Capacity expansion method and device based on key authorization, equipment and storage medium

Abstract

The embodiment of the invention provides a key authorization-based capacity expansion method and device, equipment and a storage medium. The method comprises the following steps: generating and distributing a key for a capacity expansion task, wherein the key is used for proving the legality of the capacity expansion task; obtaining a to-be-expanded service group corresponding to the expansion task; after the secret key passes the legality verification, the capacity expansion task is executed, the service in the service group to be expanded is expanded, and the mode of introducing the authorization verification mechanism ensures the safety and legality of the capacity expansion operation, and prevents the unauthorized capacity expansion operation.

Description

Technical Field

[0001] The embodiments of the present application relate to the technical field of service expansion, and in particular, to a capacity expansion method, apparatus, device and storage medium based on key authorization. Background Art

[0002] With the popularization of cloud computing, service expansion technology has emerged to cope with the growing user demand and data traffic.

[0003] Service expansion technology is mainly used to dynamically adjust computing resources according to actual needs. Service expansion technology usually relies on pre-set performance indicators to automatically adjust computing resources. For example, automatic service expansion can be achieved based on the number of service nodes and application version information.

[0004] Service expansion technology can improve the system's responsiveness and availability by automatically adjusting resources, but it has obvious shortcomings in terms of security and compliance during the service expansion process. Summary of the invention

[0005] In view of this, the embodiments of the present application provide a capacity expansion method, apparatus, device and storage medium based on key authorization to at least solve or alleviate the above-mentioned problems.

[0006] According to one aspect of an embodiment of the present application, a capacity expansion method based on key authorization is provided, the method comprising:

[0007] Generate and distribute keys for capacity expansion tasks, where the keys are used to prove the legitimacy of the capacity expansion tasks;

[0008] Obtaining the service group to be expanded corresponding to the expansion task;

[0009] After the key passes the legality verification, the capacity expansion task is executed to expand the services in the service group to be expanded.

[0010] According to another aspect of an embodiment of the present application, there is provided a capacity expansion device based on key authorization, the device comprising: a key management module, a capacity expansion management module and a service node management module;

[0011] The key management module is used to generate and distribute keys for the capacity expansion task, and the keys are used to prove the legitimacy of the capacity expansion task;

[0012] The expansion management module is used to obtain the service group to be expanded corresponding to the expansion task; after the key passes the legitimacy verification, control the service node management module to execute the expansion task and expand the services in the service group to be expanded.

[0013] According to another aspect of an embodiment of the present application, a server is provided, comprising: a processor, a memory, a communication interface and a communication bus, wherein the processor, the memory and the communication interface communicate with each other through the communication bus; the memory is used to store at least one executable instruction, and the executable instruction enables the processor to perform operations corresponding to the capacity expansion method based on key authorization provided in the above aspect.

[0014] According to another aspect of an embodiment of the present application, a computer storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the capacity expansion method based on key authorization described in the above aspect is implemented.

[0015] According to another aspect of an embodiment of the present application, a computer program product is provided, wherein the computer program product includes computer instructions, and the computer instructions instruct a computer device to execute the capacity expansion method based on key authorization described in one aspect above.

[0016] According to the expansion method based on key authorization provided by the embodiment of the present application, before executing the expansion task, a key will be generated and distributed for the expansion task. After obtaining the service group to be expanded and confirming the expansion target of executing the expansion task, the key is used to verify the legality of executing the expansion task of the service expansion in the service group to be expanded. After the key passes the legality verification, the expansion task is executed to complete the service expansion in the service group to be expanded, prevent unauthorized expansion operations, avoid unauthorized access, and protect the security of sensitive data. This expansion method that introduces an authorization verification mechanism can also improve the transparency and controllability of the expansion operation, avoid resource abuse or configuration errors, and ensure the efficient and stable operation of the service system during the expansion process. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the embodiments of the present application. For ordinary technicians in this field, other drawings can also be obtained based on these drawings.

