HashiCorp

A system and method for assessing, broadcasting and remediating a health of a cloud computing infrastructure. A system includes a health assessment platform interfaced with components of the cloud computing infrastructure, and configured to perform an evaluation loop of the cloud computing infrastructure to produce a health assessment, the evaluation loop assessing one or more of a drift between desired and actual states, resource utilization, cost or spend controls, policy compliance, and planning or refactoring of the components of the cloud computing infrastructure. The health assessment platform is further configured to report the health assessment via notifications to a user interface associated with the cloud computing infrastructure. The system further includes a remediation engine that is interfaced with the user interface, the remediation engine configured to provide a user of the user interface with remediation recommendations and optimizations based on the reported health assessment.

A system and method employed by an infrastructure-as-code (IaC) tool that is configured for defining IaC configurations comprising containers of interconnected components of a cloud computing platform. A system includes a graph generator configured to generate a graph of dependencies between the interconnected components of the cloud computing platform based at least in part on user-defined input-output relationships between the interconnected components. The IaC tool is configured to use the graph of dependencies to automatically determine a sequence of the provisioning or deployment of the interconnected components of the cloud computing platform. The system further includes a remote procedure call interface configured to enable communications between the IaC tool and the cloud computing platform, the remote procedure call interface further configured to enable the provisioning or deployment of the interconnected components of the cloud computing platform, in the determined sequence.

A system and method for accessing and using one or more networked services of a cloud computing infrastructure by a user of a client computer includes an identity-based access management system that is configured to receive a request for a session via an API to use a specific service of the one or more networked services. A credential store includes a credential library that receives and stores credentials for authorizing and enabling the session with the specific service of the one or more networked services. A target service is configured to authorize and enable the session based on the received credentials. A secrets management system is configured to authenticate the user and the client computer to access and use the specific service authorized by the target service, and to generate a lease to a credential that is transmitted to the client computer to authorize the session with the specific service.

A computing infrastructure configuration system and method include an infrastructure-as-code configuration tool providing a configuration language that defines the configuration and operation of the computing infrastructure using a declarative syntax. The declarative syntax is configured to express a plurality of built-in functions that can be executed by the computing infrastructure based on the configuration of the computing infrastructure. The system and method further include a syntax extension from the declarative syntax that expresses one or more provider-defined functions defined by one or more providers, and connected to the configuration tool by a provider protocol, the provider protocol providing the syntax extension to invoke the one or more provider-defined functions via the configuration language to enable the computing infrastructure to call at least one of the one or more of the provider-defined functions for execution by the computing infrastructure.

One example operation may include selecting one or more terms to query one or more software repositories, querying the one or more of the software repositories for instances of the one or more query terms, identifying one or more domain names included in the one or more software repositories based on the query, and determining one or more relevancy scores corresponding to the one or more public software repositories based on a quantity of identified terms instances and domain names.

A computing device may access a hierarchical tree structure defining a data model for a workflow tool. The workflow tool being configured for building, deploying and releasing application code of an application to one or more cloud computing platforms. The hierarchical tree structure having a plurality of nodes that store data related to the application code. The computing device may receive a request to add a projects-child node associated with a code repository to the hierarchical tree structure. The computing device may add the projects-child node to the hierarchy as a child node of the identified organization-parent node. The projects-child node can be configured to support one or more dependent child nodes depending from the projects-child node. The dependent child nodes can include at least one of an applications-child node, a builds-child node, a deployments-child node, an artifacts-child node, or a releases-child node.

A configuration of a service of a cloud computing system is rendered in a user interface of an electronic display, according to a discovery chain generated by a networking tool using a service discovery function to establish the configuration. The configuration includes one or more of a router, a splitter, and/or a resolver, each having one or more configuration files that are represented as a graphical element within a graphical representation of the one or more of the router, the splitter, and/or the resolver. The configuration further includes data traffic routes between pairs of the configuration files, each being represented in the UI as a line between each pair of configuration files, where each line is rendered in the UI so as to avoid crossing over any graphical element that represents a configuration file.

A method for managing an information technology infrastructure is provided. The method may include generating a workspace configured to maintain configurations for the information technology infrastructure. A configuration file specifying configurations to apply to the information technology infrastructure may be merged into the workspace. An execution plan may be generated based on the workspace. The execution plan may include operations to apply, to the information technology infrastructure, the configurations specified in the configuration file. The configurations may be applied, based on the execution plan, by at least provisioning, modifying, and/or de-provisioning one or more resources at the information technology infrastructure. Related systems and articles of manufacture, including computer program products, are also provided.

A method for cross datacenter service-to-service communication over a shortest network route using mesh gateways. A mesh gateway receives a protocol message from a first service directed to a second service, identifies destination information associated with the second service, recognizes a routing configuration for routing the protocol message, determines a network route based on the routing configuration, and forwards the protocol message to another gateway associated with the second service over the determined network route.

A process and mechanism, such as a system and/or computer-implemented method, for establishing verified and trusted communications between an upstream and a downstream node in a network or across many nodes in a multi-hop fashion, without needing direct communications from the downstream node to a central authority. Only a single node needs direct communications with the central authority, which may be the central authority itself acting in this capacity. Any other node in the network can connect to a node that is already verified, establish mutual trust, and itself become “upstream” to a new node or set of nodes. This process and mechanism can apply to any two nodes that are configured to communicate given the same set of conditions without any explicit or implicit multi-hop capability, however, the present process and mechanism is most applicable in multi-hop systems.