Design of User Management and security Tools for Centaurus

Abstract

Centaurus is an open source software that facilitates the effective development of distributed computing applications in 5G cloud environment. This is necessary for efficient application development since Kubernetes is lacking multi-tenant capability and also in the provision of security. In this scenario, Centaurus can be used to build these gaps. In this project work, a new user and security management tool has been developed for Kubernetes platform using Centaurus. The major tools developed in this project work are User management tool using login feature, tool for clustering and role creation, Multi-Tenant Management tool, Namespace management and virtual machine management tool and a role based access control tool for enhancing the security of distributed applications. Moreover, for enhancing the security of applications developed using Centaurus, a new Role Based Access Control tool has been developed in this project work. This Role Based Access Control tool provides facilities for creating roles, assigning privileges, securing applications based on user privileges and finally the facility for revoking the privileges in order to enhance the security of the system. The major advantages of the system developed in this project work include the increase in Usability, flexibility and security of the applications.

Multitenant Containers as a Service (CaaS) for Clouds and Edge Clouds

“…Cloud customers have a choice of open-source container orchestration systems to deploy their containerized services. The four most prominent ones are [32]: Apache Mesos, 12 Docker Swarm, 13 Kubernetes, 14 and Rancher's Cattle. 15 We focus on Kubernetes, as it has recently become the de facto industry standard.…”

“…Arktos achieves this through API modifications, 26 which may require a significant amount of effort to maintain alignment with the upstream Kubernetes control plane code. Its architecture primarily consists of three main software entities: an API gateway that receives tenant requests, a Tenant Partition (TP) that gives the illusion of each tenant acquiring an individual cluster, and a Resource Partition (RP) that operates on resources such as nodes [14].…”

“…We show that the existing frameworks, while undoubtedly fine for the cloud, are not suitable for CaaS in the edge cloud. There are a few prior studies concerning these frameworks, such as Vir-tualCluster [4], Arktos [14], and Liqo [15], but this is the first paper to situate them, and EdgeNet, within the existing scientific literature on cloud multitenancy.…”

“…Apache Mesos https://github.com/apache/mesos13 Docker Swarm https://github.com/docker/swarmkit14 Kubernetes https://kubernetes.io/15 Rancher's Cattle https://github.com/rancher/cattle16 Amazon Web Services (AWS) Elastic Kubernetes Cloud (EKS) documentation: Fargate https://docs.aws.amazon.com/eks/latest/userguide/farga te.html17 Google Cloud documentation: Create an Autopilot cluster https://clou d.google.com/kubernetes-engine/docs/how-to/creating-an-autopilot-cluster4 VOLUME 4, 2016 This article has been accepted for publication in IEEE Access. This is the author's version which has not been fully edited and content may change prior to final publication.…”