Operation response method, apparatus, device, and storage medium

Abstract

The present disclosure provides an operation response method, device, equipment and storage medium, which can be applied to the technical field of big data security. The method comprises: in response to detecting a user adding operation for a target cluster, obtaining user information of a user to be added; in the case that it is determined according to the user information that the user to be added does not exist in a user list corresponding to the target node, sending a configuration mode request to the target node; the target node responds to the received configuration mode request, and obtains a configuration mode corresponding to the configuration mode request from a first operation queue; in response to receiving the configuration mode, determining a sending strategy according to the configuration mode; and according to the sending strategy, sending the user information to a second operation queue of the target node, so that the target node obtains the user information from the second operation queue by using a burying point program, and executes the user adding operation according to the user information.

Description

Technical Field

[0001] This disclosure relates to the field of big data security, and in particular to an operational response method, apparatus, device, medium, and program product. Background Technology

[0002] Hadoop is an open-source tool platform for distributed storage and processing of large-scale datasets. Yarn (Yet Another Resource Negotiator) is the resource management system for Hadoop clusters.

[0003] With security authentication enabled in Yarn, the Linux Container Executor (LCE) requires all users submitting tasks to be added to the compute nodes of the cluster. Only after users are added can the container start normally. Therefore, users need to be added to each node.

[0004] In related technologies, adding users to compute nodes in a cluster requires logging in as the root user (superuser privileges). However, logging in as the root user in a production cluster can easily lead to irreversible losses due to accidental or improper operations. Furthermore, multiple clusters in a production environment may use both Simple and Kerberos authentication methods, making it impossible to add specific users based on different authentication methods. Summary of the Invention

[0005] In view of the above problems, this disclosure provides an operation response method, apparatus, device, medium and program product.

[0006] According to a first aspect of this disclosure, an operational response method is provided, comprising:

[0007] In response to detecting a user addition operation targeting the target cluster, the user information of the user to be added is obtained, wherein the target cluster includes the target node;

[0008] If, based on the above user information, it is determined that there is no user to be added in the user list corresponding to the above target node, a configuration mode request is sent to the above target node. In response to receiving the configuration mode request, the above target node obtains the configuration mode corresponding to the configuration mode request from the first operation queue. The configuration mode in the first operation queue is obtained by the above target node using the data tracking program.

[0009] In response to receiving the above configuration mode, a sending strategy is determined based on the above configuration mode; and

[0010] According to the above sending strategy, the user information is sent to the second operation queue of the target node so that the target node can use the above-mentioned tracking program to obtain the user information from the second operation queue and perform the user addition operation based on the user information.

[0011] According to embodiments of this disclosure, the above-described operation response method further includes:

[0012] Display a visual interface;

[0013] In response to the detection that a cluster list display operation has been triggered on the aforementioned visualization interface, a cluster list is displayed, wherein the cluster list includes at least one cluster; and

[0014] In response to the detection that a cluster selection operation for the above cluster list has been triggered, the above target cluster is obtained, wherein the above target cluster is a cluster in the above cluster list.

[0015] According to embodiments of this disclosure, the above-described operation response method further includes:

[0016] In response to the detection that a cluster addition operation has been triggered in the aforementioned visualization interface, the cluster to be added is obtained; and

[0017] Store the clusters to be added above in the cluster list above.

[0018] According to embodiments of this disclosure, the cluster includes at least one node;

[0019] The above-mentioned operation response method also includes:

[0020] Send the aforementioned tracking program to the target node so that the target node can add the aforementioned tracking program.

[0021] According to embodiments of this disclosure, the configuration modes include a network authentication protocol mode and a simple mode; wherein, in response to receiving the configuration mode, determining the sending strategy based on the configuration mode includes:

[0022] In response to determining that the above configuration mode is the above network authentication protocol mode, the above sending strategy is determined to be a strategy of sending the above user information to the second operation queue of the above target node when a target identifier is detected, wherein the above target identifier is generated by the key distribution center server when it successfully performs a user addition operation based on the above user information received from the server; and

[0023] In response to determining that the above configuration mode is the above simple mode, the above sending strategy is determined to be the strategy of directly sending the above user information to the second operation queue of the above target node.

[0024] According to embodiments of this disclosure, the above-described operation response method further includes:

[0025] In response to receiving a first node change request, the node change information of the target cluster is determined based on the first node change request, wherein the node change information is obtained using the aforementioned data tracking program.

[0026] Based on the above node change information, determine the nodes to be changed; and

[0027] The aforementioned user information is sent to the aforementioned node to be changed, so that the aforementioned node to be changed can use the aforementioned tracking program to perform a user addition operation based on the aforementioned user information. The tracking program of the aforementioned node to be changed is sent to the aforementioned node to be changed by the management node of the aforementioned target cluster in response to receiving a second node change request from the aforementioned target node.

[0028] According to a second aspect of this disclosure, an operational response method is provided, comprising:

[0029] In response to receiving a configuration mode request from the server, a configuration mode corresponding to the configuration mode request is retrieved from a first operation queue. The target cluster includes target nodes. The configuration mode request is generated by the server after determining, based on the user information of the user to be added, that the user to be added does not exist in the user list corresponding to the target node. The user information is obtained by the server in response to detecting a user addition operation for the target cluster. The configuration mode in the first operation queue is obtained by the target node using a data tracking program.

[0030] In response to receiving the sending strategy from the server, the aforementioned user information is obtained from the second operation queue using the aforementioned tracking program. Based on the aforementioned user information, a user addition operation is performed. The aforementioned sending strategy is determined by the server in response to receiving the aforementioned configuration mode and based on the aforementioned configuration mode.

[0031] According to embodiments of this disclosure, the above-described method of determining the configuration mode of a target cluster using a data tracking program includes:

[0032] Using the aforementioned data tracking program, the configuration file information of the target cluster was obtained; and

[0033] Based on the above configuration file information, determine the configuration mode of the target cluster.

