Abstract: Techniques are described for creating a container environment that implements direct communications between pods. This includes the creation of a management component (such as a control plane) of the container environment, the creation of nodes within an implementation component (such as a data plane) of the container environment, and the attaching of virtualized network interface cards (VNICs) to each node. This also includes creating a custom resource for each node, where the custom resource stores internet protocol (IP) addresses assigned to the node and stored within the VNICs for the node. Pods implemented within these nodes obtain an IP address from the VNICs for their respective node and communicate with each other utilizing the IP addresses via virtual communication devices and the VNICs.

Abstract: Techniques are described for implementing a container environment where each pod within the container environment is provided with a unique IP address and a virtual communication device such as an IPvlan device. Communications from source pods are directly routed to destination pods within the container environment by one or more virtualized network interface cards (VNICs) utilizing the unique IP addresses of the destination pods, without the need for bridging and encapsulation. This reduces a size of data being transmitted and also eliminates a compute cost necessary to perform encapsulation of data during transmission.

Abstract: Techniques are described for transmitting metric data between tenancies. Metric data is gathered for resources within a customer tenancy of a multi-tenant environment. This metric data is sent to a service tenancy of the multi-tenant environment, where the service tenancy is separate from the customer tenancy. The metric data is validated and preprocessed within the service tenancy to make sure that all required fields (such as key-value pairs) are located within the metric data. The preprocessed metric data is then sent to a telemetry service for analysis.

Abstract: A private information detector for data loss prevention is described.

Abstract: The described techniques are directed towards a host virtual machine configured to host a container. In some examples, a device can monitor communication between a container executing on a host virtual machine and the host virtual machine. The host virtual machine can include a first operating system. The container can include a first computer-executable instruction. The device can detect that the first computer-executable instruction is configured to run on a second operating system based on monitoring the communication between the container executing on the host virtual machine and the host virtual machine. The device can further detect a second computer-executable instruction that is configured to run on the first operating system, the second computer-executable instruction can be accessible to the host virtual machine. The device can further include mounting the second computer-executable instruction from the host virtual machine into the container.