Abstract: The techniques disclosed herein provide a secure control plane (SCP), which in turn provides an isolated secure execution environment for a data plane (DP). Any arbitrary business logic can execute within the DP, and all sensitive data traversing the SCP and entering the DP is encrypted. Split keys generated outside the DP are assembled within, and only within, the DP, where they are used to decrypt sensitive data, enabling the business logic to perform computations using the sensitive data within the secure execution environment. The DP also provides attestation for the business logic executing within the DP, enabling outside parties to verify that the deployed business logic matches published logic. In the event of proprietary logic that is not published, techniques are also disclosed herein that enable verification that proprietary business logic deployed on the DP adheres to security policies.

Abstract: In accordance with an embodiment, described herein is a system and method for providing an end-to-end lifecycle in a multi-tenant application server environment. A lifecycle manager enables configuration integration across different components, for example application servers, traffic directors or load balancers, and database or other components, which may have their own partition-specific configurations. In accordance with an embodiment, the end-to-end lifecycle infrastructure includes a plugin-based mechanism which enables the different components within a multi-tenant application server environment to use a lifecycle plugin to provide their own component-specific lifecycle functionality. In accordance with an embodiment, the system includes support for a tenant onboarding functionality, which can be used to onboard a tenant for a service to a particular partition. In accordance with an embodiment, the system supports the use of a global runtime within the multi-tenant application server environment.

Abstract: In accordance with an embodiment, described herein is a system and method for providing an end-to-end lifecycle in a multi-tenant application server environment. A lifecycle manager enables configuration integration across different components, for example application servers, traffic directors or load balancers, and database or other components, which may have their own partition-specific configurations. In accordance with an embodiment, the end-to-end lifecycle infrastructure includes a plugin-based mechanism which enables the different components within a multi-tenant application server environment to use a lifecycle plugin to provide their own component-specific lifecycle functionality. In accordance with an embodiment, the system includes support for a tenant onboarding functionality, which can be used to onboard a tenant for a service to a particular partition. In accordance with an embodiment, the system supports the use of a global runtime within the multi-tenant application server environment.

Abstract: In accordance with an embodiment, described herein is a system and method for exporting and importing a PaaS service and associated configurations across service domains are provided. The system comprises a cloud platform component provided as an installable software suite within a cloud environment; a test to production (T2P) framework module that includes a PaaS plugin and a plurality of T2P plugins and tools; and a user interface where the plugins and tools can be invoked to export domain configurations from a source service domain, and import the domain configurations to a target domain. In accordance with an embodiment, the system further includes a service provider interface (SPI) that can be implemented by an SME of each service housed in a service domain, to provide service backup and restore functionalities for exporting and importing that service.

Abstract: In accordance with an embodiment, described herein is a system and method for partition migration in a multitenant application server environment. Each resource group, or partition which includes that resource group, can be associated with a virtual target (e.g., virtual host) information that defines a target to which that resource group or partition should be targeted and deployed. A web tier component (e.g., Oracle Traffic Director) includes a routing information, which maps the virtual target for a partition to a corresponding target such as a server or cluster, so that requests for that partition are directed to the appropriate target, for example as part of one or more sessions. When a partition is migrated, session information is replicated between an original target and a new target, and the web tier component provided with a revised routing information, so that subsequent requests for that partition are directed to the new target.

Abstract: In accordance with an embodiment, described herein is a system and method for providing an end-to-end lifecycle in a multi-tenant application server environment. A lifecycle manager enables configuration integration across different components, for example application servers, traffic directors or load balancers, and database or other components, which may have their own partition-specific configurations. In accordance with an embodiment, the end-to-end lifecycle infrastructure includes a plugin-based mechanism which enables the different components within a multi-tenant application server environment to use a lifecycle plugin to provide their own component-specific lifecycle functionality. In accordance with an embodiment, the system includes support for a tenant onboarding functionality, which can be used to onboard a tenant for a service to a particular partition. In accordance with an embodiment, the system supports the use of a global runtime within the multi-tenant application server environment.

