Architecture and services provided by a multi-cloud infrastructure
Techniques are described for providing a multi-cloud control plane (MCCP) in a first cloud infrastructure (included in a first cloud environment provided by a first cloud services provider) that enables services and/or resources provided in the first cloud infrastructure to be utilized by users of a second cloud environment, where the second cloud environment is different than the first cloud environment. The multi-cloud infrastructure enables a user associated with an account with a second cloud services provider to use, from the second cloud infrastructure, a first service from the set of one or more cloud services. The multi-cloud infrastructure creates a link between the account with the second cloud service provider and a tenancy created in the first cloud infrastructure for enabling using the first service by the user.
1. A method comprising:
receiving, by a multi-cloud infrastructure included in a first cloud environment, a request from a user associated with an account in a second cloud environment, the request requesting a signup of the user with respect to a service provided by the multi-cloud infrastructure, and including metadata information associated with the user;
responsive to determining, based on the metadata information, that a set of pre-requisite resources is not configured in the second cloud environment for the user, transmitting by the multi-cloud infrastructure, a notification to the user, the notification indicating that the set of pre-requisite resources is to be configured in the second cloud environment;
validating, by the multi-cloud infrastructure, the set of pre-requisite resources and a user setup configured in the second cloud environment; and
creating, by the multi-cloud infrastructure, a link resource object that includes information linking a tenancy of the user in the first cloud environment to the account of the user in the second cloud environment, the link resource object enabling the user to utilize the service provided by the multi-cloud infrastructure.
2. The method of claim 1 , wherein a first cloud infrastructure of the first cloud environment is provided by a first cloud services provider (CSP), and a second cloud infrastructure corresponding to the second cloud environment is provided by a second CSP that is different from the first CSP, the first cloud environment being different than the second cloud environment.
3. The method of claim 1 , wherein the metadata information included in the request includes an identifier of the account of the user in the second cloud environment or an email address of the user.
4. The method of claim 1 , wherein the set of pre-requisite resources includes a hierarchy of resources, each resource in the hierarchy of resources being associated with a respective role.
5. The method of claim 4 , wherein a hierarchy of roles associated with the hierarchy of resources includes a networking role, an observability role, and a validator role, and wherein
the networking role permits creation of a network link between the first cloud environment and the second cloud environment,
the observability role permits an observability module included in the multi-cloud infrastructure to publish data associated with resources deployed in the first cloud environment to the second cloud environment, and
the validator role permits a control plane of the multi-cloud infrastructure to perform user validation.
6. The method of claim 1 , wherein the user setup includes data corresponding to: (i) an identifier of a pool of users in the second cloud environment, and (ii) membership information indicating that the user is a member of the pool of users.
7. The method of claim 1 , further comprising:
obtaining, by the multi-cloud infrastructure, an access token from the second cloud environment in response to the user successfully configuring the set of pre-requisite resources in the second cloud environment; and
triggering, by the multi-cloud infrastructure, a cloud-link adaptor to execute the creating.
8. The method of claim 1 , wherein the request from the user is received by a signup API associated with a multi-cloud console of the multi-cloud infrastructure.
9. The method of claim 1 , further comprising:
creating, by the multi-cloud infrastructure, a network link that communicatively couples the tenancy of the user in the first cloud environment to the account of the user in the second cloud environment.
10. The method of claim 1 , wherein the service is one of: an Exa-database service, a shared-autonomous database service, a dedicated-autonomous database service, or a virtual machine database service.
11. One or more computer readable non-transitory media storing computer-executable instructions that, when executed by one or more processors, cause:
receiving, by a multi-cloud infrastructure included in a first cloud environment, a request from a user associated with an account in a second cloud environment, the request requesting a signup of the user with respect to a service provided by the multi-cloud infrastructure, and including metadata information associated with the user;
responsive to determining, based on the metadata information, that a set of pre-requisite resources is not configured in the second cloud environment for the user, transmitting by the multi-cloud infrastructure, a notification to the user, the notification indicating that the set of pre-requisite resources is to be configured in the second cloud environment;
validating, by the multi-cloud infrastructure, the set of pre-requisite resources and a user setup configured in the second cloud environment; and
creating, by the multi-cloud infrastructure, a link resource object that includes information linking a tenancy of the user in the first cloud environment to the account of the user in the second cloud environment, the link resource object enabling the user to utilize the service provided by the multi-cloud infrastructure.
12. The one or more computer readable non-transitory media storing computer-executable instructions of claim 11 , wherein a first cloud infrastructure of the first cloud environment is provided by a first cloud services provider (CSP), and a second cloud infrastructure corresponding to the second cloud environment is provided by a second CSP that is different from the first CSP, the first cloud environment being different than the second cloud environment.
13. The one or more computer readable non-transitory media storing computer-executable instructions of claim 11 , wherein the metadata information included in the request includes an identifier of the account of the user in the second cloud environment or an email address of the user.
14. The one or more computer readable non-transitory media storing computer-executable instructions of claim 11 , wherein the set of pre-requisite resources includes a hierarchy of resources, each resource in the hierarchy of resources being associated with a respective role.
15. The one or more computer readable non-transitory media storing computer-executable instructions of claim 14 , wherein a hierarchy of roles associated with the hierarchy of resources includes a networking role, an observability role, and a validator role, and wherein
the networking role permits creation of a network link between the first cloud environment and the second cloud environment,
the observability role permits an observability module included in the multi-cloud infrastructure to publish data associated with resources deployed in the first cloud environment to the second cloud environment, and
the validator role permits a control plane of the multi-cloud infrastructure to perform user validation.
16. The one or more computer readable non-transitory media storing computer-executable instructions of claim 11 , wherein the user setup includes data corresponding to: (i) an identifier of a pool of users in the second cloud environment, and (ii) membership information indicating that the user is a member of the pool of users.
17. The one or more computer readable non-transitory media storing computer-executable instructions of claim 11 , further comprising:
obtaining, by the multi-cloud infrastructure, an access token from the second cloud environment in response to the user successfully configuring the set of pre-requisite resources in the second cloud environment; and
triggering, by the multi-cloud infrastructure, a cloud-link adaptor to execute the creating.
18. The one or more computer readable non-transitory media storing computer-executable instructions of claim 11 , wherein the request from the user is received by a signup API associated with a multi-cloud console of the multi-cloud infrastructure.
19. The one or more computer readable non-transitory media storing computer-executable instructions of claim 11 , further comprising:
creating, by the multi-cloud infrastructure, a network link that communicatively couples the tenancy of the user in the first cloud environment to the account of the user in the second cloud environment.
20. A computing device comprising:
one or more processors; and
a memory including instructions that, when executed with the one or more processors, cause the computing device to, at least:
receive, by a multi-cloud infrastructure included in a first cloud environment, a request from a user associated with an account in a second cloud environment, the request requesting a signup of the user with respect to a service provided by the multi-cloud infrastructure, and including metadata information associated with the user;
responsive to determining, based on the metadata information, that a set of pre-requisite resources is not configured in the second cloud environment for the user, transmit by the multi-cloud infrastructure, a notification to the user, the notification indicating that the set of pre-requisite resources is to be configured in the second cloud environment;
validate, by the multi-cloud infrastructure, the set of pre-requisite resources and a user setup configured in the second cloud environment; and
create, by the multi-cloud infrastructure, a link resource object that includes information linking a tenancy of the user in the first cloud environment to the account of the user in the second cloud environment, the link resource object enabling the user to utilize the service provided by the multi-cloud infrastructure.