DJCP MLPS levels are determined based on the degree of damages to citizens, the society, and even a country after a system is damaged. Level 5 is the lowest degree and Level 1 is the highest.

HUAWEI CLOUD Stack meets DJCP MLPS Level 3 requirements.

The Commercial Cryptography Application Security Evaluation can be regarded as an extension of DJCP MLPS. The level-1 to level-4 requirements of the evaluation match the level-1 to level-4 requirements of DJCP MLPS.

The security concept of DJCP MLPS 2.0 changes from passive protection to pre-event prevention, in-event response, and post-event audit.

User A can obtain only the permissions of ClusterRole A on namespace A.

User A obtains the cluster permissions defined in ClusterRole A.

Rules in RoleBinding A take effect only on namespace A.

This operation is not allowed.

When a container uses a bridge network, the container network interface and the corresponding bridge must be in the same namespace.

You are advised to use networking plug-ins recognized by Cloud Native Computing Foundation (CNCF) for container orchestration.

When a container uses a host network, the network interface of the container and that of the host must be in the same namespace.

Docker has its own networking subsystems and does not support third-party networking plug-ins.

runC is an OCI-compliant container runtime.

OCI solves the compatibility issue among container providers.

The specifications released by OCI include runtime spec and image format spec.

OCI defines the communications on the container network.