Cloud resource integration and opening method and device

Abstract

The invention discloses a cloud resource integration and opening method and device, and belongs to the technical field of cloud computing, and the method comprises the steps: abstracting a console system opened by cloud resources, and carrying out the initialization configuration of each cloud resource system accessed to the console system, including the establishment of a self-defined resource application form; when a resource application data item that a resource user selects a required resource service by using a console system and fills in the resource application form is received, construction processing is carried out; the construction processing specifically comprises the steps of skipping to a corresponding cloud resource system according to an access address associated with the resource application form, obtaining a registered user token of the current skipped cloud resource system, and after automatic backfilling of the resource construction form and manual filling, performing resource opening in the current skipped cloud resource system by using the identity of the registered user. The method can be close to an actual resource use scene of a user, improves user experience, and facilitates resource release and non-intrusive decoupling integration of cloud resources.

Description

Technical Field

[0001] The present invention belongs to the technical field of cloud computing, and in particular relates to a method and device for integrating and activating cloud resources. Background Art

[0002] In the current process of cloud resource provisioning, the general design concept of the product is based on the self-service function of the cloud resource platform. Figure 1 As shown, when using resources, users need to fill out forms on each cloud resource platform or jump through integrated page links to activate each cloud resource. However, the above method has the following disadvantages:

[0003] (1) Whether logging into each platform or redirecting through the integrated page, the user resource application interface style is not unified;

[0004] (2) The resource form filled out by the user is not sufficient to activate the resource. Some form data items cannot be filled in by the resource applicant; for example, VPC, network security policy, etc., need to be completed by operation and maintenance personnel.

[0005] (3) Users need to log in twice when jumping to each cloud resource platform, which leads to poor user experience. Alternatively, if unified login is implemented for each resource platform, each resource platform needs to be modified, and the code is highly invasive. Summary of the Invention

[0006] In response to the deficiencies in the prior art, the present invention provides a cloud resource integration and activation method and device, which can be close to the user's actual resource usage scenario, improve user experience, facilitate resource release, and non-invasively decouple and integrate cloud resources.

[0007] The present invention provides the following technical solutions:

[0008] In a first aspect, a cloud resource integration and activation method is provided, comprising the following steps:

[0009] Abstract cloud resource activation console system, and initialize the configuration of each cloud resource system connected to the console system, including the establishment of a customized resource application form;

[0010] When receiving the resource application data items from the resource user who selects the required resource service and fills in the resource application form using the console system, construction processing is performed;

[0011] The construction processing specifically includes: jumping to the corresponding cloud resource system according to the access address associated with the resource application form, obtaining the registered user token of the currently jumped cloud resource system, and automatically backfilling the resource construction order and manually filling it out, and then using the identity of the registered user to activate resources in the currently jumped cloud resource system.

[0012] Optionally, the initialization configuration of each cloud resource system connected to the console system is specifically as follows:

[0013] The construction user of the cloud resource system connected to the console system registers the user in the console system;

[0014] Registered users log in to the console system to establish resource services;

[0015] Registered users create custom resource application forms for associated resource services, including resource application data items filled in by resource users. The attributes of the resource application data items are consistent with the resource construction order of the current cloud resource system;

[0016] Associate the customized resource application form with the address of the current cloud resource system construction order;

[0017] Associate the customized resource application form with the construction order security configuration of the current cloud resource system.

[0018] Optionally, the construction order security configuration of the current cloud resource system is JWT security access configuration information, including key information and signature algorithm.

[0019] Optionally, the cloud resource system of the access console system includes: an IaaS resource system, a PaaS resource system and a container resource system.

[0020] Optionally, when jumping to the corresponding cloud resource system according to the access address associated with the resource application form, a security check is performed based on the security access configuration information configured in the console system of the currently jumped cloud resource system. Only after the security check passes can the registered user token of the currently jumped cloud resource system be obtained.

