Decomposing installation of distributed services

In a network computing environment including distributed services providing services and resources to clients in the network computing environment, a method of establishing a distributed service in the network computing environment, the method comprising:

• a processor executing the steps of:
• installing a data store on a computer system, the data store comprising services to establish the a new distributed service;
• consulting an established distributed service on the network to discover updates available for the data store;
• adding a potential distributed services entry to a configuration registry of an existing distributed service, the potential distributed services entry allowing any existing distributed services in the distributed network to be affected by local installations of the new distributed service, the configuration registry including an authorization level that controls what the existing distributed service has authorization to do on the distributed network, the potential distributed services entry including resource information specifying resources on the distributed network available to the new distributed service and permissions specifying the new distributed service's ability to access the available resources on the distributed network, wherein the potential distributed service entry is established independent of installing the data store on the computer system;
• referencing the resource information and permissions in the potential distributed service entry to determine that the potential distributed service entry identifies the new distributed service as a distributed service that is authorized to be globally installed on the distributed network regardless of whether or not the new distributed service is installed locally;
• using the resource information, attempting to contact the identified new distributed service corresponding to the potential distributed service entry;
• verifying that permissions of the new distributed service match permissions of the potential distributed service entry;
• and
• receiving updates to the data store according to the permissions specified in the potential distributed service entry, such that any existing distributed services in the distributed network are unaffected by local updates of the new distributed service.

A computer system comprising the following:

• one or more processors;
• system memory;
• one or more computer-readable storage media having stored thereon computer-executable instructions that, when executed by the one or more processors, causes the computing system to perform a method of communicating with a distributed service in the network computing environment, the method comprising the following:
• receiving an indication that a new distributed service is to be globally installed on a distributed network, the distributed network comprising at least one existing distributed service;
• adding a potential distributed services entry to a configuration registry of the existing distributed service, the potential distributed services entry allowing any existing distributed services in the distributed network to be unaffected by local installations of the new distributed service, the configuration registry including an authorization level that controls what the existing distributed service has authorization to do on the distributed network, the potential distributed services entry including resource information specifying resources on the distributed network available to the new distributed service and permissions specifying the new distributed service's ability to access the available resources on the distributed network;
• referencing the resource information and permissions in the potential distributed service entry to determine that the potential distributed service entry identifies the new distributed service as a distributed service that is authorized to be globally installed on the distributed network regardless of whether or not the new distributed service is installed locally;
• using the resource information, attempting to contact the identified new distributed service corresponding to the potential distributed service entry;
• verifying that permissions of the new distributed service match permissions of the potential distributed service entry;
• installing the new distributed service globally on the distributed network, such that any existing distributed services in the distributed network are unaffected by local installations of the new distributed service;
• creating backup image of at least a portion of data corresponding to the new distributed service, wherein a master key that provides access to one or more portions of secret data is removed from the data prior to creating the backup image;
• and
• transferring the data to a different distributed service in the distributed network, such that the backup image can be restored on the different distributed service and at least the non-secret data is made accessible by the different distributed service.