Review Privileged Pods and add more content about testsuite HOT 3 CLOSED

Seems like the second point might have more clarity if it directly references the forementioned tools.

[Original]
We’re investigating having a selection of open source CNFs for this initial configuration – which would run in privileged mode – which could then be required by other CNFs needing this functionality

[Update]
We’re investigating using a selection of the above tools for this initial configuration – which would run in privileged mode – which could then be required by other CNFs needing this functionality

from testsuite.

Reference links:

https://kubernetes.io/docs/concepts/workloads/pods/pod/#privileged-mode-for-pod-containers

https://www.cncf.io/blog/2019/04/29/what-kubernetes-does-and-doesnt-do-for-security/

from testsuite.

I'm not sure if having a separate slide discussing "privileged" is a good idea. To some extend this topic is already covered in both the "security" and the "HW and affinity" sections.

Privileged mode is mainly used to utilize specific parts of the host SW (e.g. kernel, network) or hardware (e.g. CPU, memory, PCI), and these resources should be available through CNIs, device plugins etc.

from testsuite.