[0018] Figure 1 is a schematic diagram of an exemplary system used in one embodiment of the present application;

[0019] Figure 2 is a flow chart of a capacity expansion method based on key authorization according to an embodiment of the present application;

[0020] Figure 3 is a flow chart of a capacity expansion method based on key authorization according to an embodiment of the present application;

[0021] Figure 4 It is a schematic diagram of the interaction between various modules of an embodiment of the present application;

[0022] Figure 5 is a schematic diagram of a capacity expansion device based on key authorization according to an embodiment of the present application;

[0023] Figure 6 It is a schematic diagram of an electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0024] The present application is described below based on embodiments, but the present application is not limited to these embodiments. In the detailed description of the present application below, some specific details are described in detail. It is possible for a person skilled in the art to fully understand the present application without the description of these details. In order to avoid confusing the essence of the present application, known methods, processes, and flows are not described in detail. In addition, the drawings are not necessarily drawn to scale.

[0025] First, some nouns or terms that appear in the process of describing the embodiments of the present application are subject to the following explanations.

[0026] Service expansion refers to improving the system's processing power and performance by adding resources or cloud services when the existing system's resources cannot meet current usage requirements. The service expansion scenarios targeted by the embodiments provided in this application include but are not limited to: maintenance scenarios, where after a period of user use, the system finds that resources are about to be exhausted or performance cannot meet demand, and automatically solves the problem by expanding capacity; and new optional cloud service scenarios: when users need to use more cloud service functions, they can quickly complete the deployment of optional cloud services by expanding capacity.

[0027] Exemplary Systems

[0028] Figure 1 An exemplary computer system is shown, which includes a terminal device 101 , a wired or wireless network 102 , and a server 103 .

[0029] The terminal device 101 has an application installed and running. The terminal device 101 may be any electronic device, including but not limited to a smart phone, a tablet computer, a laptop computer, a desktop computer, and the like.

[0030] The terminal device 101 is connected to the server 103 via a wired or wireless network 102. A user can use the terminal device 101 to interact with the server 103 via the wired or wireless network 102 to receive or send messages.

[0031] The server 103 includes at least one of a single server, multiple servers, a cloud computing platform, and a virtualization center. The server 103 is used to support the operation of the application or the mini-program in the application on the terminal device 101, that is, the server 103 provides background services for the application or the mini-program. Optionally, the server 103 undertakes the main computing work and the terminal device 101 undertakes the secondary computing work; or, the server 103 undertakes the secondary computing work and the terminal device 101 undertakes the main computing work; or, the server 103 and the terminal device 101 adopt a distributed computing architecture for collaborative computing.

[0032] The server 103 is provided with a computing system, which includes: a key management module 11, an expansion management module 12, a service node management module 13 and a status feedback and audit module 14, which supports the execution of the expansion method based on key authorization provided in the embodiment of the present application. Exemplarily, the key management module 11 generates and distributes keys for the expansion task. After the expansion management module 12 obtains the service group to be expanded corresponding to the expansion task, it collaborates with the key management module 11 to complete the legitimacy verification of the operation of executing the expansion task on the service group to be expanded. After the key passes the legitimacy verification, the service node management module 13 is controlled to execute the expansion task to expand the service in the service group to be expanded. In the process of executing the above expansion method, the status feedback and audit module 14 tracks and records the process information, including the generation and distribution of keys, the verification of keys, the creation of containers and other process information, and provides real-time feedback and audit functions.

[0033] It should be noted that Figure 1 The terminal devices, wired or wireless networks and servers shown, as well as the number of terminal devices and servers are only illustrative. Any number of terminal devices and servers may be provided according to implementation requirements.

[0034] Expansion method based on key authorization

[0035] Based on the above system, an embodiment of the present application provides a capacity expansion method based on key authorization, which can be executed by the server in the above system embodiment. The method is described in detail through multiple embodiments below.

[0036] Figure 2 FIG. 1 is a flow chart of a capacity expansion method based on key authorization according to an embodiment of the present application. Figure 2 As shown, the method comprises the following steps:

[0037] Step 201, generate and distribute keys for the capacity expansion task, and the keys are used to prove the legitimacy of the capacity expansion task.

[0038] The server monitors the service load in real time and generates capacity expansion tasks based on the service load. For example, a capacity expansion management module is set up in the server to manage various operations related to capacity expansion in the server. The capacity expansion management module monitors the service load in real time; when the server cannot support the operation of the current service load, the execution of the capacity expansion task is triggered; or when the server cannot support the operation of the newly added load, the execution of the capacity expansion task is triggered.

