Pure Storage, Inc.

Red Hat, Inc.

Emc Corporation

Portworx, Inc.

Luis Pablo Pabón

Taher Vohra

Naveen Neelakantam

Kshithij Iyer

Anne Cesa Klein

Abhay Chavan

Prabir Paul

Paul Theunis

Jeffrey Alan Brown

Virendra Prakashaiah

Naveen Revanna

Henry Dan Lambright

Vishwas Bettigere Prabhakar

Madanagopal Arunachalam

Grant William Griffiths

Vinod Jayaraman

Stephen James Watt

Brian R Gruttadauria

Joseph T Frank

Lakshmi Narasimhan Sundararajan

Vijayan Satyamoorthy Srinivasa

Aditya Dani

Neelesh Thakur

Thiago Lucas Da Silva

Mohammed Umair Mufti

Sigalit Adoot-Tari

Santhosh Marakala

Priyanshu Pandey

Jan Vrtiska

Charudath Ujjaini Gopal

Rohit Kulkarni

Aditya Kulkarni

Sunder Phani Kumar Nookala

Ganesh Pal

Tapas Sharma

Dhruv Bhatnagar

Ram Suradkar

Ladislav Prskavec

Lalatendu Das

Prashanth Kumar Nanjundappa

Prabhudev Avarasang

Timothy Darnell

Humble Devassy Chirammal

Chun-Yi Su

Mohamed Ashiq Liyazudeen

Venkatanarasimhan Ramakrishnan

Weiwei Mou

An illustrative method includes a cloud services provider system detecting a request to execute an event associated with a service provided by the cloud services provider system; determining that the event will affect a storage system associated with the service; transmitting a notification to the storage system that the event is to be executed; and executing the event in response to the storage system acknowledging the notification.

Early detection of cloud-based events

An example method for automated backups in a distributed storage system comprises accessing, by a storage controller of a storage system, a user-defined set of criteria indicating a criticality of data stored by the storage system; detecting, by the storage controller, a change in the data; and generating, by the storage controller, based on the detecting and on the criticality, a point-in-time immutable version of the change in the data.

Automated backups in a distributed storage system

An example method for automated elastic resource management of a container system by a storage system comprises providing, by a container storage management system, a volume for use by a containerized application of a container system, the volume deployed on a node of the container system; analyzing, by the container storage management system, input/output (I/O) operations to the volume based on historical I/O operations; and directing, by the container storage management system and based on the analyzing the I/O operations based on the historical I/O operations, the container system to adjust a capacity of a resource associated with the node.

Automated elastic resource management of a container system by a distributed storage system

An illustrative method includes determining, by a monitoring system based on an attribute model of a dataset stored within a storage system, that one or more data items in the dataset are noncompliant with a compliance ruleset, wherein one or more data attributes of a data item in the dataset includes one or more of a data type of the data item, an encryption information of the data item, an accessibility of the data item, a retention policy of the data item, or an operation log configuration associated with the data item; determining, by the monitoring system based on the one or more data items being noncompliant with the compliance ruleset, a compliance level of the dataset with the compliance ruleset; and performing, by the monitoring system based on the compliance level of the dataset satisfying a compliance level threshold, an operation with respect to the dataset.

Attribute model-based compliance monitoring of data stored in a storage system

Systems, apparatuses, and methods of multi-cluster database deployment are disclosed. An illustrative method includes receiving, by a controller, a request to deploy a database to multiple clusters; determining, by the controller and based on the request, a set of clusters to which to deploy the database, wherein the determining is based on the set of clusters including a first cluster and a second cluster having a relationship established using a storage system implemented on the first cluster and the second cluster; and deploying, by the controller, the database to the set of clusters, wherein the deploying the database to the set of clusters comprises directing the storage system implemented on the first cluster and the second cluster to replicate data of the database between the first cluster and the second cluster.

Multi-cluster database deployment

A storage system, associated with a container system, may be configured to perform: receiving a request comprising an identifier indicative of a container image, wherein the request is associated with a node of a cluster of the container system; identifying, based on the identifier, a volume comprising one or more layers of a container; and providing volume data indicative of the volume. In some examples, a container orchestrator and a container runtime, also associated with the container system, may be configured to perform operations related to use of volumes that comprise one or more container images.

