US 2026/0278124 A1 · CONTROLLING DEPLOYMENT OF CONTAINER OBJECT WITHIN CONTAINER PLATFORM

Abstract

Controlling a deployment of a container object within a container platform requires a response to a request associated with the deployment of the container object within the container platform to be intercepted. The response is transmitted from a set of admission controllers associated with the container platform. One or more policies from a set of defined policies are retrieved based on the request. The one or more policies are applied on the request. A result of the application of the one or more policies on the request is determined. The result is indicative of a denial of the request. The intercepted response is compared with the determined result. An anomaly is identified based on the comparison. The deployment of the container object within the container platform is controlled based on the identified anomaly.

Claims20

Dependent claims

A computer-implemented method comprising:

intercepting, by a computer, a response to a request associated with a deployment of a container object within a container platform, wherein the response is transmitted from a set of admission controllers associated with the container platform;
retrieving, by the computer, one or more policies from a set of defined policies based on the request;
applying, by the computer, the one or more policies on the request;
determining, by the computer, a result based on the application of the one or more policies on the request, wherein the result is indicative of a denial of the request;
comparing, by the computer, the intercepted response with the determined result, wherein the comparison indicates that the determined result is different from the intercepted response;
identifying, by the computer, an anomaly associated with the set of admission controllers based on the comparison;
and
controlling, by the computer, the deployment of the container object within the container platform based on the identified anomaly.

5 more elements

A computer system comprising:

a processor set;
one or more computer-readable storage media;
and
program instructions stored on the one or more computer-readable storage media, the program instructions executable by the processor set to cause the processor set to:
control a set of admission controllers to generate a response to a request associated with a deployment of a container object within a container platform, wherein the set of admission controllers receives the request from an Application Programming Interface (API) server;
intercept the response to the request, wherein the response is transmitted from the set of admission controllers associated with the container platform;
retrieve one or more policies from a set of defined policies based on the request;
apply the one or more policies on the request;
determine a result based on the application of the one or more policies on the request, wherein the result is indicative of an allowance of the request;
compare the intercepted response with the determined result, wherein the comparison indicates that the determined result is identical to the intercepted response;
and
control the deployment of the container object within the container platform based on the comparison.

9 more elements

A computer program product for controlling a deployment of a container object within a container platform, the computer program product comprising:

one or more computer-readable storage media;
and
program instructions stored on the one or more computer-readable storage media to perform operations comprising:
intercepting a response to a request associated with the deployment of the container object within the container platform, wherein the response is transmitted from a set of admission controllers associated with the container platform;
retrieving one or more policies from a set of defined policies based on the request;
applying the one or more policies on the request;
determining a result based on the application of the one or more policies on the request, wherein the result is indicative of a denial of the request;
comparing the intercepted response with the determined result, wherein the comparison indicates that the determined result is different from the intercepted response;
identifying an anomaly associated with the set of admission controllers based on the comparison;
and
controlling the deployment of the container object within the container platform based on the identified anomaly.

8 more elements

Dependencies are inferred from the claim text.

Controlling deployment of container object within container platform

Life of this patent

Controlling deployment of container object within container platform

Life of this patent

Abstract

Claims20