US 12,756,720 B2Granted

Migrating replicated secrets from a cloud environment to a local system

AssigneeRed Hat, Inc.

InventorsLeigh Griffin, Andrea Cosentino, Paolo Antinori

Life of this patent

Estimating the term…

Loading patent…

Abstract

Replicated secrets can be migrated from a cloud environment to a local system. For example, a system can receive a secret stored in a first geographic region and a second geographic region of a cloud environment. The system can determine a first security level associated with a first source location of the secret and a second security level associated with a second source location of the secret. The system can encrypt the secret using a first encryption key associated with the first security level to generate a first encrypted secret. The system can determine that a first filesystem in a physical server corresponds to the first source location of the secret and store the first encrypted secret in the first filesystem of the physical server. The first encrypted secret can be usable to control access of one or more protected computing resources.

Claims20

Dependent claims

A system comprising:

a processing device;
and
a memory device including instructions that are executable by the processing device for causing the processing device to perform operations comprising:
receiving, from a secret manager associated with a cloud environment, a secret stored in a first geographic region and a second geographic region of the cloud environment;
determining a first security level associated with a first source location of the secret and a second security level associated with a second source location of the secret, the first source location being associated with the first geographic region and the second source location being associated with the second geographic region;
encrypting the secret using a first encryption key associated with the first security level to generate a first encrypted secret;
determining that a first filesystem in a physical server corresponds to the first source location of the secret;
and
storing the first encrypted secret in the first filesystem of the physical server, the first encrypted secret being used to control access of one or more protected computing resources.

6 more elements

A method comprising:

receiving, from a secret manager associated with a cloud environment, a secret stored in a first geographic region and a second geographic region of the cloud environment;
determining a first security level associated with a first source location of the secret and a second security level associated with a second source location of the secret, the first source location being associated with the first geographic region and the second source location being associated with the second geographic region;
encrypting the secret using a first encryption key associated with the first security level to generate a first encrypted secret;
determining that a first filesystem in a physical server corresponds to the first source location of the secret;
and
storing the first encrypted secret in the first filesystem of the physical server, the first encrypted secret being used to control access of one or more protected computing resources.

3 more elements

A non-transitory computer-readable medium comprising program code executable by a processing device for causing the processing device to perform operations comprising:

receiving, from a secret manager associated with a cloud environment, a secret stored in a first geographic region and a second geographic region of the cloud environment;
determining a first security level associated with a first source location of the secret and a second security level associated with a second source location of the secret, the first source location being associated with the first geographic region and the second source location being associated with the second geographic region;
encrypting the secret using a first encryption key associated with the first security level to generate a first encrypted secret;
determining that a first filesystem in a physical server corresponds to the first source location of the secret;
and
storing the first encrypted secret in the first filesystem of the physical server, the first encrypted secret being used to control access of one or more protected computing resources.

3 more elements

Dependencies are inferred from the claim text.