Abstract: An example method for dynamically adjusting an I/O stack of a distributed storage system comprises determining, by a container storage management system, an excess of input/output (I/O) requests to a node of a container system; and adjusting, by the container storage management system and based on the determining the excess, a parameter associated with the node to reduce the excess of the I/O requests.

Abstract: An illustrative method includes a storage management system detecting an event within a storage system, determining an operation based on the event, and providing a notification of the operation to an orchestration system configured to manage an execution of the operation by a computing system associated with the storage system.

Abstract: States of storage nodes in a storage cluster may be transitioned from a secured state to an unsecured state. When all the storage nodes are in the secured state, a first reboot of the storage nodes is initiated. The first reboot may involve the storage nodes rebooting from the secured state into an intermediate state. During the first reboot: storage nodes that have rebooted into the intermediate state are allowed to rejoin the distributed storage cluster, and storage nodes in the unsecured state are not allowed to join the distributed storage cluster. When all the storage nodes are in the intermediate state, a second reboot of the storage nodes may be initiated. The second reboot may involve rebooting the storage nodes from the intermediate state into the unsecured state. During the second reboot, storage nodes that have rebooted into the unsecured state are allowed to rejoin the storage cluster.

Abstract: An example method for monitoring for security threats in a container system comprises: monitoring, by a container storage management system configured to manage storage resources for containerized applications deployed on one or more nodes within a container system, activity within the container system; detecting, by the container storage management system based on the monitoring, an anomaly associated with the activity; and determining, by the container storage management system based on the detecting the anomaly, that data stored by the one or more storage resources is possibly being targeted by a security threat.

Abstract: An example method for monitoring volume dependencies for security threats comprises: detecting a request to perform an operation with respect to a volume included in a plurality of volumes included in a storage system; determining, based on a dependency mapping that specifies dependencies between the plurality of volumes, that performance of the operation would affect a dependency between the volume and one or more other volumes included in the plurality of volumes; and determining, based on the determining that the performance of the operation would affect the dependency between the volume and the one or more other volumes, that the request is possibly associated with a security threat against data stored by the storage system.

Abstract: An illustrative method includes a storage management system of a container system performing, for a worker node added to a cluster of the container system based on a first authentication of the worker node, a second authentication for the worker node, and determining, based on the second authentication, whether the worker node is authorized to perform one or more operations on a storage system associated with the cluster.

Abstract: An example method for adjusting IO profiles in a distributed storage system comprises: determining, by a storage system that provides a volume as persistent storage for a container application running in a container system, a characteristic of the container application; and adjusting, by the storage system and based on the characteristic of the container application, an input/output (IO) profile of the volume.

Abstract: An illustrative method may include creating a volume object based on a request that includes a user token that indicates an identifier of a user associated with the request, the volume object corresponding to a physical or virtual volume of storage; creating an ownership object corresponding to the volume object, the creating comprising obtaining the identifier of the user from the user token and including the identifier in the ownership object; and including in the ownership object an access control list that is associated with an operation type, the access control list comprising identifiers of users and/or user groups who have permission to perform operations on the volume object.

Abstract: An illustrative method includes a monitoring system obtaining an attribute model for a dataset stored at rest within a storage system, the attribute model indicating one or more attributes of the dataset, determining, based on the attribute model, a compliance level of the dataset with a compliance ruleset associated with a compliance policy, and performing, based on the compliance level of the dataset with the compliance ruleset, an operation with respect to the dataset.

Abstract: An illustrative method includes a storage management system ingesting a data item into a unified storage system via a storage system interface among a plurality of storage system interfaces associated with the unified storage system, determining, in response to the ingesting of the data item into the unified storage system, an operation based on the data item, and providing a notification of the operation to an orchestration system configured to manage an execution of the operation by a computing system associated with the unified storage system. In certain embodiments, the unified storage system may be implemented as compute-aware storage system such as a container orchestrator-aware storage system.

