High Performance Computing Cluster Security

If running a compute cluster that (all of these must be met)

Has an exclusive access entry point via access/head nodes
Has the full set of security agents installed on those access/head nodes
Ensures that no direct access can be had to the compute nodes without going through these access nodes

then security agents will not be required to be installed on the compute nodes.

If the above requirements cannot fully be met or are configured incorrectly, the full security agent set will need to be on all nodes.