[0039] The server is also provided with a key management module for authorization management of various operations in the server, including authorization management of expansion tasks. During the expansion process, the server generates and distributes keys for the expansion tasks through the key management module, and each expansion task has a unique key. The key of the expansion task can be obtained by the expansion management module requesting the key management module.

[0040] The key is generated before the expansion task is started and is used to verify the legitimacy of the expansion task. For example, the key of the expansion task can be generated by the key management module and distributed to the expansion management module before the expansion task is generated, and then the expansion management module generates the expansion task with the key. Alternatively, the key management module can generate and distribute the key for the expansion task after the expansion task is generated and before the expansion task is started.

[0041] An authorization interface is provided between the capacity expansion management module and the key management module. After generating the key, the key management module sends the key to the capacity expansion management module through the authorization interface.

[0042] Step 202: Obtain the service group to be expanded corresponding to the expansion task.

[0043] The service groups to be expanded in the server include one or more (i.e., at least one). Each service group to be expanded contains one or more services, and each service corresponds to one or more service nodes. Among them, "multiple" means two or more. The server obtains the service group to be expanded to be executed by this expansion task through the expansion management module, clarifies the goal and scope of the expansion task, and lays the foundation for subsequent service expansion operations.

[0044] The service group to be expanded may be part or all of the service groups deployed in the server.

[0045] Step 203: After the key passes the validity verification, the capacity expansion task is executed to expand the services in the service group to be expanded.

[0046] The server performs the legitimacy verification of the capacity expansion task through the interaction between the capacity expansion management module and the key management module. After the key passes the legitimacy verification, the capacity expansion task is executed to expand the services in the capacity expansion service group.

[0047] The server is also provided with a service node management module, which is used to manage the relevant operations of each service node, including the expansion operation of each service node. Optionally, the server sends a verification request to the key management module through the expansion management module, and the verification request carries a key; the verification request is received through the key management module, and the legitimacy of the expansion task is verified according to the key carried in the verification request; after the key passes the legitimacy verification, the authorization certificate is sent to the expansion management module; after the authorization certificate is received through the expansion management module, the expansion strategy of the service group to be expanded is determined, and the service node management module is controlled to execute the expansion task according to the expansion strategy.

[0048] After receiving the authorization certificate fed back by the key management module, the expansion management module can control the service node management module to perform the expansion task by generating and sending instructions. Exemplarily, the server generates an expansion instruction according to the authorization certificate and the expansion policy through the expansion management module, and sends the expansion instruction to the service node management module; after receiving the expansion instruction through the service node management module, the expansion task is performed according to the expansion policy.

[0049] The above-mentioned authorization certificate is used to authorize the capacity expansion management module to generate a capacity expansion instruction. The capacity expansion management module will generate the capacity expansion instruction only after receiving the authorization certificate; or, the above-mentioned authorization instruction is used to authorize the service node management module to perform the capacity expansion task. The service node management module detects the authorization certificate in the received capacity expansion instruction and performs the capacity expansion task according to the instruction of the capacity expansion instruction; or, the above-mentioned authorization certificate is used to both authorize the capacity expansion management module to generate the capacity expansion instruction and authorize the service node management module to perform the capacity expansion task. After receiving the authorization certificate, the capacity expansion management module generates the capacity expansion instruction carrying the authorization certificate. The service node management module detects the authorization certificate in the received capacity expansion instruction and performs the capacity expansion task according to the instruction of the capacity expansion instruction.

[0050] For the generation of the expansion strategy, the server polls the service group to be expanded through the expansion management module to obtain the number of service nodes of each service in the service group to be expanded; the expansion strategy is determined according to the number of service nodes of each service. Among them, the service node can be understood as a service instance (Service). Whenever a service is polled, the number of service nodes currently contained in the service is automatically obtained, and finally the number of service nodes corresponding to each service in the service group to be expanded is obtained; the expansion strategy is generated according to the number of service nodes corresponding to each service in the service group to be expanded.

