Managing operator pattern service connections to an environment
A method determining whether the operator pattern service has permission to perform an operation on a state of a computing environment. The method further includes in response to determining that the operator pattern service has permission to perform the operation, providing the request to the computing environment for the operation to be performed on the computing environment.
1. A method comprising:
determining, by a processing device, whether a software has permission to perform an operation on a state of a computing environment; and
in response to determining that the software has permission to perform the operation, providing, by the processing device, a request to the computing environment for the operation to be performed on the state of the computing environment.
2. The method of claim 1 , wherein the computing environment comprises a virtualized execution environment.
3. The method of claim 1 , further comprising:
in response to determining that the software does not have permission to perform the operation on the computing environment, blocking the request from being provided to the computing environment.
4. The method of claim 1 , wherein the request comprises a type of the operation and an identifier of the software.
5. The method of claim 4 , wherein determining whether the software has permission to perform the operation on the computer environment comprises:
retrieving access permissions associated with the software operator pattern service in view of the identifier of the software; and
determining whether the access permissions allow the software to perform the operation on the computing environment.
6. The method of claim 5 , wherein the access permissions are retrieved from a data store associated with the processing device in view of the identifier, the data store comprising a mapping of the identifier of the software to the access permissions.
7. The method of claim 5 , further comprising:
receiving, from a service client, a modification to the access permissions associated with the software; and
updating the access permissions associated with the software in view of the modification received from the service client.
8. A system comprising:
a memory; and
a processing device operatively coupled to the memory, the processing device to:
determine whether a software has permission to perform an operation on a state of a computing environment; and
in response to determining that the software has permission to perform the operation, provide a request to the computing environment for the operation to be performed on the state of the computing environment.
9. The system of claim 8 , wherein the computing environment comprises a virtualized execution environment.
10. The system of claim 8 , wherein the processing device is further to:
in response to determining that the software does not have permission to perform the operation on the computing environment, block the request from being provided to the computing environment.
11. The system of claim 8 , wherein the request comprises a type of the operation and an identifier of the software.
12. The system of claim 11 , wherein to determine whether the software has permission to perform the operation on the computer environment the processing device is to:
retrieve access permissions associated with the software in view of the identifier of the software; and
determine whether the access permissions allow the software to perform the operation on the computing environment.
13. The system of claim 12 , wherein the access permissions are retrieved from a data store associated with the processing device in view of the identifier, the data store comprising a mapping of the identifier of the software to the access permissions.
14. The system of claim 12 , wherein the processing device is further to:
receive, from a service client, a modification to the access permissions associated with the software; and
update the access permissions associated with the software in view of the modification received from the service client.
15. A non-transitory computer-readable storage medium including instructions that, when executed by a processing device, cause the processing device to:
receive, from an operator pattern service, a request to perform an operation on a state of a computing environment;
detect a conflict between the request from the operator pattern service and another request from another operator pattern service; and
disable a connection between the operator pattern service and the computing environment to avoid the conflict.
16. The non-transitory computer-readable storage medium of claim 15 , wherein the computing environment comprises a virtualized execution environment.
17. The non-transitory computer-readable storage medium of claim 15 , wherein the processing device is further to:
in response to determining that the operator pattern service does not have permission to perform the operation, block a request for performing the operation from being provided to the computing environment.
18. The non-transitory computer-readable storage medium of claim 17 , wherein the request comprises a type of the operation and an identifier of the operator pattern service.
19. The non-transitory computer-readable storage medium of claim 15 , wherein the operator pattern service is configured to manage operation of the computing environment.
20. The non-transitory computer-readable storage medium of claim 18 , wherein access permissions are retrieved from a data store associated with the processing device in view of the identifier, the data store comprising a mapping of the identifier of the operator pattern service to the access permissions.