Controlled updates of containers in a distributed application deployment environment
System and methods are described for implementing controlled updates of containers in a distributed application deployment environment. In one implementation, a method comprises: receiving a request to update a target container of a plurality of containers within a deployed computing unit; identifying an updated configuration object to be applied to the target container based on the request; receiving or computing a health indicator representative of performance of the deployed computing unit or other containers to which the updated configuration object has been applied; and assigning the updated configuration object to the target container based on the health indicator.
1. A method, comprising:
receiving, by a computer system, a request to update a container of a particular type that is included in a plurality of computing units deployed in a distributed environment, wherein the container was deployed in accordance with a current configuration defining a first version of the container and the request identifies an updated configuration defining a second version of the container, and wherein the plurality of computing units includes different sets of computing units corresponding to different tenants associated with the distributed environment;
assigning, by the computer system, the updated configuration to a first set of computing units associated with a first one of the different tenants such that, for a subsequent deployment of the first set of computing units, the container is deployed in the first set of computing units in accordance with the updated configuration;
determining, by the computer system, a health indicator representative of performance of the container in one or more computing units to which the updated configuration has already been assigned; and
based on the health indicator indicating that the container in the one or more computing units is functional, the computer system assigning the updated configuration to a second set of computing units associated with a second one of the different tenants.
2. The method of claim 1 , wherein the first and second tenants are associated with different namespaces, and wherein the assigning of the updated configuration to the first set of computing units associated with the first tenant includes:
removing, from the current configuration, a reference label to a namespace associated with the first tenant; and
adding the reference label to the updated configuration.
3. The method of claim 1 , further comprising:
after the assigning of the updated configuration to the first set of computing units, the computer system causing termination of the first set of computing units to trigger the subsequent deployment of the first set of computing units in association with the updated configuration.
4. The method of claim 3 , further comprising:
receiving, by the computer system from the first tenant, an indication that designates one of the first set of computing units as a canary computing unit to update first relative to remaining ones of the first set of computing units, wherein the causing of the termination of the first set of computing units includes:
causing termination of the canary computing unit of the first set; and
causing termination of the remaining computing units of the first set in response to determining that a subsequent deployment of the canary computing unit is functional.
5. The method of claim 1 , wherein the health indicator is based on an availability of a set of services provided by the one or more computing units, and wherein the second set of computing units also provides the set of services.
6. The method of claim 1 , wherein the request to update the container is received from a first entity that maintains the container, and wherein the first entity is different than a second entity that requested deployment of the plurality of computing units and that maintains a main application container included in the plurality of computing units.
7. The method of claim 1 , wherein the container is a sidecar container, and wherein the updated configuration is assigned to a given one of the second set of computing units associated with the second tenant without requiring that an update is applied to a main application container included in the given computing unit.
8. The method of claim 1 , wherein the assigning of the updated configuration to the second set of computing units is in response to a detection that the second set of computing units have terminated.
9. A non-transitory computer-readable medium having program instructions stored thereon that are capable of causing a computer system to perform operations comprising:
receiving a request to update a container of a particular type that is included in a plurality of computing units deployed in a distributed environment, wherein the container was deployed in accordance with a current configuration defining a first version of the container and the request identifies an updated configuration defining a second version of the container, and wherein the plurality of computing units includes different sets of computing units corresponding to different tenants associated with the distributed environment;
assigning the updated configuration to a first set of computing units associated with a first one of the different tenants such that, for a subsequent deployment of the first set of computing units, the container is deployed in the first set of computing units in accordance with the updated configuration;
determining a health indicator representative of performance of one or more computing units to which the updated configuration has already been assigned; and
responsive to a determination that the health indicator satisfies a threshold condition, assigning the updated configuration to a second set of computing units associated with a second one of the different tenants.
10. The non-transitory computer-readable medium of claim 9 , wherein the health indicator is based on an availability of Uniform Resource Locator (URL) links that are associated with the one or more computing units.
11. The non-transitory computer-readable medium of claim 9 , wherein the health indicator is determined as a ratio of unavailable services associated with the one or more computing units to a total number of services associated with the one or more computing units.
12. The non-transitory computer-readable medium of claim 9 , wherein the assigning of the updated configuration to the first set of computing units associated with the first tenant includes:
removing, from the current configuration, a reference label to a namespace associated with the first tenant; and
adding the reference label to the updated configuration.
13. The non-transitory computer-readable medium of claim 9 , wherein the operations further comprise:
after the assigning of the updated configuration to the first set of computing units, causing termination of the first set of computing units to trigger the subsequent deployment of the first set of computing units in association with the updated configuration.
14. The non-transitory computer-readable medium of claim 13 , wherein the operations further comprise:
receiving, from the first tenant, an indication that designates one of the first set of computing units as a canary computing unit to update first relative to remaining ones of the first set of computing units, wherein the causing of the termination of the first set of computing units includes:
causing termination of the canary computing unit of the first set; and
causing termination of the remaining computing units of the first set in response to determining that a subsequent deployment of the canary computing unit is functional.
15. A system, comprising:
at least one processor; and
a memory having program instructions stored thereon that are executable by the at least one processor to cause the system to perform operations comprising:
receiving a request to update a container of a particular type that is included in a plurality of computing units deployed in a distributed environment, wherein the container was deployed in accordance with a current configuration defining a first version of the container and the request identifies an updated configuration defining a second version of the container, and wherein the plurality of computing units includes different sets of computing units corresponding to different tenants associated with the distributed environment;
assigning the updated configuration to a first set of computing units associated with a first one of the different tenants such that, for a subsequent deployment of the first set of computing units, the container is deployed in the first set of computing units in accordance with the updated configuration;
determining a health indicator representative of performance of the container in one or more computing units to which the updated configuration has already been assigned; and
based on the health indicator indicating that the container in the one or more computing units is functional, assigning the updated configuration to a second set of computing units associated with a second one of the different tenants.
16. The system of claim 15 , wherein the health indicator is determined as a time series that indicates, over time, an availability of Uniform Resource Locator links associated with the one or more computing units.
17. The system of claim 15 , wherein the first and second tenants are associated with different namespaces, and wherein the assigning of the updated configuration to the first set of computing units associated with the first tenant includes:
removing, from the current configuration, a reference label to a namespace associated with the first tenant; and
adding the reference label to the updated configuration.
18. The system of claim 15 , wherein the operations further comprise:
terminating the first set of computing units to trigger the subsequent deployment of the first set of computing units in association with the updated configuration.
19. The system of claim 18 , wherein the terminating of the first set of computing units includes:
terminating a particular one of the first set of computing units; and
terminating remaining computing units of the first set in response to determining that a subsequent deployment of the particular computing unit is functional.
20. The system of claim 15 , wherein the assigning of the updated configuration to the second set of computing units is subsequent to a termination of the second set of computing units.