Product management method and container application deployment method

Abstract

The invention discloses a product management method and a container application deployment method, and relates to the technical field of computers.The product management method comprises the steps that a new product is created based on an operation and maintenance management platform; storing the product parameters of the new product and the application association information of the new product in a configuration management database; obtaining product information in the configuration management database through a continuous integration platform; the product information comprises product parameters and application association information; generating an initial product according to the product information; and adding a production environment mark to the initial product through the operation and maintenance management platform to obtain a target environment product. Due to the fact that the automation tool and the predefined configuration file are used, automation of the creation and management process of the product is achieved, and manual operation is greatly reduced. Meanwhile, through the isolated development environment and production environment, isolation of development and deployment of the product is achieved, and the safety and independence of the product are improved.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a product management method and a container application deployment method. Background Art

[0002] In the current technology environment, with the widespread application of cloud computing and container technology, enterprises are increasingly relying on containerization technology in the deployment and management of applications. However, there are still many challenges in product management and container deployment in a highly secure and network isolated environment.

[0003] Existing technologies mainly rely on the following methods:

[0004] 1. Manual management: In a network isolation environment, the upload, download and management of products usually rely on manual operations. This method is not only inefficient, but also prone to human errors, making it difficult to ensure the consistency and security of products.

[0005] 2. Traditional CI / CD tools: Traditional continuous integration and continuous deployment (CI / CD) tools are difficult to use in network isolation environments. These tools usually rely on network connections to access public artifact libraries and cloud services, but in network isolation environments, these accesses are strictly restricted.

[0006] 3. Self-built product library: Some companies try to build their own product library to manage products. However, self-built product libraries require a lot of resources for maintenance and updating, and there are also great challenges in terms of security and high availability. Summary of the invention

[0007] The main purpose of this application is to provide a product management method and a container application deployment method, aiming to solve the technical problems of low efficiency and security of existing product management and container deployment in a network isolation environment.

[0008] To achieve the above objectives, the present application proposes a product management method, which is applied to a network isolated development and testing environment, and includes:

[0009] Create new products based on the operation and maintenance management platform;

[0010] storing the product parameters of the new product and the application-related information of the new product in a configuration management database;

[0011] Acquire the product information in the configuration management database through the continuous integration platform; the product information includes product parameters and application association information;

[0012] Generate an initial product according to the product information;

[0013] The production environment tag is added to the initial product through the operation and maintenance management platform to obtain the target environment product.

[0014] In one embodiment, the step of generating an initial product according to the product information includes:

[0015] The product parameters and the application-related information are compiled and packaged through a continuous integration platform to obtain a continuous integration product; the continuous integration product includes: a container image, a product metadata file, and an application configuration file;

[0016] Generate an image product based on the container image;

[0017] A system application artifact is generated based on the artifact metadata file and the application configuration file; the initial artifact includes an image artifact and a system application artifact.

[0018] In one embodiment, after the step of generating an initial product according to the product information, the method further includes:

[0019] When the initial product is generated, the initial product is automatically deployed and tested in a network isolated development and testing environment;

[0020] When the automated deployment and testing are completed and passed, marking the initial product as a product that can be put into production online;

[0021] Accordingly, the step of adding a production environment tag to the initial product through the operation and maintenance management platform to obtain a target environment product includes:

[0022] The production environment tag is added to the production product that can be put online through the operation and maintenance management platform to obtain the target environment product.

[0023] In one embodiment, the method further comprises:

[0024] When receiving an access request to the network isolated production environment, user authentication is performed on the access request through the product library security API interface;

[0025] When the user authentication is passed, access control is performed on the product acquisition request in the network isolation production environment based on the access role determined by the user authentication.

[0026] To achieve the above objectives, the present application proposes a container application deployment method, which includes:

[0027] Determine a production environment tag corresponding to the network isolation production environment;

[0028] Based on the product library security API interface, obtain the target environment product corresponding to the production environment tag from the network isolation development and testing environment;

[0029] Performing data analysis on the target environment product to obtain target environment product information;

[0030] Obtaining a twin product of the target environment product and application-related information of the twin product based on the target environment product information;

[0031] Deploy according to the twin product and the application association information of the twin product to obtain a production environment container.

[0032] In one embodiment, the step of obtaining the target environment artifact corresponding to the production environment tag from the network isolated development and testing environment based on the artifact library security API interface includes:

[0033] Based on the production environment tag, an access request is initiated to the product library security API interface in the network isolation development and testing environment for user authentication;

[0034] When the user authentication of the access request is passed, a product acquisition request is sent to the product security API interface to obtain the target environment product corresponding to the production environment tag.

[0035] In one embodiment, the method further comprises:

[0036] Monitor the process of product management and container deployment to obtain behavior logs;

[0037] generating a historical audit report based on the behavior log;

[0038] A security assessment of the artifact management and container deployment processes is performed based on the historical audit report.

