Sap Portals Israel Limited

Sap Se

Lior Okman

Chaim Bendelac

Klaus Kopecz

Shimon Tal

Ido Itzkovich

Asher Kirshenbaum

The present disclosure involves systems, software, and computer implemented methods for remotely executing binaries in a containerized computing environment using a lightweight inter-process communications protocol (IPC) and UNIX domain sockets. One example method includes establishing, in a shared computing image comprising a plurality of containers, a listening UNIX domain socket, where the listening UNIX domain socket is shared between all containers in the shared computing image. A request to execute a binary in the target container is received at a target container and from a client container using the listening UNIX domain socket. A worker service is generated in the target container. The worker service executes the binary in the target container. A return exit code associated with the executed binary is received and sent to the client container using the UNIX domain socket.

Lightweight remote process execution

Methods, systems, and computer-readable storage media for executing, by a policy controller, a policy custom resource that defines a policy to be applied to target resources within a cluster of a cloud computing platform, the policy custom resource including a policy target defining parameters for identifying a resource as a target resource, a policy condition defining conditions of a target resource that are to be evaluated, and a policy action defining actions that are to be executed in response to the conditions evaluating to true, receiving, by the policy controller, a set of target resources based on the policy target of the policy custom resource, evaluating, by the policy controller and for each target resource in the set of target resources, the policy condition, and in response to the policy condition returning as true for a target resource, executing the policy action for the target resource.

Kubernetes resource policy enforcement

A registration interface is provided to service providers for registering services with a service management platform. The service management platform is configured to provide access to services from multiple service providers to application developers using a same application developer interface. A registration request is received for a service from a service provider. The service is registered to make the service available to application developers. A provision request for the service is received from an application developer. The provision request is forwarded to a broker associated with the service provider. A provision response is received from the broker. The provision response indicates a status of provisioning an instance of the service at the service provider. A create-binding request for binding information for the service is received from the application developer. Binding information is provided to the application developer, in response to the create-binding request.

Decoupling platform as a service providers using a service management platform

A system includes reception of a request associated with a cloud-based application at an external port of a container associated with the cloud-based application, passage of the request to an application controller associated with the cloud-based application, determination of whether the request includes a command to modify the cloud-based application, invocation of a function to execute the command if it is determined that the request includes a command to modify the cloud-based application, and forwarding of the request to the cloud-based application at a second port different from the external port if it is determined that the request does not include a command to modify the cloud-based application.

Application controller to support incremental deployment

The present disclosure involves systems, software, and computer implemented methods for deploying a multiple target application (MTA). One example method includes identifying a MTA for deployment. The MTA includes one or more software modules and is associated with a deployment descriptor that identifies at least one dependency associated with the one or more software modules. One or more target platforms are identified for deployment of the MTA. The one or more software modules are deployed on the one or more target platforms. Deploying the one or more software modules includes implementing the at least one dependency identified in the deployment descriptor.

Growing community of inventors

Tzoran-Kadima, Israel

Lior Okman