Abstract: Computing clusters can be automatically configured according to some aspects described herein. For example, a system can receive configuration datasets from instantiated objects in a management cluster. The configuration datasets can be for configuring target objects in managed clusters, where the managed clusters are separate from the management cluster. The system can then configure the target objects within each of the managed clusters based on the configuration datasets.

Abstract: Computing clusters can be automatically configured according to some aspects described herein. For example, a system can receive configuration datasets from instantiated objects in a management cluster. The configuration datasets can be for configuring target objects in managed clusters, where the managed clusters are separate from the management cluster. The system can then configure the target objects within each of the managed clusters based on the configuration datasets.

Abstract: A method of container and image scanning includes receiving, by a processing device initiating a scan process to scan containers executing functionality of multiple applications. The method further includes, for each container of the containers, identifying portions of an application image instance of the container, the portions corresponding to previously-scanned clean layers of the application image instance, scanning, by the processing device in accordance with the scan process, remaining portions of the application image instance not associated with the previously-scanned clean layers, and responsive to a clean result of the scanning of the remaining portions of the application image instance, terminating, by the processing device, the scan process for the container and allowing the container having the application image instance to execute.

Abstract: A sensor system for protecting movable objects, in particular motor-driven doors or flaps, having at least one capacitive sensor and having at least one control unit. The control unit is designed to generate a transmission signal for the capacitive sensor and to evaluate a first reception signal therefrom. At least one further electrode is provided, wherein the capacitive sensor and the further electrode are movable relative to one another. The control unit has an evaluation arrangement which evaluates a second reception signal from the further electrode, and the evaluation arrangement is designed to derive an item of information relating to the distance between the capacitive sensor and the further electrode from the second reception signal.

Abstract: A method of container and image scanning includes receiving, by a processing device initiating a scan process to scan containers executing functionality of multiple applications. The method further includes, for each container of the containers, identifying portions of an application image instance of the container, the portions corresponding to previously-scanned clean layers of the application image instance, scanning, by the processing device in accordance with the scan process, remaining portions of the application image instance not associated with the previously-scanned clean layers, and responsive to a clean result of the scanning of the remaining portions of the application image instance, terminating, by the processing device, the scan process for the container and allowing the container having the application image instance to execute.

Abstract: A method of container and image scanning includes receiving, by a processing device executing a node of a multi-tenant Platform-as-a-Service (PaaS) system, a pluggable scan process to scan containers of the multi-tenant PaaS system to detect patterns indicative of threats to the multi-tenant PaaS system, installing, by the processing device, the pluggable scan process at the node, scanning, by the processing device via the pluggable scan process at the node, a top layer of an application image instance used to launch a container at the node without scanning remaining layers of the application image instance, and in response to the scanning generating a clean result, terminating, by the processing device, the pluggable scan process for the container.

Abstract: A method of container and image scanning includes receiving, by a processing device executing a node of a multi-tenant Platform-as-a-Service (PaaS) system, a pluggable scan process to scan containers of the multi-tenant PaaS system to detect patterns indicative of threats to the multi-tenant PaaS system, installing, by the processing device, the pluggable scan process at the node, scanning, by the processing device via the pluggable scan process at the node, a top layer of an application image instance used to launch a container at the node without scanning remaining layers of the application image instance, and in response to the scanning generating a clean result, terminating, by the processing device, the pluggable scan process for the container.

Abstract: A circuit for evaluating measurement signals of at least one sensor with a control circuit. A control signal having a first frequency is generated by a control section of the control circuit, and the control signal is applied to the sensor. An electronic evaluation unit is provided for generating an evaluation signal originating from a measurement signal generated by the sensor. The electronic evaluation unit generates an opposing signal having the first frequency and a modifiable phase angle and superposes the opposing signal and the evaluation signal. The signal resulting from the superposition of the opposing signal and the evaluation signal is fed to a synchronous demodulator of the electronic evaluation unit.

