Resource management method based on cloud management platform and cloud management platform

Abstract

The invention discloses a resource management method based on a cloud management platform and the cloud management platform. The experience of a resource owner can be improved. The method comprises the following steps that: when a resource owner needs to customize use conditions for a plurality of cloud resources, the resource owner can send the use conditions to a cloud management platform, and the use conditions can comprise conditions required to be met by the plurality of cloud resources; the conditions required to be met by the resource user and the conditions required to be met by the operations executed by the resource user on the plurality of cloud resources. When a target resource user needs to use a target cloud resource of a plurality of cloud resources, the target resource user can send a resource use request to the cloud management platform, and the resource use request is used for indicating that the target resource user needs to execute a target operation on the target cloud resource. Therefore, the cloud management platform can detect whether the target cloud resource, the target resource user and the target operation meet the use condition or not, and if yes, the cloud management platform allows the target resource user to execute the target operation on the target cloud resource.

Description

[0001] This application claims the priority of a Chinese patent application with the application number 202311813697.X and the application title "A Resource Sharing Method and a Cloud Management Platform Based on a Cloud Management Platform" submitted to the National Intellectual Property Administration on December 26, 2023, the entire content of which is incorporated herein by reference. Technical Field

[0002] Embodiments of this application relate to the field of cloud technologies, and in particular, to a resource management method and a cloud management platform based on a cloud management platform. Background Art

[0003] To meet the needs of cloud tenants for resource sharing, cloud providers can use the Resource Access Manager (RAM) technology to enable the cloud resources of resource owners to be used by resource users, thereby realizing cloud resource sharing.

[0004] In related technologies, a cloud service system may include a cloud management platform and multiple cloud resources of resource owners. For the multiple cloud resources of resource owners, the resource owners can specify to the cloud management platform which part of these multiple cloud resources can be shared with resource users. In this way, when a resource user needs to use the cloud resources of a resource owner, the cloud management platform can provide this part of the cloud resources for the resource user to use, thereby realizing cloud resource sharing.

[0005] However, due to the limited RAM function of the cloud management platform, resource owners are unable to achieve more refined and flexible management of the resource sharing process, unable to meet the active management needs of resource owners for resource sharing, resulting in a low experience. Summary of the Invention

[0006] Embodiments of this application provide a resource management method and a cloud management platform based on a cloud management platform, which can enable resource owners to manage various aspects of the resource sharing process more refinedly and flexibly, so as to meet the active management needs of resource owners for resource sharing, thereby improving their experience.

[0007] The first aspect of the embodiments of this application provides a resource management method based on a cloud management platform. The cloud management platform used to implement this method can manage the infrastructure that provides cloud services, and these infrastructures include multiple cloud resources of resource owners. The method includes:

[0008] When a resource owner needs to set usage conditions for multiple of its cloud resources, the cloud management platform can provide a resource management interface to the resource owner. The resource owner can input into the resource management interface the usage conditions it has set for its multiple cloud resources. Therefore, the cloud management platform can receive the usage conditions through the resource management interface. Among them, the access conditions can include one or more of the following three types of conditions: the conditions that multiple cloud resources need to meet, the conditions that resource users need to meet, and the conditions that the operations performed by resource users on multiple cloud resources need to meet.

[0009] After obtaining the usage conditions set by the resource owner for its multiple cloud resources, the cloud management platform can store the usage conditions. When a target resource user needs to use a target cloud resource among the multiple cloud resources of the resource owner, the target resource user can send a resource usage request to the cloud management platform. The resource usage request is used to indicate that the target resource user needs to perform a target operation on the target cloud resource.

[0010] After receiving the resource usage request, the cloud management platform can parse the resource usage request to determine that the target resource user needs to perform a target operation on the target cloud resource among the multiple cloud resources. Therefore, the cloud management platform can obtain the usage conditions customized by the resource owner for the multiple cloud resources. Then, the cloud management platform can detect whether at least one of the target resource cloud resource, the target resource user, and the target operation meets the corresponding conditions included in the usage conditions.

[0011] If it is satisfied, the cloud management platform can allow the target resource user to perform the target operation on the target cloud resource. If it is not satisfied, the cloud management platform does not allow the target resource user to perform the target operation on the target cloud resource.

[0012] From the above method, it can be seen that: since the usage conditions set by the resource owner for its multiple cloud resources include at least one of the conditions that multiple cloud resources need to meet, the conditions that resource users need to meet, and the conditions that operations need to meet. Therefore, when a target resource user needs to perform a target operation on a target cloud resource among multiple cloud resources, the cloud management platform can detect whether at least one of the target resource user, the target cloud resource, and the target operation meets the usage conditions, so as to determine whether to allow the target resource user to perform the target operation on the target cloud resource. It can be seen that the objects that the usage conditions face can include not only cloud resources, but also resource users and operations. That is, the resource owner considers relatively comprehensive factors when setting the usage conditions, so as to achieve more refined and flexible management of all aspects (such as cloud resources, resource users, and operations, etc.) in the resource sharing process, to meet the active management needs of the resource owner for resource sharing, thereby improving its experience.

[0013] In a possible implementation, the conditions that multiple cloud resources need to meet include: the time periods during which each of the multiple cloud resources can be used; the resource usage request includes: the time period during which the target resource user uses the target resource. In the foregoing implementation, if the usage conditions customized by the tenant for its multiple cloud resources include the conditions that each of the multiple cloud resources needs to meet, the conditions that each cloud resource needs to meet usually can include the time periods during which each cloud resource can be used. Correspondingly, the resource usage request sent by the target resource user usually will include the time period during which the target resource user uses the target resource. Therefore, the cloud management platform can accurately determine whether the target cloud resource meets the usage condition based on these two time periods.

[0014] In a possible implementation, the conditions that a resource user needs to meet include: the preset identity set of the resource user; the resource usage request includes: the identity of the target resource user. In the foregoing implementation, if the usage conditions customized by the tenant for its multiple cloud resources include the conditions that the resource user needs to meet, the conditions that the resource user needs to meet usually can include the preset identity set of the resource user. Correspondingly, the resource usage request sent by the target resource user usually will include the identity of the target resource user. Therefore, the cloud management platform can accurately determine whether the target resource user meets the usage condition based on this identity set and this identity.