Abstract: An example method includes tracking, by a storage management system, input/output (I/O) operations to a storage pool from a first application and a second application; determining, by the storage management system, that the storage pool has reached a threshold storage usage; and throttling, by the storage management system in response to the determining that the storage pool has reached the threshold storage usage, the first application and the second application differently based on the tracked I/O operations from the first application and the second application.

Abstract: An illustrative method includes detecting a request to perform a cluster-wide snapshot of a cluster comprising one or more nodes on which one or more containerized applications are deployed, the snapshot corresponding to a point in time; preparing, based on the request, objects within the cluster for the snapshot; and generating, in response to the preparing, the cluster-wide snapshot of the cluster.

Abstract: A storage cluster may include storage nodes. Each storage node may include a storage device. The storage nodes may communicate via a network to provide volumes that are mountable by clients outside the storage cluster. The volumes may be stored on the storage devices. There may be an instruction to generate a cluster-wide snapshot corresponding to a point in time. Based on the instruction, all of the volumes provided by the storage cluster may be identified. A snapshot of each of the identified volumes may be generated. Each volume snapshot may include a copy of the content of the volume as it existed at the point in time. A cluster-wide snapshot may be generated, and the cluster-wide snapshot may include the snapshots of the volumes, among other information.

Abstract: An illustrative method includes a storage management system detecting an event within a storage system, determining, based on the event, an operation related to a compliance ruleset associated with a compliance policy, and providing a notification of the operation to an orchestration system configured to manage an execution of the operation by a computing system associated with the storage system.

Abstract: Usage of a source volume may be monitored to accumulate usage statistics for source extents of the source volume. The source volume may be backed up to a backup volume having backup extents that are copies of the source extents. When the backup volume is restored to a restore volume, priority for copying the backup extents to the restore volume may be based on the usage statistics. Backup extents having usage statistics that indicate higher usage with respect to the source volume may be restored to the restore volume with higher priority than backup extents having usage statistics that indicate lower usage with respect to the source volume.

Abstract: An illustrative method includes a storage-aware serverless function management system determining a status of a serverless system that implements one or more serverless functions configured to access one or more components of a storage system, determining a utilization of the storage system, and requesting that the storage system adjust storage of data in the storage system based on the status of the serverless system and the utilization of the storage system.

Abstract: An illustrative method includes accessing, by a controller operating within a global control plane, a recovery policy that specifies parameters for generating recovery data associated with one or more resources of a first cluster comprising a first one or more containers, wherein the first cluster comprises a first local control plane separate from the global control plane; determining, by the controller and based on the recovery policy, a second cluster comprising a second one or more containers, wherein the second cluster comprises a second local control plane separate from the global control plane; and generating, by the controller and with respect to the second cluster, the recovery data associated with the one or more resources of the first cluster.

Abstract: A storage system, associated with a container system, may be configured to perform: receiving a request comprising an identifier indicative of a container image, wherein the request is associated with a node of a cluster of the container system; identifying, based on the identifier, a volume comprising one or more layers of a container; and providing volume data indicative of the volume. In some examples, a container orchestrator and a container runtime, also associated with the container system, may be configured to perform operations related to use of volumes that comprise one or more container images.

Abstract: A storage system, associated with a container system, may be configured to perform a method that includes: providing, by the storage system to a container operating within a container system, one or more storage services; determining, by the storage system, an interruption to the one or more storage services; and providing, based on the interruption and from the storage system to a container orchestrator for the container system, an alert associated with the container.

Abstract: A container recovery using volumes comprising container images may be performed by a method comprising: determining, by a recovery process and based on node data, to recover a container operating on a first node onto a second node, where a container image is associated with the container; determining, by the recovery process and based on the container image, volume data indicative of a volume comprising the container image; and initiating, by the recovery process and based on the volume data, recovery of the container from the first node onto the second node.