Provenance audit trails for microservices architectures

A method comprising:

• obtaining, by one or more processors hosting a microservice of a service hosted in a datacenter, provenance metadata for the microservice from a local blockchain of provenance metadata maintained for the hardware resource executing a task performed by the microservice, the provenance metadata comprising identification of the microservice, operating state of at least one of a hardware resource or a software resource used to execute the microservice and the task, and an operating state of a sidecar of the microservice during the task;
• accessing one or more policies established for the microservice;
• analyzing the provenance metadata with respect to the one or more policies to identify if there is a violation of the one or more policies;
• and
• generating one or more evaluation metrics based on whether the violation of the one or more policies is identified.

A system comprising:

• A memory;
• and
• A processing device to execute a hypervisor hosting a microservice container, wherein the microservice container is execute a microservice of a service and is to:
• obtain provenance metadata for the microservice from a local blockchain of provenance metadata maintained for the hardware resource executing a task performed by the microservice, the provenance metadata comprising identification of the microservice, operating state of at least one of a hardware resource or a software resource used to execute the microservice and the task, and an operating state of a sidecar of the microservice during the task;
• access one or more policies established for the microservice;
• analyze the provenance metadata with respect to the one or more policies to identify if there is a violation of the one or more policies;
• and
• generate one or more evaluation metrics based on whether the violation of the one or more policies is identified.