[0015] In a possible implementation, the conditions that the operations performed by a resource user on multiple cloud resources need to meet include: the operation sets that the resource user can perform on each of the multiple cloud resources; the resource usage request includes: the target operation that the target resource user needs to perform on the target resource. In the foregoing implementation, if the usage conditions customized by the tenant for its multiple cloud resources include the conditions that the operations performed by the resource user on the multiple cloud resources need to meet, the conditions that the operations performed by the resource user on the multiple cloud resources need to meet usually can include the operation sets that the resource user can perform on each of the multiple cloud resources. Correspondingly, the resource usage request sent by the target resource user usually will include the target operation that the target resource user needs to perform on the target resource. Therefore, the cloud management platform can accurately determine whether the target operation meets the usage condition based on this operation set and this operation.

[0016] In a possible implementation, the cloud management platform, based on the resource usage request, detects whether at least one of the target resource (cloud resource), the target resource user, and the target operation meets the usage conditions, including: the cloud management platform, based on the resource usage request, detects whether at least one of the following is met: the time period during which the target resource user uses the target resource includes the time period during which the target cloud resource can be used, the identity of the target resource user is in the preset identity set of the resource users, and the target operation is in the operation set that the resource user can perform on the target resource. In the foregoing implementation, since the usage conditions set by the resource owner for its multiple cloud resources may include at least one of the following: the time period during which each cloud resource in the multiple cloud resources can be used, the preset identity set of the resource users, and the operation set that the resource user can perform on each cloud resource in the multiple cloud resources. Then, the cloud management platform, based on the resource usage request, detects whether at least one of the following is met: the time period during which the target resource user uses the target resource includes the time period during which the target cloud resource can be used, the identity of the target resource user is in the preset identity set of the resource users, and the target operation is in the operation set that the resource user can perform on the target resource, thereby achieving hierarchical control over cloud resources, resource users, and operations.

[0017] In a possible implementation, each of the multiple cloud resources includes at least one cloud instance, and the cloud instance is any one of the following: a physical server, a virtual machine, a container, a micro virtual machine, and a bare metal server.

[0018] In a possible implementation, the multiple cloud resources are located in the same site or different sites, and the site is any one of the following: a region, an availability zone, a data center, a computer room, and a cabinet.

[0019] A second aspect of the embodiments of the present application provides a cloud management platform. The cloud management platform is used to provide the infrastructure for cloud services. The infrastructure includes multiple cloud resources of the resource owner. The cloud management platform includes: a first receiving module, configured to receive, through a resource management interface, usage conditions for the multiple cloud resources from the resource owner, where the usage conditions include at least one of the following: conditions that the multiple cloud resources need to meet, conditions that the resource user needs to meet, and conditions that the operations performed by the resource user on the multiple cloud resources need to meet; a second receiving module, configured to receive a resource usage request from the target resource user, where the resource usage request is used to indicate that the target resource user needs to perform a target operation on the target cloud resource among the multiple cloud resources; and a control module, configured to, based on the resource usage request, detect whether at least one of the target resource (cloud resource), the target resource user, and the target operation meets the usage conditions. If so, the cloud management platform allows the target resource user to perform the target operation on the target cloud resource.

[0020] In a possible implementation, the conditions that multiple cloud resources need to meet include: the time periods during which each of the multiple cloud resources can be used; the resource usage request includes: the time period during which the target resource user uses the target resource.

[0021] In a possible implementation, the conditions that a resource user needs to meet include: the preset identity set of the resource user; the resource usage request includes: the identity of the target resource user.

[0022] In a possible implementation, the conditions that the operations performed by a resource user on multiple cloud resources need to meet include: the set of operations that the resource user can perform on each of the multiple cloud resources; the resource usage request includes: the target operation that the target resource user needs to perform on the target resource.

[0023] In a possible implementation, a control module is configured to: based on the resource usage request, detect whether at least one of the following is satisfied: the time period during which the target resource user uses the target resource includes the time period during which the target cloud resource can be used, the identity of the target resource user is in the preset identity set of the resource user, and the target operation is in the set of operations that the resource user can perform on the target resource.

[0024] In a possible implementation, each of the multiple cloud resources includes at least one cloud instance, and the cloud instance is any one of the following: a physical server, a virtual machine, a container, a micro virtual machine, and a bare metal server.

[0025] In a possible implementation, the multiple cloud resources are located in the same site or different sites, and the site is any one of the following: a region, an availability zone, a data center, a computer room, and a cabinet.

[0026] A third aspect of the embodiments of the present application provides a computing device cluster, which includes at least one computing device, and each computing device includes a processor and a memory: the memory is used to store instructions; the processor is configured to, according to the instructions, enable the computing device cluster to execute the method described in the first aspect or any possible implementation manner in the first aspect.

[0027] A fourth aspect of the embodiments of the present application provides a computer storage medium, which stores one or more instructions, and when the instructions are executed by one or more computers, the one or more computers are enabled to implement the method described in the first aspect or any possible implementation manner in the first aspect.

[0028] A fifth aspect of the embodiments of the present application provides a computer program product, which stores instructions, and when the instructions are executed by a computer, the computer is enabled to implement the method described in the first aspect or any possible implementation manner in the first aspect.

[0029] In an embodiment of the present application, when a resource owner needs to customize usage conditions for multiple of its cloud resources, the resource owner can input the usage conditions customized for the multiple cloud resources into the resource management interface provided by the cloud management platform. The usage conditions may include at least one of the following: conditions that the multiple cloud resources need to meet, conditions that the resource user needs to meet, and conditions that the operations performed by the resource user on the multiple cloud resources need to meet. When a target resource user needs to use the target cloud resource among the multiple cloud resources, the target resource user can send a resource usage request to the cloud management platform. Since the resource usage request is used to indicate that the target resource user needs to perform a target operation on the target cloud resource among the multiple cloud resources, the cloud management platform can detect whether at least one of the target resource cloud resource, the target resource user, and the target operation meets the usage conditions. If so, the cloud management platform allows the target resource user to perform the target operation on the target cloud resource. In the foregoing process, since the usage conditions formulated by the resource owner for its multiple cloud resources include at least one of the conditions that the multiple cloud resources need to meet, the conditions that the resource user needs to meet, and the conditions that the operations need to meet, when the target resource user needs to perform a target operation on the target cloud resource among the multiple cloud resources, the cloud management platform can detect whether at least one of the target resource user, the target cloud resource, and the target operation meets the usage conditions, so as to determine whether to allow the target resource user to perform the target operation on the target cloud resource. It can be seen that the object to which the resource owner can make the usage conditions applicable can include not only cloud resources, but also resource users and operations. That is, when formulating the usage conditions, the resource owner considers relatively comprehensive factors, so as to achieve more refined and flexible management of all aspects (i.e., cloud resources, resource users, operations, etc.) in the resource sharing process, to meet the active management needs of the resource owner for resource sharing, thereby improving its experience. Description of the Drawings