Using data volumes to store container images

An illustrative method includes a controller associated with a plurality of clusters receiving, from a user, a disaster recovery policy of a containerized application deployed on a first cluster in the plurality of clusters, determining a cluster profile of each second cluster among one or more second clusters that are distinct from the first cluster in the plurality of clusters, identifying, from the one or more second clusters, a particular cluster based on the disaster recovery policy of the containerized application and the cluster profile of each second cluster, and assigning the particular cluster to be a disaster recovery cluster for the containerized application.

Policy-based disaster recovery for a containerized application

A storage system, associated with a container system, may be configured to perform a method that includes: providing, by a storage system, storage services to a container system; determining, by the storage system and based on the providing the storage services to the container system, a potential security threat; and performing, by the storage system, a remedial action based on the potential security threat.

Storage system based threat detection and remediation for containers

An illustrative method includes receiving, by a container storage interface (CSI) filter driver executing on a node of a cluster managed by a container orchestrator, a request to deploy a containerized application; selecting, by the CSI filter driver based on one or more attributes of the containerized application, a storage system from a plurality of storage systems attached to a plurality of clusters managed by the container orchestrator; and transmitting, by the CSI filter driver, a command to a CSI driver executing on a node of a cluster to which the storage system is attached, the cluster included in the plurality of clusters, the command configured to direct the CSI driver to provision a volume on the storage system for use with the containerized application.

Container storage interface filter driver-based determination of optimal storage system to provide storage for a containerized application deployment

An illustrative method includes a storage management system receiving, from a containerized application, a storage operation request associated with a storage volume in a storage system, the storage system including a plurality of volume instances of the storage volume that correspond to a plurality of data management models, identifying, from the plurality of volume instances, one or more particular volume instances based on the storage operation request and a data management model of each volume instance in the plurality of volume instances, and directing the storage operation request to the one or more particular volume instances to be performed on the one or more particular volume instances.

Backend storage system implementing multiple data management models

An illustrative method includes receiving, by a container storage interface (CSI) filter driver, a request provided by a source for a CSI driver associated with a storage system to perform a control plane operation with respect to the storage system, wherein the CSI filter driver and the CSI filter execute on a node of a cluster managed by a container orchestrator, and wherein the storage system is configured to store data associated with one or more containerized applications executing on the node; performing, by the CSI filter driver in response to receiving the request, an access control operation with respect the request; and allowing, by the CSI filter driver, the CSI driver to perform the control plane operation when the access control operation determines that the source is authorized to initiate the control plane operation.

Container storage interface filter driver-based security for a storage system

An illustrative method includes accessing, by a controller operating within a global control plane, a recovery policy that specifies parameters for generating recovery data associated with one or more resources of a first cluster comprising a first one or more containers, wherein the first cluster comprises a first local control plane separate from the global control plane; determining, by the controller and based on the recovery policy, a second cluster comprising a second one or more containers, wherein the second cluster comprises a second local control plane separate from the global control plane; and generating, by the controller and with respect to the second cluster, the recovery data associated with the one or more resources of the first cluster.

Data recovery using recovery policies

A storage system, associated with a container system, may be configured to perform a method that includes: providing, by the storage system to a container operating within a container system, one or more storage services; determining, by the storage system, an interruption to the one or more storage services; and providing, based on the interruption and from the storage system to a container orchestrator for the container system, an alert associated with the container.

Storage system based monitoring and remediation for containers

An example method for monitoring volume dependencies for security threats comprises: detecting a request to perform an operation with respect to a volume included in a plurality of volumes included in a storage system; determining, based on a dependency mapping that specifies dependencies between the plurality of volumes, that performance of the operation would affect a dependency between the volume and one or more other volumes included in the plurality of volumes; and determining, based on the determining that the performance of the operation would affect the dependency between the volume and the one or more other volumes, that the request is possibly associated with a security threat against data stored by the storage system.

Volume dependencies in a storage system

An illustrative method includes detecting a request to perform a cluster-wide snapshot of a cluster comprising one or more nodes on which one or more containerized applications are deployed, the snapshot corresponding to a point in time; preparing, based on the request, objects within the cluster for the snapshot; and generating, in response to the preparing, the cluster-wide snapshot of the cluster.

Cluster-wide snapshotting of a container system cluster

Growing community of inventors

Sturbridge, MA, United States of America

Luis Pablo Pabón