Securing the Cluster

This section discusses cluster security issues that are exclusive to the ICE ClusterWare™ platform. We assume that the cluster administrator is familiar with security issues that are not solely related to ClusterWare clusters, such as securing the cluster from outside access, optionally enabling various Red Hat RHEL/CentOS functionalities for logging and auditing access to nodes and storage and for managing SELinux.

• Authentication
  • Assign Temporary Permissions
• Role-Based Access Controls
• Changing the Database Password
  • Changing the etcd Password
• Compute Node Remote Access
• Compute Node Host Keys
• Encrypting Communications
  • Configure Encrypted Communication between Head and PXE Compute Nodes
  • Configure Encrypted Communication between Head and Diskful Compute Nodes
  • Configure Client Authentication between Head and Compute Nodes
• Security-Enhanced Linux (SELinux)
  • SELinux On Compute Nodes
  • SELinux On Head Nodes
  • MLS Policy On Head Nodes
• Security Technical Implementation Guides (STIG)