Abstract: Implementations of a routing tier for highly-available applications on a multi-tenant Platform-as-a-Service (PaaS) system are disclosed. A system includes a processing device to determine that, for an application running on the multi-tenant PaaS system and utilizing a first load balancer gear, a second load balancer gear is to be created for the application, and cause the second load balancer gear to be created. The processing device further to update the routing table to include information corresponding to the second load balancer gear and transmit the information associated with the second load balancer gear to a routing component of the multi-tenant PaaS system, the routing component to route traffic to the application via the first and second load balancer gears.

Abstract: Implementations of a routing tier for highly-available applications on a multi-tenant Platform-as-a-Service (PaaS) system are disclosed. A system includes a processing device to determine that, for an application running on the multi-tenant PaaS system and utilizing a first load balancer gear, a second load balancer gear is to be created for the application, and cause the second load balancer gear to be created. The processing device further to update the routing table to include information corresponding to the second load balancer gear and transmit the information associated with the second load balancer gear to a routing component of the multi-tenant PaaS system, the routing component to route traffic to the application via the first and second load balancer gears.

Abstract: Implementations of a routing tier for highly-available applications on a multi-tenant Platform-as-a-Service (PaaS) system are disclosed. A method of the disclosure includes receiving, from a broker of a multi-tenant PaaS system, information related to a load balancer gear of an application running on the multi-tenant PaaS system. The information includes endpoint information indicating a location of the load balancer gear, and cartridge information identifying one or more cartridges implemented on the load balancer gear. The method further includes updating a routing table in view of the endpoint information and the cartridge information, and causing traffic to be routed to the load balancer gear in view of the updated routing table. The load balancer gear directs traffic to one or more other gears of the application.

Abstract: Aspects of the disclosure provide for source code management for a multi-tenant Platform-as-Service (PaaS) system. A method of the disclosure includes creating, by a processing device of a platform-as-a-service (PaaS) system, a first container to host a first source code management repository for an application; receiving, at the first container, source code associated with the application; creating, by the processing device, a second container to provide deployment functionality for the application, the second container comprising resource-constrained processing space of a node of the PaaS system to execute functionality of the application; and deploying, by the processing device, the source code on the PaaS system using the second container. Aspects of the disclosure may be implemented using high-availability (HA) clusters by replicating the SCM container(s). Aspects of the disclosure may provide users with cost-effective, scaled, and secure PaaS services using reduced infrastructure.

Abstract: Implementations provide for a source to image transformation pipeline for a Platform-as-a-Service (PaaS) system. A method of the disclosure includes receiving a request to create an application for execution on a Platform-as-a-Service (PaaS) system, identifying, by a processing device, at least one of language or a framework corresponding to the application, identifying, by the processing device, a build image corresponding to the identified at least one of the language or the framework, constructing, by the processing device, a build configuration object, a deployment configuration object, and a networking configuration object for the application, and transmitting, by the processing device, the build configuration object, the deployment configuration object, and the networking configuration object to the PaaS system to enable the PaaS system to build and deploy the application at one or more nodes of the PaaS system without user intervention.

Abstract: The present disclosure provides new methods and systems for managing access to service accounts by user accounts. For example, a user account and a service account may be created. The user account may be granted a first permission to access the service account. The first permission may provide a user with a capability to access the service account by at least one of accessing the service account through the user account and directly accessing the service account. A first credential may be issued to the service account. A user account status event regarding a change to the first permission may automatically be detected. It may be determined that the first permission provided access to the service account A second credential may be issued to the service account. The second credential may invalidate the first credential and may prevent the user from directly accessing the service account.

Abstract: Implementations provide for a source to image framework for a Platform-as-a-Service (PaaS) system in a distributed cluster system that can apply modifications to source code. A method of the disclosure includes invoking source-to-image (STI) methodology to execute an instance of an application image. The application image is associated with source code and an application framework of an application. A modification to the source code utilized in the instance is received and identified via the application framework utilized in the instance. The identified modification to the source code is applied during runtime of the instance in a container via the application framework.