[0034] A third aspect of this disclosure provides an operation response apparatus, comprising: a first obtaining module, an acquiring module, a first determining module, and a first sending module. The first obtaining module is configured to obtain user information of the user to be added in response to detecting a user addition operation for a target cluster, wherein the target cluster includes a target node. The acquiring module is configured to send a configuration mode request to the target node if, based on the user information, it is determined that the user to be added does not exist in the user list corresponding to the target node. Upon receiving the configuration mode request, the target node obtains a configuration mode corresponding to the configuration mode request from a first operation queue, wherein the configuration mode in the first operation queue is obtained by the target node using a data tracking program. The first determining module is configured to determine a sending strategy based on the configuration mode upon receiving it. The first sending module is configured to send the user information to a second operation queue of the target node according to the sending strategy, so that the target node can obtain the user information from the second operation queue using the data tracking program and perform a user addition operation based on the user information.

[0035] A fourth aspect of this disclosure provides an operation response apparatus, comprising: an acquisition module and an execution module. The acquisition module is configured to, in response to receiving a configuration mode request from a server, acquire a configuration mode corresponding to the configuration mode request from a first operation queue. The target cluster includes target nodes. The configuration mode request is generated by the server after determining, based on the user information of the user to be added, that the user to be added does not exist in the user list corresponding to the target node. The user information is obtained by the server in response to detecting a user addition operation for the target cluster. The configuration mode in the first operation queue is obtained by the target node using a data tracking program. The execution module is configured to, in response to receiving a sending strategy from the server, acquire the user information from a second operation queue using the data tracking program, and execute a user addition operation based on the user information. The sending strategy is determined by the server in response to receiving the configuration mode and based on the configuration mode.

[0036] A fifth aspect of this disclosure provides an electronic device comprising: one or more processors; and a memory for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors perform the methods described above.

[0037] A sixth aspect of this disclosure also provides a computer-readable storage medium having executable instructions stored thereon, which, when executed by a processor, cause the processor to perform the methods described above.

[0038] The seventh aspect of this disclosure also provides a computer program product, including a computer program that, when executed by a processor, implements the above-described method.

[0039] According to the operation response method, apparatus, device, medium and program product provided in this disclosure, since the tracking program on the target node can obtain the configuration mode of the target cluster, it can determine the sending strategy according to different configuration modes and realize the user addition operation according to different configuration modes. At the same time, the tracking program can reduce the possibility of deleting or damaging system files due to misoperation or improper operation, resulting in irreversible loss, and improve the security of the system. Attached Figure Description

[0040] The foregoing contents, as well as other objects, features, and advantages of this disclosure, will become clearer from the following description of embodiments with reference to the accompanying drawings, in which:

[0041] Figure 1 The illustration schematically depicts application scenarios of operation response methods, apparatus, devices, media, and program products according to embodiments of the present disclosure;

[0042] Figure 2 A flowchart illustrating an operation response method according to an embodiment of the present disclosure is shown schematically;

[0043] Figure 3 A flowchart illustrating a method for determining a transmission strategy according to an embodiment of the present disclosure is shown schematically.

[0044] Figure 4 A flowchart illustrating an operation response method according to another embodiment of the present disclosure is shown schematically;

[0045] Figure 5 A flowchart illustrating a method for determining the configuration mode of a target cluster according to an embodiment of the present disclosure is shown schematically.

[0046] Figure 6 A schematic block diagram of an operation response device according to an embodiment of the present disclosure is shown.

[0047] Figure 7 A schematic block diagram of an operation response device according to another embodiment of the present disclosure is shown; and

[0048] Figure 8 A block diagram schematically illustrates an electronic device suitable for implementing an operational response method according to an embodiment of the present disclosure. Detailed Implementation

[0049] The embodiments of the present disclosure will now be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of the disclosure. In the following detailed description, numerous specific details are set forth to provide a thorough understanding of the embodiments of the present disclosure for ease of explanation. However, it will be apparent that one or more embodiments may be practiced without these specific details. Furthermore, descriptions of well-known structures and techniques are omitted in the following description to avoid unnecessarily obscuring the concepts of the present disclosure.

[0050] The terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit this disclosure. The terms “comprising,” “including,” etc., as used herein indicate the presence of the stated features, steps, operations, and / or components, but do not exclude the presence or addition of one or more other features, steps, operations, or components.

[0051] All terms used herein (including technical and scientific terms) have the meanings commonly understood by those skilled in the art, unless otherwise defined. It should be noted that the terms used herein are to be interpreted in a manner consistent with the context of this specification, and not in an idealized or overly rigid way.

[0052] When using expressions such as "at least one of A, B, and C", they should generally be interpreted in accordance with the meaning that is commonly understood by a person skilled in the art (e.g., "a system having at least one of A, B, and C" should include, but is not limited to, a system having A alone, a system having B alone, a system having C alone, a system having A and B, a system having A and C, a system having B and C, and / or a system having A, B, and C, etc.).

[0053] In the technical solution disclosed herein, the collection, storage, use, processing, transmission, provision, disclosure, and application of user personal information comply with the provisions of relevant laws and regulations, necessary confidentiality measures have been taken, and there is no violation of public order and good morals.

[0054] In the technical solution disclosed herein, the acquisition, collection, storage, use, processing, transmission, provision, disclosure, and application of data all comply with the provisions of relevant laws and regulations, necessary confidentiality measures have been taken, and they do not violate public order and good morals.

[0055] During the implementation of this disclosure, it was discovered that adding users to a cluster requires adding users on each compute node. However, in related technologies, adding users on compute nodes requires logging in as the root user. But logging in as the root user in a production cluster is prone to errors or misoperations, potentially causing irreversible losses. Furthermore, the production environment contains multiple clusters with both Simple and Kerberos authentication methods, making it impossible to add the specified user based on different authentication methods.

