Authentication of a node added to a cluster of a container system
AssigneePure Storage, Inc.
InventorsLuis Pablo Pabón, Taher Vohra, Naveen Neelakantam
Life of this patent
Estimating the term…
Abstract
An illustrative method includes a storage management system of a container system performing, for a worker node added to a cluster of the container system based on a first authentication of the worker node, a second authentication for the worker node, and determining, based on the second authentication, whether the worker node is authorized to perform one or more operations on a storage system associated with the cluster.
Claims20
A method comprising:
- performing, by a storage management system of a container system and for a worker node added to a cluster of the container system based on a first authentication of the worker node, a second authentication for the worker node;
- and
- determining, by the storage management system based on the second authentication, whether the worker node is authorized to perform one or more operations on a storage system associated with the cluster;
- wherein the performing of the second authentication for the worker node and the determining whether the worker node is authorized to perform the one or more operations on the storage system comprise:
- determining that the worker node is included in a list of one or more trusted nodes;
- and
- authorizing, based on the determining that the worker node is included in the list of one or more trusted nodes, the worker node to perform the one or more operations on the storage system.
A system comprising:
- a memory storing instructions;
- and
- a processor communicatively coupled to the memory and configured to execute the instructions to:
- perform, for a worker node added to a cluster of a container system based on a first authentication of the worker node, a second authentication for the worker node;
- and
- determine, based on the second authentication, whether the worker node is authorized to perform one or more operations on a storage system associated with the cluster;
- wherein the performing of the second authentication for the worker node and the determining whether the worker node is authorized to perform the one or more operations on the storage system comprise:
- implementing a containerized application on the worker node;
- detecting, during an execution of the containerized application by the worker node, one or more anomalous operations of the worker node;
- and
- rejecting, based on the detecting of the one or more anomalous operations, the worker node from performing the one or more operations on the storage system.
A non-transitory computer-readable medium storing instructions that, when executed, direct a processor of a computing device to:
- perform, for a worker node added to a cluster of a container system based on a first authentication of the worker node, a second authentication for the worker node;
- and
- determine, based on the second authentication, whether the worker node is authorized to perform one or more operations on a storage system associated with the cluster;
- wherein the performing of the second authentication for the worker node and the determining whether the worker node is authorized to perform the one or more operations on the storage system comprise:
- requesting an approval of the worker node from an authorized user;
- and
- authorizing, based on the approval of the worker node by the authorized user, the worker node to perform the one or more operations on the storage system.
Dependencies are inferred from the claim text.