Cluster security management method, device and storage medium based on kubernetes and network domain

Abstract

The present invention relates to the field of cloud security technology, and provides a cluster security management method, device, and computer-readable storage medium based on Kubernetes and network domains. The method includes: determining the configuration information required by the Kubernetes cluster, and opening the The corresponding container service creates a business cluster associated with the network domain according to the configuration information, and deploys the corresponding application container according to the configuration information; wherein, the step of "creating a cluster associated with the network domain according to the configuration information" is performed. When creating a business cluster", it includes: creating a security group and creating a namespace namespace resource object; the network domains in the business cluster communicate through the security group; the namespace resource object is used for the application that will be deployed in the network domain isolation. The invention solves the technical problem of mutual isolation and mutual access between different network domains, facilitates business management and enhances network security.

Description

technical field [0001] The present invention relates to the technical field of cloud security, in particular to a cluster security management method, device and computer-readable storage medium based on Kubernetes and network domains. Background technique [0002] Kubernetes is an open source containerized application for managing multiple hosts in a cloud platform, and it is also a container orchestration engine. Kubernetes supports automated deployment, large-scale scalability, and application container management. When an application is deployed in a production environment, multiple instances of the application are usually deployed to load balance application requests. In Kubernetes, multiple containers can be created, each container runs an application instance, and then through the built-in load balancing strategy, the management, discovery, and access of this group of application instances are realized, and these details do not require operation and maintenance person...

AI Technical Summary

Problems solved by technology

[0003] At present, in the process of building application platforms in the financial field, there are many problems such as network risks, network vulnerabilities and unstable factors, which inevitably generate some security risks and problems, which lead to information leakage, illegal intrusion, platform crashes, viruses, etc. network security issues

At present, the problem of network security is still solved by manual management, which has been unable to adapt to the current situation. Regarding the current network security problem, many financial companies have been using virtualized cloud platforms to run applications, that is, virtual machines. isolation and control, but the cost of use is higher

Images