[0056] To this end, embodiments of this disclosure provide an operation response method, comprising: in response to detecting a user addition operation for a target cluster, obtaining user information of the user to be added, wherein the target cluster includes a target node; if, based on the user information, it is determined that there is no user to be added in the user list corresponding to the target node, sending a configuration mode request to the target node; the target node, in response to receiving the configuration mode request, obtaining a configuration mode corresponding to the configuration mode request from a first operation queue, wherein the configuration mode in the first operation queue is obtained by the target node using a data tracking program; in response to receiving the configuration mode, determining a sending strategy based on the configuration mode; and sending the user information to a second operation queue of the target node according to the sending strategy, so that the target node can obtain the user information from the second operation queue using a data tracking program and perform a user addition operation based on the user information.

[0057] Figure 1 The diagram illustrates an application scenario of the operation response according to an embodiment of the present disclosure.

[0058] like Figure 1 As shown, application scenario 100 according to this embodiment may include a first terminal device 101, a second terminal device 102, a third terminal device 103, a network 104, and a server 105. The network 104 serves as a medium for providing a communication link between the first terminal device 101, the second terminal device 102, the third terminal device 103, and the server 105. The network 104 may include various connection types, such as wired or wireless communication links, or fiber optic cables, etc.

[0059] Users can use the first terminal device 101, the second terminal device 102, and the third terminal device 103 to interact with the server 105 via the network 104 to receive or send messages, etc. Various communication client applications can be installed on the first terminal device 101, the second terminal device 102, and the third terminal device 103, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social media platform software, etc. (for example only).

[0060] The first terminal device 101, the second terminal device 102, and the third terminal device 103 can be various electronic devices with displays and support web browsing, including but not limited to smartphones, tablets, laptops, and desktop computers.

[0061] For example, a cluster user administrator can log in to the operation page by entering login information through the first terminal device 101, the second terminal device 102, and the third terminal device 103, select the "Add User" operation, select the cluster to which the user needs to be added from the cluster list, and enter the user information of the user to be added.

[0062] Server 105 can be a server that provides various services, such as a backend management server that supports websites browsed by users using the first terminal device 101, the second terminal device 102, and the third terminal device 103 (this is just an example). The backend management server can analyze and process data such as received user requests, and feed back the processing results (such as web pages, information, or data obtained or generated according to user requests) to the terminal devices.

[0063] For example, server 105 can respond to the detection of a user addition operation for the target cluster, obtain the user information of the user to be added, and if it is determined that there is no user to be added in the user list corresponding to the target node based on the user information, send a configuration mode request to the target node, and respond to the receipt of the configuration mode, determine the sending strategy based on the configuration mode, and send the user information to the second operation queue of the target node according to the sending strategy, so that the target node can use the instrumentation program to obtain the user information from the second operation queue and perform the user addition operation based on the user information.

[0064] It should be noted that the operation response method provided in this embodiment can generally be executed by server 105. Correspondingly, the operation response device provided in this embodiment can generally be located in server 105. The operation response method provided in this embodiment can also be executed by a server or server cluster that is different from server 105 and capable of communicating with the first terminal device 101, the second terminal device 102, the third terminal device 103, and / or server 105. Correspondingly, the operation response device provided in this embodiment can also be located in a server or server cluster that is different from server 105 and capable of communicating with the first terminal device 101, the second terminal device 102, the third terminal device 103, and / or server 105.

[0065] It should be understood that Figure 1 The number of terminal devices, networks, and servers shown is merely illustrative. Depending on implementation needs, any number of terminal devices, networks, and servers can be included.

[0066] The following will be based on Figure 1 The described scene, through Figures 2-5 The operation response method of the disclosed embodiments will be described in detail.

[0067] Figure 2 A flowchart illustrating an operation response method according to an embodiment of the present disclosure is shown schematically.

[0068] like Figure 2 As shown, the method 200 includes operations S210 to S240.

[0069] In operation S210, in response to detecting a user addition operation for the target cluster, the user information of the user to be added is obtained, wherein the target cluster includes the target node.

[0070] According to embodiments of this disclosure, the target cluster can represent a Hadoop cluster selected from a cluster list, the user information of the user to be added can include the username and password of the user to be added, and the target node can represent a computing node in the target cluster.

[0071] According to an embodiment of this disclosure, a cluster user administrator enters login information to log in to the operation page, selects the "Add User" operation, checks the clusters in the cluster list where users need to be added, and enters the user information of the user to be added, so that the server can respond to the detection of the user addition operation for the target cluster and obtain the user information of the user to be added.

[0072] According to embodiments of this disclosure, login information may include the username and password of the cluster user administrator. When a user is successfully added, the cluster user administrator can modify the password of the user being added by changing the password during the user information input process, and then perform a series of user addition operations, thus enabling the modification of the password for the user being added.

[0073] In operation S220, if it is determined that there is no user to be added in the user list corresponding to the target node based on the user information, a configuration mode request is sent to the target node. The target node responds to the received configuration mode request by retrieving the configuration mode corresponding to the configuration mode request from the first operation queue. The configuration mode in the first operation queue is obtained by the target node using the instrumentation program.

[0074] According to embodiments of this disclosure, a configuration mode request can represent a request to obtain the configuration mode of the target cluster at the current moment, a tracking program can represent an Agent program, and an operation queue can represent an ActionQueue.

[0075] According to embodiments of this disclosure, the instrumentation program on the target node can obtain the configuration mode of the target cluster at each moment by monitoring the target cluster in real time, and send the obtained configuration mode at each moment to the first operation queue on the target node.

[0076] According to embodiments of this disclosure, if there are users to be added in the target nodes of the target cluster, the user addition process is terminated.

