containers are started and running. GLYPH<SM590000> kubectl : The command line configuration tool for Kubernetes. Safely store and manage sensitive information, such as passwords, OAuth tokens, and  ssh keys. You can deploy and update secrets and application configuration without  rebuilding container images, and without exposing secrets in stack configuration. Main Kubernetes components are as follows: 1.3.3 IBM Cloud Private 1.3.4 GlusterFS 1.3.5 IBM Secure Service Container IBM Cloud Private (ICP) is a private cloud platform for enterprises to develop and run their  workloads locally. It consistes of Platform-as-a-Service (PaaS) and developer services that  are needed to create, run, and manage cloud applications. A platform that embraces open source, ICP delivers modernized IBM middleware and data  services to enterprise customers.  As the only private cloud offering that can support LinuxONE, ICP offers the highest levels of  security that are available through LinuxONE. A scalable network file system that is suitable for data-intensive tasks such as cloud storage  and media streaming. GlusterFS aggregates various storage servers into one large parallel  network file system. GlusterFS exports an existing directory as-is, leaving it up to client-side translators to  structure the store. The clients themselves are stateless, do not communicate with each  other, and are expected to have translator configurations that are consistent with each other.  GlusterFS relies on an elastic hashing algorithm, rather than using either a centralized or  distributed metadata model. The user can add, delete, or migrate volumes dynamically, which  helps to avoid configuration coherency problems. This approach allows GlusterFS to scale up  to several petabytes on commodity hardware by avoiding bottlenecks that normally affect  distributed file systems that are more tightly coupled. IBM Secure Service Container (SSC) provides the base infrastructure on LinuxONE for  container-based applications, either for hybrid or private cloud environments. This secure  10  Implementation Guide for IBM Blockchain Platform for Multicloud