[0051] In summary, the capacity expansion method based on key authorization provided in this embodiment will generate and distribute keys for the capacity expansion task before executing the capacity expansion task. After obtaining the service group to be expanded and confirming the expansion target of executing the capacity expansion task, the key is used to verify the legality of executing the capacity expansion task for the service in the service group to be expanded. After the key passes the legality verification, the capacity expansion task is executed to complete the capacity expansion of the service in the service group to be expanded, ensuring that only authorized capacity expansion tasks can perform capacity expansion operations, preventing unauthorized capacity expansion operations, avoiding unauthorized access, and protecting the security of sensitive data. This capacity expansion method that introduces an authorization verification mechanism allows administrators to manage and control the use of keys, which can improve the transparency and controllability of capacity expansion operations, avoid resource abuse or configuration errors, and ensure efficient and stable operation of the service system during the capacity expansion process.

[0052] In some embodiments, Figure 2 Based on the embodiment shown, the expansion strategy can realize the allocation of dynamic containers. As recorded in the following content, the expansion task is executed according to the expansion strategy, including:

[0053] The first step is to create service containers for multiple service nodes of each service in the service group to be expanded according to the instructions of the expansion strategy.

[0054] The server can perform the capacity expansion task according to the instructions of the capacity expansion strategy through the service node management module. First, the service node management module generates a capacity expansion task table according to the instructions of the capacity expansion strategy. The capacity expansion task table records the service containers to be created and the creation status of each service container. The service containers to be created include the service containers corresponding to the multiple service nodes of each service; according to the capacity expansion task table, a service container is created for the multiple service nodes of each service.

[0055] The service containers that have not been created in the expansion task table are marked as "to be created"; the service containers that have been created are marked as "created". The server scans the expansion task table once every set time, such as 3 seconds, 4 seconds, or 5 seconds, until the creation status of each service container in the expansion task table is "created".

[0056] The expansion strategy includes creating service containers that match the number of service nodes. For example, the service node management module uses container management tools (such as Kubernetes, an open source containerized application for managing multiple hosts in a cloud platform) to create service containers that match the number of service nodes.

[0057] In the second step, the following version release processing is performed on each service in the service group to be expanded: obtain the version information of each service node in the multiple service nodes of the service, count the number of service nodes corresponding to each version information, and determine the version information corresponding to the maximum number of service nodes as the target version information; release the service container corresponding to the service according to the target version information, load the application corresponding to the target version information into the service container corresponding to the service, and start the service container corresponding to the service.

[0058] After the service container is created, the service container will be released. For each service in the service group to be expanded, if there are one or more service nodes under the service, there is a main service node among the one or more service nodes, and a monitoring table is set in the main service node. The monitoring table is used to monitor and manage the service container corresponding to the service node under the service in real time; the service node management module can obtain the version information of each service node under the service through the monitoring table. The application version used by the service node under the service can exist in one or more. If there are multiple versions, it is necessary to count the number of service nodes corresponding to each version information under the service, and determine the version information corresponding to the maximum number of service nodes as the target version information; then, according to the target version information, the service container corresponding to the multiple service nodes under the service is released.

[0059] The version information of the service node refers to the version number of the software running on the service node, which is used to identify different versions of the software. The version number of the server software usually consists of multiple parts, including the major version number, minor version number, revision number and build number.

[0060] The multiple service nodes corresponding to each service include the main service node. Before executing the release process, the following registration process is performed on each service: the service containers corresponding to the multiple service nodes of the service are registered in the monitoring table of the main service node, so as to monitor and manage the service containers corresponding to the multiple service nodes of the service in real time. That is, after the container is created, the target version information is first determined, and then the service node management module registers the newly created service container to the main service node, and then executes the release operation.

[0061] The method can perform service expansion operations according to the actual load conditions in the server and realize dynamic container allocation.

[0062] In other embodiments, based on the various embodiments described above, a status feedback and audit module is further provided in the server to record process information when the expansion task is executed. The server will record the process information of the expansion management module and the service node management module executing the expansion task through the status feedback and audit module. The process information of executing the expansion task includes: process information of key generation, distribution and verification, and status information of container creation and release. The status feedback and audit module will store the above process information in the log so that the administrator can conduct audits and troubleshoot problems. In addition, the information recorded in the log can also help optimize the expansion strategy and provide effective support for the security management of the system.

