Global service catalog for provisioning services on a multi-cluster service mesh of a multi-cluster computing environment

Patent metadata

Field	Value
Publication number	US-12436806-B2
Application number	US-202217682114-A
Country	US
Kind code	B2
Filing date	Feb 28, 2022
Priority date	Feb 28, 2022
Publication date	Oct 7, 2025
Grant date	Oct 7, 2025

Abstract

An apparatus comprises a processing device configured to identify one or more dependent services for a workload deployed in a first computing cluster of a multi-cluster computing environment and to select, utilizing a global service catalog aggregating service information for sets of available services offered by at least two computing clusters of the multi-cluster computing environment, a second computing cluster of the multi-cluster computing environment to utilize for provisioning at least a given one of the one or more dependent services for the workload. The processing device is further configured to provision the given dependent service on a multi-cluster service mesh associated with the multi-cluster computing environment by configuring the multi-cluster service mesh to permit access by the workload on the first computing cluster of the multi-cluster computing environment to the given dependent service on the second computing cluster of the multi-cluster computing environment.

First claim

What is claimed is:

1. An apparatus comprising:
at least one processing device comprising a processor coupled to a memory;
the at least one processing device being configured to perform steps of:
identifying one or more dependent services for a workload deployed in a first one of two or more computing clusters of a multi-cluster computing environment;
selecting, utilizing a global service catalog aggregating service information for sets of available services offered by at least two of the two or more computing clusters of the multi-cluster computing environment, a second one of the two or more computing clusters of the multi-cluster computing environment to utilize for provisioning at least a given one of the one or more dependent services for the workload; and
provisioning the given dependent service on a multi-cluster service mesh associated with the multi-cluster computing environment, wherein provisioning the given dependent service on the multi-cluster service mesh comprises configuring the multi-cluster service mesh to permit access by the workload on the first one of the two or more computing clusters of the multi-cluster computing environment to the given dependent service on the second one of the two or more computing clusters of the multi-cluster computing environment;

wherein the global service catalog is coupled between a service scheduler and a plurality of local service catalogs implemented on respective ones of the two or more computing clusters, the global service catalog being configured to collect via the local service catalogs respective sets of information characterizing respective sets of services provided by respective ones of the two or more computing clusters; and
wherein the service scheduler interacts with the global service catalog via a service broker application programming interface to select the second one of the two or more computing clusters to utilize for provisioning the given dependent service, the provisioning of the given dependent service being carried out at least in part by the global service catalog interacting with the local service catalog of the second one of the two or more computing clusters under the control of the service scheduler.

2. The apparatus of claim 1 wherein the at least one processing device is further configured to perform the step of registering at least two local service catalogs maintaining information regarding sets of available services offered by the at least two of the two or more computing clusters of the multi-cluster computing environment with the global service catalog.

3. The apparatus of claim 2 wherein registering a given one of the at least two local service catalogs associated with a given one of the two or more computing clusters of the multi-cluster computing environment with the global service catalog comprises parsing a registration request for the given local service catalog, the registration request specifying an operator of the given one of the two or more computing clusters of the multi-cluster computing environment, a network address of the given local service catalog, and a private key of a key pair generated for establishing secure connection between the given local service catalog and the global service catalog.

4. The apparatus of claim 1 wherein the global service catalog is configured to periodically poll local service catalogs that maintain information regarding sets of available services offered by the at least two of the two or more computing clusters of the multi-cluster computing environment to update the sets of available services offered by the at least two of the two or more computing clusters of the multi-cluster computing environment.

5. The apparatus of claim 1 wherein the aggregated service information of the global service catalog comprises one or more consolidated service entries, at least a given one of the one or more consolidated service entries being associated with a given service type.

6. The apparatus of claim 5 wherein the given service type comprises at least one of: a database service type; a storage service type; a security service type; a hardware accelerator service type.

7. The apparatus of claim 5 wherein the given consolidated service entry identifies at least two of the two or more computing clusters of the multi-cluster computing environment that offer services of the given service type.

8. The apparatus of claim 5 wherein the given consolidated service entry identifies at least two service configurations of the given service type offered by at least one of the two or more computing clusters of the multi-cluster computing environment, the at least two service configurations comprising two or more different guaranteed levels of service of the given service type offered by the at least one of the two or more computing clusters of the multi-cluster computing environment.

9. The apparatus of claim 1 wherein the given dependent service comprises a given service type, and wherein selecting the second one of the two or more computing clusters of the multi-cluster computing environment to utilize for provisioning the given dependent service for the workload comprises selecting the second one of the two or more computing clusters of the multi-cluster computing environment from among at least two of the two or more computing clusters of the multi-cluster computing environment offering services of the given service type.

10. The apparatus of claim 9 wherein the second one of the two or more computing clusters of the multi-cluster computing environment is selected based at least in part on latency to the first one of the two or more computing clusters of the multi-cluster computing environment where the workload is deployed.

11. The apparatus of claim 1 wherein provisioning the given dependent service on the multi-cluster service mesh further comprises:
generating a key pair for the workload, wherein the generated key pair comprises a private key and a public key;
providing the private key of the generated key pair to the workload; and
providing the public key and a given identifier of the workload to the given dependent service.

12. The apparatus of claim 1 wherein provisioning the given dependent service on the multi-cluster service mesh further comprises:
receiving, from a local service catalog associated with the second one of the two or more computing clusters of the multi-cluster computing environment, one or more credentials for the given dependent service encrypted utilizing a public key of a key pair associated with the local service catalog;
decrypting, at the global service catalog, the one or more credentials for the given dependent service utilizing a private key of the key pair associated with the local service catalog, the private key being previously provided to the global service catalog during registration of the local service catalog; and
injecting the decrypted one or more credentials into the first one of the two or more computing clusters of the multi-cluster computing environment where the workload is deployed.

13. The apparatus of claim 1 wherein the at least one processing device is further configured to repeat the selecting and provisioning steps dynamically in response to detecting one or more changes in available resources of at least one of the two or more computing clusters of the multi-cluster computing environment.

14. The apparatus of claim 1 wherein the at least one processing device is further configured to repeat the selecting and provisioning steps dynamically in response to migration of the workload from (i) being deployed in the first one of the two or more computing clusters

Assignees

• Dell Products Lp

Inventors

• He Xuebin
• Fong Victor

Classifications

• G06F21/62

  Protecting access to data via a platform, e.g. using keys or access control rules · CPC title

• G06F2209/5015

  Service provider selection · CPC title

• G06F9/5027 Primary

  the resource being a machine, e.g. CPUs, Servers, Terminals · CPC title

• G06F9/5072 Primary

  Grid computing · CPC title