[0039] In addition, to achieve the above-mentioned purpose, the present application also proposes a product management device, which includes:

[0040] Artifact creation module, used to create new artifacts based on the operation and maintenance management platform;

[0041] An information storage module, used for storing product parameters of the new product and application-related information of the new product in a configuration management database;

[0042] A continuous integration module, used to obtain product information in the configuration management database through a continuous integration platform; the product information includes product parameters and application association information;

[0043] A product generation module, used to generate an initial product according to the product information;

[0044] The product circulation module is used to add a production environment tag to the initial product through the operation and maintenance management platform to obtain a target environment product.

[0045] In addition, to achieve the above purpose, the present application also proposes a container application deployment device, the container application deployment device comprising:

[0046] A tag acquisition module, used to determine the production environment tag corresponding to the network isolation production environment;

[0047] A product acquisition module is used to acquire the target environment product corresponding to the production environment tag from the network isolation development and testing environment based on the product library security API interface;

[0048] A data analysis module, used to analyze the target environment product to obtain target environment product information;

[0049] A product twin module, used to obtain a twin product of the target environment product and application-related information of the twin product based on the target environment product information;

[0050] The container deployment module is used to deploy according to the twin product and the application association information of the twin product to obtain a production environment container.

[0051] In addition, to achieve the above objectives, the present application also proposes a product management device, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, and the computer program is configured to implement the steps of the product management method described above.

[0052] In addition, to achieve the above-mentioned purpose, the present application also proposes a storage medium, which is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the product management method described above are implemented.

[0053] In addition, to achieve the above-mentioned purpose, the present application also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, the steps of the product management method described above are implemented.

[0054] In addition, to achieve the above-mentioned purpose, the present application also proposes a container application deployment device, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the container application deployment method described above.

[0055] In addition, to achieve the above-mentioned purpose, the present application also proposes a storage medium, which is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the container application deployment method described above are implemented.

[0056] In addition, to achieve the above-mentioned purpose, the present application also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, the steps of the container application deployment method described above are implemented.

[0057] One or more technical solutions proposed in this application have at least the following technical effects:

[0058] This application creates new products based on the operation and maintenance management platform; stores the product parameters of the new products and the application-related information of the new products in the configuration management database; obtains the product information in the configuration management database through the continuous integration platform; the product information includes product parameters and application-related information; generates an initial product based on the product information; adds a production environment tag to the initial product through the operation and maintenance management platform to obtain the target environment product. Because the creation and management process of products is automated through automated tools and predefined configuration files, manual operations are greatly reduced. At the same time, through isolated development environments and production environments, the isolation of product development and deployment is achieved, which improves the security and independence of products. BRIEF DESCRIPTION OF THE DRAWINGS

[0059] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0060] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following is a brief introduction to the drawings required for use in the embodiments or the description of the prior art. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0061] Figure 1 This is a flow chart of the first embodiment of the product management method of the present application;

[0062] Figure 2 This is a flow chart of the second embodiment of the product management method of the present application;

[0063] Figure 3 This is a flow chart of the first embodiment of the container application deployment method of the present application;

[0064] Figure 4 This is a flow chart of the second embodiment of the container application deployment method of the present application;

[0065] Figure 5 This is a system function flow diagram of the network isolation development and testing environment in the product management machine container application deployment system of this application;

[0066] Figure 6 This is a schematic diagram of the system function flow of the network isolation production environment in the product management machine container application deployment system of this application;

[0067] Figure 7 This is a schematic diagram of the module structure of the product management device of the embodiment of the present application;

[0068] Figure 8 This is a schematic diagram of the module structure of the container application deployment device according to an embodiment of the present application;

[0069] Fig. 9 A schematic diagram of the device structure of the hardware operating environment involved in the embodiments of the present application.

[0070] The purpose, features and advantages of this application will be further described in conjunction with the embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0071] It should be understood that the specific embodiments described herein are only used to explain the technical solutions of the present application and are not used to limit the present application.

[0072] In order to better understand the technical solution of the present application, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.

[0073] The embodiment of the present application proposes a method for product management and container application deployment management specifically for network isolation scenarios, which improves the security and independence of products through a network-isolated product library, and at the same time, realizes automated deployment and updating of containers in a network-isolated environment through an automated container deployment tool, reducing manual intervention. In addition, the present application also monitors and records the entire process of product management and container deployment through a security audit mechanism, realizing compliance review and security assessment of product management and container deployment.

[0074] Based on this, the present application embodiment proposes a product management method for a network isolated development and testing environment. Figure 1 As shown, Figure 1 This is a flowchart of the first embodiment of the product management method of the present application.

[0075] It should be noted that the execution subject of this embodiment can be a computing service device with data processing, network communication and program running functions, such as a computer, server, etc., or an electronic device, virtual device, etc. that can realize the above functions. The following takes a product management device (hereinafter referred to as a management device) as an example to illustrate this embodiment and the following embodiments.