Abstract: Implementations provide for a source to image framework for a Platform-as-a-Service (PaaS) system. A method of the disclosure includes invoking source-to-image (STI) orchestration logic to perform a build for an application of a multi-tenant PaaS system, launching a build container for the build in view of a base image of the application, the base image providing a core functionality for the application, accessing source code of the application at the build container, assembling an application image using the base image and the source code, and committing the application image to a repository.

Abstract: Implementations provide for a secure shell (SSH) proxy for a Platform-as-a-Service (PaaS) system. A method of the disclosure includes receiving, by a processing device executing a Secure Shell (SSH) proxy server, a request to establish an SSH connection with a component of an application of a multi-tenant Platform-as-a-Service (PaaS) system, the component is separate from the SSH proxy server, authenticating credentials provided as part of the request, establishing the SSH connection with a device originating the request, receiving, in view of authenticating the credentials and establishing the SSH connection, routing information for the application, the routing information comprising a location of a node of the multi-tenant PaaS system executing the application, establishing an internal communication session with an executing proxy of the node, and forward information conveyed over the SSH connection to the executing proxy via the internal communication session.

Abstract: The present disclosure provides new methods and systems for managing access to service accounts by user accounts. For example, a user account and a service account may be created. The user account may be granted a first permission to access the service account. The first permission may provide a user with a capability to access the service account by at least one of accessing the service account through the user account and directly accessing the service account. A first credential may be issued to the service account. A user account status event regarding a change to the first permission may automatically be detected. It may be determined that the first permission provided access to the service account A second credential may be issued to the service account. The second credential may invalidate the first credential and may prevent the user from directly accessing the service account.

Abstract: A mechanism for automatic installing and scaling of application resources in a multi-tenant Platform-as-a-Service (PaaS) environment in a cloud computing system is disclosed. A method includes creating, by a processing device of an Infrastructure-as-a-Service (IaaS) platform, an image package corresponding to a node host on a multi-tenant Platform-as-a-Service (PaaS) system. The image package comprises an image file including a script file having a plurality of software updates and run time configuration files. The image package is stored in a storage memory of the IaaS platform and is accessible by a virtual machine (VM) instance. The method also includes retrieving, from the storage memory, the script file from the image package and causing a boot process of the VM instance to download the script file into the PaaS system.

Abstract: A responsive layout based on behavioral intent in a multi-tenant PaaS system is disclosed. A method of the disclosure includes determining a profile of a user of a PaaS system, an application context for each application associated with the user and hosted by the PaaS system, and a task context of an access to the PaaS system by the user, providing indicators of the determined profile, the determined application context, and the determined task context to a browser application of the user, and providing HyperText Markup Language (HTML) and Cascading Style Sheets (CSS) files of the management console to the browser application, wherein the provided indicators are applied to the HTML and CSS files to generate a responsive layout, wherein the indicators are associated with one or more variants of the HTML and CSS files that provide the responsive layout.

Abstract: Implementations provide for a source to image transformation pipeline for a Platform-as-a-Service (PaaS) system. A method of the disclosure includes receiving a request to create an application for execution on a Platform-as-a-Service (PaaS) system, identifying, by a processing device, at least one of language or a framework corresponding to the application, identifying, by the processing device, a build image corresponding to the identified at least one of the language or the framework, constructing, by the processing device, a build configuration object, a deployment configuration object, and a networking configuration object for the application, and transmitting, by the processing device, the build configuration object, the deployment configuration object, and the networking configuration object to the PaaS system to enable the PaaS system to build and deploy the application at one or more nodes of the PaaS system without user intervention.

Abstract: Implementations provide for a source to image framework for a Platform-as-a-Service (PaaS) system in a distributed cluster system that can apply modifications to source code. A method of the disclosure includes invoking source-to-image (STI) methodology to execute an instance of an application image. The application image is associated with source code and an application framework of an application. A modification to the source code utilized in the instance is received and identified via the application framework utilized in the instance. The identified modification to the source code is applied during runtime of the instance in a container via the application framework.

