Establishment of trusted communication with container-based services
AssigneeHewlett Packard Enterprise Development LP
InventorsKiran Kumar Vaddi, Om Kumar, Jaivish Kothari
Life of this patent
Estimating the term…
Abstract
Example techniques for establishing trusted communication with container-based services are described. In an example, a digital certificate stored in a memory is injected from the memory into a container. The container is external to the memory. The digital certificate is usable to establish a trusted communication between a service deployed in the container and a software program.
Claims20
A system comprising:
- a processor;
- and
- a memory coupled to the processor, wherein the memory is to store a digital certificate, the digital certificate is usable to establish a trusted communication between a service deployed in a container and a software program before the service becomes operational, the container is a computing instance that hosts the service and operates as a separate computer from the point of view of the service and is external to the memory, and the memory comprises instructions executable by the processor to:
- inject the digital certificate from the memory into a certificate storage location (CSL) of the container based on a CSL label of a corresponding pod, the CSL label being attached to the pod and based on identifying attributes of the pod, wherein the CSL indicates a location in the container designated for storing digital certificates.
A method comprising:
- detecting, by a processing resource, that a digital certificate stored in a memory is to be injected into a container based on at least one of initialization of the container and update of the digital certificate in the memory, wherein the digital certificate is usable to establish a trusted communication between a service deployed in the container and a software program before the service becomes operational, and wherein the container is a computing instance that hosts the service and operates as a separate computer from the point of view of the service and is external to the memory;
- and
- injecting, by the processing resource, the digital certificate from the memory into the container in response to the detection based on a digital certificate label of a corresponding pod hosting the container, wherein the pod encapsulates at least the container, storage resources, an address, and options that govern how the container runs.
A non-transitory computer-readable medium comprising instructions for facilitating trusted communication establishment with a container-based service, the instructions being executable by a processing resource to:
- detect that a digital certificate stored in a memory is to be injected into the container based on absence of the digital certificate in the container, wherein the digital certificate is usable to establish a trusted communication between a service deployed in the container and a software program before the service becomes operational, and wherein the container is a computing instance that hosts the service and operates as a separate computer from the point of view of the service and is external to the memory;
- and
- inject the digital certificate from the memory into the container in response to the detection based on a digital certificate label of a corresponding pod hosting the container, wherein the pod encapsulates at least the container, storage resources, an address, and options that govern how the container runs.
Dependencies are inferred from the claim text.