[0076] In this embodiment, the product management method includes steps S10 to S50:

[0077] Step S10, creating a new product based on the operation and maintenance management platform;

[0078] Step S20, storing the product parameters of the new product and the application association information of the new product in a configuration management database;

[0079] It is understandable that artifacts are components or results that can be reused or deployed during the software development and delivery process. These artifacts can include container images, system application artifacts, etc. Through these artifacts, the automated deployment, version control and management of containers and applications can be achieved, which improves the efficiency of software development and management.

[0080] In the embodiment of the present application, when the user initiates the continuous integration process, it can be determined whether a new product needs to be created according to the user's needs. If so, the product library management module of the operation and maintenance management platform can be called to automatically create a new product, and the new product and its corresponding product parameters and application association information are entered into the configuration management database for storage.

[0081] It is understandable that the above-mentioned operation and maintenance management platform is a tool that can improve the efficiency, security and objective rationality of product management and container application deployment in a network isolation environment. It can integrate a variety of technologies and tools to achieve monitoring, configuration, and security control during product generation and product deployment. In both the network isolation development and testing environment and the network isolation production environment, an operation and maintenance management platform can be deployed to achieve product development, testing, and deployment.

[0082] It should be noted that the above-mentioned product parameters and application association information may include container system name, system code, system sub-application name, system sub-application code, creation time, container image version, application version, product version, product type, modification time, and product UUID, etc. Through the new product and its corresponding product parameters and application association information. The product library management module of the above-mentioned operation and maintenance management platform can produce platform product library model data according to the product metadata file and perform storage management.

[0083] It can be understood that the above-mentioned product library management module is a module that can generate platform product model data (that is, determine the data of the new product) based on the product parameters of the new product and the application-related information of the new product, so that the platform product model data can be stored and managed, so as to test and deploy the new product based on the generated platform product model data.

[0084] It should be explained that the specific process of creating a new product in the embodiment of the present application can be designed according to the needs of actual applications, and the embodiment of the present application is not limited to this.

[0085] Step S30, obtaining product information in the configuration management database through the continuous integration platform; the product information includes product parameters and application association information;

[0086] It is understandable that the continuous integration platform is an important automation tool and environment in the software development process, which ensures the quality and development efficiency of the software by automating processes such as building, testing and deployment. In the embodiment of the present application, the product information is obtained from the configuration management data through the continuous integration platform, and the product information may include the above-mentioned new product and its corresponding product parameters and application association information.

[0087] It should be noted that, based on the above product information, an initial product can be generated. That is, step S40, generating an initial product according to the product information; specifically, the step of generating an initial product according to the product information includes:

[0088] The product parameters and the application-related information are compiled and packaged through a continuous integration platform to obtain a continuous integration product; the continuous integration product includes: a container image, a product metadata file, and an application configuration file;

[0089] Generate an image product based on the container image;

[0090] A system application artifact is generated based on the artifact metadata file and the application configuration file; the initial artifact includes an image artifact and a system application artifact.

[0091] It should be noted that in an embodiment of the present application, the continuous integration platform can obtain artifact information from the configuration management database, and compile and package based on the artifact information to generate a continuous integration product that can characterize the version of the product package. The continuous integration product may include at least a container image, an artifact metadata file, and an application configuration file. Based on the container image in the continuous integration product, the image artifact can be determined; based on the artifact metadata file and the application configuration file in the continuous integration product, the system application artifact can be determined. The above-mentioned image artifact and system application artifact can be bound by coding.

[0092] Step S50, adding a production environment tag to the initial product through the operation and maintenance management platform to obtain a target environment product.

[0093] It should be noted that in order to improve the security of data exchange between different network isolation environments, in an embodiment of the present application, the product circulation can be carried out by corresponding application operation and maintenance personnel, and the production environment tags of the specific network isolation environment (such as environment tags, change order numbers, etc.) can be added to the relevant products. Through the above-mentioned production environment tags, the correspondence between the products and the network isolation environment can be achieved, thereby improving the security of data interaction between different network isolation environments.

[0094] It can be understood that the obtained target environment artifact is also the artifact to be deployed. By deploying the target environment artifact into the target network isolation environment, the application deployment of the container can be achieved.

[0095] It should be understood that the image products, system application products, and target environment products generated in the present application can all be stored and information managed through the product library.

[0096] The embodiment of the present application creates a new product based on the operation and maintenance management platform; stores the product parameters of the new product and the application-related information of the new product in the configuration management database; obtains the product information in the configuration management database through the continuous integration platform; the product information includes product parameters and application-related information; generates an initial product based on the product information; adds a production environment tag to the initial product through the operation and maintenance management platform to obtain the target environment product. Because the creation and management process of the product is automated through automated tools and predefined configuration files, manual operations are greatly reduced. At the same time, through isolated development environments and production environments, the isolation of product development and deployment is achieved, and the security and independence of the product are improved.

