Storage Provisioning

Patent metadata

Field	Value
Publication number	US-2023065645-A1
Application number	US-202017796345-A
Country	US
Kind code	A1
Filing date	Feb 7, 2020
Priority date	Feb 7, 2020
Publication date	Mar 2, 2023
Grant date	—

Abstract

There is provided a method performed by an encryption node for provisioning storage in a system. The encryption node is associated with an application node and the application node is configured to run at least part of one or more applications. In response to an unencrypted storage volume becoming available to the encryption node from a storage provisioning node of the system, an encrypted storage volume is generated (20) from the unencrypted storage volume and provisioning of the encrypted storage volume is initiated (22) to make the encrypted storage volume available at a compute node of the system for use by the application node.

First claim

1 .- 28 . (canceled)

29 . A method performed by an encryption node for provisioning storage in a system, wherein the encryption node is associated with an application node and the application node is configured to run at least part of one or more applications, the method comprising:
in response to an unencrypted storage volume becoming available to the encryption node from a storage provisioning node of the system, generating an encrypted storage volume from the unencrypted storage volume and initiating provisioning of the encrypted storage volume to make the encrypted storage volume available at a compute node of the system for use by the application node.

30 . The method of claim 29 , wherein the method is performed prior to initiation of the application node.

31 . The method of claim 29 , wherein initiating provisioning of the encrypted storage volume to make the encrypted storage volume available at the compute node for use by the application node comprises initiating mounting of the encrypted storage volume to the compute node to make the encrypted storage volume available at the compute node for use by the application node.

32 . The method of claim 31 , wherein initiating mounting of the encrypted storage volume to the compute node comprises initiating mounting of the encrypted storage volume to a directory tree of the compute node.

33 . The method of claim 29 , wherein initiating provisioning of the encrypted storage volume to make the encrypted storage volume available at the compute node for use by the application node comprises initiating generating of a hostpath volume for making the encrypted storage volume available to the application node.

34 . The method of claim 29 , wherein the encrypted storage volume is generated by applying an encrypted layer to the unencrypted storage volume.

35 . The method of claim 29 , wherein the encrypted layer is an encrypted file system layer.

36 . An encryption node comprising:
processing circuitry configured to, in response to an unencrypted storage volume becoming available to the encryption node from a storage provisioning node of a system, generating an encrypted storage volume from the unencrypted storage volume and initiating provisioning of the encrypted storage volume to make the encrypted storage volume available at a compute node of the system for use by an application node with which the encryption node is associated, wherein the application node is configured to run at least part of one or more applications.

37 . The encryption node of claim 36 , wherein the processing circuitry is configured to initiate provisioning of the encrypted storage volume prior to initiation of the application node.

38 . The encryption node of claim 36 , wherein the processing circuitry is configured to initiate provisioning of the encrypted storage volume by initiating mounting of the encrypted storage volume to the compute node to make the encrypted storage volume available at the compute node for use by the application node.

39 . The encryption node of claim 38 , wherein the processing circuitry is configured to initiate mounting of the encrypted storage volume to the compute node by initiating mounting of the encrypted storage volume to a directory tree of the compute node.

40 . The encryption node of claim 36 , wherein the processing circuitry is configured to initiate provisioning of the encrypted storage volume by initiating generating of a hostpath volume for making the encrypted storage volume available to the application node.

41 . The encryption node of claim 36 , wherein the encrypted storage volume is generated by applying an encrypted layer to the unencrypted storage volume.

42 . The encryption node of claim 36 , wherein the encrypted layer is an encrypted file system layer.

43 . A storage provisioning node of a system for provisioning storage in the system, the storage provisioning node comprising:
processing circuitry configured to, in response to a first request for an unencrypted storage volume, initiate provisioning of the unencrypted storage volume to make the unencrypted storage volume available at a compute node of the system to an encryption node for the encryption node to use in the generation of an encrypted storage volume to be made available at the compute node for use by an application node, wherein the application node is configured to run at least part of one or more applications and the encryption node is associated with the application node.

44 . The storage provisioning node of claim 43 , wherein the processing circuitry is configured to initiate provisioning of the unencrypted storage volume prior to initiation of the application node.

45 . The storage provisioning node of claim 43 , wherein the processing circuitry is configured to initiate provisioning of the unencrypted storage volume by initiating mounting of the unencrypted storage volume to the compute node to make the unencrypted storage volume available to the encryption node.

46 . A compute node of a system for provisioning storage in the system, the compute node comprising:
processing circuitry configured to:
provision a requested unencrypted storage volume to make the requested unencrypted storage volume available at the compute node to an encryption node for the encryption node to use in the generation of an encrypted storage volume; and
provision the encrypted storage volume generated by the encryption node to make the encrypted storage volume available at the compute node for use by an application node, wherein the application node is configured to run at least part of one or more applications and the encryption node is associated with the application node.

47 . The compute node of claim 46 , wherein the processing circuitry is configured to provision the requested unencrypted storage volume and to provision the encrypted storage volume prior to initiation of the application node.

48 . The compute node of claim 46 , wherein the processing circuitry is configured to provision the encrypted storage volume by generating a hostpath volume for making the encrypted storage volume available to the application node.

Assignees

• Ericsson Telefon Ab L M

Inventors

• Speks Oliver
• Quinet Raphael
• Hermanns Nikolas
• Kunz Georg

Classifications

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• G06F21/602 Primary

  Providing cryptographic facilities or services · CPC title

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title