[0021] Optionally, the automatic backfilling of resource construction orders is specifically as follows:

[0022] After obtaining the registered user token of the currently redirected cloud resource system, the user is redirected to the construction order page. According to the mapping relationship between the resource application form and the resource application data items of the construction order, the data filled in by the resource user is automatically displayed on the construction order interface in the currently redirected cloud resource system.

[0023] Optionally, the manual filling is: the operation and maintenance personnel manually fill in the sub-segment data that cannot be automatically displayed in the resource construction order, specifically including: VPC and network security policy.

[0024] Optionally, it also includes:

[0025] The console system monitors the status of the construction order in the currently redirected cloud resource system, and changes the status of the resource application form to feedback to the resource user.

[0026] In a second aspect, a cloud resource integration and activation device is provided, comprising: a console system and several third-party cloud resource systems connected to the console system;

[0027] The console system includes resource application module, configuration module and operation and maintenance module;

[0028] The configuration module enables each cloud resource system to perform initial configuration, including establishing a customized resource application form;

[0029] The resource application module enables the user to select the required resource service and fill in the resource application data items of the resource application form;

[0030] The operation and maintenance module enables the operation and maintenance personnel to perform construction processing after receiving the resource application form filled out by the resource user, specifically including: jumping to the corresponding cloud resource system according to the access address associated with the resource application form, obtaining the registered user token of the currently jumped cloud resource system, and automatically backfilling the resource construction order and manually filling it out, and then using the identity of the registered user to activate resources in the currently jumped cloud resource system.

[0031] Optionally, the console system further includes a monitoring feedback module for monitoring the status of the construction order in the currently redirected cloud resource system, and changing the status of the resource application form to feed back to the resource user.

[0032] Compared with the prior art, the present invention has the following beneficial effects:

[0033] (1) A dedicated console system is abstracted to serve as the only entry point for applying for cloud resources, providing a better user experience.

[0034] (2) Publishing resources is simple and the access method is flexible. The integrated resource system only needs to register users in the console system and configure resource services by the registered users to publish resources. Resource users can then apply for them.

[0035] (3) Define the form resource object in the console system and generate an application work order for users to apply. During the construction phase, operation and maintenance use the construction order and automatically establish a data binding relationship between the two. Different forms are used for different user groups without repeated filling, which can better fit the user's actual usage scenario.

[0036] (4) The entire cloud resource integration solution is non-invasive and decoupled; that is, there is no need to modify the login authentication logic of the access resource system, nor is it required to implement a unified login logic for the access resource system. It is only necessary to add security authentication configuration to the construction order page that needs to be jumped. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] Figure 1This is a flow chart of a cloud resource integration method in the prior art;

[0038] Figure 2 It is a flowchart of the cloud resource integration and activation method of the present invention;

[0039] Figure 3 1 is a flow chart of the initialization configuration phase in an embodiment of the present invention;

[0040] Figure 4 It is a flowchart of the console system operation phase in an embodiment of the present invention. DETAILED DESCRIPTION

[0041] The present invention will be further described below with reference to the accompanying drawings. The following examples are only used to more clearly illustrate the technical solutions of the present invention and are not intended to limit the scope of protection of the present invention. It should be noted that the term "comprising" and any variations thereof in the specification and claims of the present invention and the above-mentioned drawings are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or are inherent to these processes, methods, products or devices.

[0042] Example 1

[0043] like Figure 2 As shown, a cloud resource integration and activation method is provided, including the following steps:

[0044] Step S1: Abstract cloud resource activation console system.

[0045] Specifically, within the existing service, a separate system, called the console system, was abstracted to allow users to apply for cloud resource activation. The console system includes access points to several third-party cloud resource systems, allowing users to apply for cloud resource activation.

[0046] Step S2: Initialization configuration phase.