[0097] Based on the above embodiment, in the second embodiment of the container application deployment method of the present application, the same or similar contents as those in the above embodiment 1 can be referred to the above introduction, and will not be repeated in the following. Figure 2 After the step of generating the initial product according to the product information, the method further includes:

[0098] Step S41, when the initial product is generated, automatically deploying and testing the initial product in a network isolated development and testing environment;

[0099] Step S42, when the automated deployment and testing are completed and passed, marking the initial product as a product that can be put into production;

[0100] Accordingly, the step of adding a production environment tag to the initial product through the operation and maintenance management platform to obtain a target environment product includes:

[0101] Step S51, adding a production environment tag to the online production product through the operation and maintenance management platform to obtain a target environment product.

[0102] It should be noted that in order to improve the efficiency and quality of delivery, the generated initial products can be automatically deployed and tested first, and when the automated deployment and testing are completed and passed, the corresponding initial products can be marked as online production products.

[0103] It is understandable that when the work-in-progress has been tested and verified and decided to be put on line for production, the corresponding operation and maintenance personnel can perform the product circulation operation, so that the production environment tag can be added to the online production product for the production environment to pull and use, thereby making it possible to improve the security of data interaction based on the production environment tag when interacting with the operation and maintenance management platform in the network isolated production environment.

[0104] Specifically, the method further includes:

[0105] When receiving an access request to the network isolated production environment, user authentication is performed on the access request through the product library security API interface;

[0106] When the user authentication is passed, access control is performed on the product acquisition request in the network isolation production environment based on the access role determined by the user authentication.

[0107] It should be noted that the product library security API interface is a data interface designed for interaction in different network isolation environments. In the embodiment of the present application, the product library security API interface can realize functions such as authentication and authorization, secure transmission, API security, and data integrity.

[0108] Specifically, the artifact library security API interface can use JWT for user authentication to determine the role information of the accessed operation and maintenance management platform and the network isolation production environment information, and ensure access control to artifacts through role-based access control (RBAC).

[0109] At the same time, in the embodiment of the present application, the data communication between the operation and maintenance management platform in the network isolation development and testing environment and the operation and maintenance management platform in the network isolation production environment can be encrypted to achieve secure transmission. The specific encryption method can be HTTPS and AES-256 strong encryption algorithm to achieve secure transmission, or other encryption methods, which are not limited in the embodiment of the present application.

[0110] In addition, the embodiment of the present application also implements rate limiting to prevent attacks and abuse, and records API calls in detail for security auditing and problem tracking. The product is integrity checked by using the hash algorithm SHA-256, and the product is also version controlled to ensure that each version of the product is traceable and manageable.

[0111] It can be understood that when the operation and maintenance management platform in a network-isolated production environment accesses the product library security API interface, the product library security API interface can determine its corresponding production role (such as identity, authority, etc.) based on the network-isolated production environment and the production environment tag corresponding to the operation and maintenance management platform, and determine the products that the production role can call, so that the operation and maintenance management platform in the network-isolated production environment can obtain product information based on the product library security API interface.

[0112] The embodiment of the present application automatically deploys and tests the initial product in a network isolated development and testing environment when the initial product is generated; when the automated deployment and testing are completed and passed, the initial product is marked as a product that can be put online for production; the production environment tag is added to the product that can be put online through the operation and maintenance management platform to obtain the target environment product; when receiving an access request to the network isolated production environment, the access request is authenticated by the product library security API interface; when the user authentication passes, access control is performed on the product acquisition request in the network isolated production environment based on the access role determined by the user authentication. Since the production tag is performed by performing a circulation operation on the product to be put online, the security of data interaction is improved; access between different network isolation environments is achieved through role-based access control, and the independence of the product is guaranteed.

[0113] Based on the above, this application also proposes a container application deployment method, which can be applied to a network isolated production environment. For the same or similar contents as the above embodiments, please refer to the above introduction and will not be repeated later. Figure 3 , Figure 3 This is a flowchart of the first embodiment of the container application deployment method of the present application.

[0114] It should be noted that the execution subject of this embodiment can be a computing service device with data processing, network communication and program running functions, such as a computer, server, etc., or an electronic device, virtual device, etc. that can realize the above functions. The following takes a container application deployment device (hereinafter referred to as a deployment device) as an example to illustrate this embodiment and the following embodiments.

[0115] It needs to be explained that in the embodiment of the present application, the network isolation development and testing environment and the above-mentioned network isolation production environment are isolated from each other, and the communication between the deployment device and the management device can be carried out based on the product library security API interface.

[0116] like Figure 3 As shown, in the embodiment of the present application, the method includes:

[0117] Step S100, determining a production environment tag corresponding to the network isolation production environment;

[0118] It should be noted that different network isolation production environments and deployment devices in network isolation production environments may be respectively assigned unique identification tags, namely production environment tags and deployment device tags. Through these tags, different network isolation production environments and deployment devices can be identified, thereby improving the security of data interaction.

[0119] Step S200, obtaining the target environment artifact corresponding to the production environment tag from the network isolation development and testing environment based on the artifact library security API interface;

[0120] Step S300, performing data analysis on the target environment product to obtain target environment product information;

[0121] Step S400, obtaining a twin product of the target environment product and application association information of the twin product based on the target environment product information;

[0122] Step S500: Deploy according to the twin product and the application-related information of the twin product to obtain a production environment container.

