Methods and apparatus to add a non-native node to a cluster

Patent metadata

Field	Value
Publication number	US-2024106900-A1
Application number	US-202318533125-A
Country	US
Kind code	A1
Filing date	Dec 7, 2023
Priority date	Dec 7, 2023
Publication date	Mar 28, 2024
Grant date	—

Abstract

Methods, apparatus, systems, and articles of manufacture to add a non-native node to a cluster are disclosed. An example apparatus includes programmable circuitry to at least one of instantiate a first agent to interface with a management application to obtain a request from a node to join a cluster of nodes, the first agent to interface with the management application using a first protocol; and instantiate a second agent which employs a second protocol different than the first protocol: responsive to an authentication of an identity credential of the node, obtain a secret credential; and cause the first agent to pass the secret credential to the node via the management application to enable the node to join the cluster of nodes.

First claim

What is claimed is:

1 . A non-transitory computer readable medium comprising instructions to cause one or more programmable circuits to:
instantiate a first agent to interface with a management application to obtain a request from a node to join a cluster of nodes, the first agent to interface with the management application using a first protocol; and instantiate a second agent which employs a second protocol different than the first protocol:
responsive to an authentication of an identity credential of the node, obtain a secret credential; and
cause the first agent to pass the secret credential to the node via the management application to enable the node to join the cluster of nodes.

2 . A computer readable medium as defined in claim 1 , wherein the first protocol is a non-native protocol that is not native to the cluster of nodes and the second protocol is a native protocol that is native to the cluster of node, the first agent to execute the first protocol and the second protocol in a first virtual execution environment, and the second agent to execute the second protocol in a second virtual execution environment.

3 . A computer readable medium as defined in claim 1 , wherein the first agent employs a shared secret to ensure secure communication with the second agent.

4 . A computer readable medium as defined in claim 1 , wherein the second agent exposes a secure API to the first agent to communicate the secret credential.

5 . A computer readable medium as defined in claim 1 , wherein no modification to the node is required to join the cluster.

6 . A computer readable medium as defined in claim 1 , wherein the identity credential is provided via the request from the node to join the cluster, the second agent to forward the identity credential to an orchestrator to authenticate the node.

7 . A computer readable medium as defined in claim 1 , wherein the node is a first node, the secret credential is a first secret credential, the authentication is a first authentication, the identity credential is a first identity credential, and the management application is a first management application, the instructions to cause at least one of the one or more programmable circuits to:
instantiate a third agent to interface with a second management application to obtain a second request from a second node to join the cluster of nodes, the third agent to interface with the second management application using a third protocol different than the first and second protocols; and instantiate the second agent which employs the second protocol to:
responsive to a second authentication of a second identity credential of the node second, obtain a second secret credential; and
cause the first agent to pass the second secret credential to the second node via the second management application to enable the second node to join the cluster of nodes.

8 . A computer readable medium as defined in claim 1 , wherein the node corresponds to a third party.

9 . A computer readable medium as defined in claim 1 , wherein the first agent is a container sidecar.

10 . An apparatus comprising:
interface circuitry to obtain a request from a node using a first protocol, the request to join a cluster of nodes; computer readable instructions; and programmable circuitry to instantiate:
a first agent to interface with a management application to obtain the request from a node to join the cluster of nodes, the first agent to interface with the management application using the first protocol; and
a second agent which employs a second protocol different than the first protocol to:
responsive to an authentication of an identity credential of the node, access a secret credential; and
cause the first agent to pass the secret credential to the node via the management application to enable the node to join the cluster.

11 . An apparatus as defined in claim 10 , wherein the first protocol is a non-native protocol that is not native to the cluster of nodes and the second protocol is a native protocol that is native to the cluster of node, the first agent to execute the first protocol and the second protocol in a first virtual execution environment, and the second agent to execute the second protocol in a second virtual execution environment.

12 . An apparatus as defined in claim 10 , wherein the first agent employs a shared secret to ensure secure communication with the second agent.

13 . An apparatus as defined in claim 10 , wherein the second agent exposes a secure API to the first agent to communicate the secret credential.

14 . An apparatus as defined in claim 10 , wherein no modification of the node is required to join the cluster.

15 . An apparatus as defined in claim 10 , wherein the identity credential is provided via the request from the node to join the cluster, the second agent to forwards the identity credential to an orchestrator to authenticate the node.

16 . An apparatus as defined in claim 10 , wherein the node is a first node, the secret credential is a first secret credential, the authentication is a first authentication, the identity credential is a first identity credential, and the management application is a first management application, the programmable circuitry to:
instantiate a third agent to interface with a second management application to obtain a second request from a second node to join the cluster of nodes, the third agent to interface with the second management application using a third protocol non-native to the cluster of nodes; and instantiate the second agent which employs the second protocol to:
responsive to a second authentication of a second identity credential of the node second, obtain a second secret credential; and
cause the first agent to pass the second secret credential to the second node via the second management application to enable the second node to join the cluster of nodes.

17 . An apparatus comprising:
interface circuitry to obtain a first request from a node using a first protocol, the request to join a cluster of nodes; machine readable instructions; and programmable circuitry to at least one of instantiate or execute the machine readable instructions to:
obtain the first request from the node to join the cluster of nodes using the first protocol;
responsive to an authentication of an identity credential of the node, access a secret credential using a second protocol different than the first protocol; and
pass the secret credential to the node to enable the node to join the cluster.

18 . An apparatus as defined in claim 17 , wherein no modification to the node is required to join the cluster.

19 . An apparatus as defined in claim 17 , wherein the identity credential is provided via in the first request from the node to join the cluster, the programmable circuitry to forward the identity credential to an orchestrator to authenticate the node.

20 . An apparatus as defined in claim 17 , wherein the node is a first node, the secret credential is a first secret credential, the authentication is a first authentication, and the identity credential is a first identity credential, wherein:
the interface circuitry to obtain a second request from a second node using a third protocol, the second request to join the cluster of nodes; and
the programmable circuitry to:
obtain the second request from the second node to join the cluster of nodes using the third protocol;
responsive to a second authentication of a second identity credential of t

Assignees

• Intel Corp

Inventors

• Ramia Kannan Babu
• Ramanathan Palaniappan
• S Deepak
• Dhandhalya Bhavik

Classifications

• H04L67/14 Primary

  Session management (for real-time applications in data packet communications networks H04L65/1066) · CPC title