Red Hat, Inc.

Michal Fojtik

Benjamin Michael Parees

Martin Nagy

Rodolfo Henrique Carvalho

Cesar Augusto Wong

Daniel McPherson

Clayton Palmer Coleman

Vyacheslav Semushin

Implementations provide for container clustering in a container-based architecture. A method of the disclosure includes generating by a processing device executing a container deploying an instance of an application image, a domain name server (DNS) query to request identification of other containers in a container cluster. The other containers deploy other instances of the application image. The method also includes in responsive to the DNS query, receiving the identification of each of the other containers in the container cluster. The method further includes configuring, without manual intervention, the container as a member of the container cluster in view of the identification of each of the other containers.

Container clustering in a container-based architecture

Implementations provide for a source to image framework for a Platform-as-a-Service (PaaS) system in a distributed cluster system that can apply modifications to source code. A method of the disclosure includes invoking source-to-image (STI) methodology to execute an instance of an application image. The application image is associated with source code and an application framework of an application. A modification to the source code utilized in the instance is received and identified via the application framework utilized in the instance. The identified modification to the source code is applied during runtime of the instance in a container via the application framework.

Hot deployment in a distributed cluster system

Implementations provide for a container-based architecture that can maintain build secrets. A method of the disclosure includes storing a file in a destination directory of a build container. The file includes authentication data to retrieve information from a repository. A build of an application image is initiated at a build container. The application image is built using the information retrieved from the repository via the loaded file. In response to receiving an indication that the build of the application imaged is complete, the loaded file is truncated.

Maintaining build secrets in a build container

Embodiments of the disclosure enable resource access for secure application containers. In accordance with one embodiment, a method is provided that comprises identifying a tracing wrapper for an application to be executed by a process. The tracing wrapper to track an event associated with an interaction of the application with one or more system resources. An instance of the application is executed by the process using an application account having access to the system resources. A first system resource of the system resources is determined to be used by the application in view of the tracing wrapper. The application is then copied to a secure container to be executed by the process using a container account of the secure container. The secure container is isolated from access to the one or more system resources. Thereupon, the container account is provided access to the first system resource.

Growing community of inventors

Brno, Czechia

Michal Fojtik