Dynamic Encrypted Container Storage Allocation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing storage allocation techniques for containers in containerized environments are static and do not allow for dynamic or elastic allocation of storage volumes, limiting user control over storage size and lacking encryption capabilities for shared storage volumes.
Innovation Solution
A dynamic encrypted storage system that allows users to specify the required storage size on-demand, dynamically assembling encrypted storage volumes from available partitions using a storage configuration manager, dynamic encrypted volume manager, and key management infrastructure, ensuring transparent encryption and decryption of data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If static storage allocation is used for containers, then storage volumes can be assigned to containers, but users cannot specify the amount of storage needed and dynamic allocation is not possible
Solution Approach 1:
The system implements dynamic storage allocation by allowing storage volumes to be created and assigned to containers on-demand with user-specified sizes. The storage configuration manager dynamically provisions storage resources rather than using static pre-allocation, enabling flexible adaptation to varying storage requirements of different containers and applications.
2Reliability
If storage volumes are allocated without encryption, then storage can be assigned to containers, but data security and encryption capabilities are lacking
Solution Approach 1:
The system merges storage management and encryption capabilities into a unified storage volume system. The storage configuration manager integrates with the key management infrastructure to provide both storage allocation and encryption in a single coordinated process, rather than treating them as separate complex systems.
Solution Approach 2:
The key management infrastructure acts as an intermediary between the storage configuration manager and the encryption process. It manages encryption keys and provides cryptographic services to the storage system, enabling secure encrypted storage without requiring the storage manager to implement complex encryption logic directly.
3Productivity
If manual storage allocation is performed, then storage can be assigned to containers, but it requires significant manual intervention and is prone to errors
Solution Approach 1:
The storage configuration manager implements self-service automation by automatically monitoring container storage needs, determining appropriate storage allocations, and provisioning storage volumes without manual intervention. The system autonomously manages the entire storage allocation lifecycle from request to assignment, reducing both manual effort and error rates.
Data Source
AI summary
Techniques are disclosed for dynamically allocating encrypted storage for containers/applications in a containerized environment. In various aspects, one is able to specify the amount of encrypted storage desired/required in a storage/host volume to be allocated to a container on-demand. The containerized environment may employ its own hardware resources or be implemented on an infrastructure-as-a-service (IaaS). The containerized application for which an instant dynamically allocated storage volume is created may be a composable multi-container or microservices application. The encrypted storage volume is optimally assembled from the partitions of the storage devices available on a host. The storage devices may be local to the host or remote or in the cloud. Techniques are also disclosed for decommissioning a previously allocated encrypted storage volume based on the present design.