Microservice Patch Orchestration Across Multi-Cloud Platforms
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In cloud-based computing environments, managing software patches for microservices across multiple cloud providers is complex and lacks a central management tool, leading to inefficiencies and potential security vulnerabilities.
Innovation Solution
A system and method for orchestrating patching of microservices across different cloud platforms, utilizing a microservice patch orchestrator to detect and centrally manage the installation of patches, independent of application code, using machine learning for decision-making and automation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If independent patch management per cloud provider is used, then each cloud provider can install patches at their own platform level, but the complexity of managing patches across multiple cloud providers increases
Solution Approach 1:
The patent introduces a central management tool that acts as an intermediary between the user and multiple cloud providers. This tool automatically detects available patches across different cloud platforms and orchestrates their installation, eliminating the need for users to manually manage patches for each cloud provider independently. The intermediary system handles the complexity of multi-cloud patch coordination while maintaining cloud provider independence.
2Ease of operation
If manual patch installation is performed, then users have control over the patching process, but manual errors increase and efficiency decreases
Solution Approach 1:
The patent implements a self-service patch management system where the central management tool automatically detects available patches, determines their applicability, and orchestrates their installation across microservices. The system performs patch management autonomously without requiring manual user intervention for each step, thereby eliminating manual errors and significantly improving patching efficiency while still allowing users to control high-level parameters.
Solution Approach 2:
The system continuously monitors the production environment to detect available patches and tracks the installation status of patches across different cloud platforms. This feedback mechanism enables the system to adapt to changing conditions and ensure successful patch deployment, improving both efficiency and reliability of the patching process.
3Reliability
If patch installation is delayed, then system stability is maintained, but security vulnerabilities remain unaddressed
Solution Approach 1:
The patent implements preliminary actions by automatically detecting available patches and preparing installation plans before actually deploying them. The system evaluates patch availability, determines the impact on system stability, and creates staged installation plans that can be executed when appropriate. This preliminary assessment allows the system to maintain stability while proactively addressing security vulnerabilities without delay.
Solution Approach 2:
The system dynamically adjusts patch installation timing and strategy based on real-time monitoring of system stability and vulnerability severity. When critical security patches are detected, the system can accelerate their deployment; when non-critical patches are detected, it can schedule them during optimal maintenance windows. This dynamic approach balances stability and security requirements flexibly.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
As described herein, a system, method, and computer program are provided orchestrating patching of microservices. A plurality of microservice patches are detected, the plurality of microservice patches made available for a plurality of different cloud platforms each provided by a different cloud provider of a plurality of cloud providers. Further, installation of the plurality of microservice patches in a running production system is centrally managed.