Cognitive Access Control Policy Management in a Multi-Cluster Container Orchestration Environment

A computer system for dynamically enforcing access control policies unique to respective users in a multi-cluster container orchestration environment, the computer system comprising:

• a bus system;
• a storage device connected to the bus system, wherein the storage device stores program instructions;
• and
• a processor connected to the bus system, wherein the processor executes the program instructions to:
• generate resource-permission-role mappings for users in the multi-cluster container orchestration environment based on preset access control criteria;
• learn dynamic access control criteria from the multi-cluster container orchestration environment over time;
• update the resource-permission-role mappings for the users in the multi-cluster container orchestration environment based on the dynamic access control criteria learned from the multi-cluster container orchestration environment over time;
• and
• enforce the resource-permission-role mappings to respective users in the multi-cluster container orchestration environment in response to receiving corresponding user resource access requests.

A computer program product for dynamically enforcing access control policies unique to respective users in a multi-cluster container orchestration environment, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to perform a method comprising:

• generating, by the computer, resource-permission-role mappings for users in the multi-cluster container orchestration environment based on preset access control criteria;
• learning, by the computer, dynamic access control criteria from the multi-cluster container orchestration environment over time;
• updating, by the computer, the resource-permission-role mappings for the users in the multi-cluster container orchestration environment based on the dynamic access control criteria learned from the multi-cluster container orchestration environment over time;
• and
• enforcing, by the computer, the resource-permission-role mappings to respective users in the multi-cluster container orchestration environment in response to receiving corresponding user resource access requests.