Automatically inferring software-defined network policies from the observed workload in a computing environment

A system comprising:

• one or more processors;
• and
• one or more computer readable media storing instructions which, when executed by the one or more processors, cause the system to perform operations comprising:
• obtaining network path information between nodes of a network in which components of an application are executing on a node of the nodes;
• determining, based on the network path information, that network connecting information associated with an update of a component of the components complies with a first network policy;
• after determining that the network connecting information complies with the first network policy, generating a second network policy for the update of the component, wherein the second network policy is generated based on a version label associated with the update of the component;
• and
• deploying the update of the component and the second network policy to the node.

One or more non-transitory computer-readable media storing computer-readable instructions that, when executed by a processing system, cause a system to perform operations comprising:

• obtaining network path information between nodes of a network in which components of an application are executing on a node of the nodes;
• determining, based on the network path information, that network connecting information associated with an update of a component of the components complies with a first network policy;
• after determining that the network connecting information complies with the first network policy, generating a second network policy for the update of the component, wherein the second network policy is generated based on a version label associated with the update of the component;
• and
• deploying the update of the component and the second network policy to the node.