[0077] In operation S230, in response to receiving the configuration mode, a transmission strategy is determined based on the configuration mode.

[0078] According to embodiments of this disclosure, the configuration mode can characterize the security authentication method of the target cluster. The configuration mode may include Kerberos mode and Simple mode. Different configuration modes have different sending strategies, and the corresponding sending strategy can be determined based on the configuration mode.

[0079] In operation S240, according to the sending strategy, user information is sent to the second operation queue of the target node so that the target node can use the tracking program to obtain user information from the second operation queue and perform user addition operation based on the user information.

[0080] According to embodiments of this disclosure, a target node may include a first operation queue, a second operation queue, and a data tracking program. Each target node in the target cluster has the first operation queue, the second operation queue, and the data tracking program.

[0081] According to an embodiment of this disclosure, user information is sent to the second operation queue of the target node according to the sending strategy. The tracking program on the target node obtains the user information from the second operation queue and performs the user addition operation according to the user information.

[0082] According to the embodiments of this disclosure, the first operation queue can be used to store the configuration mode of the target cluster at each moment. If there is a problem with the server, it will not affect the completion of the configuration mode sending action of the tracking program. If the server problem is solved or there is no problem, the corresponding configuration mode can be directly obtained from the first operation queue.

[0083] According to embodiments of this disclosure, the second operation queue can be used to store user information. If there is a problem with the tracking program, it will not affect the completion of the server's action to send user information. If the problem with the tracking program is resolved or there is no problem, the user information can be directly obtained from the second operation queue.

[0084] According to embodiments of this disclosure, in Master / Slave mode, the Agent program on the target node oversees and completes the user addition operation. Upon completion of the user addition operation, a home directory for the user is created, ensuring that each user addition has a corresponding record that can be found. This provides an operation log for cluster user management and guarantees the standardization of cluster user management.

[0085] According to embodiments of this disclosure, a notification is provided to the relevant user in both cases of successful and failed user addition.

[0086] According to embodiments of this disclosure, upon successful user addition, a corresponding download file is generated. From this download file, a password file can be obtained. Based on the password file and the username of the user to be added, the user can submit tasks within the cluster. The user's password can be modified by altering the password in the user's information.

[0087] According to the embodiments of this disclosure, since the tracking program on the target node can obtain the configuration mode of the target cluster, it can determine the sending strategy according to different configuration modes, and realize the user addition operation according to different configuration modes. At the same time, the user addition operation is executed by the tracking program, which can reduce the possibility of deleting or damaging system files due to misoperation or improper operation, causing irreversible losses, and improve the security of the system.

[0088] According to embodiments of this disclosure, the above-described operation response method further includes: displaying a visualization interface; displaying a cluster list in response to detecting that a cluster list display operation on the visualization interface is triggered, wherein the cluster list includes at least one cluster; and obtaining a target cluster in response to detecting that a cluster selection operation for the cluster list is triggered, wherein the target cluster is a cluster in the cluster list.

[0089] According to an embodiment of this disclosure, a cluster user administrator enters login information in a visual interface to log in to the operation interface, selects the "Add User" operation, which triggers the cluster list display operation in the visual interface, displays the cluster list, selects the cluster to add the user in the cluster list, triggers the cluster selection operation for the cluster list, and obtains the target cluster.

[0090] According to an embodiment of this disclosure, the cluster to which the user needs to be added is selected from the cluster list. If the selected cluster to which the user needs to be added is empty, the user addition process ends.

[0091] According to embodiments of this disclosure, a target cluster can represent at least one cluster in a cluster list. If the target cluster includes cluster A and cluster B, cluster A can be acquired first, users can be added to cluster A, and then cluster B can be acquired and users can be added to cluster B. If no clusters in the target cluster can be acquired, i.e., if users have been added to all clusters in the target cluster, the user addition process ends.

[0092] According to embodiments of this disclosure, when the cluster list display operation and cluster selection operation on the visual interface are triggered, the target cluster for which users need to be added can be obtained, enabling the addition of users to a specified cluster as needed when multiple clusters exist in the production environment.

[0093] According to embodiments of this disclosure, the above-described operation response method further includes: in response to detecting that a cluster addition operation is triggered in the visualization interface, obtaining a cluster to be added; and storing the cluster to be added to a cluster list.

[0094] According to embodiments of this disclosure, by selecting the "Add Cluster" operation and inputting the IP (Internet Protocol) address and port number of the management node in the cluster to be added, the cluster addition operation in the visual interface is triggered, resulting in the cluster to be added. The cluster to be added is then stored in the cluster list, resulting in the clusters in the cluster list. Each cluster has a corresponding management node.

[0095] According to embodiments of this disclosure, when a cluster addition operation is triggered on the visual interface, a cluster can be added, and the clusters in the cluster list can be obtained.

[0096] According to embodiments of this disclosure, the cluster includes at least one node, and the above-described operation response method further includes: sending a data entry program to the target node so that the target node can add the data entry program.

[0097] According to embodiments of this disclosure, when a target cluster is added to the cluster list, a tracking program is sent to the target nodes of the target cluster so that the target nodes can add the tracking program. For each cluster added to the cluster list, the server sends a tracking program to the compute nodes of the cluster so that the compute nodes can add the tracking program.

[0098] According to embodiments of this disclosure, the target node is enabled to add event tracking code by sending the tracking code to the target node.

[0099] Figure 3 A flowchart illustrating a method for determining a transmission strategy according to an embodiment of this disclosure is shown schematically.

[0100] like Figure 3 As shown, the method 300 includes operations S310 to S320.

[0101] In operation S310, in response to determining that the configuration mode is network authentication protocol mode, the sending strategy is determined to be a strategy of sending user information to the second operation queue of the target node when the target identifier is detected. The target identifier is generated by the key distribution center server when it successfully performs a user addition operation based on the user information received from the server.