[0047] Specifically, each cloud resource system connected to the console system is initialized and configured, including creating a customized resource application form. In this embodiment, if a new cloud resource system needs to be connected to the console system, initial configuration is also required; cloud resource systems connected to the console system include: IaaS resource systems, PaaS resource systems, and container resource systems.

[0048] In this embodiment, the specific steps of initialization configuration are:

[0049] S21: A construction user of the cloud resource system connected to the console system registers a user in the console system.

[0050] The construction user of the cloud resource system connected to the console system needs to have the conditions for accessing the current cloud resource system.

[0051] S22: The registered user logs in to the console system to establish resource services.

[0052] The resource service established after the registered user logs into the console system is used for the user to apply for resource services.

[0053] S23: The registered user establishes a customized resource application form associated with the resource service, including resource application data items filled in by the resource user, and the attributes of the resource application data items are consistent with the resource construction order of the current cloud resource system.

[0054] A resource construction order is a form used for resource activation in a cloud resource system (a third-party resource platform). A customized resource application form is filled out by resource users; it's associated with the resource service and includes its own access address and custom data items. The attributes of these data items are consistent with the construction order in the connected resource system, facilitating a direct mapping between the user-filled resource application form and the data items in the construction order.

[0055] S24: Associate the customized resource application form with the address of the current cloud resource system construction order.

[0056] S25: Associate the customized resource application form with the construction order security configuration of the current cloud resource system.

[0057] The security configuration of associated construction orders is primarily used to ensure secure access to connected resource systems. For example, this configuration includes JWT security access configuration information, including key information and signature algorithms.

[0058] JWT: Generally used to transmit authenticated user identity information between identity providers and service providers to facilitate obtaining resources from resource servers.

[0059] Step S3: console system operation stage.

[0060] After receiving the resource application form filled out by the resource user, the operation and maintenance personnel will carry out construction processing, specifically including: jumping to the corresponding cloud resource system according to the access address associated with the resource application form, obtaining the registered user token of the currently jumped cloud resource system, and automatically filling in the resource construction order and manually filling it out, and then using the identity of the registered user to activate resources in the currently jumped cloud resource system.

[0061] Step S3 specifically includes:

[0062] Step S31: The resource user selects the required resource service using the console system, fills in the resource application data items on the resource application form, and submits the application.

[0063] Step S32: The operation and maintenance personnel receive the resource application form filled out by the resource user using the console system and perform construction processing.

[0064] Step S32 specifically includes the following sub-steps:

[0065] Step S321: Jump to the current cloud resource system according to the construction address associated with the configured resource application form.

[0066] In this embodiment, to ensure the security of the construction order page of the connected resource system, the connected resource system must perform a security check based on the construction order security configuration in the console system. For example, if JWT security authentication is used, the header contains the user registered with the console and the signature algorithm; the data contains the application form data; and the signature uses the configured signature algorithm and key to sign the data.

[0067] Step S322: Obtain the registered user token of the currently redirected cloud resource system.

[0068] Usually, you can obtain the registered user token of the current cloud resource system after passing the security authentication.

[0069] Step S323: After obtaining the registered user token of the currently redirected cloud resource system, redirect to the construction order page. According to the mapping relationship between the resource application form and the resource application data items of the construction order, the data filled in by the resource user is automatically echoed in the construction order interface in the currently redirected cloud resource system.

[0070] Step S324: The operation and maintenance personnel manually fill in the sub-segment data that cannot be automatically displayed in the resource construction order, specifically including: VPC and network security policy.

[0071] Step S325: After the operation and maintenance personnel obtains the token of the currently redirected resource system, they activate resources in the connected resource system as a registered user in the console system.

[0072] In some other embodiments, step S32 further includes:

[0073] Step S326: The console system monitors the status of the construction order in the currently jumped cloud resource system, and changes the status of the resource application form to feedback to the resource user, that is, after the resource activation is completed, the resource user is notified of the completion. Specifically, if the user needs to activate multiple resources, the operation and maintenance personnel can activate the resources in turn according to each resource application form, and notify the resource user after all activations are completed, or notify the resource user after each resource activation is completed. The specific adjustment can be made according to the actual usage scenario.

