Abstract: Methods, systems, and computer-readable storage media for executing, by a policy controller, a policy custom resource that defines a policy to be applied to target resources within a cluster of a cloud computing platform, the policy custom resource including a policy target defining parameters for identifying a resource as a target resource, a policy condition defining conditions of a target resource that are to be evaluated, and a policy action defining actions that are to be executed in response to the conditions evaluating to true, receiving, by the policy controller, a set of target resources based on the policy target of the policy custom resource, evaluating, by the policy controller and for each target resource in the set of target resources, the policy condition, and in response to the policy condition returning as true for a target resource, executing the policy action for the target resource.

Abstract: Methods, systems, and computer-readable storage media for executing, by a policy controller, a policy custom resource that defines a policy to be applied to target resources within a cluster of a cloud computing platform, the policy custom resource including a policy target defining parameters for identifying a resource as a target resource, a policy condition defining conditions of a target resource that are to be evaluated, and a policy action defining actions that are to be executed in response to the conditions evaluating to true, receiving, by the policy controller, a set of target resources based on the policy target of the policy custom resource, evaluating, by the policy controller and for each target resource in the set of target resources, the policy condition, and in response to the policy condition returning as true for a target resource, executing the policy action for the target resource.

Abstract: The present disclosure involves systems, software, and computer implemented methods for remotely executing binaries in a containerized computing environment using a lightweight inter-process communications protocol (IPC) and UNIX domain sockets. One example method includes establishing, in a shared computing image comprising a plurality of containers, a listening UNIX domain socket, where the listening UNIX domain socket is shared between all containers in the shared computing image. A request to execute a binary in the target container is received at a target container and from a client container using the listening UNIX domain socket. A worker service is generated in the target container. The worker service executes the binary in the target container. A return exit code associated with the executed binary is received and sent to the client container using the UNIX domain socket.

Abstract: The present disclosure involves systems, software, and computer implemented methods for remotely executing binaries in a containerized computing environment using a lightweight inter-process communications protocol (IPC) and UNIX domain sockets. One example method includes establishing, in a shared computing image comprising a plurality of containers, a listening UNIX domain socket, where the listening UNIX domain socket is shared between all containers in the shared computing image. A request to execute a binary in the target container is received at a target container and from a client container using the listening UNIX domain socket. A worker service is generated in the target container. The worker service executes the binary in the target container. A return exit code associated with the executed binary is received and sent to the client container using the UNIX domain socket.

Abstract: The present disclosure involves systems, software, and computer implemented methods for remotely executing binaries in a containerized computing environment using a lightweight inter-process communications protocol (IPC) and UNIX domain sockets. One example method includes establishing, in a shared computing image comprising a plurality of containers, a listening UNIX domain socket, where the listening UNIX domain socket is shared between all containers in the shared computing image. A request to execute a binary in the target container is received at a target container and from a client container using the listening UNIX domain socket. A worker service is generated in the target container. The worker service executes the binary in the target container. A return exit code associated with the executed binary is received and sent to the client container using the UNIX domain socket.

Abstract: A registration interface is provided to service providers for registering services with a service management platform. The service management platform is configured to provide access to services from multiple service providers to application developers using a same application developer interface. A registration request is received for a service from a service provider. The service is registered to make the service available to application developers. A provision request for the service is received from an application developer. The provision request is forwarded to a broker associated with the service provider. A provision response is received from the broker. The provision response indicates a status of provisioning an instance of the service at the service provider. A create-binding request for binding information for the service is received from the application developer. Binding information is provided to the application developer, in response to the create-binding request.

Abstract: A registration interface is provided to service providers for registering services with a service management platform. The service management platform is configured to provide access to services from multiple service providers to application developers using a same application developer interface. A registration request is received for a service from a service provider. The service is registered to make the service available to application developers. A provision request for the service is received from an application developer. The provision request is forwarded to a broker associated with the service provider. A provision response is received from the broker. The provision response indicates a status of provisioning an instance of the service at the service provider. A create-binding request for binding information for the service is received from the application developer. Binding information is provided to the application developer, in response to the create-binding request.

Abstract: A system includes reception of a request associated with a cloud-based application at an external port of a container associated with the cloud-based application, passage of the request to an application controller associated with the cloud-based application, determination of whether the request includes a command to modify the cloud-based application, invocation of a function to execute the command if it is determined that the request includes a command to modify the cloud-based application, and forwarding of the request to the cloud-based application at a second port different from the external port if it is determined that the request does not include a command to modify the cloud-based application.

Abstract: A system includes reception of a request associated with a cloud-based application at an external port of a container associated with the cloud-based application, passage of the request to an application controller associated with the cloud-based application, determination of whether the request includes a command to modify the cloud-based application, invocation of a function to execute the command if it is determined that the request includes a command to modify the cloud-based application, and forwarding of the request to the cloud-based application at a second port different from the external port if it is determined that the request does not include a command to modify the cloud-based application.

Abstract: The present disclosure involves systems, software, and computer implemented methods for deploying a multiple target application (MTA). One example method includes identifying a MTA for deployment. The MTA includes one or more software modules and is associated with a deployment descriptor that identifies at least one dependency associated with the one or more software modules. One or more target platforms are identified for deployment of the MTA. The one or more software modules are deployed on the one or more target platforms. Deploying the one or more software modules includes implementing the at least one dependency identified in the deployment descriptor.

Abstract: The present disclosure involves systems, software, and computer implemented methods for deploying a multiple target application (MTA). One example method includes identifying a MTA for deployment. The MTA includes one or more software modules and is associated with a deployment descriptor that identifies at least one dependency associated with the one or more software modules. One or more target platforms are identified for deployment of the MTA. The one or more software modules are deployed on the one or more target platforms. Deploying the one or more software modules includes implementing the at least one dependency identified in the deployment descriptor.

Abstract: The present disclosure involves systems, software, and computer implemented methods for deploying a multiple target application (MTA). One example method includes identifying a MTA for deployment. The MTA includes one or more software modules and is associated with a deployment descriptor that identifies at least one dependency associated with the one or more software modules. One or more target platforms are identified for deployment of the MTA. The one or more software modules are deployed on the one or more target platforms. Deploying the one or more software modules includes implementing the at least one dependency identified in the deployment descriptor.

Abstract: A system for graphically representing an organization action includes a communication interface and a processor. The communications interface receives communication messages between an application arid a server. The processor processes the communication messages to determine organization actions performed in the application. The processor also determines at least one metric of the organization actions based on the communication messages. The processor generates a graphical representation of the metric of the organization actions.

Abstract: A system for identifying and managing incidents of organization actions performed with applications includes a processor and communications interface. The communications interface receives communication messages between an application and a server. The processor receives at least one policy for an organization action performed with the application. The processor processes the communication messages between the application and the server to determine the organization action. The processor determines at least one metric related to the organization action based on the communications messages. The processor then determines whether the metric complies with the policy.

Abstract: A system, method, and computer program product is disclosed for determining information related to user interactions with an application. The system comprises a collector, an analyzer, and a storage device. The collector inspects data sent from the application to a server in response to a user interacting with the application. The analyzer then determines, based on the data, a description of the interaction of the user with the application and the server. The system stores the description of the interaction of the user in the storage device.