Abstract: A sensor system for protecting movable objects, in particular motor-driven doors or flaps, having at least one capacitive sensor and having at least one control unit. The control unit is designed to generate a transmission signal for the capacitive sensor and to evaluate a first reception signal therefrom. At least one further electrode is provided, wherein the capacitive sensor and the further electrode are movable relative to one another. The control unit has an evaluation arrangement which evaluates a second reception signal from the further electrode, and the evaluation arrangement is designed to derive an item of information relating to the distance between the capacitive sensor and the further electrode from the second reception signal.

Abstract: A method of container and image scanning includes storing at a central scan store of a multi-tenant system, an image scan result for a container image, the container image for executing functionality of applications and comprising layers, wherein the image scan result generated by a scan process comprising scanning a top layer of the container image, the remaining layers of the container image are immutable, verifying a clean status of the remaining layers of the container image with the central scan store, and transmitting the image scan result for the container image, the image scan result being clean in response to a clean result returned for the scanning and successful verification of the clean status of the remaining layers. The method further includes responsive to receiving a container image scan result request for the container image, transmitting the image scan result for the container image.

Abstract: Implementations provide for a secure shell (SSH) proxy for a Platform-as-a-Service (PaaS) system. A method of the disclosure includes receiving, by a processing device executing a Secure Shell (SSH) proxy server, a request to establish an SSH connection with a component of an application of a multi-tenant Platform-as-a-Service (PaaS) system, the component is separate from the SSH proxy server, authenticating credentials provided as part of the request, establishing the SSH connection with a device originating the request, receiving, in view of authenticating the credentials and establishing the SSH connection, routing information for the application, the routing information comprising a location of a node of the multi-tenant PaaS system executing the application, establishing an internal communication session with an executing proxy of the node, and forward information conveyed over the SSH connection to the executing proxy via the internal communication session.

Abstract: A circuit for evaluating measurement signals of at least one sensor with a control circuit. A control signal having a first frequency is generated by a control section of the control circuit and the control signal is applied to the sensor. An electronic evaluation unit is provided for generating an evaluation signal originating from a measurement signal generated by the sensor. The electronic evaluation unit generates an opposing signal having the first frequency and a modifiable phase angle and superposes the opposing signal and the evaluation signal. The signal resulting from the superposition of the opposing signal and the evaluation signal is fed to a synchronous demodulator of the electronic evaluation unit.

Abstract: A sensor system for the capacitive detection of obstacles, having a capacitive sensor with conductive elements and a control circuit connected thereto. The control circuit has a bridge circuit, and a first end of the bridge branch is connected to a conductive element of the sensor positioned upstream in the direction of detection and a second end of the bridge branch is connected to a conductive element of the sensor positioned downstream in the direction of detection. A control signal is generated by a control section of the control circuit and the sum of impedances of the bridge circuit connected to the first end of the bridge branch is less than the sum of impedances of the bridge circuit connected to the second end of the bridge branch. An electronic evaluation unit is provided to evaluate a voltage difference between the first and second ends of the bridge branch.

Abstract: Implementations of the disclosure provide for controlling capacity in a multi-tenant Platform-as-a-Service (PaaS) environment in a cloud computing system. A method includes obtaining, by a resource control module executed by a processing device, an active capacity metric of each node in a multi-tenant Platform-as-a-Service (PaaS) system, the active capacity metric determined in view of a number of containers that are currently executing in the node and a maximum number of active containers allowed to execute in the node, comparing, by the resource control module, the active capacity metric of the each node to an active capacity threshold associated with the each node, and when the active capacity metric exceeds the active capacity threshold in all of the nodes in a district of the multi-tenant PaaS system and when a maximum actual capacity of containers in the district is not exceeded, adding a new node to the district.