[0074] As an example, consider a real-world scenario: When developing application software, a developer requires virtual machine resources for environment deployment and database resources for data storage. First, the developer submits two resource requests through the console system: one for the virtual machine and one for the database. After the operations and maintenance personnel view the request tickets, the operations and maintenance administrator accesses the IaaS and PaaS systems to provision the resources based on the two resource request tickets. Finally, the developer is notified of the resource provisioning results.

[0075] For this application, an independent system called the console system is abstracted from the original activation service, which is used by users to apply for cloud resource activation. The console system can provide user registration for access to the resource system, application work orders for various cloud resources (IaaS resources, PaaS resources, container resources, etc.), and integrated configuration functions for each resource system. After the user applies for resources, the resource application form is saved, and then the form objects registered by the previously registered user in each resource system in the console system are used; when the operation and maintenance personnel are constructing, they automatically jump to each resource platform according to the construction order association configuration and construction order security configuration, and the content of the construction order of each resource system automatically backfills the content data of the resource application form to activate the resources.

[0076] This application abstracts an independent console system as the only entry point for applying for cloud resources, which provides better user experience. When a new third-party resource system needs to be integrated, the resource system to be integrated only needs to register a user in the resource console system and configure the resource service by the registered user to publish resources. Publishing resources is simple and the access method is flexible. In addition, the cloud resource integration solution of this application is non-invasive and decoupled. There is no need to modify the login authentication logic of the access resource system, nor is it required to implement a unified login logic for the access resource system. It is only necessary to add a security authentication configuration to the construction order page that needs to be jumped, such as: JWT security authentication. For this application, a form resource object is defined in the console system, and an application work order is generated for users to apply. In the construction stage, operation and maintenance use the construction order and automatically establish a data binding relationship between the two. Different forms are used for different user groups and there is no need to fill them out repeatedly, which can better fit the user's actual usage scenario.

[0077] Example 2

[0078] A cloud resource integration and activation device includes a console system and several third-party cloud resource systems connected to the console system.

[0079] Third-party cloud resource systems include IaaS resources, PaaS resources, container resources, etc.

[0080] The console system includes resource application module, configuration module and operation and maintenance module;

[0081] Configuration module, which enables initial configuration of each cloud resource system, including the creation of customized resource application forms;

[0082] The resource application module enables users to select the required resource services and fill in the resource application data items of the resource application form;

[0083] The operation and maintenance module enables operation and maintenance personnel to receive resource application forms filled out by resource users and then perform construction processing. Specifically, it includes: jumping to the corresponding cloud resource system according to the access address associated with the resource application form, obtaining the registered user token of the currently jumped cloud resource system, and automatically filling in the resource construction form and manually filling it out, and then using the identity of the registered user to activate resources in the currently jumped cloud resource system.

[0084] In this embodiment, the console system further includes a monitoring feedback module for monitoring the status of the construction order in the currently redirected cloud resource system, and changing the status of the resource application form to feed back to the resource user.

[0085] For more specific details about the above method, please refer to the corresponding contents disclosed in the aforementioned embodiments, which will not be described again here.

[0086] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on its differences from the other embodiments. References to the same or similar parts between the various embodiments will be sufficient. The systems disclosed in the embodiments are described briefly because they correspond to the methods disclosed in the embodiments. For relevant details, refer to the method description.

[0087] Those skilled in the art will clearly understand that the techniques in the embodiments of the present invention can be implemented using software plus a necessary general-purpose hardware platform. Based on this understanding, the technical solutions in the embodiments of the present invention, or the portion that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a storage medium such as ROM / RAM, a magnetic disk, or an optical disk, and includes a number of instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to execute the methods described in various embodiments of the present invention or certain portions of the embodiments.

