Oracle International Corporation

Other

Robert Graham Clark

Olgierd Stanislaw Pieczul

Nitin Srinivasa Rao Jami

Hubert Alexander Foskett

Shrey Arora

Subaru Arthur Ueno

Wendie R Clark

A computer system may receive one or more requests for access to one or more cloud services and may store the one or more requests in a request log. The computer system may receive one or more access rules applicable to cloud service access rights. The computer system may aggregate the one or more requests of the request log to determine access requirements for a container, the container being configured to store one or more applications. The computer system may generate and store container access policies that define access of a container and the one or more cloud services, the container access policies based at least in part on the aggregated one or more requests and the one or more access rules. The computer system may send the container access policies to a request forwarder of a compute instance in a production environment.

Techniques for automatically configuring minimal cloud service access rights for container applications

Techniques are disclosed for automatically inferring software-defined network policies from the observed workload in a computing environment. The disclosed techniques include monitoring network traffic flow originating from network interfaces corresponding to containers that execute components of an application, recording details of a new network connection or a change in the existing network connection, obtaining information concerning the components of the application, identifying metadata for a component involved in the new network connection or the change in an existing network connection based on a comparison of the details of the new network connection or a change in the existing network connection and the information concerning the components of the application, generating a network policy for the component using at least the metadata for the component, and integrating the network policy for the component into a deployment package for the application.

Automatically inferring software-defined network policies from the observed workload in a computing environment

A system and technique for a Request Forwarder as for a computer network architecture is disclosed to provide selective access to one or more cloud services. In some implementations, a computer system may receive a request for access to a cloud service, the request including a container credential. The computer system may determine an identification of the container using the container credential. The computer system may verify that the container requesting access to the cloud service is authorized based at least in part on stored policies. Based at least in part on the determination that the container requesting access to the cloud service is authorized: receiving instance credential from a metadata service. The computer system may include the instance credential with the request. The computer system may send the request to the cloud service. In various examples, the Request Forwarder can be provided as a service.

Techniques for selective container access to cloud services based on hosting node

Techniques are disclosed for generating network security policies for different versions of a component of an application deployed in a computing environment where the different versions have potentially different network requirements and the different versions operate together at the same time in the computing environment. The disclosed techniques include capabilities for enabling different versions of a component of a containerized application to co-exist at the same time on different computing nodes in a cluster of nodes in a containerized environment that deploys and executes the application. The techniques additionally include capabilities for enabling different network policies to be generated for the different versions of the component, where each component has potentially different network requirements. The techniques provide a mechanism to create precise, per-component network policies, while respecting the overall coarse-grained policies of the containerized application.

Techniques for generating network security policies for application components deployed in a computing environment

Techniques are disclosed for query processing system that can, when queried, generate a result related to one or more connectivity paths and/or one or more network security rules. Network security rules and connectivity paths may be stored in corresponding data structures (e.g., sets of attributes) that may be utilized with a number of set operations. The user may issue a query requesting the system to apply a rule to a path, a set of rules to a set of paths, to identify if one set of rule(s) are equivalent to another set of rule(s), and the like. Utilizing this query processing system can enable a user to identify effects of one or more network rules with respect to traffic being allowed or restricted along particular connectivity paths between components of the system.

Techniques for network policies analysis in container frameworks

Techniques are disclosed for network policy verification system that can obtain a set of connectivity paths of a containerized environment that individually indicate connections between pairs of containers. Identify a first container and a second container of a pair based at least in part on a connectivity path. Determine a network policy corresponding to the connectivity path that indicates an expected result of that particular connection. A connection can be initiated between the two containers. The result may be presented at a user device based at least in part on identifying that the result is different from the expected result indicated by the network policy corresponding to the connectivity path.

Techniques for verifying network policies in container frameworks

A fastener system for adhesively coupling non-threaded components comprises, in combination a rigid bolt. The bolt has a head externally. The bolt has a shaft internally. The head has a generally hemispherical exterior end with a cental axis. The head also has a generally planar interior end. The head further has a top and a bottom. The shaft is in a generally cylindrical shape with a central axis. The fastener system also comprises a nut. The nut has a generally hemispherical exterior end. The nut has a generally planar interior end. The nut further having a top and a bottom. The exterior end of the nut has a radially circular flat region. A recess is provided in the circular flat region of the exterior end. The recess is adapted to receive the shaft. An adhesive provides a secure coupling between the nut and bolt.

Plastic fastener system

A glass tapping tool for tapping glass and breaking glass along a score-line that has been previously cut. In one embodiment, the tool comprises a hollow tube with a first end and a second end. A stationary striking member is attached to the first end of the tube for tapping a piece of glass which has been previously cut along a score-line. Mounted inside the tube is a slidable hammer with a first end and a second end. The slidable hammer is mounted so that the second end of the slidable hammer protrudes outside the second end of the hollow tube. Elastically coupled the stationary striking member with the slidable hammer is a spring. When a user pulls the part of slidable hammer protruding from the hollow tube in an axial direction away from the hollow tube, the spring produces a force in opposite direction which causes the slidable hammer through the spring to strike the stationary striking member, when the user releases the slidable hammer, so as to tap the glass along a score line and causing the glass to break along the score line.

Growing community of inventors

Clyde Hill, WA, United States of America

Robert Graham Clark