[0102] According to embodiments of this disclosure, the key distribution center can represent the KDC. When the target cluster is configured in network security authentication mode, the user information of the user to be added is distributed to the server where the key distribution center resides, and the user addition is completed at the key distribution center. If the user is successfully added in the key distribution center, the user information is sent to the second operation queue of the target node. If adding the user in the key distribution center fails, the user addition process ends.

[0103] In operation S320, in response to determining that the configuration mode is simple mode, the sending strategy is determined to be to send user information directly to the second operation queue of the target node.

[0104] According to an embodiment of this disclosure, when the target cluster is configured in simple mode, user information is sent directly to the second operation queue of the target node.

[0105] According to embodiments of this disclosure, a configuration mode can characterize a security authentication method. The configuration mode can include a network authentication protocol mode and a simple mode. The Kerberos mode can characterize the network authentication protocol mode, and the Simple mode can characterize the simple mode.

[0106] According to embodiments of this disclosure, different sending strategies can be determined based on different configuration modes of the target cluster, so as to send user information to the second operation queue of the target node according to different sending strategies, and to realize the user addition operation according to different authentication methods.

[0107] According to embodiments of this disclosure, the above-mentioned operation response method further includes: in response to receiving a first node change request, determining node change information of the target cluster based on the first node change request, wherein the node change information is obtained using a tracking program; determining the node to be changed based on the node change information; and sending user information to the node to be changed, so that the node to be changed can use the tracking program to perform a user addition operation based on the user information, wherein the tracking program for the node to be changed is sent by the management node of the target cluster to the node to be changed in response to receiving a second node change request from the target node.

[0108] According to embodiments of this disclosure, a first node request may characterize a request to add all users existing in a target node within a target cluster to the node to be changed. The first node change request may include change information about computing nodes in the target cluster. Node change information may include the addition and replacement of computing nodes in the target cluster. The node to be changed may include newly added computing nodes and replaced computing nodes in the target cluster. A second node change request may characterize a request to add a tracking program to the node to be changed.

[0109] According to embodiments of this disclosure, when a new computing node is added or a computing node is replaced in the target cluster, the event tracking program in the target node obtains node change information and generates a first node change request and a second node change request. Based on the first node change request, the node change information of the target cluster is determined, thereby identifying the node to be changed, and user information is sent to the second operation queue of the node to be changed. Based on the second node change request, the management node of the target cluster sends the event tracking program to the node to be changed, so that the node to be changed can add the event tracking program. Based on the event tracking program on the node to be changed, user information is obtained from the second operation queue, so that a user addition operation is performed based on the user information.

[0110] According to embodiments of this disclosure, the event tracking program on the target node can monitor the node change information of the computing nodes of the target cluster in real time, so as to determine the node to be changed based on the node change information, and then send the event tracking program to the node to be changed so that the node to be changed can add the event tracking program, and according to the event tracking program on the node to be changed, the user can be added to the node to be changed. This can expand the computing nodes of the cluster when the computing nodes in the cluster cannot meet the data volume, and realize the addition of users on the target node to the node to be changed.

[0111] Figure 4 A flowchart illustrating an operational response method according to another embodiment of the present disclosure is shown schematically.

[0112] like Figure 4 As shown, the method 400 includes operations S410 to S420.

[0113] In operation S410, in response to receiving a configuration mode request from the server, the configuration mode corresponding to the configuration mode request is obtained from the first operation queue. The target cluster includes the target node. The configuration mode request is generated by the server when it is determined that there is no user to be added in the user list corresponding to the target node based on the user information of the user to be added. The user information is obtained by the server in response to detecting a user addition operation for the target cluster. The configuration mode in the first operation queue is obtained by the target node using the instrumentation program.

[0114] In operation S420, in response to receiving the sending policy from the server, the system uses the tracking program to retrieve user information from the second operation queue, and performs a user addition operation based on the user information. The sending policy is determined by the server in response to receiving the configuration mode.

[0115] According to the embodiments of this disclosure, since the tracking program on the target node can obtain the configuration mode of the target cluster, it can determine the sending strategy according to different configuration modes, and realize the user addition operation according to different configuration modes. At the same time, the user addition operation is executed by the tracking program, which can reduce the possibility of deleting or damaging system files due to misoperation or improper operation, causing irreversible losses, and improve the security of the system.

[0116] Figure 5 A flowchart illustrating a method for determining the configuration mode of a target cluster according to an embodiment of the present disclosure is shown schematically.

[0117] like Figure 5 As shown, the method 500 includes operations S510 to S520.

[0118] When operating S510, the configuration file information of the target cluster is obtained using the data tracking program.

[0119] When operating the S520, determine the configuration mode of the target cluster based on the configuration file information.

[0120] According to embodiments of this disclosure, the configuration mode of the target cluster is variable. The event tracking program on the target node can monitor the configuration file information in the target cluster in real time, so as to determine the configuration mode of the target cluster based on the configuration file information.

[0121] Based on the above-described operation response method, this disclosure also provides an operation response device. The following will be combined with... Figure 6 The device is described in detail.

[0122] Figure 6 A schematic block diagram of an operation response device applied to a server according to an embodiment of the present disclosure is shown.

[0123] like Figure 6 As shown, the operation response device 600 applied to the server in this embodiment includes a first obtaining module 610, an acquisition module 620, a first determining module 630, and a first sending module 640.

[0124] The first obtaining module 610 is used to obtain user information of the user to be added in response to detecting a user addition operation for the target cluster, wherein the target cluster includes target nodes. In one embodiment, the obtaining module 610 can be used to perform the operation S210 described above, which will not be repeated here.