[0030] Figure 1 It is a schematic structural diagram of a cloud service system provided by an embodiment of the present application;

[0031] Figure 2 It is a schematic structural diagram of a cloud management platform provided by an embodiment of the present application;

[0032] Figure 3 It is a schematic diagram of a custom hierarchical control provided by an embodiment of the present application;

[0033] Figure 4 It is a schematic flowchart of a resource management method based on a cloud management platform provided by an embodiment of the present application;

[0034] Figure 5 It is another schematic structural diagram of a cloud service system provided by an embodiment of the present application;

[0035] Figure 6 A structural schematic diagram of the cloud management platform provided by the embodiment of the present application;

[0036] Figure 7 A structural schematic diagram of the computing device provided by the embodiment of the present application;

[0037] Figure 8 A structural schematic diagram of the computing device cluster provided by the embodiment of the present application;

[0038] Figure 9 A schematic diagram of the computer devices in the computer cluster provided by the embodiment of the present application being connected through a network. Detailed implementation manners

[0039] The embodiment of the present application provides a resource management method and a cloud management platform based on a cloud management platform, which can enable the resource owner to manage various aspects in the resource sharing process more precisely and flexibly, so as to meet the active management needs of the resource owner for resource sharing, thereby improving their experience.

[0040] The terms "first", "second", etc. in the description, claims and above-mentioned drawings of the present application are used to distinguish similar objects, and do not have to be used to describe a specific order or sequence. It should be understood that such terms can be interchanged under appropriate circumstances, which is only a way of distinguishing objects with the same attributes when describing the embodiments of the present application. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion, so that a process, method, system, product or device including a series of units does not have to be limited to those units, but may include other units not clearly listed or inherent to these process, method, product or device.

[0041] In order to meet the resource sharing needs of cloud tenants, cloud providers can use the RAM technology to enable the cloud resources of the resource owner to be used by resource users, thereby realizing cloud resource sharing.

[0042] In the related art, a cloud service system may include a cloud management platform and multiple cloud resources of a resource owner. For the multiple cloud resources of the resource owner, the resource owner may specify to the cloud management platform which part of the multiple cloud resources can be shared for use by resource users. In this way, when a resource user needs to use the cloud resources of the resource owner, the cloud management platform can provide this part of the cloud resources for the resource user to use, thereby realizing cloud resource sharing. For example, assume that the resource owner includes cloud resource A, cloud resource B, and cloud resource C. The resource owner can attach sharing tags to cloud resource A and cloud resource B through the cloud management platform so that cloud resource A and cloud resource B become shared resources. Therefore, when a resource user needs to use the cloud resources of the resource owner, the cloud management platform can provide cloud resource A and cloud resource B for the resource user to use.

[0043] However, due to the limited RAM function of the cloud management platform, the resource owner cannot achieve more refined and flexible management for the process of resource sharing, cannot meet the active management requirements of the resource owner for resource sharing, resulting in a low experience.

[0044] To solve the above problems, an embodiment of the present application provides a resource management method based on a cloud management platform, and this method can be implemented through a cloud service system. Figure 1 A schematic structural diagram of the cloud service system provided by an embodiment of the present application is shown in Figure 1 As shown, the cloud service system includes an infrastructure that can provide cloud services and a cloud management platform that manages these infrastructures. The cloud management platform and the infrastructure will be introduced separately below:

[0045] A cloud management platform can overall manage the infrastructure in the entire cloud service system (for example, in the infrastructure, according to the instructions of the resource owner, create multiple cloud resources exclusive to the resource owner for the resource owner, these cloud resources are deployed with the applications of the resource owner, and these cloud resources can be used as shared resources and shared with resource users, etc.), and can also be open to resource owners and resource users outside the cloud service system and respond to their requests. For example, the cloud management platform can provide various interfaces such as a login interface, a resource management interface, and a resource usage interface for the clients of resource owners and resource users (for example, the terminal devices used by resource owners and resource users or browsers on the terminal devices, etc.) to access. Among them, the cloud management platform can authenticate the clients of resource owners and resource users through the login interface, and after successful authentication, allow the clients of resource owners and resource users to log in to the cloud management platform. Also, for example, the cloud management platform can also allow the client of the resource owner to send the usage conditions set by the resource owner for its multiple cloud resources to the cloud management platform through the resource management interface. Therefore, the cloud management platform can determine whether each resource user meets the usage conditions based on the usage conditions of these multiple cloud resources. If so, it allows each resource user to use these multiple cloud resources. Also, for example, the cloud management platform can also allow the client of a certain resource user to send a resource usage request of the resource user to the cloud management platform through the resource usage interface. This request can be used to indicate that the resource user needs to perform a certain operation on a certain cloud resource among the multiple cloud resources of the resource owner. Therefore, the cloud management platform can judge whether at least one of the resource user, the cloud resource, and the operation meets the aforementioned usage conditions based on this request. If so, it allows the resource user to perform the operation on the cloud resource. If not, it does not allow the resource user to perform the operation on the cloud resource.

[0046] Furthermore, as Figure 2 shown ( Figure 2A structural schematic diagram of the cloud management platform provided by the embodiments of the present application. The cloud management platform may include an information extraction system, an authentication system, a resource access management system, and a usage condition management system. Among them, the resource access management system may receive a resource configuration request sent by a resource owner and configure a plurality of exclusive cloud resources for the resource owner based on this request. The usage condition management system may receive the usage conditions formulated by the resource owner for its multiple cloud resources and store the usage conditions. The information extraction system may receive a resource usage request sent by a certain resource user and extract relevant information to be authenticated (including the resource user, a certain cloud resource required by the resource user, and a certain operation that the resource user needs to perform on the cloud resource) from this request and send it to the authentication system. The authentication system may provide this information to be authenticated to the resource access management system, so that the resource access management system can obtain the usage conditions formulated by the resource owner for its exclusive multiple cloud resources from the usage condition management system. Then, the resource access management system may detect whether the information to be authenticated meets the usage conditions, obtain a detection result, and return it to the authentication system. The authentication system may generate an authentication result based on the detection result (for example, if the detection result is used to indicate that the information to be authenticated does not meet the usage conditions, the authentication result indicates authentication failure; if the detection result is used to indicate that the information to be authenticated meets the usage conditions, the authentication result indicates authentication success), and return it to the information extraction system to determine whether to allow the resource user to perform the operation on the cloud resource based on the authentication result.

