Apparatus and method for automated policy management for deploying applications

A non-transitory computer-readable recording medium having recorded thereon instructions executable by at least one processor to perform a method for automated management of policies related to deployment of applications to an application platform, the method comprising:

• establishing a plurality of policies each to define a requirement and an automated response;
• establishing a plurality of application groups each defined according to an rule to determine whether an application is contained in the application group;
• establishing a plurality of policy groups each according to a set of included policies and a set of assigned application groups, each policy in the set of included policies being selected from the plurality of policies, each application group in the set of assigned application groups being selected from the plurality of application groups, the establishing of each policy group including automatically generating, by a processor, a configuration file for the policy group associating each application group in the set of assigned application groups with each policy in the set of included policies;
• automatically configuring the application platform, by a processor, according to the configuration file for each of the plurality of policy groups, such that an admission controller of the application platform:
• selectively tests an application designated for deployment to the application platform, based on containment of the application within an application group, to determine whether it meets the requirement of each policy associated with the application group in the configuration file, and
• selectively executes the automated response for a policy based on a failure of the application to fulfill the requirement upon testing.

A system for automated management of policies related to deployment of applications to an application platform, the system comprising:

• at least one communication module configured to transmit and receive a signal;
• at least one memory configured to store computer program code;
• and
• at least one processor operatively connected to the communication module and the memory, the processor being configured to operate as instructed by the computer program code, the computer program code including:
• policy code configured to cause the processor to establish a plurality of policies each to define a requirement and an automated response;
• application group code configured to cause the processor to establish a plurality of application groups each defined according to an rule to determine whether an application is contained in the application group;
• policy group code configured to cause the processor to establish a plurality of policy groups each according to a set of included policies and a set of assigned application groups, each policy in the set of included policies being selected from the plurality of policies, each application group in the set of assigned application groups being selected from the plurality of application groups, the establishing of each policy group including automatically generating, by a processor, a configuration file for the policy group associating each application group in the set of assigned application groups with each policy in the set of included policies;
• configuration code configured to cause the processor to automatically configure the application platform according to the configuration file for each of the plurality of policy groups, such that an admission controller of the application platform:
• selectively tests an application designated for deployment to the application platform, based on containment of the application within an application group, to determine whether it meets the requirement of each policy associated with the application group in the configuration file, and
• selectively executes the automated response for a policy based on a failure of the application to fulfill the requirement upon testing.