Abstract: Systems, apparatus, articles of manufacture, and methods are disclosed to generate and manage logical workload domain clusters in a computing environment. An example apparatus includes interface circuitry, machine readable instructions, and programmable circuitry to at least one of instantiate or execute the machine readable instructions to determine that a first resource usage of a first cluster in a first workload domain satisfies a threshold indicative of an upper limit of resource usage in the first cluster, identify a second cluster in a second workload domain having an availability based on a second resource usage represented resource usage data, the second workload domain logically grouped with the first workload domain based on a criterion, and reallocate a host from the second cluster to the first cluster.

Abstract: An example disclosed system includes programmable circuitry to at least one of instantiate or execute instructions to update a compliance rule based on a target compliance definition to generate a target compliance rule, the compliance rule corresponding to a resource in a software defined data center, and output configuration update information based on a comparison of the target compliance rule with a current resource configuration, the current resource configuration corresponding to the resource in the software defined data center.

Abstract: An example method may include generating a credit unit defining a value indicating a number of times an operation can be performed on a resource type in a data center. Further, the method may include assigning credits, a credit limit, and the credit unit to a user account. The credit limit may indicate maximum credits that can be used to perform each operation. Furthermore, the method may include receiving a request to perform an operation on a data center resource from a user associated with the user account. Upon receiving the request, the method may include determining whether the user is permitted to perform the operation on the data center resource based on available credits of the assigned credits, the credit limit, and the credit unit. Further, the method may include executing or denying execution of the operation on the data center resource based on the determination.

Abstract: In an example, a management node may include a processor and a memory coupled to the processor. Further, the memory includes a message bus and a risk assessment unit. During operation, the risk assessment unit may configure a risk entity. The risk entity may include a risk type and a risk level corresponding to the risk type. Further, the risk assessment unit may associate the risk entity to a resource deployed in a cloud computing platform. Furthermore, the risk assessment unit may monitor the resource to assess a risk value associated with the resource based on the risk type and the risk level and generate a risk assessment report corresponding to the monitored resource. Further, the risk assessment unit may publish the risk assessment report on the message bus. The message bus may send the risk assessment report to a subscribed consumer service.

Abstract: The present disclosure is related to devices, systems, and methods for providing SSL connectivity inside SDDCs with hyperconverged infrastructure. An example method can include configuring a primary Secure Sockets Layer (SSL) certificate on an endpoint of a hyperconverged infrastructure (HCI), configuring a secondary SSL certificate on the endpoint, securing data communicated between the endpoint and another endpoint of the HCI using the primary certificate, securing data communicated between the endpoint and the other endpoint using the secondary certificate, instead of the primary certificate, responsive to determining a fault in the primary certificate, and securing data communicated between the endpoint and the other endpoint using a new primary certificate configured on the endpoint, instead of the secondary certificate, responsive to the new primary certificate being configured on the endpoint.

Abstract: In some embodiments, a method includes receiving a plurality of actions associated with a reinforcement learning model; generating a plurality of combinations of actions based on the plurality of actions; analyzing the plurality of combinations of actions; generating at least one subset of indispensable actions based on the analyzing; selecting a set of training actions from the plurality of actions based on the at least one subset of indispensable actions; and training the reinforcement learning model based on the set of training actions.

Abstract: Examples described herein may include migration of services of infrastructure management virtual machines to a container. An example method includes creating an infrastructure management virtual machine configured to manage and monitor a cluster of nodes of a computing system. The infrastructure management virtual machine including a plurality of services and an associated virtual disk storing data associated with running the plurality of services. The example method further includes extracting a service of the plurality of services running on the infrastructure management virtual machine, and creating a container on a controller virtual machine running on a node of a computing system. The container includes the extracted service. The example method further includes retrieving data associated with the extracted service from the virtual disk, and after retrieved the data, starting the extracted service in the container.

Abstract: A method for providing key-based security for adding a new node to an existing networked virtualization environment for storage management includes discovering the new node, establishing communication with the new node using a factory public key, requesting the new node to generate a new private key and new public key pair, receiving the new public key by the existing virtualization environment, wherein subsequent communication with the new node by the existing virtualization environment is performed using the new public key, and configuring the new node to become part of the existing virtualization environment using the new public key.