Back to results
US 10,592,293 B2Granted
Tenant-specific policy generation and enforcement within containers
AssigneeCisco Technology, Inc.
InventorsSebastian Jeuk, Gonzalo Salgueiro, Rajath Agasthya, Rohit Agarwalla
Life of this patent
Estimating the term…
Abstract
Generating and enforcing tenant-specific policies within a container includes, applying a first policy for a specific operational parameter when a software package that is running within a container and that is utilized by a plurality of tenants is leveraged by a first tenant of the plurality of tenants. A second policy is applied for the specific operational parameter when the software package is leveraged by a second tenant of the plurality of tenants.
Claims19
A method comprising:
- at a computing apparatus having a software container platform hosting a container, within which a software package is running, the software package utilized by a plurality of tenants,
- receiving, by a tenant-specific control group from a controller, a data structure including a tuple of information about a specific operational parameter, a tenant identification of a first tenant, and a service identification of a service provided by the software package;
- defining, by the tenant-specific control group, a first policy and a second policy different from the first policy, wherein the tenant-specific control group controls resource usage of the software package on a per-tenant basis and defines the first policy based on the data structure;
- applying the first policy for the specific operational parameter when the software package is leveraged by the first tenant of the plurality of tenants;
- and
- applying the second policy for the specific operational parameter when the software package is leveraged by a second tenant of the plurality of tenants.
3 more elements
An apparatus comprising:
- a network interface unit configured to enable communications via a network;
- a memory configured to store logic instructions;
- and
- a processor, when executing the logic instructions, configured to:
- receive, by a tenant-specific control group from a controller, a data structure including a tuple of information about a specific operational parameter, a tenant identification of a first tenant, and a service identification of a service provided by a software package;
- define, by the tenant-specific control group, a first policy and a second policy different from the first policy, wherein the tenant-specific control group controls resource usage of the software package on a per-tenant basis and defines the first policy based on the data structure;
- apply the first policy for the specific operational parameter when the software package that is running within a container and that is utilized by a plurality of tenants is leveraged by the first tenant of the plurality of tenants, wherein a software container platform hosts the container which runs the software package;
- and
- apply the second policy for the specific operational parameter when the software package is leveraged by a second tenant of the plurality of tenants.
6 more elements
A non-transitory computer-readable storage media encoded with software comprising computer executable instructions and when the software is executed by a processor, the processor is operable to:
- receive, by a tenant-specific control group from a controller, a data structure including a tuple of information about a specific operational parameter, a tenant identification of a first tenant, and a service identification of a service provided by a software package;
- define, by the tenant-specific control group, a first policy and a second policy different from the first policy, wherein the tenant-specific control group controls resource usage of the software package on a per-tenant basis and defines the first policy based on the data structure;
- apply the first policy for the specific operational parameter when the software package that is running within a container and that is utilized by a plurality of tenants is leveraged by the first tenant of the plurality of tenants, wherein a software container platform hosts the container which runs the software package;
- and
- apply the second policy for the specific operational parameter when the software package is leveraged by a second tenant of the plurality of tenants.
2 more elements
Dependencies are inferred from the claim text.