[0063] For example, Figure 3 , the implementation process of the expansion method based on key authorization is schematically described. The process of implementing this method by the server is as follows:

[0064] Step 301, generate and distribute keys for the capacity expansion task.

[0065] Step 302: Obtain the service group to be expanded corresponding to the expansion task.

[0066] Step 303: verify the key to confirm the legitimacy of the capacity expansion task.

[0067] Step 304: after the key verification is passed, poll the service group to be expanded to obtain the number of service nodes corresponding to each service in the service group to be expanded.

[0068] Step 305: Create a service container according to the number of service nodes corresponding to each service.

[0069] Step 306: Determine the target version information corresponding to each service according to the version information corresponding to the service node of each service.

[0070] Step 307: For each service, register the newly created service container to the primary service node.

[0071] Step 308: According to the target version information corresponding to each service, a release operation is performed on the service container registered under each service.

[0072] Step 309: Perform status feedback and audit based on the log information of the capacity expansion task.

[0073] like Figure 4 As shown, the interaction of each module during the execution of the above process is also schematically illustrated. The server includes a key management module 11, a capacity expansion management module 12, a service node management module 13 and a status feedback and audit module 14.

[0074] The key management module 11 generates a key and distributes it to the capacity expansion management module 12. Before starting the capacity expansion task, the capacity expansion management module 12 verifies the legitimacy of the capacity expansion task to the key management module 11 through the key. After the key verification is passed, the capacity expansion management module 12 requests the service node management module 13 to manage the service node. The service node management module 13 collaborates with the capacity expansion management module 12 to create and register containers.

[0075] The capacity expansion management module 12 feeds back the log information generated during the interaction with the key management module 11 and the service node management module 13, such as the status update information of container creation and registration, to the status feedback and audit module 14 for recording. The service node management module 13 feeds back the log information generated during the interaction with the capacity expansion management module 12, such as the status information of the service node, to the status feedback and audit module 14 for recording.

[0076] In summary, the expansion method based on key authorization provided in the embodiment of the present application, by introducing a key management and authorization verification mechanism, enables the expansion operation to be scaled while maintaining strict access control, significantly improving the security of the system and the legitimacy of the operation during dynamic expansion. This mechanism ensures that all expansion operations must undergo strict key generation and authorization verification before execution, and only authorized tasks can be carried out, fundamentally eliminating the security threats that may be caused by unauthorized expansion operations.

[0077] This is different from the traditional dynamic expansion method, which often lacks effective control over the expansion operation and easily leads to malicious or erroneous operation of the system. The present invention provides a unique authorization key for each expansion operation through the key management function, and verifies the legitimacy of the operation in real time through the key management module of the system, ensuring that the expansion task is performed in a safe and controlled environment. In addition, the key generation, distribution, verification and other processes are recorded in detail to support subsequent audits and troubleshooting, thereby further improving the transparency and security of the system and ensuring the safe and stable operation of the system in large-scale expansion scenarios.

[0078] Capacity expansion device based on key authorization

[0079] Corresponding to the above method embodiment, Figure 5 FIG. 1 shows a schematic diagram of a capacity expansion device based on key authorization. Figure 5 As shown, the capacity expansion device based on key authorization includes: a key management module 501, a capacity expansion management module 502 and a service node management module 503;

[0080] The key management module 501 is used to generate and distribute keys for the capacity expansion task, and the keys are used to prove the legitimacy of the capacity expansion task;

[0081] The expansion management module 502 is used to obtain the service group to be expanded corresponding to the expansion task; after the key passes the legitimacy verification, the control service node management module 503 executes the expansion task to expand the services in the service group to be expanded.

[0082] In some embodiments, the expansion management module 502 is used to send a verification request to the key management module 501, and the verification request carries a key;

[0083] The key management module 501 is used to receive a verification request and verify the legitimacy of the expansion task according to the key carried in the verification request; after the key passes the legitimacy verification, the authorization certificate is sent to the expansion management module 502;

[0084] The capacity expansion management module 502 is used to determine the capacity expansion strategy of the service group to be expanded after receiving the authorization certificate, and control the service node management module 503 to execute the capacity expansion task according to the capacity expansion strategy.

