Container Service RBAC Integration for Database Policy Enforcement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional database management systems require significant capital investment in hardware and infrastructure, are susceptible to data loss during disasters, and have limited scalability and efficiency in data access and processing.
Innovation Solution
A network-based database system utilizing compute service managers, execution platforms, and databases that support container integration for efficient data storage and retrieval, enabling dynamic scaling and improved query performance through metadata-driven micro-partitioning and pruning.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional database management systems are used, then data storage and access are provided, but significant capital investment in hardware and infrastructure is required
Solution Approach 1:
The patent uses virtualization to create virtual instances of database systems that replicate physical hardware functionality through software layers. This allows multiple virtual database instances to run on a single physical server, eliminating the need for dedicated hardware for each database system and reducing capital investment while maintaining data storage reliability.
Solution Approach 2:
The patent replaces physical mechanical hardware infrastructure with virtualized software-based infrastructure. Instead of requiring physical servers, storage devices, and network equipment for each database system, the system uses virtual machine instances that can be deployed through software, thereby reducing hardware complexity and investment requirements.
2Reliability
If traditional database management systems are used, then data storage is provided, but susceptibility to data loss during disasters occurs
Solution Approach 1:
The patent implements disaster recovery mechanisms that prepare backup systems and recovery procedures in advance before disasters occur. Virtual machine snapshots and cloned database instances can be rapidly deployed to alternative locations in case of catastrophic failures, providing beforehand cushioning against data loss while maintaining continuous data storage capability.
Solution Approach 2:
The patent introduces virtualization layers and cloud-based infrastructure as intermediaries between the physical hardware and data storage systems. This intermediary layer provides geographic distribution and redundancy capabilities, allowing data to be replicated across multiple physical locations and protecting against localized disasters while maintaining data storage functionality.
3Reliability
If traditional relational database management systems are used, then data storage and access are provided, but limited scalability occurs
Solution Approach 1:
The patent implements dynamic resource allocation through virtualization, allowing database systems to automatically adjust computing resources, storage capacity, and configuration parameters in real-time based on workload demands. This dynamic scalability enables the system to adapt to varying data access requirements without the rigid infrastructure constraints of traditional relational database systems.
Solution Approach 2:
The patent creates a universal virtualized infrastructure that can host multiple types of database systems and workloads on the same physical hardware. This multi-functional platform provides both traditional relational database capabilities and modern scalable architecture, allowing the system to serve diverse data access needs while maintaining scalability through shared resources.
4Reliability
If traditional database management systems are used, then data storage infrastructure is provided, but significant physical space is required
Solution Approach 1:
The patent uses virtual machine instances that replicate database functionality through software rather than requiring dedicated physical hardware for each system. Multiple virtual database instances can share the same physical storage infrastructure, dramatically reducing the physical space required while maintaining full database infrastructure capability for data storage and management.
Solution Approach 2:
The patent implements nested virtualization where virtual database systems are hosted within virtualized infrastructure layers that themselves run on physical hardware. This nested architecture allows multiple levels of abstraction to share resources efficiently, with virtual storage volumes nested within physical storage arrays, thereby reducing the physical footprint while preserving complete database infrastructure functionality.
Data Source
AI summary
The subject technology receives a first request to create a container service, the request indicating a service specification for creating the container service. The subject technology generates a set of endpoints based on the service specification. The subject technology generates a set of roles based on the service specification. The subject technology stores service metadata related to the set of endpoints and the set of roles in a metadata database. The subject technology instantiates the container service at a container services cluster, the container services cluster including a set of worker nodes, the container service being deployed on a worker node from the set of worker nodes, and enforces security policies based on the roles and service metadata. The subject technology coordinates with Role Based Access Control (RBAC) and network policies of the subject database system and transparently enforces the same policies over in the subject container system.