Automatically deployed information technology (IT) system and method
Disclosed herein are systems, methods, and apparatuses where a controller can automatically manage a physical infrastructure of a computer system based on a plurality of system rules, a system state for the computer system, and a plurality of templates. Techniques for automatically adding resources such as computer, storage, and/or networking resources to the computer system are described. Also described are techniques for automatically deploying applications and services on such resources. These techniques provide a scalable computer system that can serve as a turnkey scalable private cloud.
1. A system comprising:
a controller for a computing system, the controller configured to access a plurality of system rules, a system state for the computing system, and a plurality of templates, wherein a subset of the system rules include configuration rules that allow another controller to be deployed within the computing system; and
wherein the controller is further configured to automatically deploy another controller within the computing system based on the configuration rules, wherein the another controller controls an environment within the computing system.
2. The system of claim 1 wherein the controller is further configured to control connections in the computing system to isolate the another controller from the controller within the computing system.
3. The system of claim 2 wherein the controller is further configured to control the connections by selectively enabling and disabling an in-band management connection between the controller and the another controller.
4. The system of claim 1 wherein, as part of the automatic deployment, the controller is further configured to load a file system image derived from the templates onto the another controller; and
wherein the another controller is configured to boot itself based on the loaded file system image.
5. A system comprising:
a controller;
a first computing environment;
a second computing environment; and
a third computing environment;
wherein the controller is configured to deploy the first and second computing environments;
wherein the first computing environment is configured to write data to the second computing environment;
wherein the first computing environment is restricted from reading data from the second computing environment; and
wherein the controller is further configured to (1) monitor data written by the first computing environment to the second computing environment, (2) in response to the monitor operation, decide whether to take an action with respect to the first computing environment, and (3) isolate the third computing environment from the first computing environment in response to the action decision.
6. The system of claim 5 wherein the second computing environment is arranged as a log server; and
wherein the first computing environment is further configured to write log data about the first computing environment to the second computing environment.
7. The system of claim 5 wherein the monitor operation comprises a determination by the controller based on the written data that a security risk exists with respect to the first computing environment.
8. The system of claim 5 wherein the controller is further configured to controllably isolate the first computing environment from the controller.
9. The system of claim 5 wherein the first computing environment has access to an outside computer network.
10. The system of claim 9 wherein the controller is further configured to:
in response to the monitor operation, decide whether to isolate the first computing environment from the outside computer network; and
isolate the first computing network from the outside computer network in response to the action decision.
11. The system of claim 5 wherein the first computing environment is a production environment, and wherein the second computing environment is a development environment.
12. The system of claim 11 wherein the first computing environment is further configured to write live data to the second computing environment; and
wherein the second computing environment is testable using the live data.