[0125] The acquisition module 620 is used to send a configuration mode request to the target node when it is determined, based on user information, that there is no user to be added in the user list corresponding to the target node. Upon receiving the configuration mode request, the target node retrieves the configuration mode corresponding to the configuration mode request from a first operation queue. The configuration modes in the first operation queue are obtained by the target node using a data tracking program. In one embodiment, the acquisition module 620 can be used to execute the operation S220 described above, which will not be repeated here.

[0126] The first determining module 630 is used to determine a sending strategy based on the received configuration mode. In one embodiment, the determining module 630 can be used to perform the operation S230 described above, which will not be repeated here.

[0127] The first sending module 640 is used to send user information to the second operation queue of the target node according to the sending strategy, so that the target node can use the tracking program to obtain the user information from the second operation queue and perform a user addition operation based on the user information. In one embodiment, the sending module 640 can be used to perform the operation S240 described above, which will not be repeated here.

[0128] According to embodiments of this disclosure, the above-described operation response device 600 applied to the server further includes a first display module, a second display module, and a second acquisition module.

[0129] The first display module is used to showcase the visual interface.

[0130] The second display module is used to display the cluster list in response to the detection that the cluster list display operation on the visualization interface has been triggered, wherein the cluster list includes at least one cluster.

[0131] The second obtaining module is used to obtain the target cluster in response to the detection that a cluster selection operation against the cluster list has been triggered, wherein the target cluster is a cluster in the cluster list.

[0132] According to embodiments of this disclosure, the above-described operation response device 600 applied to the server further includes a third obtaining module and an adding module.

[0133] The third acquisition module is used to obtain the cluster to be added in response to the detection that a cluster addition operation has been triggered in the visualization interface.

[0134] Add a module to store clusters to be added to the cluster list.

[0135] According to embodiments of this disclosure, the above-described operation response device 600 applied to the server further includes a second sending module.

[0136] The second sending module is used to send the event tracking program to the target node so that the target node can add the event tracking program.

[0137] According to embodiments of this disclosure, the determining module 630 includes a first determining unit and a second determining unit.

[0138] The first determining unit is configured to determine, in response to determining the configuration mode as network authentication protocol mode, the sending strategy is to send user information to the second operation queue of the target node when the target identifier is detected, wherein the target identifier is generated by the key distribution center server when it successfully performs a user addition operation based on the user information received from the server.

[0139] The second determining unit is used to determine the configuration mode as simple mode and the sending strategy as sending user information directly to the second operation queue of the target node in response to determining the configuration mode as simple mode.

[0140] According to embodiments of this disclosure, the above-described operation response device 600 applied to the server further includes a second determining module, a third determining module, and a third sending module.

[0141] The second determination module is used to respond to the first node change request and determine the node change information of the target cluster based on the first node change request, wherein the node change information is obtained using a data tracking program.

[0142] The third determination module is used to determine the node to be changed based on the node change information.

[0143] The third sending module is used to send user information to the node to be changed, so that the node to be changed can use the tracking program to perform user addition operation based on the user information. The tracking program of the node to be changed is sent to the node to be changed by the management node of the target cluster in response to receiving the second node change request from the target node.

[0144] According to embodiments of this disclosure, any plurality of modules among the first obtaining module 610, obtaining module 620, first determining module 630, and first sending module 640 may be combined into one module, or any one of these modules may be split into multiple modules. Alternatively, at least part of the functionality of one or more of these modules may be combined with at least part of the functionality of other modules and implemented in one module. According to embodiments of this disclosure, at least one of the first obtaining module 610, obtaining module 620, first determining module 630, and first sending module 640 may be at least partially implemented as hardware circuitry, such as a field-programmable gate array (FPGA), a programmable logic array (PLA), a system-on-a-chip, a system-on-a-substrate, a system-on-package, an application-specific integrated circuit (ASIC), or implemented in hardware or firmware by any other reasonable means of integrating or packaging the circuitry, or implemented in any one of the three implementation methods of software, hardware, and firmware, or in a suitable combination of any of these. Alternatively, at least one of the first obtaining module 610, the acquiring module 620, the first determining module 630, and the first sending module 640 may be at least partially implemented as a computer program module, which can perform corresponding functions when the computer program module is run.

[0145] Based on the above operation response method, this disclosure also provides an operation response device applied to a target node. The following will be combined with... Figure 7 The device is described in detail.

[0146] Figure 7 A schematic block diagram of an operation response device applied to a target node according to an embodiment of the present disclosure is shown.

[0147] like Figure 7 As shown, the operation response device 700 of this embodiment includes an acquisition module 710 and an execution module 720.

[0148] The acquisition module 710 is used to, in response to receiving a configuration mode request from the server, retrieve the configuration mode corresponding to the configuration mode request from the first operation queue. The target cluster includes target nodes. The configuration mode request is generated by the server after determining, based on the user information of the user to be added, that there is no user to be added in the user list corresponding to the target node. The user information is obtained by the server in response to detecting a user addition operation for the target cluster. The configuration mode in the first operation queue is obtained by the target node using a tracking program. In one embodiment, the acquisition module 710 can be used to execute the operation S410 described above, which will not be repeated here.

[0149] The execution module 720 is used to, in response to receiving a sending strategy from the server, retrieve user information from the second operation queue using a data tracking program, and perform a user addition operation based on the user information. The sending strategy is determined by the server in response to receiving a configuration mode, based on the configuration mode. In one embodiment, the execution module 720 can be used to execute the operation S420 described above, which will not be repeated here.

[0150] According to embodiments of this disclosure, execution module 720 includes an acquisition unit and a determination unit.

[0151] The acquisition unit is used to obtain the configuration file information of the target cluster using the tracking program.

[0152] The determination unit is used to determine the configuration mode of the target cluster based on the configuration file information.

