Implementing a topology lock for a plurality of dynamically deployed components
A computer system pulls observability data (metrics, logs, events, alerts, inventory) for a plurality of components from remote servers, which may be part of a cloud computing platform. The components may be application instances, containers, storage volumes, pods, or other components. The computer system derives a utilization metric for each components and each of one or more types of computing resources: compute, memory, and storage. The utilization metrics are compared to available inventory of computing resources to obtain an active and available inventory (AAI). Components may be redeployed and allocated computing resources reduced based on the AAI. Components may be grouped in clusters and components may be consolidated to a reduced number of clusters based on the AAI. A topology may be generated to represent components and relationships between components. Changes to the topology may be monitored to implement a topology lock.
1 . A method comprising:
processing, by a computer system, first log data from one or more remote hosts to obtain a first topology of a plurality of components executing in a network environment, the first topology including nodes representing the plurality of components and edges representing relationships between pairs of components of the plurality of components;
processing, by the computer system, second log data received subsequent to the first log data to obtain a second topology of the plurality of components;
comparing, by the computer system, the first topology and the second topology with respect to a topology lock, the topology lock including one or more limitations, each limitation specifying a prohibition of change or a limit to a rate of change for one of (a) a number of components of the plurality of components having a component type (b) a number of relationships of the relationships between the pairs of components of the plurality of components having a relationship type; and
if one or more differences between the first topology and the second topology violate the topology lock, implementing, by the computer system, a topology policy corresponding to the topology lock.
2 . The method of claim 1 , wherein implementing the topology policy comprises generating an alert.
3 . The method of claim 1 , wherein implementing the topology policy comprises reversing the one or more differences.
4 . The method of claim 3 , wherein reversing the one or more differences comprises deleting one or more components of the plurality of components.
5 . The method of claim 3 , wherein reversing the one or more differences comprises instantiating one or more components to include in the plurality of components.
6 . The method of claim 1 , further comprising, retrieving the first log data and the second log data without use of an agent executing on the one or more remote hosts.
7 . The method of claim 1 , wherein the relationships include at least one of hosting relationships, environmental variable relationships, network relationships, session relationships, access relationships, and network connection relationships.
8 . The method of claim 1 , wherein each component of the plurality of components includes at least one of a cluster, a pod, a container, a storage volume, or an application instance.
9 . The method of claim 1 , wherein implementing the topology policy corresponding to the topology lock comprises:
invoking display of a visual representation of the second topology on a display device, the visual representation illustrating the one or more differences between the first topology and the second topology.
10 . The method of claim 1 , wherein the one or more remote hosts are part of a cloud computing platform.
11 . An apparatus comprising:
a computing device including one or more processing devices and one or more memory devices operably coupled to the one or more processing devices, the one or more memory devices storing executable code that, when executed by the one or more processing devices, causes the one or more processing devices to:
process first log data from one or more remote hosts to obtain a first topology of a plurality of components executing in a network environment, the first topology including nodes representing the plurality of components and edges representing relationships between pairs of components of the plurality of components;
process second log data received subsequent to the first log data to obtain a second topology of the plurality of components;
compare the first topology and the second topology with respect to a topology lock, the topology lock including one or more limitations, each limitation specifying a prohibition of change or a limit to a rate of change for one of (a) a number of components of the plurality of components having a component type (b) a number of relationships of the relationships between the pairs of components of the plurality of components having a relationship type; and
if one or more differences between the first topology and the second topology violate the topology lock, implement a topology policy corresponding to the topology lock.
12 . The apparatus of claim 11 , wherein the executable code, when executed by the one or more processing devices, further causes the one or more processing devices to implement the topology policy by generating an alert.
13 . The apparatus of claim 11 , wherein the executable code, when executed by the one or more processing devices, further causes the one or more processing devices to implement the topology policy by reversing the one or more differences.
14 . The apparatus of claim 13 , wherein reversing the one or more differences comprises deleting one or more components of the plurality of components.
15 . The apparatus of claim 13 , wherein reversing the one or more differences comprises instantiating one or more components to include in the plurality of components.
16 . The apparatus of claim 11 , wherein the executable code, when executed by the one or more processing devices, further causes the one or more processing devices to:
retrieve the first log data and the second log data without use of an agent executing on the one or more remote hosts.
17 . The apparatus of claim 11 , wherein the relationships include at least one of hosting relationships, environmental variable relationships, network relationships, session relationships, access relationships, and network connection relationships.
18 . The apparatus of claim 11 , wherein each component of the plurality of components includes at least one of a cluster, a pod, a container, a storage volume, or an application instance.
19 . The apparatus of claim 11 , wherein the executable code, when executed by the one or more processing devices, further causes the one or more processing devices to implement the topology policy corresponding to the topology lock by:
invoking display of a visual representation of the second topology on a display device, the visual representation illustrating the one or more differences between the first topology and the second topology.
20 . The apparatus of claim 11 , wherein the one or more remote hosts are part of a cloud computing platform.