Multi-Cluster Access via Centralized Role Binding

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional cluster management systems fail to provide effective and efficient user access to multi-cluster and multi-tenant environments, requiring manual creation of user accounts and different interfaces for each computing cluster, leading to an inefficient decentralized setup.

Innovation Solution

A system that bootstraps a primary computing cluster to secondary clusters and binds user roles, allowing users to access multiple clusters via a centralized interface using credentials from the primary cluster, establishing both temporary and persistent connections.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual user account creation and permission setup is performed for each computing cluster, then user access control reliability is improved, but system complexity and time consumption increase

Engineering Contradiction:

Improveuser access controlVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a centralized authentication service as an intermediary between users and multiple computing clusters. This service handles user authentication and permission management centrally, eliminating the need for manual account creation at each cluster while maintaining security and access control reliability.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The authentication service provides universal user access across multiple independent computing clusters through a single interface. It manages user credentials and permissions once, then applies them consistently across all clusters, reducing system complexity while maintaining reliable access control.

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Adaptability or versatility

If separate interfaces are provided for each computing cluster, then cluster-specific functionality is preserved, but ease of operation deteriorates

Engineering Contradiction:

Improvecluster-specific functionalityVSAvoiduser access convenience

Core Design Contradiction:

Adaptability or versatilityVSEase of operation

Solution Approach 1:

The centralized authentication service acts as an intermediary interface that users interact with, while it handles communication with multiple backend clusters. This provides a single ease-of-use interface while preserving access to cluster-specific functionalities through the mediator.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system segments the interface functionality: a unified user-facing interface for ease of operation, and separate cluster-specific interfaces handled transparently by the authentication service in the background. This allows users to benefit from simplicity while clusters maintain their specific functionalities.

Inventive Principle:

Principle #1Segmentation

3Stability of the object's composition

If decentralized user management is implemented across multiple clusters, then cluster independence is maintained, but productivity decreases

Engineering Contradiction:

Improvecluster independenceVSAvoiduser access efficiency

Core Design Contradiction:

Stability of the object's compositionVSProductivity

Solution Approach 1:

The centralized authentication service enables users to access multiple independent clusters through a single interface without compromising cluster independence. The mediator handles the coordination and communication, allowing users to interact with multiple clusters efficiently while clusters remain independently managed.

Inventive Principle:

Principle #24Intermediary (Mediator)

4Reliability

If multiple user credentials are required for different clusters, then security is strengthened, but ease of operation deteriorates

Engineering Contradiction:

ImprovesecurityVSAvoiduser access simplicity

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The centralized authentication service provides universal credential management that works across all computing clusters. Users authenticate once through the service, which then manages their credentials securely across multiple clusters, maintaining strong security while providing operational simplicity.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The authentication service as an intermediary handles secure credential management centrally. It verifies user credentials once and manages access permissions across multiple clusters, eliminating the need for users to manually manage multiple credentials while maintaining security through centralized control.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS20250363192A1Multi-cluster access

Publication Date: 2025.11.27 KASTEN INC

AI summary

Disclosed herein are system, method, and computer program product embodiments for multi-cluster access. In some embodiments, the server receives a first request to bind one or more cluster roles associated with a user to each of one or more secondary computing clusters. The server binds the user's credentials with the one or more cluster roles corresponding to each of one or more secondary computing clusters. Furthermore, the server receives a second request for providing the user access to the primary computing cluster. Moreover, the server receives a third request from the user interface intended for at least one secondary computing cluster. The server forwards the third request to the at least one secondary computing cluster while impersonating at least one cluster role of the one or more cluster roles corresponding to the at least one secondary computing cluster.