Sap Se

Pietro Francesco Menna

Joachim Fitzer

Simon Seif

Felipe Musse

A user requests installation of a software package on a server. The server identifies an artifact for the software package installed on a first layer of an overlay file system. Based on dependency information for the artifact, the server identifies one or more additional artifacts that the artifact depends on, installed on additional layers of the overlay file system. Instead of duplicating the software package and its dependencies in storage for the user, the server updates a layer strategy for the user. A layer strategy indicates a set of layers to be used by an overlay file system in generating a logical file system. The updated layer strategy for the user includes both the layer for the artifact of the requested software package and the layers for the additional artifacts that the software package depends on.

Software installation through an overlay file system

Example methods and systems are directed to a multitenant application server using a union file system. Each tenant has one or more users and a tenant layer in the union file system. Each user has a user layer in the union file system. The union file system provides a logical file system to each user based on the user layer, the tenant layer, and a base layer comprising a set of application layers. A first user shares an application template file with other users of the same tenant by moving the file from the first user's user layer to the tenant layer. After the file is moved, all users of the tenant have access to the application defined by the application template file. The moving of the file is achieved by modifying metadata for the file.

Multitenant application server using a union file system

A client device sends a connection request to a virtual system in a Kubernetes cluster. The connection request identifies the client device and the application to which the request pertains. Based on a tenant associated with the client device, the virtual system connects the client device to an instance of the application. The instance of the application has access to data for the tenant but not for other tenants. Another client device of the tenant sends another connection request to the virtual system for a connection to another application. Because the tenant is the same, the instance of the other application may access the same data as the instance of the first application. In this way, applications for a single tenant may share data while maintaining the security of the data from other tenants.

Kubernetes as a distributed operating system for multitenancy/multiuser

Example methods and systems are directed to multitenancy using an overlay file system. Each tenant has one or more users and a tenant layer in the overlay file system. Each user has a user layer in the overlay file system. The overlay file system provides a logical file system to each user based on the user layer, the tenant layer, and a strategy comprising a set of application layers. A first user shares a file with other users of the same tenant by moving the file from the first user's user layer to the tenant layer. After the file is moved, all users of the tenant have access to the file. The moving of the file is achieved by modifying metadata for the file.

Multitenancy using an overlay file system

In an example embodiment, a solution is used to provide for a highly efficient application installer. A software packaging format, known as vSolution, is provided that allows software developers to ship multiple artefacts of different types in a single container. Unlike traditional mechanisms, this container does not contain a dedicated installer executable or any sort of installation routine. Rather, the container format encourages a declarative approach to describe what an installation routine should perform, via the organization of the artefacts based on content type and using a naming convention.

Format for multi-artefact software packages

In an example embodiment, an application server is run as its own vsystem application, within a vsystem architecture. The application server contains a vRep instance and its own top layer, which is unique to each user. The application server supports exposing programs executed inside of it in many different communication formats.

Application server programming language running in vsystem

Declarative multi-artefact software installation

Techniques are described for managing communications with applications executing in a distributed computing environment, through use of a tunneling protocol that is employed by a client-side gateway and a server-side application router to enable client-server communications that would not otherwise be supported within the distributed computing environment. A cloud computing service may enforce network security policies, such as restricting network traffic to and from its hosted applications to use an application layer protocol such as a version of Hypertext Transfer Protocol (HTTP), which may not be feasible for legacy applications and/or applications of a particular type or domain. The implementations described herein provide a mechanism that supports the deployment and operation of an application in a cloud computing environment, where such an application may employ any suitable communication protocol that may not be supported by the environment.

Growing community of inventors

Sao Leopoldo, Brazil

Pietro Francesco Menna