Heuristic model to self-manage and auto-update containerized services
An apparatus includes a network interface and a processor. a network interface that receives a call report including an application programming interface (API) name of an API, a service name of a security service, and an identifier of a customer apparatus; and a processor configured to build a first first-order model, at least in part based on the API name, to perform a determination that an update for the security service is available, and to produce an update request, at least in part based on the first-order model and the determination, wherein the network interface transmits the update request to the customer apparatus.
1. An apparatus comprising:
a network interface circuit to receive a call report including an application programming interface (API) name of an API, a service name of a security service, one or more records of first calls received by the security service via the API, and an identifier of a customer apparatus at which the security service and the API are deployed, the one or more records of first calls including respective timestamps;
instructions; and
a processor circuit to utilize the instructions to:
based on the call report, build a first-order model of the first calls to the API for the security service;
determine that an update for the security service is available; and
based on the first-order model, schedule the update for the security service to occur during a period when second calls to the API for the security service are expected to be reduced with respect to the first calls, the network interface circuit to transmit an instruction to cause the customer apparatus to update the security service during the period.
2. The apparatus of claim 1 , wherein the call report includes a process name of a process that called the API, and the processor circuit is to:
build a higher-order model based on the process name and the first-order model; and
schedule the update based on an output of the higher-order model.
3. The apparatus of claim 2 , wherein the call report includes a service version of the security service, and the output of the higher-order model indicates an incompatibility with the service version.
4. The apparatus of claim 1 , wherein the first-order model is a first first-order model, and the processor circuit is to:
build a second first-order model based on the respective timestamps; and
produce, based on the second first-order model, a time and a date at which the update is to occur, the time and the date during the period.
5. The apparatus of claim 1 , wherein the call report includes an indicator of a first version of the security service, and the update corresponds to a second version of the security service.
6. The apparatus of claim 1 , wherein the call report includes a service version of the security service.
7. The apparatus of claim 1 , wherein the call report includes a first policy setting, and the update corresponds to a second policy setting.
8. A method comprising:
receiving a call report including an application programming interface (API) name of an API, a service name of a security service, one or more records of first calls received by the security service via the API, and an identifier of a customer apparatus at which the security service and the API are deployed, the one or more records of first calls including respective timestamps;
based on the call report, building a first-order model of the first calls to the API for the security service;
determining that an update for the security service is available;
based on the first-order model, scheduling the update for the security service to occur during a period when second calls to the API for the security service are expected to be reduced with respect to the first calls; and
transmitting an instruction to cause the customer apparatus to update the security service during the period.
9. The method of claim 8 , further including:
building a higher-order model based on the first-order model and a process name of a process that called the API, the call report including the process name; and
scheduling the update based on an output of the higher-order model.
10. The method of claim 9 , wherein the call report includes a service version of the security service, and the output of the higher-order model indicates an incompatibility with the service version.
11. The method of claim 8 , wherein the first-order model is a first first-order model, and the method further includes:
building a second first-order model based on the respective timestamps; and
producing, based on the second first-order model, produce a time and a date at which the update is to occur, the time and the date during the period.
12. The method of claim 8 , wherein the call report includes an indicator of a first version of the security service, and the update corresponds to a second version of the security service.
13. The method of claim 8 , wherein the identifier is a first identifier, and the call report includes a second identifier of a service version of the security service.
14. The method of claim 8 , wherein the call report includes a first policy setting, and the update corresponds to a second policy setting.
15. A non-transitory computer-readable medium comprising executable instructions that, when executed, cause one or more processor circuits to:
access a call report including an application programming interface (API) name of an API, a service name of a security service, one or more records of first calls received by the security service via the API, and an identifier of a customer apparatus at which the security service and the API are deployed, the one or more records of first calls including respective timestamps;
based on the call report, build a first-order model of the first calls to the API for the security service;
determine that an update for the security service is available;
based on the first-order model, schedule the update for the security service to occur during a period when second calls to the API for the security service are expected to be reduced with respect to the first calls; and
cause transmission of an instruction to cause the customer apparatus to update the security service during the period.
16. The non-transitory computer-readable medium of claim 15 , wherein the executable instructions cause at least one of the one or more processor circuits to:
build a higher-order model based on the first-order model and a process name of a process that called the API, the call report including the process name; and
schedule the update based on an output of the higher-order model.
17. The non-transitory computer-readable medium of claim 16 , wherein the call report includes a service version of the security service, and the output of the higher-order model indicates an incompatibility with the service version.
18. The non-transitory computer-readable medium of claim 15 , wherein the first-order model is a first first-order model, and the executable instructions cause at least one of the one or more processor circuits to:
build a second first-order model based on the respective timestamps; and
produce, based on the second first-order model, a time and a date at which the update is to occur, the time and the date during the period.
19. The non-transitory computer-readable medium of claim 15 , wherein the call report includes an indicator of a first version of the security service, and the update corresponds to a second version of the security service.
20. The non-transitory computer-readable medium of claim 15 , wherein the identifier is a first identifier, and the call report includes a second identifier of a service version of the security service.