Defining virtual application templates
This disclosure relates to a system for defining enterprise applications operating in virtual datacenter. Application templates may be created containing the necessary information for provisioning and securing virtual applications in a tenant's virtual datacenter. The templates may define roles, service accounts, and scripts necessary for the datacenter to operate.
1. A method for defining a virtual datacenter application, comprising:
creating an application template, wherein the application template defines the virtual datacenter application, the virtual datacenter application including a plurality of workloads grouped to form the virtual datacenter application;
defining a role associated with the virtual datacenter application, wherein the role comprises a service account role;
defining a service account associated with the virtual datacenter application, wherein the service account is assigned the service account role;
defining a script establishing a communication between at least two workloads in the plurality of workloads, wherein the script is associated with the virtual datacenter application, wherein the service account role includes permissions to execute the script from the service account, wherein the association between the script and the service account guarantees that the script is executed on a correct workload with proper permissions, wherein the script is defined to execute according to an execution order organized over multiple additional workloads, wherein a first script is defined to execute on a first workload before a second script is defined to execute on a second workload, wherein the first script is different from the second script, wherein the first workload is different from the second workload;
applying the role, the service account, and the script to at least one of the plurality of workloads; and
storing the application template on a non-transitory computer readable storage medium.
2. The method of claim 1 , wherein the role is one of a user role and a workload role.
3. The method of claim 2 , further comprising providing permission to the at least one of the plurality of workloads to access an operating system feature from the workload role.
4. The method of claim 1 , wherein the service account comprises a workload account configured to execute computer instructions residing in the at least one of the plurality of workloads.
5. The method of claim 1 , wherein the plurality of workloads comprise a plurality of software solutions.
6. A computer program product comprising a non-transitory computer usable medium having machine readable code embodied therein for defining a virtual datacenter application, comprising:
creating an application template, wherein the application template defines the virtual datacenter application, the virtual datacenter application including a plurality of workloads grouped to form the virtual data center application;
defining a role associated with the virtual datacenter application, wherein the role comprises a service account role;
defining a service account associated with the virtual datacenter application, wherein the service account is assigned the service account role;
defining a script establishing a communication between at least two workloads in the plurality of workloads, wherein the script is associated with the virtual datacenter application, wherein the service account role includes permissions to execute the script from the service account, wherein the association between the script and the service account guarantees that the script is executed on a correct workload with proper permissions, wherein the script is defined to execute according to an execution order organized over multiple additional workloads, wherein a first script is defined to execute on a first workload before a second script is defined to execute on a second workload, wherein the first script is different from the second script, wherein the first workload is different from the second workload;
applying the role, the service account, and the script to at least one of the plurality of workloads; and
storing the application template on a non-transitory computer readable storage medium.
7. The computer program product of claim 6 , wherein the role is one of a user role and a workload role.
8. The computer program product of claim 6 , wherein the service account comprises a workload account configured to execute computer instructions residing in the at least one of the plurality of workloads.
9. A system for defining a virtual datacenter application, the system comprising a processor and a non-transitory computer readable medium, the processor configured to:
create an application template, wherein the application template defines the virtual datacenter application, the virtual datacenter application including a plurality of workloads grouped to form the virtual data center application;
define a role associated with the virtual datacenter application, wherein the role comprises a service account role;
define a service account associated with the virtual datacenter application, wherein the service account is assigned the service account role;
define a script establishing a communication between at least two workloads in the plurality of workloads, wherein the script is associated with the virtual datacenter application, wherein the service account role includes permissions to execute the script from the service account, wherein the association between the script and the service account guarantees that the script is executed on a correct workload with proper permissions, wherein the script is defined to execute according to an execution order organized over multiple additional workloads, wherein a first script is defined to execute on a first workload before a second script is defined to execute on a second workload, wherein the first script is different from the second script, wherein the first workload is different from the second workload;
apply the role, the service account, and the script to at least one of the plurality of workloads; and
store the application template on a non-transitory computer readable storage medium.
10. The system of claim 9 , wherein the role is one of a user role and a workload role.
11. The system of claim 9 , wherein the service account comprises a workload account configured to execute computer instructions residing in the at least one of the plurality of workloads.
12. The method of claim 1 , further comprising rebooting at least one of the plurality of workloads.
13. The method of claim 1 , further comprising restarting the script.