[0047] Furthermore, the usage conditions formulated by the resource owner for its multiple cloud resources usually may include at least one of the following: the conditions that these multiple cloud resources need to meet, the conditions that the resource user needs to meet, and the conditions that the operations performed by the resource user on these multiple cloud resources need to meet, and so on. For the type of conditions that multiple cloud resources need to meet, the main object is the cloud resources. The main function of this type of conditions is to make any cloud resource among these multiple cloud resources that any resource user needs to operate follow this type of conditions. For the type of conditions that the resource user needs to meet, the main object is the resource user. The main function of this type of conditions is to make any resource user who performs any operation on any cloud resource follow this type of conditions. For the type of conditions that the operations performed by the resource user on these multiple cloud resources need to meet, the main object is the operation. The main function of this type of conditions is to make any operation that any resource user needs to perform on any cloud resource follow this type of conditions.

[0048] Furthermore, as Figure 3 shown ( Figure 3A schematic diagram of the custom hierarchical control provided by the embodiments of the present application. Since the usage conditions can include only the conditions that these multiple cloud resources need to meet, or only the conditions that the resource user needs to meet, or only the conditions that the operations performed by the resource user on these multiple cloud resources need to meet. In these cases, the usage conditions are only bound to any one of the cloud resources, the resource user, and the operations. In addition, the usage conditions can include the conditions that these multiple cloud resources need to meet and the conditions that the resource user needs to meet, or the conditions that the resource user needs to meet and the conditions that the operations performed by the resource user on these multiple cloud resources need to meet, or the conditions that these multiple cloud resources need to meet and the conditions that the operations performed by the resource user on these multiple cloud resources need to meet. In these cases, the usage conditions are bound to any two of the cloud resources, the resource user, and the operations. In addition, the usage conditions can include the conditions that these multiple cloud resources need to meet, the conditions that the resource user needs to meet, and the conditions that the operations performed by the resource user on these multiple cloud resources need to meet. In this case, the usage conditions are bound to all of the cloud resources, the resource user, and the operations. Therefore, the usage conditions can be customized according to the needs of the resource owner, so as to achieve hierarchical control of cloud resources, resource users, and operations.

[0049] Based on this, after the cloud management platform receives a resource usage request sent by a certain resource user, the request can be used to indicate that the resource user needs to perform a certain operation on a certain cloud resource among multiple cloud resources of the resource owner. Therefore, the cloud management platform can detect whether at least one of the cloud resource, the resource user, and the operation meets the usage conditions based on the request, so as to determine whether to allow the resource user to perform the operation on the cloud resource.

[0050] The infrastructure includes multiple cloud resources of the resource owner. For any one of these multiple cloud resources, the resource owner's application can be running on it. Therefore, this cloud resource can provide remote services for both the resource owner and the resource user. It should be noted that the resource owner can set usage conditions for its multiple cloud resources, so that the cloud management platform shares these multiple cloud resources with the resource user based on the usage conditions. Moreover, the resource owner and the resource user are usually two accounts of different tenants. Therefore, cross-account resource sharing can be achieved between the resource owner and the resource user.

[0051] Further, among the multiple cloud resources of the resource owner, any one cloud resource may include at least one cloud instance, and these cloud instances can be presented in various ways. For example, these cloud instances can be physical servers selected by the cloud management platform, or they can be bare metal servers selected by the cloud management platform. Also, these cloud instances can be virtual machines (VMs) created by the cloud management platform on physical servers through virtualization technology. Additionally, these cloud instances can be containers (docker) created by the cloud management platform on physical servers through virtualization technology. Moreover, these cloud instances can be micro virtual machines (microVMs) created by the cloud management platform on physical servers through virtualization technology, and so on.

[0052] Further, for the multiple cloud resources of the resource owner, these multiple cloud resources can be deployed in the same site or different sites, and the site can be presented in various forms. For example, the site can be a region in the infrastructure, or it can be an availability zone in the infrastructure. Also, the site can be a data center (DC) in the infrastructure, or it can be a room in the infrastructure. Additionally, the site can be a rack in the infrastructure, and so on.

[0053] Based on the above cloud service system, the resource owner can formulate usage conditions for its multiple cloud resources and send the usage conditions to the cloud management platform. When a certain resource user needs to perform a certain operation on a certain cloud resource, since the usage condition includes at least one of the conditions required for multiple cloud resources, the conditions required for the resource user, and the conditions required for the operation, the cloud management platform can detect whether at least one of the resource user, the cloud resource, and the operation meets the usage condition, so as to determine whether to allow the resource user to perform the operation on the cloud resource. It can be seen that the object to which the usage condition faces by the resource owner can include not only cloud resources, but also resource users and operations. That is, the resource owner considers relatively comprehensive factors when formulating the usage condition, so as to achieve more refined and flexible management of all aspects (i.e., cloud resources, resource users, operations, etc.) in the resource sharing process, to meet the active management needs of the resource owner for resource sharing, thereby improving its experience. To further understand this process, the following will be combined with Figure 4 to further introduce this process. Figure 4 is a schematic flowchart of a resource management method based on a cloud management platform provided by an embodiment of the present application. As Figure 4 shown, this method can be passed through as Figure 1The implementation of the cloud service system shown. The cloud service system includes an infrastructure for providing cloud services and a cloud management platform for managing these infrastructures. These infrastructures include multiple cloud resources of resource owners. The method includes:

[0054] 401. The cloud management platform receives, through a resource management interface, usage conditions for multiple cloud resources from a resource owner. The usage conditions include at least one of the following: conditions that the multiple cloud resources need to meet, conditions that the resource user needs to meet, and conditions that the operations performed by the resource user on the multiple cloud resources need to meet.

[0055] In an embodiment of the present application, when a resource owner needs to set usage conditions for its multiple cloud resources, the cloud management platform can provide a resource management interface to the client of the resource owner (for example, the resource usage condition input field on the resource owner interface, etc.). The resource owner inputs, through its client, the usage conditions set by the resource owner for its multiple cloud resources to the resource management interface. Therefore, the cloud management platform can receive, through the resource management interface, the usage conditions set by the resource owner for its multiple cloud resources. Among them, the access conditions can include one or more of the following three types of conditions: (1) conditions that the multiple cloud resources need to meet, (2) conditions that the resource user needs to meet; (3) conditions that the operations performed by the resource user on the multiple cloud resources need to meet.

[0056] Specifically, the usage conditions set by the resource owner for its multiple cloud resources can be presented in the following ways:

[0057] (1) The conditions that the multiple cloud resources need to meet generally refer to the conditions that each cloud resource among the multiple cloud resources needs to meet. It can be presented in the following ways: the time periods during which each cloud resource among the multiple cloud resources can be used. For any one cloud resource, it can only be used during the time period when the cloud resource can be used, and it cannot be used during other time periods.