[0088] The above are merely preferred embodiments of the present invention. The scope of protection of the present invention is not limited to the above embodiments. All technical solutions based on the principles of the present invention are within the scope of protection of the present invention. It should be noted that for those skilled in the art, various improvements and modifications that do not depart from the principles of the present invention should be considered within the scope of protection of the present invention.

Claims

1. A cloud resource integration and activation method, characterized in that: The following steps are involved: Abstract cloud resource activation console system, and initialize the configuration of each cloud resource system connected to the console system, including the establishment of a customized resource application form; When a resource user selects the required resource service and fills in the resource application form through the console system, construction processing is carried out; The construction processing specifically includes: jumping to the corresponding cloud resource system according to the access address associated with the resource application form, obtaining the registered user token of the currently jumped cloud resource system, and automatically backfilling the resource construction order and manually filling it out, and then using the identity of the registered user to activate resources in the currently jumped cloud resource system.

2. The cloud resource integration and activation method according to claim 1, characterized in that: The above mentioned initialization configuration of each cloud resource system connected to the console system is as follows: The construction user of the cloud resource system connected to the console system registers the user in the console system; Registered users log in to the console system to establish resource services; Registered users create custom resource application forms for associated resource services, including resource application data items filled in by resource users. The attributes of the resource application data items are consistent with the resource construction order of the current cloud resource system. Associate the customized resource application form with the address of the current cloud resource system construction order; Associate the customized resource application form with the construction order security configuration of the current cloud resource system.

3. The cloud resource integration and activation method according to claim 2, characterized in that: The construction order security configuration of the current cloud resource system is JWT security access configuration information, including key information and signature algorithm.

4. The cloud resource integration and activation method according to claim 2, characterized in that: The cloud resource system accessing the console system includes: an IaaS resource system, a PaaS resource system and a container resource system.

5. The cloud resource integration and activation method according to claim 1, characterized in that: When jumping to the corresponding cloud resource system according to the access address associated with the resource application form, a security check is performed based on the security access configuration information configured in the console system of the currently jumped cloud resource system. Only after the security check passes can the registered user token of the currently jumped cloud resource system be obtained.

6. The cloud resource integration and activation method according to claim 1, characterized in that: The automatic backfill resource construction order is specifically: After obtaining the registered user token of the currently redirected cloud resource system, the user is redirected to the construction order page. According to the mapping relationship between the resource application form and the resource application data items of the construction order, the data filled in by the resource user is automatically displayed on the construction order interface in the currently redirected cloud resource system.

7. The cloud resource integration and activation method according to claim 1, characterized in that: Manual filling refers to the manual filling of sub-segment data that cannot be automatically displayed in the resource construction order by operation and maintenance personnel, specifically including: VPC and network security policies.

8. The cloud resource integration and activation method according to claim 1, characterized in that: Also includes: The console system monitors the status of the construction order in the currently redirected cloud resource system, and changes the status of the resource application form to feedback to the resource user.

9. A cloud resource integration and activation device, characterized in that: include: The console system and several third-party cloud resource systems connected to the console system; The console system includes resource application module, configuration module and operation and maintenance module; The configuration module enables each cloud resource system to perform initial configuration, including establishing a customized resource application form; The resource application module enables users to select the required resource services and fill in the resource application form; The operation and maintenance module enables the operation and maintenance personnel to perform construction processing after receiving the resource application form filled out by the resource user, specifically including: jumping to the corresponding cloud resource system according to the access address associated with the resource application form, obtaining the registered user token of the currently jumped cloud resource system, and automatically backfilling the resource construction order and manually filling it out, and then using the identity of the registered user to activate resources in the currently jumped cloud resource system.

10. The cloud resource integration and activation device according to claim 9, characterized in that: The console system also includes a monitoring feedback module for monitoring the status of the construction order in the currently jumped cloud resource system, and changing the status of the resource application form to feed back to the resource user.

Images