Systems, methods, and computer readable media for intelligent mutating admission webhook

A system, comprising:

• a server, comprising a processor, for running an intelligent webhook comprising a configurator to define webhook operating parameters of the intelligent webhook, wherein the webhook operating parameters are included in a webhook configuration file, and an orchestration service operative to selectively instrument at least one container of a plurality of containers associated with an application being deployed by the orchestration service and being executed on a customer computer system;
• wherein the orchestration service is operative to:
• determine whether a first container of the plurality of containers should be mutated;
• in response to a determination to mutate the first container:
• select a first mutation from a plurality of mutations to be applied to the first container:
• mutate the first container based on the first mutation to provide a first mutated container, wherein the first mutated container comprises monitoring code that is the first program to be executed in the first mutated container;
• admit the first mutated container to be used conjunction with the application;
• and
• wherein the intelligent webhook further comprises a monitoring code controller operative to:
• monitor telemetry information related to the operation of the first mutated container during startup and throughout operation thereof if the first mutated container does not crash;
• detect that the first mutated container crashed on startup;
• instruct monitoring code controller to install a second mutation into the first container to provide a second mutated container for admission by the orchestration service;
• and
• admit the second mutated container to be used in conjunction with the application.

A system, comprising:

• a first server comprising a first processor to run a telemetry interception and analysis platform (TIAP) comprising an event service operative to receive telemetry events from a TIAP runtime being executed on a customer computer system in conjunction with an application being executed on the customer computer system, wherein the application is associated with a plurality of containers that are potentially deployed during execution of the application;
• and
• a second server comprising a second processor to run an intelligent webhook comprising an orchestration service operative to selectively instrument at least one container of a plurality of containers with monitoring code being deployed by the application;
• wherein the orchestration service is operative to:
• retrieve webhook operating parameters of the intelligent webhook from the TIAP, wherein the webhook operating parameters are included in a webhook configuration file;
• selectively mutate a subset of containers from the plurality of containers based on the webhook configuration file, wherein each mutated container comprises monitoring code that enables the intelligent webhook to obtain telemetry data related to operation of the mutated container;
• admit the mutated containers for deployment in conjunction with the application;
• and
• store telemetry data obtained from the mutated containers during startup and operation thereof;
• wherein the intelligent webhook further comprises a monitoring code controller operative to:
• detect that a first mutated container crashed on startup, wherein the first mutated container originated as a first container;
• instruct monitoring code controller to install a second mutation into the first container to provide a second mutated container for admission by the orchestration service;
• and
• admit the second mutated container to be used in conjunction with the application.

A system, comprising:

• a first server comprising a first processor to run a telemetry interception and analysis platform (TIAP) comprising an event service operative to receive telemetry events from a TIAP runtime being executed on a customer computer system in conjunction with an application being executed on the customer computer system, wherein the application is associated with a plurality of containers that are potentially deployed during execution of the application;
• and
• a second server comprising a second processor to run an intelligent webhook comprising an orchestration service operative to selectively instrument at least one container of a plurality of containers with monitoring code being deployed by the application;
• wherein the orchestration service is operative to:
• retrieve webhook operating parameters of the intelligent webhook from the TIAP, wherein the webhook operating parameters are included in a webhook configuration file;
• selectively mutate a subset of containers from the plurality of containers based on the webhook configuration file, wherein each mutated container comprises monitoring code that enables the intelligent webhook to obtain telemetry data related to operation of the mutated container;
• admit the mutated containers for deployment in conjunction with the application;
• and
• store telemetry data obtained from the mutated containers during startup and operation thereof;
• wherein the intelligent webhook further comprises a monitoring code controller operative to:
• detect that a first mutated container crashed on startup;
• instruct a resource allocation controller to alter resource constraints, wherein the resource allocation controller instructs the orchestration service to increase resources by a fixed quantity;
• and
• re-admit the first mutated container after the resource allocation has been increased by the fixed quantity.