[0058] For example, as Figure 5 shown ( Figure 5 which is another structural schematic diagram of the cloud service system provided by an embodiment of the present application), assume that the resource owner has cloud resource A and cloud resource B, and there are two resource users, namely account A and account B. Then, when the resource owner needs to set exclusive usage conditions for cloud resource A and cloud resource B, the resource owner can log in to the cloud management platform. The cloud management platform can provide a resource owner interface to the resource owner. The resource owner interface includes a resource usage condition input field. Therefore, the tenant can input usage condition 1 and usage condition 2 for resource A and resource B in the resource usage condition input field. Among them, usage condition 1 includes that the time periods during which cloud resource A and cloud resource B can be used are from 8:00 to 12:00, and usage condition 2 includes that the time periods during which cloud resource A and cloud resource B can be used are from 14:00 to 18:00.

[0059] (2) The conditions that multiple resource users need to meet can be presented in the following way: the set of preset identities of the resource users. It should be noted that the set of preset identities here includes various identities set in advance by the resource owner for each resource user. For any resource user, the identity of the resource user can be an authorized user, or a user in a certain authorized organization, or a user in a special whitelist, etc. Resource users with these identities in the set of preset identities are all permitted users who can use the cloud resources of the resource owner, while resource users without these identities in the set of preset identities are unauthorized users who cannot use the cloud resources of the resource owner.

[0060] Still like the above example, usage condition 1 can also include the authorized account A (i.e., account A is an authorized user). Since usage condition 1 already includes that the time period during which cloud resource A and cloud resource B can be used is from 8:00 to 12:00, at this time, usage condition 1 means that the authorized account A can use cloud resource A and cloud resource B from 8:00 to 12:00. Usage condition 2 can also include account B in the whitelist (i.e., account B is a user in the whitelist). Since usage condition 2 already includes that the time period during which cloud resource A and cloud resource B can be used is from 14:00 to 18:00, at this time, usage condition 2 means that account B in the whitelist can use cloud resource A and cloud resource B from 14:00 to 18:00.

[0061] (3) The conditions that a resource user needs to meet for operations performed on multiple cloud resources can be presented in the following way: the set of operations that the resource user can perform on each of the multiple cloud resources, that is, the set of operations that each cloud resource can be performed. For any one cloud resource, the resource user can only perform the operations in the set of operations that the cloud resource can be performed on the cloud resource, and cannot perform operations outside the set of operations that the cloud resource can be performed on the cloud resource.

[0062] Still like the above example, usage condition 1 can also include read and write operations. Since usage condition 1 already includes the authorized account A, and the time period during which cloud resource A and cloud resource B can be used is from 8:00 to 12:00, at this time, usage condition 1 means that the authorized account A can use cloud resource A and cloud resource B from 8:00 to 12:00, and account A can only perform read and write operations on cloud resource A and cloud resource B. Usage condition 2 can also include modification operations. Since usage condition 2 already includes account B in the whitelist, and the time period during which cloud resource A and cloud resource B can be used is from 14:00 to 18:00, at this time, usage condition 2 means that account B in the whitelist can use cloud resource A and cloud resource B from 14:00 to 18:00, and account B can only perform modification operations on cloud resource A and cloud resource B.

[0063] It should be understood that in the above Figure 5 illustrated example, only the use conditions 1 and 2 both containing the foregoing three categories of conditions (1), (2), and (3) are introduced schematically. In practice, the use condition 1 may only contain (1) and (2). In this case, the use condition 1 means that only account A can use cloud resource A and cloud resource B from 8:00 to 12:00. Of course, the use condition 1 may also only contain (3). In this case, the use condition 1 means that any account can use cloud resource A and cloud resource B at any time period, but only read and write operations can be performed on these resources, and so on. Similarly, the use condition 2 is the same, which will not be elaborated here.

[0064] 402. The cloud management platform receives a resource usage request from a target resource user, and the resource usage request is used to indicate that the target resource user needs to perform a target operation on a target cloud resource among multiple cloud resources.

[0065] After obtaining the use conditions formulated by the resource owner for its multiple cloud resources, the cloud management platform can store the use conditions. When the target resource user (i.e., a certain resource user) needs to use the target cloud resource (i.e., a certain cloud resource or some cloud resources) among the multiple cloud resources of the resource owner, the target resource user can send a resource usage request to the cloud management platform, and the resource usage request is used to indicate that the target resource user needs to perform a target operation (i.e., a certain operation or some operations) on the target cloud resource.

[0066] Specifically, the resource usage request may include the following multiple categories of information:

[0067] (1) The time period when the target resource user requests to use the target resource, and this time period can be set by the target resource user according to its own needs. (2) The identity of the target resource user. For example, the target resource user is an authorized user, or the target resource user is a user in an authorized organization, or the target resource user is a user in a special whitelist, and so on. (3) The target operation that the target resource user needs to perform on the target resource.

[0068] Still as in the above example, when account A needs to use cloud resource A and cloud resource B, it can send a resource usage request 1 to the cloud management platform. The resource usage request 1 includes: Account A is an authorized user. Account A needs to use cloud resource A and cloud resource B from 8:00 to 15:00, and account A needs to perform read and write operations on cloud resource A and cloud resource B. When account B needs to use cloud resource A and cloud resource B, it can send a resource usage request 2 to the cloud management platform. The resource usage request 2 includes: Account B is a user in the whitelist. Account B needs to use cloud resource A and cloud resource B from 14:00 to 18:00, and account B needs to perform delete operations on cloud resource A and cloud resource B.

[0069] 403. Based on the resource usage request, the cloud management platform detects whether at least one of the target resource (cloud resource), the target resource user, and the target operation meets the usage conditions. If it meets the conditions, the cloud management platform allows the target resource user to perform the target operation on the target cloud resource.

[0070] After receiving the resource usage request, the cloud management platform can parse the resource usage request to determine that the target resource user needs to perform a target operation on the target cloud resource among multiple cloud resources. Therefore, the cloud management platform can obtain the usage conditions customized by the resource owner for the multiple cloud resources. Then, the cloud management platform can detect whether at least one of the target resource (cloud resource), the target resource user, and the target operation meets the corresponding conditions included in the usage conditions. For example, when the usage conditions only include the conditions that the multiple cloud resources need to meet, the cloud management platform can detect whether the target cloud resource meets the conditions it needs to meet. Another example is that when the usage conditions include the conditions that the multiple cloud resources need to meet and the conditions that the resource user needs to meet, the cloud management platform can detect whether the target cloud resource meets the conditions it needs to meet, and whether the target resource user meets the conditions it needs to meet. Another example is that when the usage conditions include the conditions that the multiple cloud resources need to meet, the conditions that the resource user needs to meet, and the conditions that the operations performed by the resource user on the multiple cloud resources need to meet, the cloud management platform can detect whether the target cloud resource meets the conditions it needs to meet, whether the target resource user meets the conditions it needs to meet, and whether the target operation meets the conditions it needs to meet, and so on.

