Container cluster system, container console and server

Abstract

The invention provides a container cluster system, a container console and a server. The system runs in a virtual private cloud (VPC) network environment of tenants. The system comprises a container cluster and a proxy service; the container cluster establishes a network tunnel with a container console outside the virtual private cloud VPC network environment through the proxy service; and the proxy service is used for receiving the management instruction from the container console through the network tunnel and forwarding the management instruction to the container cluster, so that the container cluster executes the management instruction. By deploying the proxy service in the container cluster system and establishing the network tunnel between the proxy service and the container console, the container cluster can receive the management instruction from the container console through the network tunnel, so that the container cluster can manage container resources of tenants without opening an API Server to a public network; according to the mode, the potential safety hazard of the container resources of the tenants is reduced, and the management cost is reduced.

Description

Technical field [0001] The present invention relates to the technical field of cloud computing, in particular, it relates to a container cluster system, the container and the server console. Background technique [0002] Console service container clusters, typically deployed within the vessel engine provider account of the VPC (VirtualPrivate Cloud, Virtual Private Cloud) in; and container resources tenant purchase, the tenant usually run in the VPC account; therefore, the container cluster network console between the container resources and services purchased by tenants is isolated. In order to pass the console service to tenants to buy container resources are managed, the tenants in the purchase of container resources, usually defaults to the container resources in the API Server (Application Programming Interface Server, Application Programming Interface Service) services to buy SLB (Server Load Balancer , server load balancing), and mount the public network EIP (elastic IPadd...

AI Technical Summary

Problems solved by technology

However, this method needs to open the API Server in the tenant's container resources, allowing the public network to access the API Server, which increases the security risks of the tenant's container resources; at the same time, using the EIP of the public network to manage the tenant's container resources costs a lot. higher

Images