Method and apparratus for secrets injection into containers
AssigneeTelefonaktiebolaget LM Ericsson (publ)
InventorsJames Donald Reno, Michael Brown, Akshay Rajesh Baheti
Life of this patent
Estimating the term…
Abstract
A method and system for managing dynamic runtime information provision for containers in a container management system. The method includes starting a container image load, determining whether a secret sub unit is present in the container image, determining secret value input source and destination of secret value, and providing secret values to destination sub unit of a container defined by the container image.
Claims20
A method of managing dynamic runtime information provision for containers in a container management system, the method comprising:
- starting a container image load to instantiate a container;
- determining that a secret sub unit is present within the container image;
- determining an input source to provide a secret value for the container, the input source identified by information in the secret sub unit in the container image;
- determining a destination sub unit of the container to receive the secret value, the destination sub unit identified by information in the secret sub unit in the container image;
- and
- providing the secret value to the destination sub unit of the container.
A computing device configured to implement a container management system, the container management system to support managing dynamic runtime information provision for containers, the computing device comprising:
- a non-transitory computer-readable medium having stored therein a container manager;
- and
- a processor coupled to the non-transitory computer-readable medium, the processor to execute the container manager, the container manager to start a container image load to instantiate a container, to determine that a secret sub unit is present within the container image, to determine an input source to provide a secret value for the container, the input source identified by information in the secret sub unit in the container image, determining a destination sub unit of the container to receive the secret value, the destination sub unit identified by information in the secret sub unit in the container image, and to provide the secret value to the destination sub unit of the container.
A non-transitory computer readable medium having stored therein a set of instructions, which when executed cause a computing device to perform a set of operations to support dynamic runtime configuration of containers in a container management system, the set of operations comprising:
- starting a container image load to instantiate a container;
- determining that a secret sub unit is present within the container image;
- determining an input source to provide a secret value for the container, the input source identified by information in the secret sub unit in the container image;
- determining a destination sub unit of the container to receive the secret value, the destination sub unit identified by information in the secret sub unit in the container image;
- and
- providing the secret value to destination sub unit of the container.
Dependencies are inferred from the claim text.