Enhancing Operator Installation and Upgrade Management and Verification

    公开(公告)号:US20230133312A1

    公开(公告)日:2023-05-04

    申请号:US17518902

    申请日:2021-11-04

    Applicant: Red Hat, Inc.

    Abstract: Processing logic may obtain a resource of a platform fora containerized application. The platform may include custom resources, and an operator that manages the custom resources during runtime of the containerized application. In response to an indication being defined in the resource, processing logic may schedule an upgrade to a new operator. Processing logic may perform one or more pre-installation actions or post-installation actions that are defined in the resource to manage the installation of the new operator in a controlled manner and reduce the risk of incompatibilities between the new operator and the custom resources.

    Privacy-enhanced common vulnerabilities and exposures (CVE) detection

    公开(公告)号:US12200004B2

    公开(公告)日:2025-01-14

    申请号:US17660502

    申请日:2022-04-25

    Applicant: Red Hat, Inc.

    Abstract: Disclosed are systems and methods for scanning a client codebase for vulnerabilities without exposing the client information. An example method includes receiving, from a client computing device, a scan request to scan a set of encrypted client information to identify vulnerabilities applicable to the client information. The method also includes responsive to the scan request, analyzing, by a processing device, the encrypted client information to generate scan results that identify vulnerabilities applicable to the client information, wherein the analyzing is performed without decrypting the client information. The method also includes returning the scan results to the client, wherein the scan results are in encrypted form when the scan results are generated.

    AUTOMATICALLY INJECTING SHIMS INTO RUNNING CONTAINERS

    公开(公告)号:US20240211323A1

    公开(公告)日:2024-06-27

    申请号:US18069733

    申请日:2022-12-21

    Applicant: Red Hat, Inc.

    CPC classification number: G06F9/541 G06F8/65 G06F21/629

    Abstract: One example can include a system that can determine that a subset of containers in a distributed computing environment have characteristics that match a predefined set of shim injection criteria. The system can then inject respective copies of a shim into the subset of containers, while the subset of containers are running in the distributed computing environment. Each respective copy of the shim may be configured to intercept calls between software programs in a corresponding container.

    INTELLIGENT SNAPSHOTTING OF VMS FOR CONTAINER ORCHESTRATION PLATFORMS

    公开(公告)号:US20240143364A1

    公开(公告)日:2024-05-02

    申请号:US17974154

    申请日:2022-10-26

    Applicant: Red Hat, Inc.

    CPC classification number: G06F9/45558 G06F8/63 G06F2009/45562

    Abstract: A method of generating container image snapshots includes scanning one or more worker nodes of a container cluster to generate an image set describing container images loaded onto the one or more worker nodes. The method also includes analyzing, by a processing device, the image set to generate an image manifest comprising at least some of the container images in the image set. The method also includes generating a snapshot from the image manifest, wherein the snapshot describes a set of container images to be used to build a new worker node. The method also includes storing the snapshot in a local memory of the container cluster. The method also includes, responsive to an instruction to provision the new worker node, loading the set of container images from the local memory to the new worker node and building a container for each of the container images in the set.

    ANNOTATION DRIVEN JUST IN TIME AND STATE-BASED RBAC POLICY CONTROL

    公开(公告)号:US20240103818A1

    公开(公告)日:2024-03-28

    申请号:US17950577

    申请日:2022-09-22

    Applicant: Red Hat, Inc.

    CPC classification number: G06F8/41 G06F8/60 G06F21/44

    Abstract: Systems and methods for implementing an annotation driven just in time and state-based RBAC policy control are disclosed. The method inserts an annotation into a code base that includes a function. The annotation identifies a resource corresponding to the function. The method compiles the code base into compiled code, which includes inserting, based on the annotation, a first request prior to the function that requests permission to access the resource; and inserting, based on the annotation, a second request subsequent to the function to turn off permission to access the resource. The method then deploys the compiled code to a target environment.

    MANAGING CLOUD RESOURCE CONSUMPTION USING DISTRIBUTED LEDGERS

    公开(公告)号:US20240070735A1

    公开(公告)日:2024-02-29

    申请号:US17898638

    申请日:2022-08-30

    Applicant: Red Hat, Inc.

    CPC classification number: G06Q30/04 G06F9/5072 G06F2209/508 G06Q2220/12

    Abstract: Systems and methods of the disclosure include: identifying, by a cloud resource management system, a cloud resource consumption model associated with one or more cloud resources; generating, by the cloud resource management system, a sequence of instructions implementing a smart contract based on the cloud resource consumption model; sending, to a distributed ledger network, the smart contract; receiving, by the cloud resource management system, cloud resource usage data associated with the one or more cloud resources; and causing, by transmitting a message reflecting the cloud resource usage data to the distributed ledger, the smart contract to be executed.

    Managing cloud acquisitions using distributed ledgers

    公开(公告)号:US11706155B1

    公开(公告)日:2023-07-18

    申请号:US17592851

    申请日:2022-02-04

    Applicant: Red Hat, Inc.

    Abstract: Systems and methods of the disclosure include: receiving, by a cloud resource provisioning component via a cloud provisioning request application programming interface (API), a cloud resource request; storing the cloud resource request on a cryptographically-protected distributed ledger; receiving, from a first cloud provider, a first cloud resource offer responsive to the cloud resource request; and responsive to receiving, from a node of the cryptographically-protected distributed ledger, a notification of validation of the first cloud resource offer with respect to the cloud resource request, causing the first cloud provider to provision a cloud resource specified by the first cloud resource offer.

Patent Agency Ranking