[0123] It is understandable that the deployment equipment of the network isolation development and testing environment also includes an operation and maintenance management platform. The operation and maintenance management platform (for the sake of distinction, it can be called the second operation and maintenance management platform) can call the product library security API interface in the operation and maintenance management platform in the network isolation development and testing environment (for the sake of distinction, it can be called the first operation and maintenance management platform) to achieve the timed pulling of new products.

[0124] It should be understood that the above-mentioned target environment artifacts, that is, the artifacts stored in the artifact library management module of the network isolation development and testing environment, can be new artifacts or historically created artifacts, and the embodiments of the present application do not limit this.

[0125] It should be noted that when the target environment artifact corresponding to the production environment tag is pulled, data analysis can be performed based on the target environment artifact to obtain its related metadata information, that is, to obtain the target environment artifact information. By managing the target environment artifact information as a twin artifact in the warehouse, the product library management module of the network isolated production environment can store and generate the same production environment artifacts as those in the network isolated development and testing environment, that is, twin artifacts (specifically, it can include production environment mirror artifacts and production environment system application artifacts).

[0126] It is understandable that the generated twin products can be stored and managed through the second product library management module in the second operation and maintenance management platform. At the same time, the corresponding product information can be stored and managed through the configuration management database (hereinafter referred to as the second configuration management database) in the network isolation production environment, so that the configuration management database can provide product application related information for the container deployment in the production environment.

[0127] It should be noted that when deploying container applications, the artifact library management module can be used to provide artifacts for application deployment, and the configuration management database can be used to provide artifact application association information to implement strategic deployment of production environment artifacts.

[0128] The embodiment of the present application determines the production environment tag corresponding to the network isolated production environment; obtains the target environment artifact corresponding to the production environment tag from the network isolated development and test environment based on the artifact library security API interface; performs data analysis on the target environment artifact to obtain the target environment artifact information; obtains the twin artifact of the target environment artifact and the application-related information of the twin artifact based on the target environment artifact information; and deploys the twin artifact and the application-related information of the twin artifact to obtain the production environment container. Since the development and testing of the artifact and the application deployment of the container are achieved through the network isolated environment, the consistency and security of the artifact are guaranteed. The data interaction between the network isolated production environment and the network isolated development and test environment is achieved through the artifact library security API interface, avoiding the problem that the access method of the network connection in the network isolated environment will be strictly restricted.

[0129] Based on the first embodiment of the present application, in the second embodiment of the container application deployment method of the present application, the same or similar contents as the above embodiments can be referred to the above introduction, and will not be repeated later. Figure 4 The step of obtaining the target environment artifact corresponding to the production environment tag from the network isolation development and testing environment based on the artifact library security API interface includes:

[0130] Step S210, initiating an access request to a product library security API interface in a network isolation development and testing environment based on the production environment tag to perform user authentication;

[0131] Step S220, when the user authentication of the access request is passed, a product acquisition request is sent to the product security API interface to obtain the target environment product corresponding to the production environment tag.

[0132] It should be noted that in order to improve the security of communication between the network-isolated development and testing environment and the network-isolated production environment, in the embodiment of the present application, an access request can be generated based on the production environment tag, and the access request can be sent to the product library security API interface of the operation and maintenance management platform in the network-isolated development and testing environment, so that the product library security API interface can perform user authentication based on the production environment tag in the access request, and then determine the access role corresponding to the second operation and maintenance management platform in the network-isolated production environment. For the first operation and maintenance management platform in the network-isolated production environment, when determining the access role corresponding to the second operation and maintenance management platform, it can respond to the product acquisition request of the second operation and maintenance management platform in the network-isolated production environment, so that the second operation and maintenance management platform can obtain the target environment product corresponding to the production environment tag from the first operation and maintenance management platform in the network-isolated development and testing environment.

[0133] In one implementation of the embodiment of the present application, the first operation and maintenance management platform and the second operation and maintenance management platform can be provided with a security audit mechanism to monitor and record the entire process of product management and container application deployment, thereby providing detailed behavior logs and real-time security alerts. At the same time, historical audit reports can also be generated based on the behavior logs, so that the operation and maintenance management platform can support compliance review and security assessment.

[0134] It is understandable that automated tools can be set up in the operation and maintenance management platform to achieve security assessment of the product development, testing and container deployment processes.

[0135] Specifically, the method further includes:

[0136] Monitor the process of product management and container deployment to obtain behavior logs;

[0137] generating a historical audit report based on the behavior log;

[0138] A security assessment of the artifact management and container deployment processes is performed based on the historical audit report.

[0139] The embodiment of the present application initiates an access request to the product library security API interface in the network isolation development and testing environment based on the production environment tag for user authentication; when the user authentication of the access request is passed, a product acquisition request is sent to the product security API interface to obtain the target environment product corresponding to the production environment tag. Since the whole process automation of product management and container deployment is realized through automated tools, manual operations are greatly reduced, and the efficiency of product development and container deployment is improved. At the same time, it supports horizontal expansion and rolling updates of containers, and can quickly respond to changes in business needs. In addition, the product library in the present application runs in a network isolation environment and operates through a secure interface to ensure the security of the product. By monitoring and recording product management and container deployment throughout the process, real-time security alerts and detailed logs are provided, effectively reducing security risks.