[0071] If it meets the conditions, the cloud management platform can allow the target resource user to perform the target operation on the target cloud resource (for example, the cloud management platform enables the target resource user to directly access the target cloud resource so that the target resource user can perform the target operation on the target cloud resource. Another example is that the cloud management platform accesses the target cloud resource on behalf of the target resource user and performs the target operation on it, etc., which is not limited here). If it does not meet the conditions, the cloud management platform does not allow the target resource user to perform the target operation on the target cloud resource.

[0072] Specifically, the cloud management platform can implement the detection operation in the following ways:

[0073] Since the usage conditions set by the resource owner for its multiple cloud resources may include at least one of the following: the time period during which each cloud resource among the multiple cloud resources can be used, the preset identity set of the resource user, and the operation set that the resource user can perform on each cloud resource among the multiple cloud resources. Then, based on the resource usage request, the cloud management platform detects whether at least one of the following is satisfied: the time period during which the target resource user uses the target resource includes the time period during which the target cloud resource can be used, the identity of the target resource user is in the preset identity set of the resource user, and the target operation is in the operation set that the resource user can perform on the target resource.

[0074] For example, when the usage condition only includes the time period during which each cloud resource among the multiple cloud resources can be used, the cloud management platform can detect whether the time period during which the target resource user uses the target resource includes the time period during which the target cloud resource can be used. Also, when the usage condition includes the time period during which each cloud resource among the multiple cloud resources can be used and the preset identity set of the resource user, the cloud management platform can detect whether the time period during which the target resource user uses the target resource includes the time period during which the target cloud resource can be used, and whether the identity of the target resource user is in the preset identity set of the resource user. Also, when the usage condition includes the time period during which each cloud resource among the multiple cloud resources can be used, the preset identity set of the resource user, and the operation set that the resource user can perform on each cloud resource among the multiple cloud resources, the cloud management platform can detect whether the time period during which the target resource user uses the target resource includes the time period during which the target cloud resource can be used, whether the identity of the target resource user is in the preset identity set of the resource user, and whether the target operation is in the operation set that the resource user can perform on the target resource, and so on.

[0075] Still as in the above example, after obtaining the resource usage request 1, due to the existence of usage condition 1, the cloud management platform can detect whether the time periods during which account A uses cloud resource A and cloud resource B include the time periods when cloud resource A and cloud resource B can be used, whether account A is an authorized user, and whether the operations that account A needs to perform on cloud resource A and cloud resource B are only read and write operations. Since all three of these are satisfied, the cloud management platform can return an authentication result to account A, and this authentication result allows account A to perform read and write operations on cloud resource A and cloud resource B from 8:00 to 12:00. After obtaining the resource usage request 2, due to the existence of usage condition 2, the cloud management platform can detect whether the time periods during which account B uses cloud resource A and cloud resource B include the time periods when cloud resource A and cloud resource B can be used, whether account B is a user in the special whitelist, and whether the operations that account B needs to perform on cloud resource A and cloud resource B are only modification operations. Since the last item is not satisfied, the cloud management platform can return an authentication result to account B, and this authentication result does not allow account B to perform deletion operations on cloud resource A and cloud resource B from 14:00 to 18:00.

[0076] In the embodiments of the present application, when a resource owner needs to customize usage conditions for its multiple cloud resources, the resource owner can input the usage conditions customized for its multiple cloud resources into the resource management interface provided by the cloud management platform. The usage conditions may include at least one of the following: conditions that the multiple cloud resources need to meet, conditions that the resource user needs to meet, and conditions that the operations performed by the resource user on the multiple cloud resources need to meet. When a target resource user needs to use the target cloud resource of the multiple cloud resources, the target resource user can send a resource usage request to the cloud management platform. Since the resource usage request is used to indicate that the target resource user needs to perform a target operation on the target cloud resource of the multiple cloud resources, the cloud management platform can detect whether at least one of the target cloud resource, the target resource user, and the target operation meets the usage conditions. If so, the cloud management platform allows the target resource user to perform the target operation on the target cloud resource. In the foregoing process, since the usage conditions formulated by the resource owner for its multiple cloud resources include at least one of the conditions that the multiple cloud resources need to meet, the conditions that the resource user needs to meet, and the conditions that the operations need to meet, when the target resource user needs to perform a target operation on the target cloud resource of the multiple cloud resources, the cloud management platform can detect whether at least one of the target resource user, the target cloud resource, and the target operation meets the usage conditions, so as to determine whether to allow the target resource user to perform the target operation on the target cloud resource. It can be seen that the object to which the resource owner can make the usage conditions applicable can include not only cloud resources, but also resource users and operations. That is, the resource owner considers relatively comprehensive factors when formulating the usage conditions, so as to achieve more refined and flexible management of all aspects in the resource sharing process (i.e., cloud resources, resource users, operations, etc.), to meet the active management needs of the resource owner for resource sharing, thereby improving its experience.

[0077] The above is a detailed description of the resource management method based on the cloud management platform provided by the embodiments of the present application. The following will introduce the cloud management platform provided by the embodiments of the present application. Figure 6 FIG. is a schematic structural diagram of the cloud management platform provided by the embodiments of the present application. As Figure 6 shown, the cloud management platform is used to manage the infrastructure that provides cloud services. The infrastructure includes multiple cloud resources of the resource owner. The cloud management platform includes:

[0078] A first receiving module 601, configured to receive, through the resource management interface, usage conditions for multiple cloud resources from the resource owner. The usage conditions include at least one of the following: conditions that the multiple cloud resources need to meet, conditions that the resource user needs to meet, and conditions that the operations performed by the resource user on the multiple cloud resources need to meet. For example, the first receiving module 601 can be used to implement Figure 4 the step 401 in the embodiment shown.

[0079] A second receiving module 602, configured to receive a resource usage request from a target resource user, where the resource usage request is used to indicate that the target resource user needs to perform a target operation on a target cloud resource among multiple cloud resources; for example, the second receiving module 602 can be used to implement Figure 4 step 402 in the embodiment shown.

[0080] A control module 603, configured to detect whether at least one of the target resource cloud resource, the target resource user, and the target operation meets the usage conditions based on the resource usage request. If so, the cloud management platform allows the target resource user to perform the target operation on the target cloud resource. For example, the control module 603 can be used to implement Figure 4 step 403 in the embodiment shown.

