Cloud service cluster management method and system

Abstract

The invention belongs to the technical field of cloud computing, and discloses a cloud service cluster management method and system. The method comprises the following steps: a platform authenticationserver and cluster authentication servers of clusters generate authentication keys according to a preset key generation mode; when receiving a cluster management command for a target cluster, a cloudmanagement platform sends an authentication information acquisition request to the platform authentication server, so that the platform authentication server can generate authentication information according to the corresponding authentication key and feed the authentication information back to the cloud management platform; the cloud management platform sends a cluster management request with the authentication information to a target management server of the target cluster; the target management server sends the authentication information to a target cluster authentication server of the target cluster, so that the target cluster authentication server can authenticate the authentication information according to the corresponding authentication key; and if authentication is successful, the target management server executes the cluster management request. The method and system provided by the invention has the advantage that the authentication service safety can be improved.

Description

Technical field [0001] The present invention relates to the technical field of cloud computing, in particular to a method and system for managing cloud service clusters. Background technique [0002] Openstack is a software development tool for cloud computing. Cloud service providers can use Openstack to build a cloud management platform. Customers who purchase cloud services can manage multiple virtualized cloud service clusters through the cloud management platform. Both the cloud management platform and the cloud service cluster are equipped with an authentication server, and the authentication server can use the Keystone component configured on it to provide authentication services for the cloud management platform and cloud service cluster. [0003] The authentication server of the cloud management platform (may be referred to as a platform authentication server) can generate and store an authentication key for the authentication service in advance, and send the authenticatio...

AI Technical Summary

Problems solved by technology

[0005] After the cloud management platform generates the authentication key, it needs to distribute it to each cloud service cluster through the network. During the process of distributing the authentication key on the network, the authentication key is easily intercepted and tampered with by others, resulting in low security of the authentication service.

Moreover, the authentication key sent by the cloud management platform to a cloud service cluster can only perform authentication services between the cloud management platform and the cloud service cluster, resulting in mutual authentication between different cloud service clusters.

Images