Locked-down cluster
AssigneeInternational Business Machines Corporation
InventorsPreethi Polepalli Yeshwanth, Angel Nunez Mencias, James Robert Magowan
Life of this patent
Estimating the term…
Abstract
Aspects of the invention include a computer-implemented method including providing, by a processor, a computing cluster having a plurality of cluster nodes and services. The method provides, by the processor, a limited catalog of services and restricts, by the processor, access of an administrator of the computing cluster to use of a service deployer, wherein the service deployer restricts administrator access to installation and administration of clusters and deployment of only the limited catalog of services.
Claims15
A computer-implemented method comprising:
- providing, by a processor, a computing cluster having a plurality of cluster nodes and services, wherein the computing cluster is deployed on a secure service container;
- providing, by the processor, a limited catalog of services;
- restricting, by the processor, access of an administrator of the computing cluster to use of a service deployer which runs as a container component on the secure service container, wherein the service deployer restricts administrator access to installation and administration of only the limited catalog of services and prevents the administrator from logging into nodes on the secure service container other than the service deployer;
- exposing, by the processor, a limited set of REST API's that allow a user to view cluster-wide resources and to perform basic administrative functions including creating namespaces and adding users to a namespace, wherein the user is not an administrator.
A system comprising:
- a memory having computer readable instructions;
- and
- one or more processors for executing the computer readable instructions, the computer readable instructions controlling the one or more processors to perform operations comprising:
- providing, by the processor, a computing cluster having a plurality of cluster nodes and services, wherein the computing cluster is deployed on a secure service container;
- providing, by the processor, a limited catalog of services;
- restricting, by the processor, access of an administrator of the computing cluster to use of a service deployer, wherein the service deployer restricts administrator access to installation and administration of only the limited catalog of services and prevents the administrator from logging into nodes on the secure service container other than the service deployer;
- exposing, by the processor, a limited set of REST API's that allow a user to view cluster-wide resources and to perform basic administrative functions including creating namespaces and adding users to a namespace, wherein the user is not an administrator.
A computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to perform operations comprising:
- providing, by the processor, a computing cluster having a plurality of cluster nodes and services, wherein the computing cluster is deployed on a secure service container;
- providing, by the processor, a limited catalog of services;
- restricting, by the processor, access of an administrator of the computing cluster to use of a service deployer, wherein the service deployer restricts administrator access to installation and administration of only the limited catalog of services and prevents the administrator from logging into nodes on the secure service container other than the service deployer;
- exposing, by the processor, a limited set of REST API's that allow a user to view cluster-wide resources and to perform basic administrative functions including creating namespaces and adding users to a namespace, wherein the user is not an administrator.
Dependencies are inferred from the claim text.