GLYPH<SM590000> Secret and configuration management 

Safely store and manage sensitive information, such as passwords, OAuth tokens, and ssh keys. You can deploy and update secrets and application configuration without rebuilding container images, and without exposing secrets in stack configuration. 

Main Kubernetes components are as follows: 

GLYPH<SM590000> Master : Controls Kubernetes nodes. All task assignments originate in a master. 

GLYPH<SM590000> Node : Perform the requested, assigned tasks. Controlled by masters. 

GLYPH<SM590000> Pod : Group of one or more containers that are deployed to a single node. All containers in a pod share an IP address, IPC, hostname, and other resources. Pods abstract the network and storage away from the underlying container. 

GLYPH<SM590000> Replication controller : Controls how many identical copies of a pod can be running somewhere on the cluster. 

GLYPH<SM590000> Service : Decouples work definitions from the pods. Proxies for the Kubernetes service automatically get service requests to the right pod. 

GLYPH<SM590000> Kubelet : A service that runs on nodes, reads the container manifests, and ensures that the defined containers are started and running. 

## 1.3.3 IBM Cloud Private 

GLYPH<SM590000> kubectl : The command line configuration tool for Kubernetes. 

IBM Cloud Private (ICP) is a private cloud platform for enterprises to develop and run their workloads locally. It consistes of Platform-as-a-Service (PaaS) and developer services that are needed to create, run, and manage cloud applications. 

A platform that embraces open source, ICP delivers modernized IBM middleware and data services to enterprise customers. 

As the only private cloud offering that can support LinuxONE, ICP offers the highest levels of security that are available through LinuxONE. 

## 1.3.4 GlusterFS 

A scalable network file system that is suitable for data-intensive tasks such as cloud storage and media streaming. GlusterFS aggregates various storage servers into one large parallel network file system. 

GlusterFS exports an existing directory as-is, leaving it up to client-side translators to structure the store. The clients themselves are stateless, do not communicate with each other, and are expected to have translator configurations that are consistent with each other. 

GlusterFS relies on an elastic hashing algorithm, rather than using either a centralized or distributed metadata model. The user can add, delete, or migrate volumes dynamically, which helps to avoid configuration coherency problems. This approach allows GlusterFS to scale up to several petabytes on commodity hardware by avoiding bottlenecks that normally affect distributed file systems that are more tightly coupled. 

## 1.3.5 IBM Secure Service Container 

IBM Secure Service Container (SSC) provides the base infrastructure on LinuxONE for container-based applications, either for hybrid or private cloud environments. This secure 