[0085] In some embodiments, the capacity expansion management module 502 is used to poll the service group to be expanded to obtain the number of service nodes of each service in the service group to be expanded; and determine the capacity expansion strategy according to the number of service nodes of each service.

[0086] In some embodiments, the capacity expansion management module 502 is used to generate a capacity expansion instruction according to the authorization credential and the capacity expansion policy, and send the capacity expansion instruction to the service node management module 503;

[0087] The service node management module 503 is used to execute the capacity expansion task according to the capacity expansion strategy after receiving the capacity expansion instruction.

[0088] In some embodiments, the service node management module 503 is used to create service containers for multiple service nodes of each service in the service group to be expanded in accordance with the instructions of the expansion strategy; and perform the following versioning processing on each service in the service group to be expanded: obtain the version information of each service node in the multiple service nodes of the service, count the number of service nodes corresponding to each version information, and determine the version information corresponding to the maximum number of service nodes as the target version information; publish the service container corresponding to the service according to the target version information, load the application corresponding to the target version information into the service container corresponding to the service, and start the service container corresponding to the service.

[0089] In some embodiments, the service node management module 503 is used to generate an expansion task table in accordance with the instructions of the expansion strategy. The expansion task table records the service containers to be created and the creation status of each service container. The service containers to be created include service containers corresponding to multiple service nodes of each service; according to the expansion task table, service containers are created for multiple service nodes of each service.

[0090] In some embodiments, the plurality of service nodes corresponding to the service include a primary service node;

[0091] The service node management module 503 is used to perform the following registration processing on each service before executing the release processing: register the service containers corresponding to multiple service nodes of the service into the monitoring table of the main service node to monitor and manage the service containers corresponding to multiple service nodes of the service in real time.

[0092] In some embodiments, the server further includes a status feedback and audit module 504;

[0093] The status feedback and audit module 504 is used to record the process information of the capacity expansion management module 502 and the service node management module 503 executing the capacity expansion task.

[0094] In some embodiments, the key management module 501 is used to generate and distribute keys for expansion tasks;

[0095] The capacity expansion management module 502 is used to obtain the service group to be expanded corresponding to the capacity expansion task.

[0096] It should be noted that the capacity expansion device based on key authorization in this embodiment is used to implement the corresponding capacity expansion method based on key authorization in the aforementioned method embodiment, and has the beneficial effects of the corresponding method embodiment, which will not be repeated here.

[0097] Electronic devices

[0098] Figure 6 is a schematic block diagram of an electronic device provided in an embodiment of the present application. The specific embodiment of the present application does not limit the specific implementation of the electronic device. The electronic device may be a server. Figure 6 As shown, the electronic device may include: a processor (processor) 602, a communication interface (Communications Interface) 604, a memory (memory) 606, and a communication bus 608. Among them:

[0099] The processor 602 , the communication interface 604 , and the memory 606 communicate with each other via a communication bus 608 .

[0100] The communication interface 604 is used to communicate with other electronic devices or servers.

[0101] The processor 602 is used to execute the program 610, and specifically can execute the relevant steps in any of the aforementioned key authorization-based expansion method embodiments.

[0102] Specifically, the program 610 may include program codes, which include computer operation instructions.

[0103] The processor 602 may be a CPU, or an application specific integrated circuit ASIC (Application Specific Integrated Circuit), or one or more integrated circuits configured to implement the embodiments of the present application. The one or more processors included in the smart device may be processors of the same type, such as one or more CPUs; or processors of different types, such as one or more CPUs and one or more ASICs.

[0104] RISC-V is an open source instruction set architecture based on the Reduced Instruction Set (RISC) principle. It can be applied to various aspects such as single-chip microcomputers and FPGA chips. Specifically, it can be applied to the fields of IoT security, industrial control, mobile phones, personal computers, etc., and because it is designed with small, fast, and low-power realities in mind, it is particularly suitable for modern computing devices such as warehouse-scale cloud computers, high-end mobile phones, and tiny embedded systems. With the rise of artificial intelligence Internet of Things (AIoT), the RISC-V instruction set architecture has also received more and more attention and support, and is expected to become the next generation of widely used CPU architecture.

