hashicorp/ottoArchived
Otto
Otto 是一个混合云编排平台，旨在通过基础设施即代码（IaC）在不同的云环境中配置基础设施并部署应用工作负载。它作为一个 IaC 配置工具，通过策略驱动的工作流实现一致性资源的自动化部署。
该项目包含一个用于管理服务发现和应用间安全通信的混合云服务网格，以及一个用于管理密钥和实施细粒度访问控制的基于身份的访问控制器。它还具备一个基础设施知识图谱，能够映射混合云资产，从而可视化依赖关系并识别运营修复机会。
该平台涵盖了广泛的功能领域，包括微服务和单体应用的自动化交付、混合云基础设施配置，以及通过身份感知代理实现的安全网络访问。此外，它还提供了管理机器镜像和在不同环境中编排工作负载伸缩的工具。
Features
- Cloud Provisioning - Provisions cloud infrastructure using infrastructure as code to ensure consistency and policy enforcement.
- Hybrid Cloud Infrastructure - Provisions and manages consistent resources across multiple cloud environments and on-premises data centers using infrastructure as code.
- Infrastructure as Code - Uses programmable configuration files to provision and enforce policy across multiple cloud environments.
- Hybrid Cloud Provisioning - Automates the deployment and policy enforcement of hybrid cloud resources using infrastructure as code.
- Cloud Infrastructure Automation - Automates the provisioning of cloud resources using policy-driven infrastructure as code workflows.
- Cross-Infrastructure Provisioning - Deploys clusters consistently across diverse environments including public clouds, private clouds, and bare metal.
- Application Delivery Workflows - Automates the delivery of microservices and monolithic applications through self-service workflows and containerization.
- Hybrid Cloud Orchestration Platforms - Provides a centralized platform for provisioning infrastructure and deploying application workloads across diverse cloud environments.
- Infrastructure as Code Tools - Automates the deployment of consistent hybrid cloud resources through policy-driven infrastructure as code workflows.
- Automated Workload Deployments - Automates the deployment and scaling of application workloads across diverse cloud environments.
- Workload Orchestration - Schedules and deploys applications across clusters to ensure high availability and scalability.
- Hybrid Service Networking - Connects networked services across diverse environments using service discovery and secure routing.
- Service Mesh Networking - Manages service discovery and secure communication between distributed applications across multiple cloud environments.
- Identity and Access Management - Governs user roles and granular access permissions through identity-based controls and secrets management.
- Identity-Aware Proxies - Provides secure access to private infrastructure through identity-aware proxying without requiring a traditional VPN.
- Identity-Based Access Control - Secures hybrid cloud environments using identity-based access controls and centralized secrets management.
- Identity-Aware Proxies - Provides secure, identity-aware access to private infrastructure and services without requiring traditional VPNs.
- Security and Access Control - Enforces granular user permissions and security controls to protect cloud environments and secrets.
- Secret Access Policies - Implements secret access policies using identity-based management to protect sensitive data.
- Infrastructure Knowledge Graphs - Visualizes the hybrid estate and automates remediation using a centralized event-driven knowledge graph.
- Infrastructure Knowledge Graphs - Visualizes hybrid estates using a knowledge graph to identify dependencies and automate operational remediation.
- Infrastructure Topology Graphs - Maps infrastructure dependencies into a centralized graph to visualize topology and automate operational remediation.
- Application Deployment Tools - Uses standardized tooling to package and deploy microservices or monolithic applications to target environments.
- Multi-Cloud Application Delivery - Provides standardized delivery models for deploying applications across hybrid and multi-cloud environments.
- Cloud Image Pipelines - Provides automated workflows for building and distributing consistent base machine images for cloud platforms.
- Automated Multi-Cloud Deliveries - Automates application delivery across multi-cloud and hybrid environments using self-service tools.
- Infrastructure Dependency Visualizations - Provides graphical mapping of dependencies and network connections between infrastructure components.
- Infrastructure Topology Mapping - Provides logical and visual representations of cloud services and network links to identify remediation opportunities.
- Infrastructure Orchestration Tools - Automates the installation and management of infrastructure tools for server launching and service configuration.
- Self-Service Workflows - Uses automated guardrails and standardized tooling to deploy applications across diverse hybrid cloud environments.
- Virtual Machine Image Packaging - Creates and distributes pre-configured virtual machine disk images to ensure uniform configurations.
- Image Management - Orchestrates workloads and creates consistent golden images across development and production environments.
- Secure Remote Access - Provides identity-aware proxying for secure connectivity to private resources without public internet exposure.
- Virtual Machine Image Construction - Builds consistent golden bootable disk images and runner scripts for virtual machines across cloud platforms.
- Cloud Security Posture Management - Manages the security posture of hybrid cloud accounts using identity-based controls and secrets management.
- Hybrid Estate Visualizations - Maps diverse cloud environments into a centralized knowledge graph for operational streamlining.