Abstract: Implementations provide for a source to image transformation pipeline for a Platform-as-a-Service (PaaS) system. A method of the disclosure includes receiving a request to create an application for execution on a multi-tenant PaaS system, introspecting received source files associated with the application to identify at least one of a language or a framework corresponding to the application, identifying a build image corresponding to the identified at least one of the language or the framework, constructing a build configuration object, a deployment configuration object, and a networking configuration object for the application, and transmitting, by the processing device, the build configuration object, the deployment configuration object, and the networking configuration object to a master layer of the multi-tenant PaaS system to enable the multi-tenant PaaS system to build and deploy the application at one or more nodes of the multi-tenant PaaS system.

Abstract: Implementations provide for a source to image transformation pipeline for a Platform-as-a-Service (PaaS) system. A method of the disclosure includes receiving a request to create an application for execution on a multi-tenant PaaS system, introspecting received source files associated with the application to identify at least one of a language or a framework corresponding to the application, identifying a build image corresponding to the identified at least one of the language or the framework, constructing a build configuration object, a deployment configuration object, and a networking configuration object for the application, and transmitting, by the processing device, the build configuration object, the deployment configuration object, and the networking configuration object to a master layer of the multi-tenant PaaS system to enable the multi-tenant PaaS system to build and deploy the application at one or more nodes of the multi-tenant PaaS system.

Abstract: Implementations provide for a secure shell (SSH) proxy for a Platform-as-a-Service (PaaS) system. A method of the disclosure includes receiving, by a processing device executing a Secure Shell (SSH) proxy server, a request to establish an SSH connection with a component of an application of a multi-tenant Platform-as-a-Service (PaaS) system, the component is separate from the SSH proxy server, authenticating credentials provided as part of the request, establishing the SSH connection with a device originating the request, receiving, in view of authenticating the credentials and establishing the SSH connection, routing information for the application, the routing information comprising a location of a node of the multi-tenant PaaS system executing the application, establishing an internal communication session with an executing proxy of the node, and forward information conveyed over the SSH connection to the executing proxy via the internal communication session.

Abstract: Implementations provide for a source to image framework for a Platform-as-a-Service (PaaS) system. A method of the disclosure includes invoking source-to-image (STI) orchestration logic to perform a build for an application of a multi-tenant PaaS system, launching a build container for the build in view of a base image of the application, the base image providing a core functionality for the application, accessing source code of the application at the build container, assembling an application image using the base image and the source code, and committing the application image to a repository.

Abstract: Aspects of the disclosure provide for source code management for a multi-tenant Platform-as-Service (PaaS) system. A method of the disclosure includes creating, by a processing device of a platform-as-a-service (PaaS) system, a first container to host a first source code management repository for an application; receiving, at the first container, source code associated with the application; creating, by the processing device, a second container to provide deployment functionality for the application, the second container comprising resource-constrained processing space of a node of the PaaS system to execute functionality of the application; and deploying, by the processing device, the source code on the PaaS system using the second container. Aspects of the disclosure may be implemented using high-availability (HA) clusters by replicating the SCM container(s). Aspects of the disclosure may provide users with cost-effective, scaled, and secure PaaS services using reduced infrastructure.

Abstract: A mechanism for optimization of deployment of applications for activation in a multi-tenant Platform-as-Service (PaaS) system is disclosed. A method of the disclosure includes receiving, by a processing device, a request for deployment of an application source code on a node. The node is provided by the PaaS system. The method also includes implementing, by the processing device, a build, prepare and distribute functionality to convert the application source code into a build result prepared for distribution as a deployment artifact code. The method further includes implementing, by the processing device, a deployment functionality to activate the deployment artifact for the deployment in the node by not incurring downtime.