Vmware, Inc.

Yanping Cao

Pratik Kapadia

Mark Russell Johnson

Mahdi Ben Hamida

Oleg Zaydman

Tan Jiang

Zachary James Shepherd

Preeti Kota

Michal Adam Jankowski

Xiaoyun An

Steven Sun

Kirill Uvaev

Pratima Rao

An example method of logging in an automation user to a container image registry in a virtualized computing system is described, the container image registry managing container images for deploying containers in the virtualized computing system. The method includes: receiving, at a credential manager in the container image registry, a login request from a service executing in the virtualized computing system representing the automation user, the login request for image access to the container image registry and including an automation token; authenticating the automation token as credentials of a robot account in the container image registry corresponding to the automation user; and authorizing the automation user as identified in the automation token of the login request in response to the robot account having privilege for the image access.

Secured login management to container image registry in a virtualized computer system

A virtualized computing system according to an example includes: a host cluster having hosts and a virtualization layer executing on hardware platforms of the hosts, the virtualization layer supporting execution of virtual machines (VMs); a container image registry configured to manage container images for deploying containers in the host cluster; an orchestration control plane integrated with the virtualization layer, the orchestration control plane including a master server executing in a first VM of the VMs, the master server configured to manage image secrets based on accounts in the container image registry; and a guest cluster, managed by the orchestration control plane and executing in second VMs of the VMs, the guest cluster configured to receive the image secrets from the master server and access the container image registry using the image secrets.

Image registry resource sharing among container orchestrators in a virtualized computing system

A container image registry is managed in a virtualized computing system. The container image registry manages container images for deploying containers in a host cluster, the host cluster includes hosts and a virtualization layer executing on hardware platforms of the hosts, and the virtualization layer supports execution of virtual machines (VMs). The method includes: creating a namespace for an orchestration control plane integrated with the virtualization layer, the namespace including constraints for deploying workloads in the VMs; invoking, by a registry service in response to creation of the namespace, a management application programming interface (API) of the container image registry to create a project for the container images; and invoking, by the registry service, the management API of the container image registry to both add members to the project, and assign image registry roles to the members, in response to bindings of users and namespace roles derived from the constraints.

Management of a container image registry in a virtualized computer system

A cluster management system and method for synchronizing content libraries within a distributed computer system allows an on-demand synchronization option of a content library subscribed to a publishing content library, which includes at least a consumable software item and metadata of the consumable software item, to be enabled. As a result of the on-demand synchronization option of the subscribed content library being enabled, the metadata of the consumable software item is downloaded from the publishing content library to the subscribed content library without downloading the consumable software item. The consumable software item is downloaded from the publishing content library to the subscribed content library in response to user selection of the consumable software item at the subscribed content library.

On-demand subscribed content library

A management system and method for deploying a virtual processing instance from an open virtual appliance (OVA) template file involves accessing the OVA template file stored on a storage of a computer to stream at least one file from the storage of the computer for processing and to transmit a disk image file of the virtual processing instance in the OVA template file from the storage of the computer to a storage of a destination host computer on which the virtual processing instance is to be deployed.

Intelligent deployment of virtual processing instances from open virtual appliance templates

A cluster management system and method for synchronizing content libraries within a distributed computer system uses multiple replication processes to synchronize a subscribed content library with a publishing content library, which includes at least a consumable software item and metadata of the consumable software item. If the consumable software item of the publishing content library can be replicated at the subscribed content library using a first data replication process, then the consumable software item of the publishing content library is replicated at the subscribed content library using the first data replication process. If the consumable software item of the publishing content library cannot be replicated at the subscribed content library using the first data replication process, the consumable software item of the publishing content library is replicated at the subscribed content library using a second data replication process.

Intelligent content synchronization between content libraries

A coordinated multi-cast content distribution process is used to distribute content, e.g., files, from a source node of a network to target nodes of the network. A minimum spanning tree is identified for the network based on costs of edges connecting the nodes. The minimum spanning tree includes the source node and all target nodes; the minimum spanning tree distinguishes leaf target nodes from non-leaf target nodes. Content parts are moved along the spanning tree in an iterative process in which, for each iteration, the highest-cost leaf nodes are identified and content parts are moved toward the identified leaf nodes. This process reduces avoids network congestion and reduces the total bandwidth consumption required to supply the content to all target nodes.

Growing community of inventors

San Carlos, CA, United States of America

Yanping Cao