Abstract: Example techniques for permitting access to cloud computing resources based on tags are described. In an example, a user is permitted to access a resource provided by a cloud computing platform based on a comparison of identifier of the user with an identifier specified in an access tag associated with the resource.

Abstract: In an example, a container cluster management system includes a cluster manager providing access to services provided by containers within a container cluster and a plurality of nodes. Each node has access to an IP table, and is to forward a service request for a service received via the cluster manager to at least one container sub-cluster by translating a destination address of the service request to an IP address of a container sub-cluster. At least one of the nodes comprises a proxy manager, to manage an IP table of the node and a service firewall, to add a service-specific rule to the IP table.

Abstract: Example implementations relate to provisioning hybrid cloud resources in an operating environment. A computing device may comprise a processing resource and a memory resource storing non-transitory machine-readable instructions to cause the processing resource to instantiate an operating environment according to a pre-determined operating environment configuration, provision hybrid cloud resources for the operating environment using the pre-determined operating environment configuration, and perform an operation relating to an application using the provisioned hybrid cloud resources provided by at least one cloud service provider included in a pre-determined application specification.

Abstract: Example implementations relate hybrid cloud compliance and remediation service. A hybrid cloud management system may comprise a first service to evaluate a compliance check for a hybrid cloud environment utilizing a framework that corresponds to different cloud services of the hybrid cloud environment, a second service to publish a compliance event based on the compliance check of the first service, and a third service to route the compliance event based on a remediation action determined by the third service, where the first, second, and third services are deployed as services in a cluster.

Abstract: In one example, a virtual local area network (VLAN) tagged packet may be received from a first virtual machine (VM) running on a first host via a port group that spans across hosts by a first virtual bridge of a first VLAN-aware VM. The first VLAN-aware VM may run on the first host. The VLAN tagged packet from the first VM may be translated to a virtual extensible local area network (VXLAN) encapsulated packet by the first virtual bridge based on a network property of a VM port of the first VM. The VXLAN encapsulated packet may be transmitted to a second VM running on a second host by the first virtual bridge via a VXLAN tunnel endpoint (VTEP) provided by the first VLAN-aware VM.

Abstract: In an example, a container cluster management system includes a first node, a second node and redistribution manager. The first node has an allocated external IP address, and comprises a utilization monitor to provide data relating to a utilization of the first node. The redistribution manager may receive the data relating to the utilization of the first node from the first node and determine whether the utilization of the first node has exceeded a predetermined threshold. Responsive to the utilization exceeding the predetermined threshold, the redistribution manager may reallocate the external IP address from the first node to the second node.

Abstract: In an example, a container cluster management system includes a cluster manager providing access to services provided by containers within a container cluster and a plurality of nodes. Each node has access to an IP table, and is to forward a service request for a service received via the cluster manager to at least one container sub-cluster by translating a destination address of the service request to an IP address of a container sub-cluster. At least one of the nodes comprises a proxy manager, to manage an IP table of the node and a service firewall, to add a service-specific rule to the IP table.

Abstract: In one example, a virtual local area network (VLAN) tagged packet may be received from a first virtual machine (VM) running on a first host via a port group that spans across hosts by a first virtual bridge of a first VLAN-aware VM. The first VLAN-aware VM may run on the first host. The VLAN tagged packet from the first VM may be translated to a virtual extensible local area network (VXLAN) encapsulated packet by the first virtual bridge based on a network property of a VM port of the first VM. The VXLAN encapsulated packet may be transmitted to a second VM running on a second host by the first virtual bridge via a VXLAN tunnel endpoint (VTEP) provided by the first VLAN-aware VM.

Abstract: Example embodiments disclosed herein relate to use of a network controller to determine or create a network port profile for a virtual machine snapshot. In one example, the network controller receives a request from a virtual machine manager to create a network port profile for a virtual machine associated with a virtual machine identifier. In the example, a network port profile is created based on the virtual machine identifier. In the example, the network port profile includes port information about a virtual machine port associated with the virtual machine identifier, a virtual switch associated with the virtual machine port, and a physical switch port associated with the virtual switch.