[0105] The computer operation instructions in the embodiment of the present application may be computer operation instructions based on the RISC-V instruction set architecture, and correspondingly, the processor 602 may be designed based on the RISC-V instruction set. Specifically, the chip of the processor in the electronic device provided in the embodiment of the present application may be a chip designed with the RISC-V instruction set, and the chip may execute executable code based on the configured instructions, thereby realizing the expansion method based on key authorization in the above embodiment.

[0106] The memory 606 is used to store the program 610. The memory 606 may include a high-speed RAM memory, and may also include a non-volatile memory (non-volatile memory), such as at least one disk memory.

[0107] The program 610 may be specifically used to enable the processor 602 to execute the capacity expansion method based on key authorization in any of the aforementioned embodiments.

[0108] The specific implementation of each step in program 610 can refer to the corresponding description in the corresponding steps and units in any of the aforementioned expansion method embodiments based on key authorization, which will not be repeated here. Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working process of the above-described devices and modules can refer to the corresponding process description in the aforementioned method embodiment, which will not be repeated here.

[0109] Computer storage media

[0110] The present application also provides a computer-readable storage medium storing instructions for causing a machine to execute the capacity expansion method based on key authorization as described herein. Specifically, a system or device equipped with a storage medium can be provided, on which a software program code implementing the functions of any of the above embodiments is stored, and a computer (or CPU or MPU) of the system or device reads and executes the program code stored in the storage medium.

[0111] In this case, the program code read from the storage medium itself can implement the function of any one of the above embodiments, so the program code and the storage medium storing the program code constitute part of the present application.

[0112] The storage medium embodiments for providing the program code include a floppy disk, a hard disk, a magneto-optical disk, an optical disk (such as CD-ROM, CD-R, CD-RW, DVD-ROM, DVD-RAM, DVD-RW, DVD+RW), a magnetic tape, a non-volatile memory card, and a ROM. Alternatively, the program code can be downloaded from a server computer by a communication network.

[0113] Computer program product

[0114] An embodiment of the present application also provides a computer program product, including computer instructions, which instruct a computing device to perform any corresponding operation in the above-mentioned multiple method embodiments.

[0115] It should be pointed out that, according to the needs of implementation, the various components / steps described in the embodiments of the present application can be split into more components / steps, or two or more components / steps or partial operations of components / steps can be combined into new components / steps to achieve the purpose of the embodiments of the present application.

[0116] The above-mentioned method according to the embodiment of the present application can be implemented in hardware, firmware, or implemented as software or computer code that can be stored in a recording medium (such as a CD ROM, RAM, floppy disk, hard disk or magneto-optical disk), or implemented as a computer code originally stored in a remote recording medium or a non-temporary machine-readable medium downloaded through a network and to be stored in a local recording medium, so that the method described herein can be stored in such software processing on a recording medium using a general-purpose computer, a special-purpose processor or programmable or special-purpose hardware (such as an ASIC or FPGA). It can be understood that a computer, a processor, a microprocessor controller or programmable hardware includes a storage component (e.g., RAM, ROM, flash memory, etc.) that can store or receive software or computer code, and when the software or computer code is accessed and executed by a computer, a processor or hardware, the method described herein is implemented. In addition, when a general-purpose computer accesses the code for implementing the method shown here, the execution of the code converts the general-purpose computer into a special-purpose computer for executing the method shown here.

[0117] Those of ordinary skill in the art will appreciate that the units and method steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the embodiments of the present application.

[0118] The above implementation methods are only used to illustrate the embodiments of the present application, and are not limitations on the embodiments of the present application. Ordinary technicians in the relevant technical field can make various changes and modifications without departing from the spirit and scope of the embodiments of the present application. Therefore, all equivalent technical solutions also belong to the scope of the embodiments of the present application. The scope of patent protection of the embodiments of the present application should be limited by the claims.

Claims

1. A capacity expansion method based on key authorization, characterized in that: The method comprises: Generate and distribute keys for capacity expansion tasks, where the keys are used to prove the legitimacy of the capacity expansion tasks; Obtaining the service group to be expanded corresponding to the expansion task; After the key passes the legality verification, the capacity expansion task is executed to expand the services in the service group to be expanded.

