System and method for providing a cloud computing environment
A system and method for enabling a cloud computing environment. In accordance with an embodiment, the system can include a variety of hardware and/or software components and features, which can be used in delivering an infrastructure, platform, and/or applications to support public and private clouds.
1. A system for providing tenants of a cloud computing environment with service instances, comprising:
one or more computers, including a processor and a cloud environment executing thereon that operates to provide tenant environments with service instances within the cloud computing environment, wherein each of the service instances provides an application server instance for execution of software applications;
a workflow orchestrator that orchestrates workflow operations within the cloud environment, to provision the tenant environments with the service instances, wherein the workflow orchestrator includes:
an application program interface that provides access to the workflow operations, and
a workflow manager that executes the workflow operations as jobs via a workflow engine of the workflow manager;
an identity manager that associates tenants of the cloud computing environment with tenant environments having identity domains and schemas, including wherein
a first tenant environment includes a first security service, and wherein the first tenant environment and its service instances are associated with a first tenant schema, and
a second tenant environment includes a second security service, and wherein the second tenant environment and its service instances are associated with a second tenant schema, and
wherein each of the first tenant and the second tenant are provided with a separate slice of a shared identity manager environment as determined by its tenant schema; and
wherein, in response to an order to create a service instance to be associated with a particular tenant environment, the system orchestrates provisioning and deployment of the service instance to the cloud computing environment, including that:
a service platform defines operations and actions that are required to implement workflow orchestrator service and application lifecycle operations within the context of a tenant environment wherein each type of service platform associated with its own types of actions;
the service instance is associated with a schema that is unique to the tenant environment and the service instance and enables the identity manager to manage association of a database service, with the service instance, so that the service instance and database service is isolated from other services instances and database services that are associated with others of the plurality of tenants;
the service instance is configured with one or more application server instances, and the schema associated with the service instance is associated with the tenant; and
an interface is associated with the service instance as deployed, that enables deployment of one or more software applications to the service instance for execution by the service instance with its associated database service.
2. The system of claim 1 , wherein each of the service instances is an instance of a Java cloud service that includes at least one application server instance for running Java-based applications.
3. The system of claim 1 , wherein at least one of creating or updating of the instance of the cloud service includes at least one of creation or personalization of a virtual assembly provided by a virtual assembly builder.
4. The system of claim 1 , wherein the workflow orchestrator associates additional resources and services with particular service instances, for use by tenant applications deployed to the particular service instances.
5. The system of claim 4 , wherein the additional resources or services that are associated with the service instance include a database service that is associated with the schema that is unique to the tenant and the service instance.
6. The system of claim 1 , wherein each identity domain represents a slice of a shared identity domain, provisioned for a particular tenant, including that each tenant obtains a separate slice of the shared identity domain, as determined by its associated schema.
7. The system of claim 1 , further comprising an identity management and security infrastructure that is shared by and supports multiple tenants each with different service requirements, including wherein
the first tenant environment and service instances include a first security service, and is associated with the first tenant schema, and
the second tenant environment include a second security service, and is associated with the second tenant schema.
8. The system of claim 1 , further comprising a plurality of service platforms;
wherein each different type of service platform associated with its own different types of actions is configured via a configuration stored in a workflow orchestrator shared configuration.
9. A method for providing tenants of a cloud computing environment with service instances, comprising:
providing, within a cloud computing environment, a cloud service that operates to provide tenant environments with service instances within the cloud computing environment, wherein each of the service instances provides an application server instance for execution of software applications;
providing a workflow orchestrator that orchestrates workflow operations within the cloud environment, to provision the tenant environments with the service instances, wherein the workflow orchestrator includes:
an application program interface that provides access to the workflow operations, and
a workflow manager that executes the workflow operations as jobs via a workflow engine of the workflow manager;
providing an identity manager that associates tenants of the cloud computing environment with tenant environments having identity domains and schemas, including wherein
a first tenant environment includes a first security service, and wherein the first tenant environment and its service instances are associated with a first tenant schema, and
a second tenant environment includes a second security service, and wherein the second tenant environment and its service instances are associated with a second tenant schema, and
wherein each of the first tenant and the second tenant are provided with a separate slice of a shared identity manager environment as determined by its tenant schema; and
in response to an order to create a service instance to be associated with a particular tenant environment, orchestrating provisioning and deployment of the service instance to the cloud computing environment, including that:
a service platform defines operations and actions that are required to implement workflow orchestrator service and application lifecycle operations within the context of a tenant environment wherein each type of service platform associated with its own types of actions;
the service instance is associated with a schema that is unique to the tenant environment and the service instance and enables the identity manager to manage association of a database service, with the service instance, so that the service instance and database service is isolated from other services instances and database services that are associated with others of the plurality of tenants;
the service instance is configured with one or more application server instances, and the schema associated with the service instance is associated with the tenant; and
an interface is associated with the service instance as deployed, that enables deployment of one or more software applications to the service instance for execution by the service instance with its associated database service.