[0153] According to embodiments of this disclosure, any plurality of modules in the acquisition module 710 and the execution module 720 may be combined into one module, or any one of these modules may be split into multiple modules. Alternatively, at least a portion of the functionality of one or more of these modules may be combined with at least a portion of the functionality of other modules and implemented in one module. According to embodiments of this disclosure, at least one of the acquisition module 710 and the execution module 720 may be at least partially implemented as hardware circuitry, such as a field-programmable gate array (FPGA), a programmable logic array (PLA), a system-on-a-chip, a system-on-a-substrate, a system-on-package, an application-specific integrated circuit (ASIC), or any other reasonable means of integrating or packaging circuitry, or implemented in software, hardware, or firmware, or in any suitable combination of any of these three implementation methods. Alternatively, at least one of the acquisition module 710 and the execution module 720 may be at least partially implemented as a computer program module, which, when run, can perform corresponding functions.

[0154] Figure 8 A block diagram schematically illustrates an electronic device suitable for implementing an operational response method according to an embodiment of the present disclosure.

[0155] like Figure 8As shown, an electronic device 800 according to an embodiment of this disclosure includes a processor 801, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 802 or a program loaded from a storage portion 808 into a random access memory (RAM) 803. The processor 801 may include, for example, a general-purpose microprocessor (e.g., a CPU), an instruction set processor and / or an associated chipset and / or a special-purpose microprocessor (e.g., an application-specific integrated circuit (ASIC)), etc. The processor 801 may also include onboard memory for caching purposes. The processor 801 may include a single processing unit or multiple processing units for performing different actions of the method flow according to an embodiment of this disclosure.

[0156] RAM 803 stores various programs and data required for the operation of electronic device 800. Processor 801, ROM 802, and RAM 803 are interconnected via bus 804. Processor 801 performs various operations of the method flow according to embodiments of the present disclosure by executing programs in ROM 802 and / or RAM 803. It should be noted that the programs may also be stored in one or more memories other than ROM 802 and RAM 803. Processor 801 may also perform various operations of the method flow according to embodiments of the present disclosure by executing programs stored in said one or more memories.

[0157] According to embodiments of this disclosure, the electronic device 800 may further include an input / output (I / O) interface 805, which is also connected to a bus 804. The electronic device 800 may also include one or more of the following components connected to the I / O interface 805: an input section 806 including a keyboard, mouse, etc.; an output section 807 including a cathode ray tube (CRT), liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 808 including a hard disk, etc.; and a communication section 809 including a network interface card such as a LAN card, modem, etc. The communication section 809 performs communication processing via a network such as the Internet. A drive 810 is also connected to the I / O interface 805 as needed. A removable medium 811, such as a disk, optical disk, magneto-optical disk, semiconductor memory, etc., is installed on the drive 810 as needed so that computer programs read from it can be installed into the storage section 808 as needed.

[0158] This disclosure also provides a computer-readable storage medium, which may be included in the device / apparatus / system described in the above embodiments; or it may exist independently and not assembled into the device / apparatus / system. The computer-readable storage medium carries one or more programs that, when executed, implement the method according to the embodiments of this disclosure.

[0159] According to embodiments of this disclosure, the computer-readable storage medium may be a non-volatile computer-readable storage medium, such as including, but not limited to: portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof. In this disclosure, the computer-readable storage medium may be any tangible medium that contains or stores a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. For example, according to embodiments of this disclosure, the computer-readable storage medium may include ROM 802 and / or RAM 803 and / or one or more memories other than ROM 802 and RAM 803 described above.

[0160] Embodiments of this disclosure also include a computer program product comprising a computer program containing program code for performing the methods shown in the flowchart. When the computer program product is run on a computer system, the program code is used to cause the computer system to implement the item recommendation method provided in the embodiments of this disclosure.

[0161] When the computer program is executed by the processor 801, it performs the functions defined in the system / apparatus of this disclosure embodiments. According to embodiments of this disclosure, the systems, apparatuses, modules, units, etc., described above can be implemented by computer program modules.

[0162] In one embodiment, the computer program may rely on a tangible storage medium such as an optical storage device or a magnetic storage device. In another embodiment, the computer program may also be transmitted and distributed in the form of signals over a network medium, and may be downloaded and installed via the communication section 809, and / or installed from a removable medium 811. The program code contained in the computer program can be transmitted using any suitable network medium, including but not limited to: wireless, wired, etc., or any suitable combination thereof.

[0163] In such an embodiment, the computer program can be downloaded and installed from a network via communication section 809, and / or installed from removable medium 811. When the computer program is executed by processor 801, it performs the functions defined in the system of this disclosure embodiment. According to embodiments of this disclosure, the systems, devices, apparatuses, modules, units, etc., described above can be implemented by computer program modules.

[0164] According to embodiments of this disclosure, program code for executing the computer programs provided in embodiments of this disclosure can be written in any combination of one or more programming languages. Specifically, these computational programs can be implemented using high-level procedural and / or object-oriented programming languages, and / or assembly / machine languages. Programming languages ​​include, but are not limited to, languages ​​such as Java, C++, Python, "C", or similar programming languages. The program code can execute entirely on the user's computing device, partially on the user's device, partially on a remote computing device, or entirely on a remote computing device or server. In cases involving remote computing devices, the remote computing device can be connected to the user's computing device via any type of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external computing device (e.g., via the Internet using an Internet service provider).

[0165] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of this disclosure. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions indicated in the blocks may occur in a different order than those indicated in the drawings. For example, two consecutively indicated blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in a block diagram or flowchart, and combinations of blocks in a block diagram or flowchart, may be implemented using a dedicated hardware-based system that performs the specified function or operation, or using a combination of dedicated hardware and computer instructions.

