Abstract: In general, techniques are described by which to provide a topology-based graphical user interface for network management systems. A controller device comprising a processor and a memory may be configured to perform the techniques. The processor may monitor network devices arranged according to a network topology to obtain operational data, and obtain configuration data defining the network topology. The memory may store the operational data and the configuration data. The processor may analyze the configuration data and the operational data to provide a graphical representation of the network topology that graphically depicts the operational data, and present a single graphical user interface that presents the graphical representation of the network topology that graphically depicts the operational data.

Abstract: A network controller for a software-defined networking (SDN) architecture system may receive a request to generate an access control policy for a role in a container orchestration system, where the request specifies a plurality of functions. The network controller may execute the plurality of functions and may log execution of the plurality of functions in an audit log. The network controller may parse the audit log to determine a plurality of resources of the container orchestration system accessed from executing the plurality of functions and, for each resource of the plurality of resources, a respective one or more types of operations performed on the respective resource. The network controller may create, based at least in part on the parsed audit log, the access control policy for the role that permits a role to perform, on each of the plurality of resources, the respective one or more types of operations.