Abstract: In accordance with an embodiment, described herein is a system and method for providing an end-to-end lifecycle in a multi-tenant application server environment. A lifecycle manager enables configuration integration across different components, for example application servers, traffic directors or load balancers, and database or other components, which may have their own partition-specific configurations. In accordance with an embodiment, the end-to-end lifecycle infrastructure includes a plugin-based mechanism which enables the different components within a multi-tenant application server environment to use a lifecycle plugin to provide their own component-specific lifecycle functionality. In accordance with an embodiment, the system includes support for a tenant onboarding functionality, which can be used to onboard a tenant for a service to a particular partition. In accordance with an embodiment, the system supports the use of a global runtime within the multi-tenant application server environment.

Abstract: In accordance with an embodiment, described herein is a system and method for providing portable partitions in a multitenant application server environment. In accordance with an embodiment, the system enables a partition to be exported from first or source domain (e.g., a test domain), and imported into another second or target domain (e.g., a production domain). During creation or export of a partition archive, the partition archive is created which includes a partition configuration, resource group or resource group template information, and optionally application binaries. The partition archive can also include an interface that allows access to exportable or configurable values associated with the partition. During deployment or import of the partition archive to the target domain, the information in the partition archive, including the exportable or configurable values associated with the partition, are used to configure the partition for use in the target domain.

Abstract: In accordance with an embodiment, described herein is a system and method for providing a user messaging service for use with a cloud computing environment. In accordance with an embodiment, the system includes a notifier component, which receives information describing notifiable events that occur within the cloud environment during the provisioning of the enterprise applications, and communicates the information to a user messaging service at a user messaging server. The user messaging service is configured, according to one or more user communication preferences, to communicate to users, notifications describing the notifiable events, via one or more channels according to the preferences associated with the users. For example, a cloud account user can indicate a preference that status notifications for that user, such as completion of an operation or operational alerts, be communicated via one or more preferred channels, for example email, instant messaging, or social media.

Abstract: In accordance with an embodiment, described herein is a system and method for replicating a source service domain to a target service domain in a cloud computing platform environment. In accordance with an embodiment, the system comprises a cloud platform component provided as an installable software suite within the cloud environment, that supports provisioning of enterprise applications; a test to production (T2P) framework module that includes a plurality of T2P plugins and a PaaS plugin; and a user interface where an administrator or a user can invoke the plugins to replicate a source service domain to a target service domain. The system allows a user to manually customize move plans for service domain configurations based on the requirements of the target service domain, and recreate the configurations in the target service domain in accordance with the customized move plans.

Abstract: In accordance with an embodiment, described herein is a system and method for providing an end-to-end lifecycle in a multi-tenant application server environment. A lifecycle manager enables configuration integration across different components, for example application servers, traffic directors or load balancers, and database or other components, which may have their own partition-specific configurations. In accordance with an embodiment, the end-to-end lifecycle infrastructure includes a plugin-based mechanism which enables the different components within a multi-tenant application server environment to use a lifecycle plugin to provide their own component-specific lifecycle functionality. In accordance with an embodiment, the system includes support for a tenant onboarding functionality, which can be used to onboard a tenant for a service to a particular partition. In accordance with an embodiment, the system supports the use of a global runtime within the multi-tenant application server environment.

Abstract: In accordance with an embodiment, described herein is a system and method for providing an end-to-end lifecycle in a multi-tenant application server environment. A lifecycle manager enables configuration integration across different components, for example application servers, traffic directors or load balancers, and database or other components, which may have their own partition-specific configurations. In accordance with an embodiment, the end-to-end lifecycle infrastructure includes a plugin-based mechanism which enables the different components within a multi-tenant application server environment to use a lifecycle plugin to provide their own component-specific lifecycle functionality. In accordance with an embodiment, the system includes support for a tenant onboarding functionality, which can be used to onboard a tenant for a service to a particular partition. In accordance with an embodiment, the system supports the use of a global runtime within the multi-tenant application server environment.

