Centralized management and control method and device for heterogeneous cloud platform, equipment and storage medium

Abstract

The invention relates to a centralized management and control method and device for a heterogeneous cloud platform, equipment and a storage medium. The centralized management and control method for the heterogeneous cloud platform comprises the following steps: constructing a service management model for performing classified management on cloud services; constructing a northbound identity permission model for performing resource management and control identity permission configuration management based on a resource pool corresponding to cloud service deployment area logic and a cloud base of a deployment area, and unifying northbound identity authentication; and constructing an instance management model for configuring attributes and operations of the service instance. The cloud service and instance integrated management and control of the same cloud of various private cloud technologies are realized, the difference in the use process of base cloud technology resources is shielded, the operation and maintenance difficulty of cross-region cloud nodes is reduced, a unified northbound identity permission model, a service management model and an instance management model are provided to form heterogeneous cloud platform integrated management and control, and the management and control efficiency is improved. The resource scheduling, access and management of the heterogeneous cloud platform can be better realized.

Description

Technical Field

[0001] This disclosure relates to the field of cloud computing technology, and in particular to a centralized management method, apparatus, device, and storage medium for heterogeneous cloud platforms. Background Technology

[0002] Heterogeneous cloud computing has become increasingly prevalent, offering enterprise users greater flexibility and choice. It allows businesses to mix and match resources from public and private cloud providers to meet diverse business needs, while simultaneously improving the security and reliability of the entire system. A key challenge for cloud platforms is how to achieve cross-platform operation through heterogeneous cloud platform integration and management methods, shielding the differences in underlying cloud technologies to enable integrated management and management of multiple heterogeneous cloud platforms. Summary of the Invention

[0003] This disclosure provides a centralized management and control method, apparatus, device, and storage medium for heterogeneous cloud platforms to achieve efficient management and optimization of cloud services on heterogeneous cloud platforms.

[0004] Firstly, this disclosure provides a centralized management and control method for heterogeneous cloud platforms, including:

[0005] Build a service management model to classify and manage cloud services;

[0006] Construct a northbound identity and permission model to manage resource control, identity and permission configuration based on the resource pool and cloud base of the deployment region, and unify northbound identity authentication.

[0007] Build an instance management model for configuring the attributes and operations of service instances.

[0008] In some embodiments, the construction of the service management model includes:

[0009] Based on the requirements for listing cloud services, relevant information on the same cloud services provided by heterogeneous cloud platforms is collected in a unified manner. The relevant information includes service classification, service content, technical support and service deployment.

[0010] Based on the aforementioned information, a service management model is constructed to shield the differences in underlying cloud technologies and to uniformly manage the same cloud services provided by heterogeneous cloud platforms.

[0011] In some embodiments, the cloud service includes a cloud server, and the relevant information also includes service pricing, service monitoring, service alarms, and service request items.

[0012] In some embodiments, the heterogeneous cloud platform includes heterogeneous cloud platforms with multiple deployment regions; the construction of the northbound identity and permission model includes:

[0013] Different deployment locations are logically divided into corresponding resource pools, and different deployment locations correspond to different versions of the underlying heterogeneous cloud platform;

[0014] A northbound identity and permission model is established through the resource pool and northbound user authentication to shield the differences in versions and identity permissions of the underlying heterogeneous cloud platforms, and to manage the cloud resource control, identity and permission configuration of heterogeneous cloud platforms in different deployment locations.

[0015] In some embodiments, the construction of the instance management model includes: constructing an instance control model that configures the attributes and operations of the service instance based on the content and usage of the service instance.

[0016] In some embodiments, the cloud service includes a cloud server, and the instance management model is adapted based on the attributes of the service instance of the cloud server, including:

[0017] Based on the attributes of the service instances of the cloud server, the system adapts and manages the computing, storage, network, image, snapshot, monitoring, and alarm information used, and completes the creation, deletion, power-on, power-off, and restart of the cloud server; the creation, deletion, and mounting of data disks; the creation and deletion of the network security groups to which the cloud server belongs; the updating of the image to which the cloud server belongs; and the creation and backup of snapshots for the entire cloud server or specified data disks.

[0018] Secondly, this disclosure provides a centralized management and control device for a heterogeneous cloud platform, comprising:

[0019] The first building module is used to build a service management model for classifying and managing cloud services;

[0020] The second building module is used to build the northbound identity and permission model, which is used to manage resource control, identity and permission configuration based on the resource pool and cloud base of the deployment area corresponding to the cloud service deployment area, and to unify northbound identity authentication.

