Abstract: Examples described herein relate to a system and method for deploying and managing services in tenant clusters using a management cluster. The management cluster includes an integration service in communication with a service controller. The integration service communicates with a service endpoint using privileged credentials for receiving tenant cluster-specific configuration information. The integration service generates access credentials for the new tenant cluster to communicate with the service provider. The integration service provides tenant cluster-specific configuration information and access credentials to the service controller for the deployment of the service in the new tenant cluster. The service controller deploys the service at the new tenant cluster and manages the lifecycle of the service at the new tenant cluster.

Abstract: Examples described herein relate to a system and method for deploying and managing services in tenant clusters using a management cluster. The management cluster includes an integration service in communication with a service controller. The integration service communicates with a service endpoint using privileged credentials for receiving tenant cluster-specific configuration information. The integration service generates access credentials for the new tenant cluster to communicate with the service provider. The integration service provides tenant cluster-specific configuration information and access credentials to the service controller for the deployment of the service in the new tenant cluster. The service controller deploys the service at the new tenant cluster and manages the lifecycle of the service at the new tenant cluster.

Abstract: Examples described herein relate to an authentication management system and a method for managing authentication of a user between an enterprise-level authentication protocol and a cloud-native authentication protocol. The authentication management system may receive an authentication request from an application hosted on a private on-premise network to authenticate a user using the enterprise-level authentication protocol. The authentication request is generated by the application upon receiving an access request from the user via a software as-a-service (SaaS) cloud platform in a cloud-native authentication protocol. Further, the authentication management system may generate an authentication response compliant with the enterprise-level authentication protocol based on an authentication reply that is formatted in compliance to the cloud-native authentication protocol and received from a cloud-native identity and authentication management system based on the authentication request.

Abstract: In some examples, container management can include a non-transitory computer readable medium having instructions, the instructions executable by a processing resource to receive a deployment specification for operating the application within the container management system, determine whether the deployment specification includes a specified workload for scheduling the application, determine, in response to the deployment specification not including a specified workload for scheduling the application, a workload ratio associated with the application, determine a schedule in response to the determined workload ratio, and schedule the application across a plurality of nodes within the container management system based on the determined schedule.

Abstract: A method for managing container usage in a computing system, includes: gathering a plurality of infrastructure costs associated with a container; invoking an orchestration tool in a containerization system to determine a plurality of workload costs associated with the container; determining a container usage cost from the gathered infrastructure costs and the determined workload costs; and managing the container usage in the computing system based on the determined container usage cost. In some instances, the method is implemented in the functionality of a cost analyzer resident on a computing apparatus. In other instances, the method may be implemented in a computing system in which a cost analyzer operates.

Abstract: Examples described relate to secure communication between services hosted on a private cloud and a public cloud. In an example, an agent on a private cloud may poll a secure server on a public cloud to determine whether the secure server includes a request for a service hosted on the private cloud. The request may be made by a service hosted on the public cloud. In response to a determination that the secure server includes the request for the service hosted on the private cloud the agent may retrieve the request from the secure server on the public cloud. The request may be executed on the private cloud, and a response may be generated. The agent may provide the response to the secure server on the public cloud. The response may be shared with the service hosted on the public cloud by the secure server.

Abstract: A container management system having a first cluster that includes a first service for generating an operation and a second cluster that includes a second service for generating an operation, the second cluster located remotely from the first cluster. A master proxy adjusts a request from the first cluster to access the second service from the second cluster, routes a transmission of the adjusted request to the second cluster and adjusts a response to the adjusted request from the second cluster to the first cluster. The first cluster uses the response to generate a cluster operation based on the first service and the second service.

Abstract: In some examples, container management can include a non-transitory computer readable medium having instructions, the instructions executable by a processing resource to receive a deployment specification for operating the application within the container management system, determine whether the deployment specification includes a specified workload for scheduling the application, determine, in response to the deployment specification not including a specified workload for scheduling the application, a workload ratio associated with the application, determine a schedule in response to the determined workload ratio, and schedule the application across a plurality of nodes within the container management system based on the determined schedule.

Abstract: A method for managing container usage in a computing system, includes: gathering a plurality of infrastructure costs associated with a container; invoking an orchestration tool in a containerization system to determine a plurality of workload costs associated with the container; determining a container usage cost from the gathered infrastructure costs and the determined workload costs; and managing the container usage in the computing system based on the determined container usage cost. In some instances, the method is implemented in the functionality of a cost analyzer resident on a computing apparatus. In other instances, the method may be implemented in a computing system in which a cost analyzer operates.

Abstract: A container management system having a first cluster that includes a first service for generating an operation and a second cluster that includes a second service for generating an operation, the second cluster located remotely from the first cluster. A master proxy adjusts a request from the first cluster to access the second service from the second cluster, routes a transmission of the adjusted request to the second cluster and adjusts a response to the adjusted request from the second cluster to the first cluster. The first cluster uses the response to generate a cluster operation based on the first service and the second service.

Abstract: Examples described relate to secure communication between services hosted on a private cloud and a public cloud. In an example, an agent on a private cloud may poll a secure server on a public cloud to determine whether the secure server includes a request for a service hosted on the private cloud. The request may be made by a service hosted on the public cloud. In response to a determination that the secure server includes the request for the service hosted on the private cloud the agent may retrieve the request from the secure server on the public cloud. The request may be executed on the private cloud, and a response may be generated. The agent may provide the response to the secure server on the public cloud. The response may be shared with the service hosted on the public cloud by the secure server.