Namespace management techniques for facilitating multi-cluster application development

Patent metadata

Field	Value
Publication number	US-11907905-B2
Application number	US-202016837669-A
Country	US
Kind code	B2
Filing date	Apr 1, 2020
Priority date	Apr 1, 2020
Publication date	Feb 20, 2024
Grant date	Feb 20, 2024

Abstract

Techniques for managing namespaces in a multi-cluster management (MCM) system to facilitate multi-cluster application development are provided. In one set of embodiments, a computer system executing the MCM system can create a workspace for an application being developed by a software development team of an organization, where the workspace is a logical grouping of namespaces on which the application has been or will be deployed, and where at least a subset of the namespaces can belong to different clusters of the organization. The computer system can then assign a member of the development team as a workspace administrator of the workspace, thereby enabling that development team member to perform management tasks on the workspace and its member namespaces via the MCM system (e.g., creating and adding namespaces to the workspace, setting access/image/network policies on the workspace, etc.), without help from the organization's IT staff.

First claim

What is claimed is:

1. A method for managing namespaces in a multi-cluster management system, the method comprising:
creating, by a computer system executing the multi-cluster management system, a workspace for an application being developed by a software development team of an organization, wherein the workspace is a logical grouping of namespaces on which the application has been or will be deployed, wherein each namespace provides a unique scope for resources and objects within a cluster, such that the resources and objects residing in said each namespace are not accessible from other namespaces, and wherein at least a subset of the namespaces in the workspace belong to different clusters of the organization, the different clusters corresponding to different sets of machines residing in different computing environments; and
assigning, by the computer system, a member of the development team as a workspace administrator of the workspace, the assigning enabling the member of the development team to perform one or more management tasks on the workspace and the namespaces via the multi-cluster management system,
wherein the one or more management tasks include a task for setting an access policy on the workspace, the access policy including at least one or more user-role bindings that enable one or more other members of the development team to access the namespaces in the workspace, and
wherein, upon receiving the access policy from the workspace administrator, the computer system translates the access policy into a native format understood by the different clusters and transmits the translated policy to each of the different clusters.

2. The method of claim 1 wherein the one or more management tasks further include a task for creating a new namespace in a first cluster of the organization and adding the new namespace to the workspace.

3. The method of claim 2 wherein, upon adding the new namespace to the first cluster, the computer system automatically synchronizes namespace policies set on the workspace to the new namespace.

4. The method of claim 3 wherein the namespace policies include access policies, image policies, and network policies.

5. The method of claim 1 wherein the assigning of the member of the development team as the workspace administrator enables the member to perform the one or more management tasks without assistance from IT (information technology) staff of the organization.

6. A non-transitory computer readable storage medium having stored thereon program code executable by a computer system executing a multi-cluster management system, the program code embodying a method for managing namespaces in the multi-cluster management system, the method comprising:
creating a workspace for an application being developed by a software development team of an organization, wherein the workspace is a logical grouping of namespaces on which the application has been or will be deployed, wherein each namespace provides a unique scope for resources and objects within a cluster, such that the resources and objects residing in said each namespace are not accessible from other namespaces, and wherein at least a subset of the namespaces in the workspace belong to different clusters of the organization, the different clusters corresponding to different sets of machines residing in different computing environments; and
assigning a member of the development team as a workspace administrator of the workspace, the assigning enabling the member of the development team to perform one or more management tasks on the workspace and the namespaces via the multi-cluster management system,
wherein the one or more management tasks include a task for setting an access policy on the workspace, the access policy including at least one or more user-role bindings that enable one or more other members of the development team to access the namespaces in the workspace, and
wherein, upon receiving the access policy from the workspace administrator, the computer system translates the access policy into a native format understood by the different clusters and transmits the translated policy to each of the different clusters.

7. The non-transitory computer readable storage medium of claim 6 wherein the one or more management tasks further include a task for creating a new namespace in a first cluster of the organization and adding the new namespace to the workspace.

8. The non-transitory computer readable storage medium of claim 7 wherein, upon adding the new namespace to the first cluster, the computer system automatically synchronizes namespace policies set on the workspace to the new namespace.

9. The non-transitory computer readable storage medium of claim 8 wherein the namespace policies include access policies, image policies, and network policies.

10. The non-transitory computer readable storage medium of claim 6 wherein the assigning of the member of the development team as the workspace administrator enables the member to perform the one or more management tasks without assistance from IT (information technology) staff of the organization.

11. A computer system executing a multi-cluster management system, the computer system comprising:
a processor; and
a non-transitory computer readable medium having stored thereon program code that, when executed by the processor, causes the processor to:
create a workspace for an application being developed by a software development team of an organization, wherein the workspace is a logical grouping of namespaces on which the application has been or will be deployed, wherein each namespace provides a unique scope for resources and objects within a cluster, such that the resources and objects residing in said each namespace are not accessible from other namespaces, and wherein at least a subset of the namespaces in the workspace belong to different clusters of the organization, the different clusters corresponding to different sets of machines residing in different computing environments; and
assign a member of the development team as a workspace administrator of the workspace, the assigning enabling the member of the development team to perform one or more management tasks on the workspace and the namespaces via the multi-cluster management system,

wherein the one or more management tasks include a task for setting an access policy on the workspace, the access policy including at least one or more user-role bindings that enable one or more other members of the development team to access the namespaces in the workspace, and
wherein, upon receiving the access policy from the workspace administrator, the computer system translates the access policy into a native format understood by the different clusters and transmits the translated policy to each of the different clusters.

12. The computer system of claim 11 wherein the one or more management tasks further include a task for creating a new namespace in a first cluster of the organization and adding the new namespace to the workspace.

13. The computer system of claim 12 wherein, upon adding the new namespace to the first cluster, the computer system automatically synchronizes namespace policies set on the workspace to the new namespace.

14. The computer system of claim 13 wherein the namespace policies include access policies, image policies, and network policies.

15. The computer system of claim 11 wherein the assigning of the member of the development team as the workspace administrator enables the member to perform the one or more management tasks without assistance from IT (information technology) staff of the organization.

Assignees

• VMware LLC

Inventors

• Zhou Long
• Yeon Fabio
• Kwon Kyoung Won
• Vaidya Pranav Sandeep
• Adhikari Dhanashree Hemachandra
• Muetzel Eryn
• Chellappan Suresh

Classifications

• G06Q10/101 Primary

  Collaborative creation, e.g. joint development of products or services · CPC title

• G06Q10/06311

  Scheduling, planning or task assignment for a person or group · CPC title

• G06Q10/105 Primary

  Human resources · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title