[0021] The third building module is used to build the instance management model and configure the attributes and operations of service instances.

[0022] Thirdly, this disclosure provides a computer device including a memory, a processor, and a computer program stored in the memory, wherein the processor executes the computer program to implement the steps of the method described in the first aspect.

[0023] Fourthly, this disclosure provides a computer-readable storage medium having a computer program stored thereon that, when executed by a processor, implements the steps of the method described in the first aspect.

[0024] Fifthly, this disclosure provides a computer program product, including a computer program / instructions that, when executed by a processor, implement the steps of the method described in the first aspect.

[0025] This disclosure provides a centralized management and control method, apparatus, device, and storage medium for heterogeneous cloud platforms. It achieves categorized management of cloud services by constructing a service management model, and implements resource control, identity, and permission configuration management based on resource pools logically corresponding to cloud service deployment regions and cloud infrastructures in those regions. It unifies northbound identity authentication and constructs an instance management model to configure service instance attributes and operations. This enables integrated management and control of the same cloud services and instances across various private cloud technologies, masking differences in resource usage across infrastructure cloud technologies, reducing the difficulty of cross-regional cloud node operation and maintenance. By providing a unified northbound identity and permission model, service management model, and instance management model to form integrated management and control of heterogeneous cloud platforms, it can better achieve resource scheduling, access, and management of heterogeneous cloud platforms. This disclosure's integrated management and control of heterogeneous cloud platforms can coordinate the integration of these resources and achieve efficient management and optimization of cloud computing through functions such as resource management, data management, and application management. Attached Figure Description

[0026] The present disclosure will be described in more detail below based on embodiments and with reference to the accompanying drawings:

[0027] Figure 1 A flowchart illustrating a centralized management and control method for a heterogeneous cloud platform provided in this embodiment of the disclosure;

[0028] Figure 2 Examples of service management models provided in embodiments of this disclosure;

[0029] Figure 3 This is an example of a northbound identity and access control model provided in the embodiments of this disclosure;

[0030] Figure 4 Examples of instance management models provided in embodiments of this disclosure;

[0031] Figure 5 Examples of service instance models provided in embodiments of this disclosure;

[0032] In the accompanying drawings, the same parts are referred to by the same reference numerals, and the drawings are not drawn to scale. Detailed Implementation

[0033] To enable those skilled in the art to better understand the technical solutions of this disclosure, and to fully understand and implement the process of how this disclosure applies technical means to solve technical problems and achieve corresponding technical effects, the technical solutions in the embodiments of this disclosure will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this disclosure, not all embodiments. The embodiments of this disclosure and the various features within them can be combined with each other without conflict, and the resulting technical solutions are all within the protection scope of this disclosure. All other embodiments obtained by those skilled in the art based on the embodiments of this disclosure without creative effort should fall within the protection scope of this disclosure.

[0034] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this disclosure are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this disclosure described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0035] It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases the steps shown or described may be executed in a different order than that shown here.

[0036] Heterogeneous cloud computing has become increasingly prevalent, offering enterprises greater flexibility and choice. It allows them to mix and match resources from public and private cloud providers to meet diverse business needs, while simultaneously improving the security and reliability of the entire system. A key challenge for cloud platforms is how to achieve cross-platform operation through heterogeneous cloud platform integration and management, shielding the differences in underlying cloud technologies to achieve integrated management and management of multiple heterogeneous cloud platforms. Driven by this challenge, the applicant has researched and explored a heterogeneous cloud platform integration and management method. This method integrates and manages identical cloud services and instances across multiple clouds through abstract service management models and instance models.

[0037] Heterogeneous cloud platform integration and management adaptation is a method for solving the integrated management of multiple private cloud technologies. It shields the differences in the usage of underlying cloud technology resources and the operational difficulties of cross-regional cloud nodes, providing a unified northbound identity and permission model, service management model, and instance management model to form heterogeneous cloud platform integration and management, enabling better resource scheduling, access, and management of heterogeneous cloud platforms. Currently, due to the extreme complexity of various cloud platforms in multi-cloud environments (including x86 cloud, Alibaba Cloud, and Huawei Cloud), it is necessary to maintain the integrated management of resources and services on various cloud platforms. Heterogeneous cloud platform integration and management can coordinate the integration of these resources and achieve efficient management and optimization of cloud computing through functions such as resource management, data management, and application management. Therefore, it is urgent to solve the problem of how to extract key application adaptation models from heterogeneous cloud platform integration and management.