2. The method according to claim 1, characterized in that Applied in a server, the server includes a capacity expansion management module, a key management module and a service node management module; After the key passes the legality verification, executing the capacity expansion task includes: Sending a verification request to the key management module through the expansion management module, wherein the verification request carries the key; The key management module receives the verification request and verifies the legitimacy of the capacity expansion task according to the key carried in the verification request; after the key passes the legitimacy verification, the authorization certificate is sent to the capacity expansion management module; After receiving the authorization certificate through the expansion management module, the expansion strategy of the service group to be expanded is determined, and the service node management module is controlled to execute the expansion task according to the expansion strategy.

3. The method according to claim 2, characterized in that The determining, by the capacity expansion management module, a capacity expansion strategy for the service group to be expanded includes: The capacity expansion management module polls the service group to be expanded to obtain the number of service nodes of each service in the service group to be expanded; and the capacity expansion strategy is determined according to the number of service nodes of each service.

4. The method according to claim 2, characterized in that: The controlling the service node management module to perform the capacity expansion task according to the capacity expansion strategy through the capacity expansion management module includes: Generate a capacity expansion instruction according to the authorization credential and the capacity expansion strategy by the capacity expansion management module, and send the capacity expansion instruction to the service node management module; After receiving the capacity expansion instruction through the service node management module, the capacity expansion task is executed according to the capacity expansion strategy.

5. The method according to any one of claims 2 to 4, characterized in that: The performing the capacity expansion task according to the capacity expansion strategy includes: Creating a service container for multiple service nodes of each service in the service group to be expanded according to the instruction of the expansion strategy; The following release process is performed on each service in the service group to be expanded: Obtain version information of each service node among multiple service nodes of the service, count the number of service nodes corresponding to each version information, and determine the version information corresponding to the maximum number of service nodes as the target version information; publish a service container corresponding to the service according to the target version information, load the application corresponding to the target version information into the service container corresponding to the service, and start the service container corresponding to the service.

6. The method according to claim 5, characterized in that The step of creating a service container for a plurality of service nodes of each service in the service group to be expanded according to the instruction of the expansion strategy includes: Generate an expansion task table according to the instruction of the expansion strategy, wherein the expansion task table records the service containers to be created and the creation status of each service container, and the service containers to be created include service containers corresponding to multiple service nodes of each service; According to the capacity expansion task table, a service container is created for the multiple service nodes of each service.

7. The method according to claim 5, characterized in that The multiple service nodes corresponding to the service include a primary service node, and the method further includes: Before executing the release process, the following registration process is performed on each service: The service containers corresponding to the multiple service nodes of the service are registered in the monitoring table of the main service node, so as to monitor and manage the service containers corresponding to the multiple service nodes of the service in real time.

8. The method according to any one of claims 2 to 4, characterized in that: The server includes a status feedback and audit module; The method further comprises: The state feedback and audit module records the process information of the capacity expansion management module and the service node management module executing the capacity expansion task.

9. The method according to any one of claims 2 to 4, characterized in that: The generating and distributing keys for the capacity expansion task includes: generating and distributing the keys for the capacity expansion task by the key management module; The acquiring the service group to be expanded corresponding to the capacity expansion task includes: acquiring the service group to be expanded corresponding to the capacity expansion task through the capacity expansion management module.

10. A capacity expansion device based on key authorization, characterized in that: The device comprises: a key management module, a capacity expansion management module and a service node management module; The key management module is used to generate and distribute keys for the capacity expansion task, and the keys are used to prove the legitimacy of the capacity expansion task; The expansion management module is used to obtain the service group to be expanded corresponding to the expansion task; after the key passes the legitimacy verification, control the service node management module to execute the expansion task and expand the services in the service group to be expanded.

11. A server, characterized in that: The server comprises: a processor, a memory, a communication interface and a communication bus, wherein the processor, the memory and the communication interface communicate with each other via the communication bus; The memory is used to store at least one executable instruction, and the executable instruction enables the processor to perform operations corresponding to the capacity expansion method based on key authorization as described in any one of claims 1-9.

12. A computer storage medium, characterized in that: The computer storage medium stores a computer program, and when the computer program is executed by the processor, the capacity expansion method based on key authorization as described in any one of claims 1 to 9 is implemented.

Images