[0140] The present application also provides a product management and container application deployment system, such as Figure 5 and Figure 6 As shown, Figure 5 This is a system function flow diagram of the network isolation development and testing environment in the product management machine container application deployment system of this application; Figure 6 This is a system function flow diagram of the network isolation production environment in the product management and container application deployment system of this application. The product management and container application deployment system includes a network isolation development and testing environment and a network isolation production environment.

[0141] In the network isolation development and testing environment, a product management device is provided; the product management device includes a continuous integration platform, a configuration management database (a first configuration management database), and an operation and maintenance management platform (a first operation and maintenance management platform). The operation and maintenance management platform may include a product library management module and a product library security API interface. Through the product management device, the steps of the product management method described above can be implemented.

[0142] In a network-isolated production environment, a container application deployment device is provided; the container application deployment device includes an operation and maintenance management platform (a second operation and maintenance management platform) and a configuration management database (a second configuration management database). The operation and maintenance management platform may include a product library management module (a second product library management module).

[0143] It should be noted that when initiating a continuous integration process through a continuous integration platform, if a new product needs to be created, the new product can be created through the product library management module in the operation and maintenance management platform, and the product parameters and application-related information of the new product can be stored in the configuration management database.

[0144] It is understandable that the above-mentioned product parameters and application-related information can be obtained from the configuration database through the continuous integration platform, and compiled and packaged to generate continuous integration products. The generated continuous integration products may include container images, product metadata files, and application configuration files. Based on the container image, image products can be generated; based on the product metadata file and the application configuration file, the system application products can be determined. Through the product library management module, the storage and management of image products and system application products can be realized.

[0145] Furthermore, the operation and maintenance management platform can perform pre-production testing and continuous deployment in the rehearsal environment for the image products and system application products in the product library management module. For products that have been deployed and tested, they can be marked for on-demand circulation to obtain image products with production marks and system application products with production marks, that is, to obtain target environment products.

[0146] It should be noted that the second operation and maintenance management platform of the network-isolated production environment can periodically pull the target environment artifacts from the artifact library management module of the operation and maintenance management platform through the artifact library security API interface in the network-isolated development and testing environment. The second operation and maintenance management platform can perform analysis based on the target environment artifacts, and perform twin artifact warehousing management based on the artifact metadata obtained by the analysis to generate production environment mirror artifacts and production environment system application artifacts, and store and manage the production environment mirror artifacts and production environment system application artifacts through the second artifact library management module.

[0147] At the same time, for the twin products in the product library, the corresponding product information can be uploaded to the second configuration management database to provide product application association information for the production environment policy deployment process through the configuration management database.

[0148] It is understandable that, based on the artifacts provided by the artifact library management module and the application association information provided by the configuration management database, the production environment policy deployment of the artifacts can also be implemented.

[0149] The product management and container application deployment system provided by this application can solve the technical problems of low efficiency and security rate of existing product management and container deployment in network isolation environments. Compared with the prior art, the beneficial effects of the product management and container application deployment system provided by this application are the same as the beneficial effects of the product management method and / or container application deployment method provided by the above embodiments, and other technical features of the product management and container application deployment system are the same as the features disclosed in the above embodiment methods, which will not be repeated here.

[0150] This application also provides a product management device, please refer to Figure 7 , the product management device comprises:

[0151] A product creation module 10, used to create a new product based on the operation and maintenance management platform;

[0152] An information storage module 20, used to store the product parameters of the new product and the application-related information of the new product in a configuration management database;

[0153] A continuous integration module 30, used to obtain product information in the configuration management database through a continuous integration platform; the product information includes product parameters and application association information;

[0154] A product generation module 40, configured to generate an initial product according to the product information;

[0155] The product circulation module 50 is used to add a production environment tag to the initial product through the operation and maintenance management platform to obtain a target environment product.

[0156] The product management device provided by this application adopts the product management method in the above embodiment, which can solve the technical problems of low efficiency and security rate of existing product management and container deployment in network isolation environment. Compared with the prior art, the beneficial effects of the product management device provided by this application are the same as the beneficial effects of the product management method provided by the above embodiment, and other technical features in the product management device are the same as the features disclosed in the above embodiment method, which will not be repeated here.

[0157] This application also provides a product management device, please refer to Figure 8 , the product management device comprises:

[0158] A tag acquisition module 100, used to determine a production environment tag corresponding to the network isolation production environment;

[0159] The product acquisition module 200 is used to acquire the target environment product corresponding to the production environment tag from the network isolation development and testing environment based on the product library security API interface;

[0160] The data analysis module 300 is used to analyze the data of the target environment product to obtain the target environment product information;

[0161] A product twin module 400, configured to obtain a twin product of the target environment product and application-related information of the twin product based on the target environment product information;

[0162] The container deployment module 500 is used to deploy according to the twin product and the application association information of the twin product to obtain a production environment container.