[0038] Example 1

[0039] Figure 1 This is a flowchart illustrating a centralized management and control method for a heterogeneous cloud platform provided in this embodiment. Figure 1 As shown, a centralized management and control method for a heterogeneous cloud platform includes:

[0040] Step 11: Build a service management model to classify and manage cloud services;

[0041] Step 12: Construct a northbound identity and permission model to manage resource control, identity and permission configuration based on the resource pool and cloud base corresponding to the deployment area of ​​the cloud service, and unify northbound identity authentication.

[0042] Step 13: Build an instance management model to configure the attributes and operations of service instances.

[0043] In this embodiment, by constructing a unified service management model, a northbound identity and permission model, and an instance management model, the same cloud services provided by heterogeneous cloud platforms with different cloud technologies are centrally managed and controlled, thereby achieving efficient management and optimization of cloud computing in various private cloud scenarios.

[0044] In some implementations, a service management model is constructed, including:

[0045] Step S11a: Based on the cloud service listing requirements, collect relevant information on the same cloud services provided by heterogeneous cloud platforms. The relevant information includes service classification, service content, technical support, and service deployment. In some implementations, cloud services include cloud servers, and the relevant information also includes service pricing, service monitoring, service alarms, and service application items.

[0046] Step S11b: Construct a service management model based on relevant information to shield the differences in underlying cloud technologies and manage the same cloud services provided by heterogeneous cloud platforms in a unified manner.

[0047] In some practical application examples, x86, Huawei Cloud, and Alibaba Cloud all provide cloud computing. Their heterogeneous cloud platforms all offer cloud servers as a cloud service. When building a service management model using cloud servers as an example, it's necessary to collect relevant information about cloud servers on these three heterogeneous cloud platforms (x86, Huawei Cloud, and Alibaba Cloud), including service classification, service content, technical support, and service deployment. This also includes service pricing, service monitoring, service alerts, and service request items. In some cases, other extended relevant information may also be included, depending on the specific circumstances.

[0048] The following are examples illustrating the above information:

[0049] Service Classification: Services are classified according to the service type of cloud resources. The primary classification includes: computing, storage, network, middleware, cloud database, big data, etc. The secondary classification of computing in the primary classification includes: elastic computing, etc.

[0050] Service Content: Describe the same cloud service offered across different cloud technologies, including service overview, advantages, functions, and application scenarios. For example, cloud server services include providing virtual machine resources based on virtualization technology for application systems. These virtual machine resources include production and development / testing resources, with different configurations available. Supported operating systems include Windows and Linux. Service Advantages: Describe the service advantages in terms of security, high availability, and elasticity. Service Functions: Introduce service functions based on the characteristics of the service instance, such as snapshots, block storage, VPCs, security groups, and images. Application Scenarios: Provide solutions for web servers or application servers.

[0051] Technical Support: Configure the technical support personnel information corresponding to the services based on different cloud technologies and technical routes.

[0052] Service Deployment: Adapt to the underlying cloud technologies managed by the heterogeneous cloud platform, logically dividing the deployment locations. Service instances are then deployed in the selected location. For example, multiple data centers are built in Beijing, Nanjing, and Hohhot, each with a different cloud infrastructure. The actual deployment and delivery areas are determined through logically divided deployment locations.

[0053] Service pricing: Pricing is based on cloud service specifications and the number of instances. For example, cloud servers are priced according to different specifications, such as the number of CPU cores, memory size, and data disk storage capacity.

[0054] Service Request Items: Configure service request form options based on the attributes of the cloud service instance, such as the cloud server's operating system, number of CPU cores, memory size, data disk size and quantity, deployment location, and resource usage time.

[0055] Figure 2 The image shows an example of a service management model. By collecting information about the same cloud service—cloud servers—that can be provided by heterogeneous cloud platforms with different cloud technologies, management forms such as service classification, service content, service deployment, service evaluation, service pricing configuration, and service application items can be obtained. This allows for the abstract construction of a service management model that takes relevant information as input and the corresponding listed cloud services as output. This model is displayed as a service catalog.