Abstract: In accordance with an embodiment, described herein is a system and method for partition migration in a multitenant application server environment. Each resource group, or partition which includes that resource group, can be associated with a virtual target (e.g., virtual host) information that defines a target to which that resource group or partition should be targeted and deployed. A web tier component (e.g., Oracle Traffic Director) includes a routing information, which maps the virtual target for a partition to a corresponding target such as a server or cluster, so that requests for that partition are directed to the appropriate target, for example as part of one or more sessions. When a partition is migrated, session information is replicated between an original target and a new target, and the web tier component provided with a revised routing information, so that subsequent requests for that partition are directed to the new target.

Abstract: In accordance with an embodiment, described herein is a system and method for providing portable partitions in a multitenant application server environment. In accordance with an embodiment, the system enables a partition to be exported from first or source domain (e.g., a test domain), and imported into another second or target domain (e.g., a production domain). During creation or export of a partition archive, the partition archive is created which includes a partition configuration, resource group or resource group template information, and optionally application binaries. The partition archive can also include an interface that allows access to exportable or configurable values associated with the partition. During deployment or import of the partition archive to the target domain, the information in the partition archive, including the exportable or configurable values associated with the partition, are used to configure the partition for use in the target domain.

Abstract: In accordance with an embodiment, described herein is a system and method for supporting partitions in a multitenant application server environment. In accordance with an embodiment, an application server administrator (e.g., a WLS administrator) can create or delete partitions; while a partition administrator can administer various aspects of a partition, for example create resource groups, deploy applications to a specific partition, and reference specific realms for a partition. Resource groups can be globally defined at the domain, or can be specific to a partition. Applications can be deployed to a resource group template at the domain level, or to a resource group scoped to a partition or scoped to the domain. The system can optionally associate one or more partitions with a tenant, for use by the tenant.

Abstract: In accordance with an embodiment, described herein is a system and method for exporting and importing a PaaS service and associated configurations across service domains are provided. The system comprises a cloud platform component provided as an installable software suite within a cloud environment; a test to production (T2P) framework module that includes a PaaS plugin and a plurality of T2P plugins and tools; and a user interface where the plugins and tools can be invoked to export domain configurations from a source service domain, and import the domain configurations to a target domain. In accordance with an embodiment, the system further includes a service provider interface (SPI) that can be implemented by an SME of each service housed in a service domain, to provide service backup and restore functionalities for exporting and importing that service.

Abstract: In accordance with an embodiment, described herein is a system and method for replicating a source service domain to a target service domain in a cloud computing platform environment. In accordance with an embodiment, the system comprises a cloud platform component provided as an installable software suite within the cloud environment, that supports provisioning of enterprise applications; a test to production (T2P) framework module that includes a plurality of T2P plugins and a PaaS plugin; and a user interface where an administrator or a user can invoke the plugins to replicate a source service domain to a target service domain. The system allows a user to manually customize move plans for service domain configurations based on the requirements of the target service domain, and recreate the configurations in the target service domain in accordance with the customized move plans.

Abstract: In accordance with an embodiment, described herein is a system and method for providing a user messaging service for use with a cloud computing environment. In accordance with an embodiment, the system includes a notifier component, which receives information describing notifiable events that occur within the cloud environment during the provisioning of the enterprise applications, and communicates the information to a user messaging service at a user messaging server. The user messaging service is configured, according to one or more user communication preferences, to communicate to users, notifications describing the notifiable events, via one or more channels according to the preferences associated with the users. For example, a cloud account user can indicate a preference that status notifications for that user, such as completion of an operation or operational alerts, be communicated via one or more preferred channels, for example email, instant messaging, or social media.