[0081] In a possible implementation manner, the conditions that the multiple cloud resources need to meet include: the time periods during which each cloud resource among the multiple cloud resources can be used; the resource usage request includes: the time period during which the target resource user uses the target resource.

[0082] In a possible implementation manner, the conditions that the resource user needs to meet include: the preset identity set of the resource user; the resource usage request includes: the identity of the target resource user.

[0083] In a possible implementation manner, the conditions that the operations performed by the resource user on the multiple cloud resources need to meet include: the operation set that the resource user can perform on each cloud resource among the multiple cloud resources; the resource usage request includes: the target operation that the target resource user needs to perform on the target resource.

[0084] In a possible implementation manner, the control module 603 is configured to: based on the resource usage request, detect whether at least one of the following is satisfied: the time period during which the target resource user uses the target resource includes the time period during which the target cloud resource can be used, the identity of the target resource user is in the preset identity set of the resource user, and the target operation is in the operation set that the resource user can perform on the target resource.

[0085] In a possible implementation manner, each cloud resource among the multiple cloud resources includes at least one cloud instance, and the cloud instance is any one of the following: a physical server, a virtual machine, a container, a micro virtual machine, and a bare metal server.

[0086] In a possible implementation manner, the multiple cloud resources are located in the same site or different sites, and the site is any one of the following: a region, an availability zone, a data center, a computer room, and a cabinet.

[0087] It should be noted that, regarding the information interaction, implementation process, etc. among the above-mentioned device modules / units, since they are based on the same concept as the method embodiments of this application, the technical effects brought by them are the same as those of the method embodiments of this application. For specific content, reference can be made to the descriptions in the method embodiments shown above in the embodiments of this application, and details will not be elaborated here.

[0088] Please refer to Figure 7 , Figure 7 which is a schematic structural diagram of a computing device provided by an embodiment of this application. As Figure 7 shown, the computing device 700 (which can be used to present the aforementioned cloud management platform) includes: a processor 701, a memory 702, a communication interface 703, and a bus 704. The processor 701, the memory 702, and the communication interface 703 are coupled through a bus (not labeled in the figure). The memory 702 stores instructions. When the execution instructions in the memory 702 are executed, the computing device 700 executes the method executed by the cloud management platform in the above-mentioned method embodiments.

[0089] The computing device 700 can be one or more integrated circuits configured to implement the above method. For example: one or more application specific integrated circuits (ASICs), or, one or more digital signal processors (DSPs), or, one or more field programmable gate arrays (FPGAs), or a combination of at least two of these integrated circuit forms. Again, when the units in the device can be implemented in the form of a processing element scheduler, the processing element can be a general-purpose processor, such as a central processing unit (CPU) or other processors that can call programs. Again, these units can be integrated together to be implemented in the form of a system-on-a-chip (SOC).

[0090] The processor 701 can be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application specific integrated circuits (ASICs), field programmable gate arrays (FPGAs), or other programmable logic devices, transistor logic devices, hardware components, or any combination thereof. The general-purpose processor can be a microprocessor or any conventional processor.

[0091] The memory 702 can be a volatile memory or a non-volatile memory, or can include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable ROM (PROM), an erasable PROM (EPROM), an electrically erasable PROM (EEPROM), or a flash memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example but not limitation, many forms of RAM are available, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDR SDRAM), enhanced SDRAM (ESDRAM), synchlink DRAM (SLDRAM), and direct rambus RAM (DR RAM).

[0092] The executable program code is stored in the memory 702, and the processor 701 executes the executable program code to implement the functions of the foregoing first receiving module, second receiving module, and control module, etc., so as to implement the above resource management method based on the cloud management platform. That is, the memory 702 stores instructions for executing the above resource management method based on the cloud management platform.

[0093] The communication interface 703 uses a transceiver module such as, but not limited to, a network interface card, a transceiver, etc., to implement the communication between the computing device 700 and other devices or communication networks.

[0094] In addition to including a data bus, the bus 704 may further include a power bus, a control bus, a status signal bus, etc. The bus may be a peripheral component interconnect express (PCIe) bus, an extended industry standard architecture (EISA) bus, a unified bus (Ubus or UB), a compute express link (CXL), a cache coherent interconnect for accelerators (CCIX), etc. The bus may be divided into an address bus, a data bus, a control bus, etc.

[0095] Please refer to Figure 8 , Figure 8 which is a schematic structural diagram of a computing device cluster provided by an embodiment of the present application. As Figure 8 shown, the computing device cluster 800 includes at least one computing device 700.

[0096] As Figure 8 shown, the computing device cluster 800 includes at least one computing device 700. Instructions for executing the above-mentioned resource management method based on the cloud management platform may be stored in the memories 702 of one or more of the computing devices 700 in the computing device cluster 800.

[0097] In some possible implementation manners, partial instructions for executing the above-mentioned resource management method based on the cloud management platform may also be stored separately in the memories 702 of one or more of the computing devices 700 in the computing device cluster 800. In other words, a combination of one or more computing devices 700 may jointly execute the resource management method based on the cloud management platform.

[0098] It should be noted that the memories 702 in different computing devices 700 in the computing device cluster 800 may store different instructions, which are respectively used to execute partial functions of the above-mentioned cloud management platform. That is, the instructions stored in the memories 702 of different computing devices 700 may implement the functions of one or more of the first receiving module, the second receiving module, the control module, and so on.

[0099] In some possible implementation manners, one or more of the computing devices 700 in the computing device cluster 800 may be connected through a network. Among them, the network may be a wide area network or a local area network, etc.

[0100] Please refer to Figure 9 ,Figure 9 This is a schematic diagram showing the network connection of computer devices in a computer cluster provided by an embodiment of the present application. As Figure 9 shown, two computing devices 700A and 700B are connected through a network. Specifically, they are connected to the network through communication interfaces in each computing device.

[0101] In a possible implementation, instructions for executing the functions of modules such as the first receiving module and the second receiving module are stored in the memory of computing device 700A. At the same time, instructions for executing the functions of modules such as the control module are stored in the memory of computing device 700B.

[0102] It should be understood that Figure 9 the functions of computing device 700A shown in

[0103] An embodiment of the present application also relates to a computer storage medium. A program for signal processing is stored in the computer-readable storage medium. When it runs on a computer, it causes the computer to execute the steps performed by the cloud management platform in the embodiment as Figure 4 shown.

[0104] An embodiment of the present application also relates to a computer program product. The computer program product stores instructions. When the instructions are executed by a computer, they cause the computer to execute the steps performed by the cloud management platform in the embodiment as Figure 4 shown.