10. The method of claim 9 , wherein each of the service instances is an instance of a Java cloud service that includes at least one application server instance for running Java-based applications.
11. The method of claim 9 , wherein at least one of creating or updating of the instance of the cloud service includes at least one of creation or personalization of a virtual assembly provided by a virtual assembly builder.
12. The method of claim 9 , wherein the workflow orchestrator associates additional resources and services with particular service instances, for use by tenant applications deployed to the particular service instances.
13. The method of claim 12 , wherein the additional resources or services that are associated with the service instance include a database service that is associated with the schema that is unique to the tenant and the service instance.
14. The method of claim 9 , wherein each identity domain represents a slice of a shared identity domain, provisioned for a particular tenant, including that each tenant obtains a separate slice of the shared identity domain, as determined by its associated schema.
15. A non-transitory computer readable storage medium, including instructions stored thereon which when read and executed by one or more computers cause the one or more computers to perform a method comprising:
providing, within a cloud computing environment, a cloud service that operates to provide tenant environments with service instances within the cloud computing environment, wherein each of the service instances provides an application server instance for execution of software applications;
providing a workflow orchestrator that orchestrates workflow operations within the cloud environment, to provision the tenant environments with the service instances, wherein the workflow orchestrator includes:
an application program interface that provides access to the workflow operations, and
a workflow manager that executes the workflow operations as jobs via a workflow engine of the workflow manager;
providing an identity manager that associates tenants of the cloud computing environment with tenant environments having identity domains and schemas, including wherein
a first tenant environment includes a first security service, and wherein the first tenant environment and its service instances are associated with a first tenant schema, and
a second tenant environment includes a second security service, and wherein the second tenant environment and its service instances are associated with a second tenant schema, and
wherein each of the first tenant and the second tenant are provided with a separate slice of a shared identity manager environment as determined by its tenant schema; and
in response to an order to create a service instance to be associated with a particular tenant environment, orchestrating provisioning and deployment of the service instance to the cloud computing environment, including that:
a service platform defines operations and actions that are required to implement workflow orchestrator service and application lifecycle operations within the context of a tenant environment wherein each type of service platform associated with its own types of actions;
the service instance is associated with a schema that is unique to the tenant environment and the service instance and enables the identity manager to manage association of a database service, with the service instance, so that the service instance and database service is isolated from other services instances and database services that are associated with others of the plurality of tenants;
the service instance is configured with one or more application server instances, and the schema associated with the service instance is associated with the tenant; and
an interface is associated with the service instance as deployed, that enables deployment of one or more software applications to the service instance for execution by the service instance with its associated database service.
16. The non-transitory computer readable storage medium of claim 15 , wherein each of the service instances is an instance of a Java cloud service that includes at least one application server instance for running Java-based applications.
17. The non-transitory computer readable storage medium of claim 15 , wherein at least one of creating or updating of the instance of the cloud service at least one of creation or personalization of a virtual assembly provided by a virtual assembly builder.
18. The non-transitory computer readable storage medium of claim 15 , wherein the workflow orchestrator associates additional resources and services with particular service instances, for use by tenant applications deployed to the particular service instances.
19. The non-transitory computer readable storage medium of claim 18 , wherein the additional resources or services that are associated with the service instance include a database service that is associated with the schema that is unique to the tenant and the service instance.
20. The non-transitory computer readable storage medium of claim 15 , wherein each identity domain represents a slice of a shared identity domain, provisioned for a particular tenant, including that each tenant obtains a separate slice of the shared identity domain, as determined by its associated schema.