Abstract: Embodiments of the disclosure provide systems and methods for enabling disaster recovery from a source cluster to a target cluster in a multi-cluster cloud-computing environment. A domain cluster configures a replicated data volume to be updated with data from a data volume of the source cluster, wherein the replicated data volume resides in the target cluster; determines that the target cluster is to replace the source cluster as an active cluster; rebuilds, in the target cluster, a new container instance to replace the container instance on the source cluster; configures the container instance to utilize the replicated data volume in the target cluster; and discontinues recognition of the data volume and container instance on the source cluster as being authoritative.

Abstract: In an embodiment of the present disclosure, a processor selects first and second policies of a plurality of policies enabled for enforcement in a cluster, each of the first and second policies comprising a set of rules and corresponding to a different set of operations performed in the cluster, wherein first and second sets of operations correspond to the first and second policies, respectively, and define, respectively, differing first and second policy types and, in response to determining that the first and second policies correspond to differing first and second policy types, merges the first and second policies into an aggregate policy to be enforced at a selected hierarchical level.

Abstract: In an embodiment of the present disclosure, a processor receives a request to create a volume, wherein a volume placement policy comprises a plurality of scheduler algorithms, each of the scheduler algorithms selecting one or more worker nodes from a plurality of worker nodes for volume storage, determines, based on output from the plurality of scheduler algorithms, the one or more worker nodes, wherein output of each of the plurality of scheduler algorithms is assigned a weight in determining the one or more worker nodes; and causes a node agent in each of the one or more worker nodes to create the volume.

Abstract: Embodiments of the disclosure provide systems and methods for providing access control in a multi-tenant, multi-cluster environment. Providing access control in such an environment can comprise defining, by a domain cluster, a plurality of user roles, each user role having a defined access permission for objects on tenant clusters of the environment. A request can be received by the domain cluster from a user to access the environment and a determination of a user role for the user can be made by the domain cluster. A token can be provided by the domain cluster in response to the request. The token can comprise a definition of access levels for the determined user role for the user and each tenant cluster can control access to the resource objects on the tenant cluster based on the definition of access levels defined in the token.

Abstract: Embodiments of the disclosure provide systems and methods for supporting unmodified applications on a tenant cluster in a multi-tenant, multi-cluster environment. According to one embodiment, a method for supporting unmodified applications in a multi-tenant, multi-cluster environment can comprise creating, in the multi-tenant, multi-cluster environment, a tenant cluster executing one or more applications. The tenant cluster and the one or more applications executing on the tenant cluster can be adopted by a domain cluster of the multi-tenant, multi-cluster environment without modification to the one or more applications for execution in the multi-tenant, multi-cluster environment. The tenant cluster and the one or more applications executing on the tenant cluster can then be managed by the domain cluster of the multi-tenant, multi-cluster environment.

Abstract: Embodiments of the disclosure provide systems and methods for enabling disaster recovery from a source cluster to a target cluster in a multi-cluster cloud-computing environment. A domain cluster configures a replicated data volume to be updated with data from a data volume of the source cluster, wherein the replicated data volume resides in the target cluster; determines that the target cluster is to replace the source cluster as an active cluster; rebuilds, in the target cluster, a new container instance to replace the container instance on the source cluster; configures the container instance to utilize the replicated data volume in the target cluster; and discontinues recognition of the data volume and container instance on the source cluster as being authoritative.

Abstract: Provided herein are methods and systems for improved storage strategies for use of collections of storage resources, such as solid state drives, including in connection with a converged networking and storage node that may be used for virtualization of a collection of physically attached and/or network-connected storage resources.

Abstract: Provided herein are methods and systems for improved storage strategies for use of collections of storage resources, such as solid state drives, including in connection with a converged networking and storage node that may be used for virtualization of a collection of physically attached and/or network-connected storage resources.

Abstract: Provided herein are methods and systems for improved storage strategies for use of collections of storage resources, such as solid state drives, including in connection with a converged networking and storage node that may be used for virtualization of a collection of physically attached and/or network-connected storage resources.

Abstract: Provided herein are methods and systems for improved storage strategies for use of collections of storage resources, such as solid state drives, including in connection with a converged networking and storage node that may be used for virtualization of a collection of physically attached and/or network-connected storage resources.

Abstract: Provided herein are methods and systems for improved storage strategies for use of collections of storage resources, such as solid state drives, including in connection with a converged networking and storage node that may be used for virtualization of a collection of physically attached and/or network-connected storage resources.

Abstract: Provided herein are methods and systems for improved storage strategies for use of collections of storage resources, such as solid state drives, including in connection with a converged networking and storage node that may be used for virtualization of a collection of physically attached and/or network-connected storage resources.

Abstract: Exemplary methods, apparatuses, and systems receive a command to overwrite or delete data stored within an allocated portion of a file system. In response to the command, an entry is added to a first data structure. A write command is received. The portion of the file system added to the first data structure is formatted for reallocation. In performance of the write command, the portion of the file system is reallocated. Portions of the file system are allocated from a second data structure when the second data structure includes a sufficient amount of space to satisfy the write command and from the first data structure when the second data structure does not include a sufficient amount of space. The second data structure includes free portions of the file system that have been formatted for allocation. The first data structure includes free portions that have yet to be formatted.

Abstract: Provided herein are methods and systems for improved storage strategies for use of collections of storage resources, such as solid state drives, including in connection with a converged networking and storage node that may be used for virtualization of a collection of physically attached and/or network-connected storage resources.

Abstract: Exemplary methods, apparatuses, and systems receive a command to overwrite or delete data stored within an allocated portion of a file system. In response to the command, an entry is added to a first data structure. A write command is received. The portion of the file system added to the first data structure is formatted for reallocation. In performance of the write command, the portion of the file system is reallocated. Portions of the file system are allocated from a second data structure when the second data structure includes a sufficient amount of space to satisfy the write command and from the first data structure when the second data structure does not include a sufficient amount of space. The second data structure includes free portions of the file system that have been formatted for allocation. The first data structure includes free portions that have yet to be formatted.