Red Hat, Inc.

International Business Machines Corporation

Daniel McPherson

Michael P McGrath

Matthew J Hicks

Benjamin Michael Parees

Clayton Palmer Coleman

Thomas Wiest

Cesar Augusto Wong

Krishna Raman

Andrew Goldstein

Ravi Sankar Penta

Abhishek Gupta

David Mark Wendt

Michal Fojtik

Jhon Honce

Jordan Thomas Liggitt

Paul Morie

Stephen Tweedie

Ben Parees

Jay Johnson

James Martin Jagielski

The present disclosure provides new methods and systems for managing applications in a deployment pipeline. For example, a policy of a first environment and a policy of a second environment are detected. A request to move an application from the first environment to the second environment is received. Configuration data of the first environment is incompatible with the second environment. A configuration data set associated with the application is detected and includes various pieces of configuration data. Based on the various policies and the configuration data set, actions to be implemented in the configuration data set are determined, including actions associated with each piece of configuration data. The actions are implemented on the pieces of configuration data to obtain a reconfigured configuration data set that includes different configuration data than that of the first environment. The application and the reconfigured configuration data set are moved to the second environment.

Application management in an application deployment pipeline

Automatic parameter value generation is disclosed. It is determined that a parameter value generation trigger associated with a parameter has occurred. A parameter value in accordance with a format of the parameter value is obtained. At least one location associated with a first component to which the parameter value is to be communicated is determined. The parameter value is communicated to the at least one location, and a parameter value refresh policy associated with the first component is determined.

Automatic parameter value generation

Aspects of the disclosure provide for source code management for a multi-tenant Platform-as-Service (PaaS) system. A method of the disclosure includes creating, by a processing device of a platform-as-a-service (PaaS) system, a first container to host a first source code management repository for an application; receiving, at the first container, source code associated with the application; creating, by the processing device, a second container to provide deployment functionality for the application, the second container comprising resource-constrained processing space of a node of the PaaS system to execute functionality of the application; and deploying, by the processing device, the source code on the PaaS system using the second container. Aspects of the disclosure may be implemented using high-availability (HA) clusters by replicating the SCM container(s). Aspects of the disclosure may provide users with cost-effective, scaled, and secure PaaS services using reduced infrastructure.

Source code management for a multi-tenant platform-as-a-service (PaaS) system

A mechanism for tracking applications on a node of a multi-tenant PaaS environment is disclosed. A method of the invention includes providing an agent of a server orchestration system on a multi-tenant node of a network-based application hosting system, wherein the node comprises a virtual machine (VM) of a cloud computing environment configured to host a plurality of Web application components of different owners, and maintaining, by the agent, a plurality of facts about the node. One of the facts is a number of source code management (SCM) software repositories on the node; each software repository containing at least one of the plurality of Web application components, which is determined by and updated by the agent to reflect the number of determined software repositories.

Tracking and utilizing facts about a node of a multi-tenant cloud hosting environment

Implementations for resilient scheduling of broker jobs for asynchronous tasks in a multi-tenant Platform-as-a-Service (PaaS) system are disclosed. A method of the disclosure includes receiving, by the processing device of a broker of a multi-tenant PaaS system from a user of the multi-tenant PaaS system, a request to complete a job, adding, by the processing device, an entry corresponding to the requested job in a data store of the broker, adding, by the processing device, another entry corresponding to the requested job in a scheduler communicably coupled to the broker, and sending, by the processing device to the user, an acknowledgment of the request and an identifier (ID) of the job, wherein the job is processed asynchronous to the sending of the acknowledgment.

Resilient scheduling of broker jobs for asynchronous tasks in a multi-tenant platform-as-a-service (PaaS) system

Implementations for measuring resource consumption in a cloud provider system are disclosed. A method of the disclosure includes determining that a resource of an application of a cloud provider system is initializing, determining whether each operation in a list of initialization operations used in the initialization of the resources is performed successfully, prior to a create usage record operation in the list of initialization operations, in response to determining that each of the initialization operations prior to the create usage record operation in the list of initialization operations is performed successfully, creating a usage record for the resource using the create usage record operation based on a threshold usage level associated with the application, and in response to determining that at least one of the initialization operations prior to the create usage record operation in the list of initialization operations has failed, performing a roll-back operation or a re-try operation for the at least one of the initialization operations that has failed.

