US 12,034,728 B2
Dynamic access control in service mesh with service broker
Xuebin He, Westwood, MA (US); Victor Fong, Medford, MA (US); Kenneth Durazzo, Morgan Hill, CA (US); and Edgardo Robles, Franklin, MA (US)
Assigned to EMC IP HOLDING COMPANY LLC, Hopkinton, MA (US)
Filed by EMC IP Holding Company LLC, Hopkinton, MA (US)
Filed on Jul. 23, 2021, as Appl. No. 17/383,657.
Prior Publication US 2023/0027507 A1, Jan. 26, 2023
Int. Cl. H04L 29/06 (2006.01); H04L 9/40 (2022.01); H04L 29/08 (2006.01); H04L 67/02 (2022.01); H04L 67/51 (2022.01)
CPC H04L 63/101 (2013.01) [H04L 63/083 (2013.01); H04L 63/105 (2013.01); H04L 67/02 (2013.01); H04L 67/51 (2022.05)] 6 Claims
OG exemplary drawing
 
1. A method comprising:
provisioning a service in a computing environment that includes a service mesh;
storing credentials to access the service in a credential store;
binding the service to an application in the service mesh;
connecting a service broker and a service mesh controller to add policies to the service mesh, wherein the policies of the service mesh are defined and maintained by the service mesh controller;
deploying the application to the computing environment, wherein a first sidecar is associated to the application and a second side car is associated to the service;
sending a request to the service using the service mesh without including the credentials, wherein the request for the service is received by the first sidecar and transmitted to the second sidecar in accordance with the policies of the service mesh;
when an access token in not available, obtaining, by the service broker, the access token using the credentials stored in the credential store and providing the access token to the second sidecar; and
forwarding the request to the service by the second sidecar along with the access token.