Abstract: The present disclosure relates to implementing, updating, and managing operation of a client agent on a client device (e.g., computing device, virtual device) in a way that enables isolation of features and functionality while also allowing the client agent to self-heal and intelligently update discrete features thereon. The client agent includes a collection of plugins that are isolated and run in accordance with respective plugin policies. The client agent makes use of device-level, agent-level, and plugin-level health monitors that collectively monitor a health status of discrete components of the client agent in a way that enables the client agent to selectively discontinue scheduling certain plugins without interrupting functionality of other plugins or of the client agent as a whole. Indeed, features described herein enable the client agent to intelligently update and self-heal with respect to individual plugins based on information obtained by the respective health monitors.

Abstract: The present technology provides a method to regenerate secrets while a version of the system is operational, thus avoiding the loss of availability that would have resulted from a system shutdown. The technology described herein may work in a computing context that assigns a first secret in an active role and a second secret in the backup role. The technology described herein activates a second instance of the service with the key not being regenerated serving as the active key. The second instance is then moved to the production mode and the first version of the service is moved to the staging mode. A new secret is generated and then assigned to the first instance of the service while it runs in the staging mode. Once the secret rotation is complete, the primary service instance is then moved back to the production mode with the new key configuration.

Abstract: A computer implemented method includes granting a tenant administrator client machine access to a cloud hosted tenant service joined to a directory service. A bulk token for the tenant is obtained in response to a request received from the tenant administrator client machine. An identifier of an authorized tenant client to the cloud hosted tenant service is received and results in the provisioning of a tenant client virtual machine in a cloud service for the authorized tenant client in accordance with a specified provisioning package associated with the bulk token. The tenant client virtual machine is then joined to the directory service. On receipt of an authorized client token at the cloud hosted tenant service from a tenant client machine, the tenant client machine is provided a connection to the tenant client virtual machine.