Measuring resource consumption in a multi-tenant platform-as-a-service (PAAS) system

A method includes instantiating a first web application for a first application owner on a virtual machine and instantiating a second web application for a second application owner. The second application owner is different than the first application owner. Instantiating the second web application includes determining that the second web application is associated with an attribute. The first web application is also associated with the attribute, and the attribute comprises an implementation related property of the first web application and the second web application. Instantiating the second web application also includes identifying the virtual machine as configured to host web applications having the attribute, responsive to identifying the virtual machine, instantiating the second web application on the virtual machine hosting the first web application. The second web application is prevented from accessing the first web application and the first web application is prevented from accessing the second web application.

Node selection for a new application in a multi-tenant cloud hosting environment

Implementations provide for a source to image framework for a Platform-as-a-Service (PaaS) system in a distributed cluster system that can apply modifications to source code. A method of the disclosure includes invoking source-to-image (STI) methodology to execute an instance of an application image. The application image is associated with source code and an application framework of an application. A modification to the source code utilized in the instance is received and identified via the application framework utilized in the instance. The identified modification to the source code is applied during runtime of the instance in a container via the application framework.

Hot deployment in a distributed cluster system

The subject matter of this specification can be implemented in, among other things, a method that includes receiving, by a processing device in a platform-as-a-service (PaaS) system, package metadata including one or more attributes for each of a plurality of packages. Each of the plurality of packages includes one or more components of one or more applications to execute on the PaaS system. The method further includes receiving threat metadata including one or more attributes for each of a plurality of threats. The method further includes storing the package metadata or the threat metadata in one or more data stores. The method further includes comparing, by the processing device, the attributes of the packages to the attributes of the threats to determine that at least one package among the packages includes at least one threat from the threats.

Maintaining secure clustered software with a container-based architecture

Methods and systems for creating containers by composition are disclosed. For example, a container image includes multiple layers, including first and second layers, which an image engine determines are read only or unmodified by adding any other layers. Each layer is in either a broken or unbroken state. Layers remain unbroken if an associated identifying signature and contents of layer remain unmodified by any other layer. The layers adhere to a policy requiring each compliant layer to be read only and/or not to modify any other layer when added to container image. The policy requires compliant layers to only modify their own contents when updated and to remain unbroken. The first and second layers are compliant when a third layer replaces the first layer. The layers remain compliant after replacement.

Container images by composition

Implementations provide for a source to image framework for a Platform-as-a-Service (PaaS) system. A method of the disclosure includes invoking source-to-image (STI) orchestration logic to perform a build for an application of a multi-tenant PaaS system, launching a build container for the build in view of a base image of the application, the base image providing a core functionality for the application, accessing source code of the application at the build container, assembling an application image using the base image and the source code, and committing the application image to a repository.

Source to image framework for a platform-as-a-service system

A mechanism for node selection for a new application in a multi-tenant cloud hosting environment is disclosed. A method of the invention includes receiving a request to host a software application on one of a plurality of nodes of a cloud computing infrastructure, each node configured to host multiple software applications. A set of available nodes from the plurality of nodes can be identified on which the software application can be hosted and the capacity of each identified node to host additional software applications can be determined. Then, a node is selected to host the software application using the determined capacities.

Implementations for measuring resource consumption in a multi-tenant Platform-as-a-Service (PaaS) system are disclosed. A method of the disclosure includes determining, by a processing device, that a resource of an application of a multi-tenant Platform-as-a-Service (PaaS) system is initializing, the resource marked for usage tracking, accessing a list of initialization operations used in the initialization of the resource, determining that each of the initialization operations prior to a create usage record operation in the mapping are performed successfully, and creating a usage record for the resource using the create usage record operation.

Measuring resource consumption in a multi-tenant platform-as-a-service (PaaS) system

Implementations of the disclosure provide for controlling capacity in a multi-tenant Platform-as-a-Service (PaaS) environment in a cloud computing system. A method includes obtaining, by a resource control module executed by a processing device, an active capacity metric of each node in a multi-tenant Platform-as-a-Service (PaaS) system, the active capacity metric determined in view of a number of containers that are currently executing in the node and a maximum number of active containers allowed to execute in the node, comparing, by the resource control module, the active capacity metric of the each node to an active capacity threshold associated with the each node, and when the active capacity metric exceeds the active capacity threshold in all of the nodes in a district of the multi-tenant PaaS system and when a maximum actual capacity of containers in the district is not exceeded, adding a new node to the district.

Growing community of inventors

Raleigh, NC, United States of America

Daniel McPherson