[0166] Those skilled in the art will understand that the features described in the various embodiments and / or claims of this disclosure can be combined or combined in various ways, even if such combinations or combinations are not explicitly described in this disclosure. In particular, the features described in the various embodiments and / or claims of this disclosure can be combined or combined in various ways without departing from the spirit and teachings of this disclosure. All such combinations and / or combinations fall within the scope of this disclosure.

[0167] The embodiments of this disclosure have been described above. However, these embodiments are for illustrative purposes only and are not intended to limit the scope of this disclosure. Although various embodiments have been described above, this does not mean that the measures in the various embodiments cannot be used advantageously in combination. The scope of this disclosure is defined by the appended claims and their equivalents. Various substitutions and modifications can be made by those skilled in the art without departing from the scope of this disclosure, and all such substitutions and modifications should fall within the scope of this disclosure.

Claims

1. An operation response method, comprising: In response to detecting a user addition operation targeting a target cluster, user information of the user to be added is obtained, wherein the target cluster includes target nodes; If, based on the user information, it is determined that the user to be added does not exist in the user list corresponding to the target node, a configuration mode request is sent to the target node. In response to receiving the configuration mode request, the target node retrieves the configuration mode corresponding to the configuration mode request from the first operation queue. The configuration mode request represents a request to obtain the configuration mode of the target cluster at the current moment. The configuration mode in the first operation queue is obtained by the target node through real-time monitoring of the target cluster using a data tracking program. The configuration mode in the first operation queue is the configuration mode of the target cluster at the current moment. In response to receiving the configuration mode, a sending strategy is determined based on the configuration mode, wherein the configuration mode represents a security authentication method, and the configuration mode includes a network authentication protocol mode and a simple mode; and According to the sending strategy, sending the user information to the second operation queue of the target node includes: in response to determining that the configuration mode is the network authentication protocol mode, determining that the sending strategy is a strategy of sending the user information to the second operation queue of the target node when a target identifier is detected, wherein the target identifier is generated when the key distribution center server successfully performs a user addition operation based on the user information received from the server; in response to determining that the configuration mode is the simple mode, determining that the sending strategy is a strategy of directly sending the user information to the second operation queue of the target node, so that the target node can use the tracking program to obtain the user information from the second operation queue and perform a user addition operation based on the user information; The target node includes a first operation queue, a second operation queue, and a tracking program. The first operation queue is used to store the configuration mode of the target cluster at each moment. The second operation queue is used to store user information. The tracking program of the target node completes the user addition operation. The tracking program of the target node monitors the node change information of the target cluster in real time. The node change information includes the addition or replacement of nodes in the target cluster.

2. The method according to claim 1, further comprising: Display a visual interface; In response to the detection that a cluster list display operation on the visualization interface has been triggered, a cluster list is displayed, wherein the cluster list includes at least one cluster; and In response to the detection that a cluster selection operation for the cluster list has been triggered, the target cluster is obtained, wherein the target cluster is a cluster in the cluster list.

3. The method according to claim 2, further comprising: In response to the detection that a cluster addition operation has been triggered on the visualization interface, the cluster to be added is obtained; as well as The clusters to be added are stored in the cluster list.

4. The method according to claim 2 or 3, wherein, The cluster includes at least one node; The method further includes: The event tracking program is sent to the target node so that the target node can add the event tracking program.

5. The method according to claim 1 or 2, further comprising: In response to receiving a first node change request, the node change information of the target cluster is determined based on the first node change request, wherein the node change information is obtained using the data tracking program; Based on the node change information, determine the node to be changed; and The user information is sent to the node to be changed so that the node to be changed can use the tracking program to perform a user addition operation based on the user information. The tracking program of the node to be changed is sent to the node to be changed by the management node of the target cluster in response to receiving a second node change request from the target node.

6. An operation response method, comprising: In response to receiving a configuration mode request from the server, a configuration mode corresponding to the configuration mode request is retrieved from a first operation queue. The target cluster includes target nodes. The configuration mode request is generated by the server when it determines, based on the user information of the user to be added, that the user to be added does not exist in the user list corresponding to the target node. The configuration mode request represents a request to obtain the configuration mode of the target cluster at the current moment. The user information is obtained by the server in response to detecting a user addition operation for the target cluster. The configuration mode in the first operation queue is obtained by the target node through real-time monitoring of the target cluster using a tracking program. The configuration mode in the first operation queue represents the configuration mode of the target cluster at the current moment. In response to receiving a sending strategy from the server, the system uses the data entry program to retrieve the user information from the second operation queue and performs a user addition operation based on the user information. The sending strategy is determined by the server in response to receiving the configuration mode, where the configuration mode represents a security authentication method and includes a network authentication protocol mode and a simple mode. When the configuration mode is the network authentication protocol mode, the sending strategy is to send the user information to the second operation queue of the target node upon detecting a target identifier. The target identifier is generated when the key distribution center server successfully performs a user addition operation based on the user information received from the server. When the configuration mode is the simple mode, the sending strategy is to directly send the user information to the second operation queue of the target node. The target node includes a first operation queue, a second operation queue, and a tracking program. The first operation queue is used to store the configuration mode of the target cluster at each moment. The second operation queue is used to store user information. The tracking program of the target node completes the user addition operation. The tracking program of the target node monitors the node change information of the target cluster in real time. The node change information includes the addition or replacement of nodes in the target cluster.

7. The method according to claim 6, wherein, The process of determining the configuration mode of the target cluster using a data tracking program includes: Using the aforementioned data tracking program, the configuration file information of the target cluster is obtained; and Based on the configuration file information, the configuration mode of the target cluster is determined.

8. An electronic device, comprising: One or more processors; Storage device for storing one or more programs. Wherein, when the one or more programs are executed by the one or more processors, the one or more processors perform the method according to any one of claims 1 to 7.

9. A computer-readable storage medium having stored thereon executable instructions that, when executed by a processor, cause the processor to perform the method according to any one of claims 1 to 7.

Images