Cluster security management method and device based on Kubernetes and network domain and storage medium

Abstract

The invention relates to the technical field of cloud security, and provides a cluster security management method and device based on Kubernetes and a network domain, and a computer readable storage medium. The method comprises the following steps: determining configuration information required by a Kubernetes cluster, opening a corresponding container service according to the configuration information, creating a service cluster associated with a network domain according to the configuration information, and deploying a corresponding application container according to the configuration information, wherein when the step of creating the service cluster associated with the network domain according to the configuration information is executed, the method comprises the following steps: creating a security group and creating a namespace namespace resource object; enabling the network domains in the service cluster to communicate with each other through a security group; using the namespaceresource object for isolating an application program deployed in the network domain. According to the invention, the technical problems of mutual isolation and mutual access among different network domains are solved, the service management is facilitated, and the network security is enhanced.

Description

technical field [0001] The present invention relates to the technical field of cloud security, in particular to a cluster security management method, device and computer-readable storage medium based on Kubernetes and network domains. Background technique [0002] Kubernetes is an open source containerized application for managing multiple hosts in a cloud platform, and it is also a container orchestration engine. Kubernetes supports automated deployment, large-scale scalability, and application container management. When an application is deployed in a production environment, multiple instances of the application are usually deployed to load balance application requests. In Kubernetes, multiple containers can be created, each container runs an application instance, and then through the built-in load balancing strategy, the management, discovery, and access of this group of application instances are realized, and these details do not require operation and maintenance person...

AI Technical Summary

Problems solved by technology

[0003] At present, in the process of building application platforms in the financial field, there are many problems such as network risks, network vulnerabilities and unstable factors, which inevitably generate some security risks and problems, which lead to information leakage, illegal intrusion, platform crashes, viruses, etc. network security issues

At present, the problem of network security is still solved by manual management, which has been unable to adapt to the current situation. Regarding the current network security problem, many financial companies have been using virtualized cloud platforms to run applications, that is, virtual machines. isolation and control, but the cost of use is higher

Images