Abstract: An apparatus may include a processor that may access and analyze a live log stream of activity of the containerized service and determine whether the containerized service is able to provide a capability of the service based on the analysis. For example, the processor may determine whether the containerized service is executing but is in a hung state and cannot provide the capability. To do so, the processor may parse the live log stream for comparison with log patterns that indicate that the service is no longer able to provide the capability. The patterns may be generated based on observations of output by services that are hung or otherwise cannot provide their respective capabilities. The processor may cause the container to be restarted when the analysis indicates that the capability is not being provided by the containerized service, such as when the containerized service is in a hung state.

Abstract: An apparatus may include a processor that may access and analyze a live log stream of activity of the containerized service and determine whether the containerized service is able to provide a capability of the service based on the analysis. For example, the processor may determine whether the containerized service is executing but is in a hung state and cannot provide the capability. To do so, the processor may parse the live log stream for comparison with log patterns that indicate that the service is no longer able to provide the capability. The patterns may be generated based on observations of output by services that are hung or otherwise cannot provide their respective capabilities. The processor may cause the container to be restarted when the analysis indicates that the capability is not being provided by the containerized service, such as when the containerized service is in a hung state.

Abstract: A system is disclosed for managing configuration drift of computing resource instances, including instructions to (1) receive a definition of a plurality of functional roles to be played by resource instances within a multi-resource computing system; (2) select, for each of the roles, a designated exemplar from the group of resource instances playing that role; (3) capture characteristics of that designated exemplar and assign the captured characteristics to a functional role template; and (4) during operation, measure configuration drift by comparing resource instances for each functional role to the functional role template associated with that role, such measuring being independent of any comparing to resource instances in the functional role.

Abstract: A change in an information technology system may be monitored. The information technology system may include a computing resource, a computing service that is to utilize the computing resource, a resource policy including a rule that is to be matched to the computing resource. A compliance operation may be performed on the computing resource in accordance with the rule. A schedule may be changed for a maintenance window in which the compliance operation is to be performed. The change of the schedule may be based on the monitored change in the information technology system and on a priority of the compliance operation or of the computing service.

Abstract: In some examples, a container image is received, where a container is to be launched from the container image. An executable process is deployable in the container to isolate the executable process from another executable process. The container image is annotated with metadata specifying a policy. Compliance of the container image with the policy is checked in a test environment prior to publication of the container image to a registry for use in a production environment.

Abstract: A system is disclosed for managing configuration drift of computing resource instances, including instructions to (1) receive a definition of a plurality of functional roles to be played by resource instances within a multi-resource computing system; (2) select, for each of the roles, a designated exemplar from the group of resource instances playing that role; (3) capture characteristics of that designated exemplar and assign the captured characteristics to a functional role template; and (4) during operation, measure configuration drift by comparing resource instances for each functional role to the functional role template associated with that role, such measuring being independent of any comparing to resource instances in the functional role.

Abstract: In some examples, a container image is received, where a container is to be launched from the container image. An executable process is deployable in the container to isolate the executable process from another executable process. The container image is annotated with metadata specifying a policy. Compliance of the container image with the policy is checked in a test environment prior to publication of the container image to a registry for use in a production environment.

Abstract: A change in an information technology system may be monitored. The information technology system may include a computing resource, a computing service that is to utilize the computing resource, a resource policy including a rule that is to be matched to the computing resource. A compliance operation may be performed on the computing resource in accordance with the rule. A schedule may be changed for a maintenance window in which the compliance operation is to be performed. The change of the schedule may be based on the monitored change in the information technology system and on a priority of the compliance operation or of the computing service.