[0163] The container application deployment device provided by the present application adopts the container application deployment method in the above embodiment, which can solve the technical problems of low efficiency and safety rate of existing container application deployment and container deployment in network isolation environment. Compared with the prior art, the beneficial effects of the container application deployment device provided by the present application are the same as the beneficial effects of the container application deployment method provided by the above embodiment, and the other technical features in the container application deployment device are the same as the features disclosed in the above embodiment method, which will not be repeated here.

[0164] The present application provides a product management device and a container application deployment device. Since the product management device and the container deployment application device have the same or similar structure, the product management device is used as an example in the present application embodiment for description. The structure and function of the container deployment application device can refer to the product management device, and the present application embodiment will not be repeated.

[0165] The product management device includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the product management method in the above-mentioned embodiment one.

[0166] Reference below Fig. 9 , which shows a schematic diagram of the structure of a product management device suitable for implementing the embodiment of the present application. The product management device in the embodiment of the present application may include but is not limited to mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), PMPs (Portable Media Players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Fig. 9 The product management device shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0167] like Fig. 9As shown, the product management device may include a processing device 1001 (e.g., a central processing unit, a graphics processor, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM: Read Only Memory) 1002 or a program loaded from a storage device 1003 to a random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for the operation of the product management device are also stored. The processing device 1001, ROM1002, and RAM1004 are connected to each other through a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems can be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touchpad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output device 1008 including, for example, a liquid crystal display (LCD: Liquid Crystal Display), a speaker, a vibrator, etc.; a storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 can allow the product management device to communicate with other devices wirelessly or wired to exchange data. Although the figure shows a product management device with various systems, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems can be implemented or have alternatively.

[0168] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0169] The product management device provided by this application adopts the product management method in the above embodiment, which can solve the technical problems of low efficiency and safety rate of existing product management and container deployment in network isolation environment. Compared with the prior art, the beneficial effects of the product management device provided by this application are the same as the beneficial effects of the product management method provided by the above embodiment, and the other technical features in the product management device are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.

[0170] It should be understood that the various parts disclosed in this application can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0171] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0172] The present application provides a computer-readable storage medium having computer-readable program instructions (i.e., computer program) stored thereon;

[0173] In one embodiment, the computer-readable program instructions are used to execute the product management method in the above embodiment;

[0174] In one embodiment, the computer-readable program instructions are used to execute the product management method in the above embodiment;

[0175] The computer-readable storage medium provided in the present application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, systems or devices, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency), etc., or any suitable combination of the above.

[0176] In one embodiment, the computer-readable storage medium may be included in the product management device; or may exist independently without being installed in the product management device.

[0177] The computer-readable storage medium carries one or more programs. When the one or more programs are executed by the product management device, the product management device:

[0178] Create new products based on the operation and maintenance management platform;

[0179] storing the product parameters of the new product and the application-related information of the new product in a configuration management database;

[0180] Acquire the product information in the configuration management database through the continuous integration platform; the product information includes product parameters and application association information;

[0181] Generate an initial product according to the product information;

[0182] The production environment tag is added to the initial product through the operation and maintenance management platform to obtain the target environment product.

[0183] In one embodiment, the computer-readable storage medium may be included in the container application deployment device; or may exist independently without being assembled into the container application deployment device.

[0184] The computer-readable storage medium carries one or more programs. When the one or more programs are executed by the container application deployment device, the container application deployment device:

[0185] Determine a production environment tag corresponding to the network isolation production environment;

[0186] Based on the product library security API interface, obtain the target environment product corresponding to the production environment tag from the network isolation development and testing environment;

[0187] Performing data analysis on the target environment product to obtain target environment product information;

[0188] Obtaining a twin product of the target environment product and application-related information of the twin product based on the target environment product information;

[0189] Deploy according to the twin product and the application association information of the twin product to obtain a production environment container.

[0190] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0191] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a sequence different from that marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flow chart, and the combination of the boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0192] The modules involved in the embodiments described in this application may be implemented by software or hardware, wherein the name of the module does not constitute a limitation on the unit itself in some cases.

[0193] In one embodiment, the readable storage medium provided by the present application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned product management method, and can solve the technical problems of low efficiency and security rate of existing product management and container deployment in network isolation environments. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided by the present application are the same as the beneficial effects of the product management method provided by the above-mentioned embodiment, and will not be repeated here.

[0194] In one embodiment, the readable storage medium provided by the present application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned container application deployment method, and can solve the technical problems of low efficiency and safety rate of existing container application deployment and container deployment in network isolation environments. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided by the present application are the same as the beneficial effects of the container application deployment method provided by the above-mentioned embodiment, and will not be repeated here.

[0195] The present application also provides a computer program product, including a computer program, which implements the steps of the product management method as described above when executed by a processor.

