# US 2020/0287724 A1 · Establishment of trusted communication with container-based services > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2020/0287724 A1 - Document ID: US20200287724A1 - Status: Published application - Kind: A1 - Application number: 16/293,575 - Filed: 2019-03-05 - Published: 2020-09-10 - Earliest claimed: 2019-03-05 - Assignees: Hewlett Packard Enterprise Development LP - Applicants: Hewlett Packard Enterprise Development LP - Inventors: Kiran Kumar Vaddi; Om Kumar; Jaivish Kothari - Web page: https://patentgrep.com/patent/US20200287724A1 ## CPC - H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)} - H04L 9/3268: {using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]} - H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage} - H04L 9/321: {involving a third party or a trusted authority} - H04L 2209/64: Self-signed certificates - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Example techniques for establishing trusted communication with container-based services are described. In an example, a digital certificate stored in a memory is injected from the memory into a container. The container is external to the memory. The digital certificate is usable to establish a trusted communication between a service deployed in the container and a software program. ## Claims ### Claim 1 A system comprising: a processor; and a memory coupled to the processor, wherein the memory is to store a digital certificate, the digital certificate is usable to establish a trusted communication between a service deployed in a container and a software program, the container is external to the memory, and the memory comprises instructions executable by the processor to: inject the digital certificate from the memory into a certificate storage location (CSL) of the container, the CSL being a location in the container designated for storing digital certificates. ### Claim 2 (depends on 1) The system of claim 1, wherein the instructions are executable to inject the digital certificate into the container in response to initialization of the container. ### Claim 3 (depends on 2) The system of claim 2, wherein to inject the digital certificate into the container in response to initialization of the container, the instructions are executable by the processor to: receive a pod creation event indicating initialization of a pod comprising the container; determine a number of containers in the pod; and inject the digital certificate into each container in the pod. ### Claim 4 (depends on 1) The system of claim 1, wherein the instructions are executable to: detect that the memory is updated with the digital certificate; and inject the digital certificate into the container in response to the detection. ### Claim 5 (depends on 4) The system of claim 4, wherein, to inject the digital certificate into the CSL of the container, the instructions are executable to send an injection command to a hosting system hosting the container, the injection command specifying a name of a pod comprising the container and the CSL. ### Claim 6 (depends on 1) The system of claim 1, wherein the CSL is to be accessed by the service to retrieve digital certificates. ### Claim 7 (depends on 6) The system of claim 6, wherein the instructions are executable to determine the CSL based on a CSL label of a pod comprising the container. ### Claim 8 (depends on 1) The system of claim 1, wherein the digital certificate is a self-signed digital certificate. ### Claim 9 A method comprising: detecting, by a processing resource, that a digital certificate stored in a memory is to be injected into a container based on at least one of initialization of the container and update of the digital certificate in the memory, wherein the digital certificate is usable to establish a trusted communication between a service deployed in the container and a software program, and wherein the container is external to the memory; and injecting, by the processing resource, the digital certificate from the memory into the container in response to the detection. ### Claim 10 (depends on 9) The method of claim 9, comprising injecting the digital certificate into a certificate storage location (CSL) of the container, wherein the CSL is a location in the container designated for storing digital certificates, and the CSL is to be accessed by the service to retrieve digital certificates. ### Claim 11 (depends on 10) The method of claim 10, comprising determining the CSL based on a CSL label of a pod comprising the container. ### Claim 12 (depends on 9) The method of claim 9, comprising: detecting initialization of the container based on a pod creation event, the pod creation event indicating initialization of a pod comprising the container, and wherein injecting the digital certificate into the container comprises: determining a number of containers in the pod; and injecting the digital certificate into each container in the pod. ### Claim 13 (depends on 9) The method of claim 9, wherein the digital certificate is a self-signed digital certificate. ### Claim 14 (depends on 10) The method of claim 10, wherein injection of the digital certificate into the CSL comprises sending an injection command to a hosting system hosting the container, the injection command specifying a name of a pod comprising the container and the CSL. ### Claim 15 A non-transitory computer-readable medium comprising instructions for facilitating trusted communication establishment with a container-based service, the instructions being executable by a processing resource to: detect that a digital certificate stored in a memory is to be injected into the container based on absence of the digital certificate in the container, wherein the digital certificate is usable to establish a trusted communication between a service deployed in the container and a software program and wherein the container is external to the memory; and inject the digital certificate into a certificate storage location (CSL) of the container in response to the detection, the CSL being a location in the container designated for storing digital certificates. ### Claim 16 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the instructions are executable by the processing resource to: detect the absence of the digital certificate in the container in response to receiving an event indicating initialization of the container. ### Claim 17 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the instructions are executable by the processing resource to: detect the absence of the digital certificate in the container in response to updating of the digital certificate in a memory that is to store digital certificates. ### Claim 18 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the instructions are executable by the processing resource to determine the CSL based on a CSL label of a pod comprising the container. ### Claim 19 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the digital certificate is a self-signed digital certificate of a private certification authority (CA). ### Claim 20 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the CSL is to be accessed by the service to retrieve digital certificates.