Method and system for isolating resources among cloud tenants based on namespace binding

Abstract

The invention provides a method and system for isolating resources among cloud tenants based on namespace binding. Based on the binding of Kubernetes RBAC and a namespace and based on a Kubernetes RBAC (Radial Basis Access Control) mechanism, a tenant is created, and the tenant is bound with a namespace to create a role; setting a binding scheme of the authority of the role and the authority of the namespace list corresponding to the tenant; hard isolation of resource visibility and mutual access between tenants is carried out; according to the container cloud platform tenant isolation method,the container cloud platform tenant isolation device and the container cloud platform tenant isolation system, different network strategies are set for different namespaces, application mutual accesssoft break-through between tenants is carried out, the container cloud platform tenant isolation requirement is met, resource isolation between the tenants is achieved, resource visibility isolationand network isolation between the tenants are achieved, and cloud platform characteristic integrity and user use safety are improved.

Description

technical field [0001] The invention relates to the technical field of cloud computing platforms, in particular to a method and system for resource isolation between cloud tenants based on namespace binding. Background technique [0002] With the development of information technology and social economy, the current information construction has fully entered the era of cloud computing. The large-scale and centralized cloud data center has become an important part of the national infrastructure. The country is also actively promoting government affairs, enterprises, finance, etc. Cloud engineering for key industries. [0003] In the process of cloud computing construction, through various aspects of exploration and research, it is a more efficient implementation plan to adopt a centralized large-scale group to build a unified cloud data center. While building a large-scale cloud computing platform, there is a need for resource isolation among tenants. Users who access the clo...

AI Technical Summary

Problems solved by technology

[0004] The purpose of the present invention is to provide a resource isolation method and system between cloud tenants based on namespace binding, aiming to solve the problem that the existing technology cannot meet the increasingly high demand for isolation of cloud computing platform tenants, and to realize resource isolation between tenants. Isolation, improving the integrity of cloud platform features and user security

Images