Attachment and detachment of compute instances owned by different tenancies
Techniques are disclosed for creating an attachment between two compute instances. An infrastructure and a generalized method is described for attaching two or more cloud resources (e.g., two compute instances) in spite of the compute resources being provisioned by two different services from different cloud tenancies. An automated process is described that is executed for wiring the compute instances. The automated process can be generally applied to attach any two compute instances providing two different services and provisioned from two different service tenancies.
1. A method, comprising:
receiving, by a first control plane for a first service, a request to create an attachment between a first compute instance of the first service and a second compute instance of a second service, where the first compute instance is controlled by the first control plane, the second compute instance is controlled by a second control plane, the first compute instance is within a customer tenancy, the second compute instance is within the customer tenancy, and the first compute instance is isolated from the second compute instance within the customer tenancy;
executing, by the first control plane, a set of processing steps to create the attachment between the first compute instance and the second compute instance, wherein executing the set of processing steps includes:
sending, by the first control plane, to the second control plane, an attachment request, the attachment request including information identifying the first compute instance and the second compute instance, wherein the second control plane stores information about the attachment; and
storing, by the first control plane, information about the attachment; and
after executing the set of processing steps and due to the attachment, gaining control of the second compute instance and enabling communication between the first compute instance and the second compute instance.
2. The method of claim 1 , wherein executing the set of processing steps includes:
obtaining, by the first control plane, a token indicating that the first control plane can communicate with the second control plane on behalf of a customer.
3. The method of claim 1 , wherein executing the set of processing steps includes:
determining, by the first control plane, a set of allowed operations that can be performed on the second compute instance.
4. The method of claim 1 , wherein the first control plane is a dominant control plane, the second control plane is a passive control plane, the first compute instance is a dominant compute instance, and the second compute instance is a passive compute instance.
5. The method of claim 1 , further comprising:
before executing the set of processing steps to create the attachment, creating, by the first control plane, the first compute instance of the first service within the customer tenancy.
6. The method of claim 1 , wherein executing the set of processing steps includes:
sending, by the first control plane, to the second control plane, a request to create the second compute instance within the customer tenancy, wherein the second control plane creates the second compute instance within the customer tenancy in response to the request.
7. The method of claim 1 , wherein the first service is an Enterprise Resource Planning (ERP) service, and the second service is a conversational Artificial Intelligence (AI) service.
8. The method of claim 1 , wherein after executing the set of processing steps and due to the attachment, the second control plane is restricted from performing at least one operation on the second compute instance.
9. A non-transitory computer-readable storage medium, storing computer-executable instructions that, when executed, cause one or more processors of a computer system to perform a method comprising:
receiving a request to create an attachment between a first compute instance of a first service and a second compute instance of a second service, where the first compute instance is controlled by a first control plane of the computer system, the second compute instance is controlled by a second control plane, the first compute instance is within a customer tenancy, the second compute instance is within the customer tenancy, and the first compute instance is isolated from the second compute instance within the customer tenancy;
executing a set of processing steps to create the attachment between the first compute instance and the second compute instance, wherein executing the set of processing steps includes:
sending, to the second control plane, a request to create the second compute instance within the customer tenancy, wherein the second control plane creates the second compute instance within the customer tenancy in response to the request; and
after executing the set of processing steps and due to the attachment, gaining control of the second compute instance and enabling communication between the first compute instance and the second compute instance.
10. The non-transitory computer-readable storage medium of claim 9 , wherein executing the set of processing steps includes:
obtaining a token indicating that the computer system can communicate with the second control plane on behalf of a customer.
11. The non-transitory computer-readable storage medium of claim 9 , wherein executing the set of processing steps includes:
determining a set of allowed operations that can be performed on the second compute instance.
12. The non-transitory computer-readable storage medium of claim 9 , wherein executing the set of processing steps includes:
sending to the second control plane, an attachment request, the attachment request including information identifying the first compute instance and the second compute instance, wherein the second control plane stores information about the attachment; and
storing information about the attachment.
13. The non-transitory computer-readable storage medium of claim 9 , wherein the first control plane is a dominant control plane, the second control plane is a passive control plane, the first compute instance is a dominant compute instance, and the second compute instance is a passive compute instance.
14. A computer system comprising:
a processor; and
a memory configured to store a plurality or instructions executable by the processor and upon execution by the processor to cause processing to be performed comprising:
receiving a request to create an attachment between a first compute instance of a first service and a second compute instance of a second service, where the first compute instance is controlled by a first control plane of the computer system, the second compute instance is controlled by a second control plane, the first compute instance is within a customer tenancy, the second compute instance is within the customer tenancy, and the first compute instance is isolated from the second compute instance within the customer tenancy;
executing a set of processing steps to create the attachment between the first compute instance and the second compute instance; and
after executing the set of processing steps and due to the attachment, gaining control of the second compute instance and enabling communication between the first compute instance and the second compute instance, wherein after executing the set of processing steps and due to the attachment, the second control plane is restricted from performing at least one operation on the second compute instance.
15. The computer system of claim 14 , wherein executing the set of processing steps includes:
obtaining a token indicating that the computer system can communicate with the second control plane on behalf of a customer.
16. The computer system of claim 14 , wherein executing the set of processing steps includes:
determining a set of allowed operations that can be performed on the second compute instance.
17. The computer system of claim 14 , wherein executing the set of processing steps includes:
sending to the second control plane, an attachment request, the attachment request including information identifying the first compute instance and the second compute instance, wherein the second control plane stores information about the attachment; and
storing information about the attachment.
18. The computer system of claim 14 , wherein the first control plane is a dominant control plane, the second control plane is a passive control plane, the first compute instance is a dominant compute instance, and the second compute instance is a passive compute instance.
19. The computer system of claim 14 , further comprising:
before executing the set of processing steps to create the attachment, creating the first compute instance of the first service within the customer tenancy.