Abstract: A method of container and image scanning includes storing at a central scan store of a multi-tenant system, an image scan result for a container image, the container image for executing functionality of applications and comprising layers, wherein the image scan result generated by a scan process comprising scanning a top layer of the container image, the remaining layers of the container image are immutable, verifying a clean status of the remaining layers of the container image with the central scan store, and transmitting the image scan result for the container image, the image scan result being clean in response to a clean result returned for the scanning and successful verification of the clean status of the remaining layers. The method further includes responsive to receiving a container image scan result request for the container image, transmitting the image scan result for the container image.

Abstract: Implementations provide for a secure shell (SSH) proxy for a Platform-as-a-Service (PaaS) system. A method of the disclosure includes receiving, by a processing device executing a Secure Shell (SSH) proxy server, a request to establish an SSH connection with a component of an application of a multi-tenant Platform-as-a-Service (PaaS) system, the component is separate from the SSH proxy server, authenticating credentials provided as part of the request, establishing the SSH connection with a device originating the request, receiving, in view of authenticating the credentials and establishing the SSH connection, routing information for the application, the routing information comprising a location of a node of the multi-tenant PaaS system executing the application, establishing an internal communication session with an executing proxy of the node, and forward information conveyed over the SSH connection to the executing proxy via the internal communication session.

Abstract: Implementations provide for container and image scanning for a Platform-as-a-Service (PaaS) system. A method of the disclosure includes initiating, by a processing device executing a node of a multi-tenant Platform-as-a-Service (PaaS) system, a scan process at the node to scan containers executing on the node, the containers executing functionality of multiple applications that are owned by multiple owners. The method further includes, for each container of the containers, scanning, by the processing device in accordance with the scan process, a top layer of application image instance used to launch the container in the node without scanning remaining layers of the application image instance, and terminating, by the processing device, the scan process for the container when the scanning generates a clean result.

Abstract: A mechanism for application partitioning in a multi-tenant PaaS environment in a cloud computing system is disclosed. A method of embodiments includes receiving, by a virtual machine (VM), a request to initialize a container on the VM, the container comprising a resource-constrained space of the VM to execute functionality of an application of a multi-tenant PaaS system. The method also includes assigning a user identification (UID) and non-volatile resources to the container, wherein the UID and non-volatile resources are part of a subset of UIDs and a subset of non-volatile resources allotted to the VM from a range of UIDs and a range of non-volatile resources associated with a district of the VM, and wherein other VMs in the district are not allotted the same subset of UIDs from the range of UIDs or the same subset of non-volatile resources from the range of non-volatile resources.

Abstract: Implementations of the disclosure provide for controlling capacity in a multi-tenant Platform-as-a-Service (PaaS) environment in a cloud computing system. A method includes obtaining, by a resource control module executed by a processing device, an active capacity metric of each node in a multi-tenant Platform-as-a-Service (PaaS) system, the active capacity metric determined in view of a number of containers that are currently executing in the node and a maximum number of active containers allowed to execute in the node, comparing, by the resource control module, the active capacity metric of the each node to an active capacity threshold associated with the each node, and when the active capacity metric exceeds the active capacity threshold in all of the nodes in a district of the multi-tenant PaaS system and when a maximum actual capacity of containers in the district is not exceeded, adding a new node to the district.

Abstract: A mechanism for controlling capacity in a multi-tenant Platform-as-a-Service (PaaS) environment in a cloud computing system is disclosed. A method includes detecting, by a resource control module, an occurrence of a trigger event for capacity analysis of virtual machines (VMs) in a multi-tenant PaaS system, obtaining an active capacity metric of each of the VMs, the active capacity metric comprising a result of dividing a number of containers that are currently executing in the VM by a maximum number of active containers allowed to execute in the VM, comparing the active capacity metric of each VM to an active capacity threshold of each VM, when the active capacity metric exceeds the active capacity threshold in all of the VMs in a district of the multi-tenant PaaS system and when a maximum actual capacity of containers in the district is not exceeded, adding a new VM to the district.