Content Trust • Replication • Control Policy SECURITY DISTRIBUTION RELIABILITY DEPLOYMENT OVERVIEW • HA Supporting • Helm Chart Repo • Deployments 8 Confidential � ©2018 VMware, Inc. OVERVIEW Main ���� ��������� ���� ������ ������ ��RBAC ���� ��� 10 ���� �������� ��������� ���� ������ HA��� ������ Helm Chart�� Helm Chart�� ������������� Harbor�� API Routing Core Service (API/Auth/GUI) ���������� • ���������� ������ • ���������� �� 28 Confidential � ©2018 VMware, Inc. HA RELIABILITY Deploy Harbor HA via Harbor Helm chart API Routing Core Service (API/Auth/GUI) Image Registry Trusted

Content Trust • Replication • Control Policy SECURITY DISTRIBUTION RELIABILITY DEPLOYMENT OVERVIEW • HA Supporting • Helm Chart Repo • Deployments 8 Confidential � ©2018 VMware, Inc. OVERVIEW Main ���� ��������� ���� ������ ������ ��RBAC ���� ��� 10 ���� �������� ��������� ���� ������ HA��� ������ Helm Chart�� Helm Chart�� ������������� Harbor�� API Routing Core Service (API/Auth/GUI) ���������� • ���������� ������ • ���������� �� 28 Confidential � ©2018 VMware, Inc. HA RELIABILITY Deploy Harbor HA via Harbor Helm chart API Routing Core Service (API/Auth/GUI) Image Registry Trusted

datanodes} Storage Container Manager {Manage Containers, allocate blocks, certificates, datanodes} HA Raft Ring HA Raft Ring Immutable Data blocks Snapshotting the object NameSpace is enough to get point future, it can also be used to support writable Snapshots ● RATIS driven for consistency across all OM HA nodes ○ OM nodes issue the checkpoint creation at exactly the same point 42 © 2022 Cloudera, Inc. snapshot “snap1” can be read through path “/volume1/bucket1/.snapshot/snap1/k1” ● Snapshots & OM HA - 43 © 2022 Cloudera, Inc. All rights reserved. SNAPSHOT DESIGN (Continued …) Ozone Metadata

○ 10,000+ K8s services - including prod, pre-prod, staging, etc. ● Applications deployment for HA ○ In all regions ○ In multiple AZs in each region ○ Capability to run all applications from a single