[0105] Those skilled in the art can clearly understand that for the convenience and brevity of description, the specific working processes of the systems, devices, and units described above can refer to the corresponding processes in the foregoing method embodiments, and will not be elaborated herein.

[0106] In several embodiments provided by the present application, it should be understood that the disclosed systems, devices, and methods can be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point, the couplings or direct couplings or communication connections shown or discussed with each other can be through some interfaces, and the indirect couplings or communication connections of devices or units can be in electrical, mechanical, or other forms.

[0107] The unit described as a separation component may or may not be physically separated. The component shown as a unit may or may not be a physical unit, that is, it may be located in one place or distributed to multiple network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0108] In addition, each functional unit in various embodiments of the present application may be integrated in a processing unit, may exist separately as individual physical units, or two or more units may be integrated in one unit. The above-mentioned integrated units can be implemented in the form of hardware or in the form of software functional units.

[0109] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on such an understanding, the technical solution of the present application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in various embodiments of the present application. The foregoing storage medium includes: various media such as USB flash drives, mobile hard disks, read-only memories (ROM, read-only memory), random access memories (RAM, random access memory), magnetic disks, or optical discs that can store program codes.

Claims

1. A resource management method based on a cloud management platform, characterized in that: The cloud management platform is used to manage an infrastructure for providing cloud services, wherein the infrastructure includes a plurality of cloud resources of a resource owner, and the method comprises: The cloud management platform receives usage conditions for the multiple cloud resources from the resource owner through a resource management interface, where the usage conditions include at least one of the following: conditions that the multiple cloud resources need to meet, conditions that resource users need to meet, and conditions that operations performed by resource users on the multiple cloud resources need to meet; The cloud management platform receives a resource usage request from a target resource user, where the resource usage request is used to indicate that the target resource user needs to perform a target operation on a target cloud resource among the multiple cloud resources; Based on the resource usage request, the cloud management platform detects whether at least one of the target resource cloud resource, the target resource user and the target operation meets the usage condition. If so, the cloud management platform allows the target resource user to perform the target operation on the target cloud resource.

2. The method according to claim 1, characterized in that The conditions that the multiple cloud resources need to satisfy include: a time period during which each of the multiple cloud resources can be used; The resource use request includes: a time period during which the target resource user uses the target resource.

3. The method according to claim 1 or 2, characterized in that: The conditions that the resource user needs to meet include: a preset identity set of the resource user; The resource use request includes: the identity of the target resource user.

4. The method according to any one of claims 1 to 3, characterized in that: The conditions that the operations performed by the resource user on the multiple cloud resources must satisfy include: a set of operations that the resource user can perform on each of the multiple cloud resources; The resource use request includes: the target operation that the target resource user needs to perform on the target resource.

5. The method according to any one of claims 1 to 4, characterized in that: The cloud management platform detects, based on the resource use request, whether at least one of the target resource cloud resource, the target resource user, and the target operation satisfies the use condition, including: Based on the resource usage request, the cloud management platform detects whether at least one of the following is satisfied: the time period during which the target resource user uses the target resource includes the time period during which the target cloud resource can be used, the identity of the target resource user is in a preset identity set of resource users, and the target operation is in a set of operations that the resource user can perform on the target resource.

6. The method according to any one of claims 1 to 5, characterized in that: Each of the multiple cloud resources includes at least one cloud instance, and the cloud instance is any one of the following: a physical server, a virtual machine, a container, a micro virtual machine, and a bare metal server.

7. The method according to any one of claims 1 to 6, characterized in that: The multiple cloud resources are located in the same site or different sites, and the site is any one of the following: region, availability zone, data center, computer room, and cabinet.

8. A cloud management platform, characterized in that: The cloud management platform is used to manage the infrastructure for providing cloud services, the infrastructure including multiple cloud resources of the resource owner, and the cloud management platform includes: A first receiving module is configured to receive, through a resource management interface, usage conditions for the plurality of cloud resources from the resource owner, the usage conditions comprising at least one of the following: conditions that the plurality of cloud resources need to satisfy, conditions that resource users need to satisfy, and conditions that operations performed by resource users on the plurality of cloud resources need to satisfy; A second receiving module is used to receive a resource use request from a target resource user, wherein the resource use request is used to indicate that the target resource user needs to perform a target operation on a target cloud resource among the multiple cloud resources; The control module is used to detect whether at least one of the target resource cloud resource, the target resource user and the target operation meets the usage condition based on the resource usage request. If so, the cloud management platform allows the target resource user to perform the target operation on the target cloud resource.

9. The cloud management platform according to claim 8, characterized in that: The conditions that the multiple cloud resources need to satisfy include: a time period during which each of the multiple cloud resources can be used; The resource use request includes: a time period during which the target resource user uses the target resource.

10. The cloud management platform according to claim 8 or 9, characterized in that: The conditions that the resource user needs to meet include: a preset identity set of the resource user; The resource use request includes: the identity of the target resource user.

11. The cloud management platform according to any one of claims 8 to 10, characterized in that: The conditions that the operations performed by the resource user on the multiple cloud resources must satisfy include: a set of operations that the resource user can perform on each of the multiple cloud resources; The resource use request includes: the target operation that the target resource user needs to perform on the target resource.

12. The cloud management platform according to any one of claims 8 to 11, characterized in that: The control module is used for: Based on the resource usage request, detect whether at least one of the following is satisfied: the time period during which the target resource user uses the target resource includes the time period during which the target cloud resource can be used, the identity of the target resource user is in a preset identity set of resource users, and the target operation is in a set of operations that the resource user can perform on the target resource.

13. The cloud management platform according to any one of claims 8 to 12, characterized in that: Each of the multiple cloud resources includes at least one cloud instance, and the cloud instance is any one of the following: a physical server, a virtual machine, a container, a micro virtual machine, and a bare metal server.

14. The cloud management platform according to any one of claims 8 to 13, characterized in that: The multiple cloud resources are located in the same site or different sites, and the site is any one of the following: region, availability zone, data center, computer room, and cabinet.

15. A computing device cluster, characterized in that: The computing device cluster includes at least one computing device, each computing device including a processor and a memory: The memory is used to store instructions; The processor is configured to cause the computing device cluster to execute the method according to any one of claims 1 to 7 according to the instructions.

16. A computer storage medium, characterized in that: The computer storage medium stores one or more instructions, which, when executed by one or more computers, enable the one or more computers to implement the method of any one of claims 1 to 7.

17. A computer program product, characterized in that The computer program product stores instructions, and when the instructions are executed by a computer, the computer implements the method according to any one of claims 1 to 7.

Images