Introduction

• Overview of Installation and Configuration Planning

Network planning

• Network Requirements
• Networks for a StarlingX Simplex System
• Networks for a Duplex System
• Networks for a System with Controller Storage
• Networks for a System with Dedicated Storage
• IP Support
• PXE Boot Network
• Cluster Host Network
• Storage Network
• Network Addressing Requirements

Internal management network

• Internal Management Network Overview
• Kubernetes Internal Management Network Planning
• Multicast Subnets for the Management Network

OAM network

• About the OAM Network
• OAM Network Planning
• DNS and NTP Servers
• Firewall Options

L2 access switches

• Kubernetes L2 Access Switches
• Redundant Top-of-Rack Switch Deployment Considerations

Ethernet interfaces

• About Ethernet Interfaces
• Ethernet Interface Configuration
• Ethernet MTU
• Shared (VLAN or Multi-Netted) Ethernet Interfaces

Storage planning

• Storage Resources
• Storage on Controller Hosts
• Storage on Worker Hosts
• Storage on Storage Hosts
• External Netapp Trident Storage

Security planning

• Infrastructure Security
• Container Security Planning

Security hardening Guidelines

• Security Hardening Introduction

Recommended Security Features with a Minimal Performance Impact

• UEFI Secure Boot

Secure System Accounts

• Local Linux Account for ‘sysadmin’
• Local LDAP Linux User Accounts
• StarlingX Accounts
• Web Administration Login Timeout
• SSH and Console Login Timeout
• System Account Password Rules

Security Features

• Secure HTTPS External Connectivity
• Firewall Options
• Isolate StarlingX’s Internal Cloud Management Network

Installation and resource planning

• HTTPS Access Planning
• System Hardware Requirements
• Kubernetes Verified Commercial Hardware
• System Boot Sequence Considerations
• Hard Drive Options
• Controller Disk Configurations for All-in-one Systems