[0196] The computer program product provided by this application can solve the technical problems of low efficiency and security of existing product management and container deployment in network isolation environments. Compared with the prior art, the beneficial effects of the computer program product provided by this application are the same as the beneficial effects of the product management method provided by the above embodiment, which will not be repeated here.

[0197] The present application also provides a computer program product, including a computer program, which implements the steps of the container application deployment method as described above when executed by a processor.

[0198] The computer program product provided by this application can solve the technical problems of low efficiency and security of existing container application deployment and container deployment in network isolation environments. Compared with the prior art, the beneficial effects of the computer program product provided by this application are the same as the beneficial effects of the container application deployment method provided by the above embodiment, which will not be repeated here.

[0199] The above descriptions are only some embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structural changes made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect applications in other related technical fields are included in the patent protection scope of the present application.

Claims

1. A product management method, characterized in that: The method is applied to a network isolation development and testing environment, and the method comprises: Create new products based on the operation and maintenance management platform; storing the product parameters of the new product and the application-related information of the new product in a configuration management database; Acquire the product information in the configuration management database through the continuous integration platform; the product information includes product parameters and application association information; Generate an initial product according to the product information; The production environment tag is added to the initial product through the operation and maintenance management platform to obtain the target environment product.

2. The product management method according to claim 1, characterized in that: The step of generating an initial product according to the product information comprises: The product parameters and the application-related information are compiled and packaged through a continuous integration platform to obtain a continuous integration product; the continuous integration product includes: a container image, a product metadata file, and an application configuration file; Generate an image product based on the container image; A system application artifact is generated based on the artifact metadata file and the application configuration file; the initial artifact includes an image artifact and a system application artifact.

3. The product management method according to claim 1, characterized in that: After the step of generating the initial product according to the product information, the method further includes: When the initial product is generated, the initial product is automatically deployed and tested in a network isolated development and testing environment; When the automated deployment and testing are completed and passed, marking the initial product as a product that can be put into production online; Accordingly, the step of adding a production environment tag to the initial product through the operation and maintenance management platform to obtain a target environment product includes: The production environment tag is added to the production product that can be put online through the operation and maintenance management platform to obtain the target environment product.

4. The product management method according to claim 1, characterized in that: The method further comprises: When receiving an access request to the network isolated production environment, user authentication is performed on the access request through the product library security API interface; When the user authentication is passed, access control is performed on the product acquisition request in the network isolation production environment based on the access role determined by the user authentication.

5. A container application deployment method, characterized in that: The method is applied to a network isolation production environment, and the method comprises: Determine a production environment tag corresponding to the network isolation production environment; Based on the product library security API interface, obtain the target environment product corresponding to the production environment tag from the network isolation development and testing environment; Performing data analysis on the target environment product to obtain target environment product information; Obtaining a twin product of the target environment product and application-related information of the twin product based on the target environment product information; Deploy according to the twin product and the application association information of the twin product to obtain a production environment container.

6. The container application deployment method according to claim 5, characterized in that: The step of obtaining the target environment artifact corresponding to the production environment tag from the network isolation development and testing environment based on the artifact library security API interface includes: Based on the production environment tag, an access request is initiated to the product library security API interface in the network isolation development and testing environment for user authentication; When the user authentication of the access request is passed, a product acquisition request is sent to the product security API interface to obtain the target environment product corresponding to the production environment tag.

7. The container application deployment method according to claim 5, characterized in that: The method further comprises: Monitor the process of product management and container deployment to obtain behavior logs; generating a historical audit report based on the behavior log; A security assessment of the artifact management and container deployment processes is performed based on the historical audit report.

8. A product management device, characterized in that: The device comprises: Artifact creation module, used to create new artifacts based on the operation and maintenance management platform; An information storage module, used for storing product parameters of the new product and application-related information of the new product in a configuration management database; A continuous integration module, used to obtain product information in the configuration management database through a continuous integration platform; the product information includes product parameters and application association information; A product generation module, used to generate an initial product according to the product information; The product circulation module is used to add a production environment tag to the initial product through the operation and maintenance management platform to obtain a target environment product.

9. A container application deployment device, characterized in that: The device comprises: A tag acquisition module, used to determine the production environment tag corresponding to the network isolation production environment; A product acquisition module is used to acquire the target environment product corresponding to the production environment tag from the network isolation development and testing environment based on the product library security API interface; A data analysis module, used to analyze the target environment product to obtain target environment product information; A product twin module, used to obtain a twin product of the target environment product and application-related information of the twin product based on the target environment product information; The container deployment module is used to deploy according to the twin product and the application association information of the twin product to obtain a production environment container.

10. A product management and container application deployment system, characterized in that: The system includes a network isolated development and testing environment and a network isolated production environment; Wherein, the network isolation development and testing environment is provided with a product management device; The network isolation production environment is provided with a container application deployment device; The product management device is used to implement the steps of the product management method according to any one of claims 1 to 4; The container application deployment device is used to implement the steps of the container application deployment method according to any one of claims 5 to 7.

Images