US 12,244,573 B2
Securing metrics in a service mesh
James Warren Turner, London (GB); Christopher James Paterson, Hertford (GB); and Alex John Hockey, London (GB)
Assigned to MICROSOFT TECHNOLOGY LICENSING, LLC, Redmond, WA (US)
Filed by MICROSOFT TECHNOLOGY LICENSING, LLC, Redmond, WA (US)
Filed on Jun. 16, 2022, as Appl. No. 17/841,909.
Claims priority of application No. 2206159.2 (GB), filed on Apr. 28, 2022.
Prior Publication US 2023/0412572 A1, Dec. 21, 2023
Int. Cl. H04L 9/40 (2022.01); H04L 61/5007 (2022.01)
CPC H04L 63/0428 (2013.01) [H04L 61/5007 (2022.05)] 20 Claims
OG exemplary drawing
 
1. A method of providing information to a service mesh from a Kubernetes (K8s) controller, the information usable to enable the service mesh to determine an IP address of one or more application pods to which a monitoring request is to be sent from a monitoring service, the method comprising:
detecting, by the K8s controller, which of the one or more application pods are scheduled to be monitored by the monitoring service via a service monitor associated with the monitoring service and an application service;
creating, by the K8s controller, dummy headless services that match with the one or more application pods scheduled to be monitored, wherein the dummy headless services do not allocate an IP address or forward traffic; and
programming the service mesh with information from the dummy headless services to cause the service mesh to, based on the IP address of the one or more application pods:
intercept the monitoring request; and
in response to determining that the monitoring request is destined to the dummy headless service, encrypt the monitoring request.