Container system for automating application deployment in a cloud infrastructure

Patent metadata

Field	Value
Publication number	US-2022012030-A1
Application number	US-202016925150-A
Country	US
Kind code	A1
Filing date	Jul 9, 2020
Priority date	Jul 9, 2020
Publication date	Jan 13, 2022
Grant date	—

Abstract

A system and method are described for creating application-related infrastructure resources from an application deployment platform (ADP), but which can have a single audit trail and common enforcement point of policies. A workspace custom resource definition (CRD) is generated to define a workspace schema for the workspace. The workspace schema represents a collection of configurations and variables for operating the infrastructure resources. An infrastructure controller (IC) operator is provided to the ADP to extend the API for communication with an infrastructure controller (IC), which has a set of IC definitions that define the infrastructure resources for the workspace. The workspace is built with the infrastructure resources defined by a workspace custom resource, and the CRD is deployed to the ADP via the IC operator to create the workspace custom resource based on the collection of configurations and the one or more variables.

First claim

What is claimed is:

1 . A method for configuring and deploying cloud application-related infrastructure to a workspace via an application deployment platform (ADP), the ADP being configured to containerize application-related resources for deployment to the workspace, the ADP having at least one application programming interface (API) via which the application-related resources are configured, the method comprising:
generating, via the ADP, a workspace custom resource definition (CRD) to define a workspace schema for the workspace, the workspace schema representing one or more modules that model the workspace, each module being a collection of configurations to manage infrastructure resources of the workspace, the collection of configurations including one or more variables for operating the infrastructure resources; providing an infrastructure controller (IC) operator to the ADP to extend the API for communication with an infrastructure controller (IC), the IC having a set of IC definitions that define the infrastructure resources for the workspace, the IC operator being configured to reconcile the CRD with the set of IC definitions to provision the infrastructure resources for the ADP; building the workspace with the infrastructure resources defined by a workspace custom resource; and deploying the CRD to the ADP via the IC operator to create the workspace custom resource based on the collection of configurations and the one or more variables.

2 . The method in accordance with claim 1 , wherein the IC includes a translation layer configured to enable calls from the ADP to be made to the IC.

3 . The method in accordance with claim 1 , wherein the IC operator is configured as a module of the IC that is hosted in a public endpoint accessible to the IC.

4 . The method in accordance with claim 1 , wherein the IC operator includes an interface between the IC and an existing control plane of the ADP for handling and locking of state, sequential execution of runs, and patterns for injecting secrets and provisioning resources of the workspace.

5 . The method in accordance with claim 1 , wherein the ADP is a Kubernetes-based platform.

6 . The method in accordance with claim 5 , wherein the Kubernetes-based platform is configured to containerize, via one or more of the APIs, application-related resources for deployment to the workspace.

7 . The method in accordance with claim 1 , wherein the IC is configured to receive changes to the workspace for a single audit trail.

8 . A system for configuring and deploying cloud application-related infrastructure to a workspace via an application deployment platform (ADP), the ADP being configured to containerize application-related resources for deployment to the workspace, the ADP having at least one application programming interface (API) via which the application-related resources are configured, the system comprising:
a workspace custom resource definition (CRD) generated via the ADP that defines a workspace schema for the workspace, the workspace schema representing one or more modules that model the workspace, each module being a collection of configurations to manage infrastructure resources of the workspace, the collection of configurations including one or more variables for operating the infrastructure resources; an infrastructure controller (IC) having a set of IC definitions that define the infrastructure resources for the workspace; and an IC operator integrated with the ADP to extend the API for communication with the IC, the IC operator being configured to reconcile the CRD with the set of IC definitions to provision the infrastructure resources for the ADP, to deploy the CRD to the ADP via the IC operator to create a workspace custom resource based on the collection of configurations and the one or more variables, and to build the workspace with the infrastructure resources defined by the workspace custom resource.

9 . The system in accordance with claim 8 , wherein the IC includes a translation layer configured to enable calls from the ADP to be made to the IC.

10 . The system in accordance with claim 8 , wherein the IC operator is configured as a module of the IC that is hosted in a public endpoint accessible to the IC.

11 . The system in accordance with claim 8 , wherein the IC operator includes an interface between the IC and an existing control plane of the ADP for handling and locking of state, sequential execution of runs, and patterns for injecting secrets and provisioning resources of the workspace.

12 . The system in accordance with claim 8 , wherein the ADP is a Kubernetes-based platform.

13 . The system in accordance with claim 12 , wherein the Kubernetes-based platform is configured to containerize, via one or more of the APIs, application-related resources for deployment to the workspace.

14 . The system in accordance with claim 8 , wherein the IC is configured to receive changes to the workspace for a single audit trail.

15 . A non-transitory computer readable storage medium including a set of instructions, wherein the instructions, when executed, cause a processor to:
generate, via an application deployment platform (ADP), a workspace custom resource definition (CRD) to define a workspace schema for the workspace, the workspace schema representing one or more modules that model the workspace, each module being a collection of configurations to manage infrastructure resources of the workspace, the collection of configurations including one or more variables for operating the infrastructure resources, the ADP being configured to containerize application-related resources for deployment to the workspace, the ADP having at least one application programming interface (API) via which the application-related resources are configured; provide an infrastructure controller (IC) operator to the ADP to extend the API for communication with an infrastructure controller (IC), the IC having a set of IC definitions that define the infrastructure resources for the workspace, the IC operator being configured to reconcile the CRD with the set of IC definitions to provision the infrastructure resources for the ADP; build the workspace with the infrastructure resources defined by a workspace custom resource; and deploy the CRD to the ADP via the IC operator to create the workspace custom resource based on the collection of configurations and the one or more variables.

16 . The non-transitory computer readable storage medium in accordance with claim 15 , wherein the IC includes a translation layer configured to enable calls from the ADP to be made to the IC.

17 . The non-transitory computer readable storage medium in accordance with claim 15 , wherein the IC operator is configured as a module of the IC that is hosted in a public endpoint accessible to the IC.

18 . The non-transitory computer readable storage medium in accordance with claim 15 , wherein the IC operator includes an interface between the IC and an existing control plane of the ADP for handling and locking of state, sequential execution of runs, and patterns for injecting secrets and provisioning resources of the workspace.

19 . The non-transitory computer readable storage medium in accordance with claim 15 , wherein the ADP is a Kubernetes-based platform.

20 . The non-transitory computer readable storage medium in accordance with claim 19 , wherein the Kubernetes-based platform is configured to containerize, via one or more of the APIs, application-related resources for deploym

Assignees

• HashiCorp

Inventors

• Wang Rosemary

Classifications

• G06F8/60 Primary

  Software deployment · CPC title

• H04L41/0806 Primary

  for initial configuration or provisioning, e.g. plug-and-play · CPC title

• H04L41/5045

  Making service definitions prior to deployment · CPC title

• H04L41/5096

  wherein the managed service relates to distributed or central networked applications · CPC title