[0056] In some embodiments, the heterogeneous cloud platform includes heterogeneous cloud platforms in multiple deployment regions; constructing a northbound identity and permission model includes:

[0057] Step S12a: Logically divide the resource pools corresponding to different deployment locations, with different deployment locations corresponding to different versions of the underlying heterogeneous cloud platform;

[0058] Step S12b: Establish a northbound identity and permission model through resource pool and northbound user authentication, shield the differences in versions and identity permissions of the underlying heterogeneous cloud platforms, and perform cloud resource management and identity permission configuration management for heterogeneous cloud platforms in different deployment locations.

[0059] In this embodiment, when establishing a unified northbound identity and permission (authentication) model for various heterogeneous cloud platforms, the management of cloud resources across multiple regions and various heterogeneous cloud technologies is addressed by dividing the logic corresponding to different deployment locations into corresponding resource pools. Different deployment locations correspond to different versions of underlying cloud technologies. By establishing a northbound identity and permission model through resource pools and northbound user authentication, the differences in underlying cloud technology versions and identity and permission are masked, enabling unified management of cloud resources with different technologies at different deployment locations.

[0060] For example, data centers are established in multiple regions such as Beijing, Nanjing, and Hohhot. Each data center has Microsoft, Alibaba, and Huawei cloud resources under management and involves different purposes such as production or testing. Cloud resource management and identity permission configuration management are carried out through resource pools (Beijing Huawei Cloud Production Resource Pool, Beijing Alibaba Cloud Production Resource Pool, Beijing Microsoft Cloud Production Resource Pool, Beijing Huawei Cloud Development and Testing Resource Pool, Beijing Alibaba Cloud Development and Testing Resource Pool, Beijing Microsoft Cloud Development and Testing Resource Pool, etc.) and cloud bases in the deployment areas, thereby achieving unified management and control of heterogeneous cloud resources.

[0061] Figure 3The example shown is a northbound identity and permission model. It performs northbound identity authentication on the resource pool information corresponding to the deployment location logic of the same cloud service provided by heterogeneous cloud platforms. By shielding the differences in underlying cloud technology versions and identity and permission, it can uniformly manage cloud resources with different technologies in different deployment locations.

[0062] In some implementations, an instance management model is constructed, including: constructing an instance control model that configures the attributes and operations of service instances based on the content and usage of the service instances.

[0063] In this embodiment, when establishing a unified instance management model for various heterogeneous cloud platforms, taking the cloud server service provided by all heterogeneous cloud platforms as an example: cloud server instances using different cloud technologies involve resources in multiple data centers (e.g., Beijing Shahe, Nanjing, Hohhot) and different deployment locations. Cloud resource management and identity permission configuration are managed through resource pools (Beijing Huawei Cloud production resource pool, Beijing Alibaba Cloud production resource pool, Beijing Microsoft Cloud production resource pool, Beijing Huawei Cloud development and testing resource pool, Beijing Alibaba Cloud development and testing resource pool, Beijing Microsoft Cloud development and testing resource pool, etc.) and the cloud base of the deployment region. Based on unified identity authentication, service instance configuration, and service instance operations (power on, power off, restart, snapshot, configuration change), the management of instances on multiple heterogeneous cloud platforms is achieved, shielding the differences in underlying cloud technology networks, resource sets, specifications, and images.

[0064] Figure 4 The example shown is an instance management model. Based on the content and usage information of service instances provided in heterogeneous cloud platforms, the model configures service instance configurations and service instance operations, generates corresponding service work orders for display, and shields the differences in underlying cloud technology networks, resource sets, specifications and images, thereby enabling the management of instances from multiple heterogeneous cloud platforms.

[0065] In some implementations, cloud services include cloud servers, and the instance management model is adapted based on the attributes of the service instances of the cloud servers, including:

[0066] Based on the attributes of the service instances of the cloud server, the system adapts and manages the computing, storage, network, image, snapshot, monitoring, and alarm information used, and completes the creation, deletion, power-on, power-off, and restart of the cloud server; the creation, deletion, and mounting of data disks; the creation and deletion of the network security groups to which the cloud server belongs; the updating of the image to which the cloud server belongs; and the creation and backup of snapshots for the entire cloud server or specified data disks.

[0067] In this embodiment, a concise heterogeneous cloud platform integration and control model is proposed by integrating the service management models, unified northbound identity and permission models, and instance management models of various heterogeneous clouds. This model enables unified management of cloud services provided by cloud platforms with different cloud technologies, and provides users with unified northbound identity and permissions. Furthermore, the instance management model can be adapted according to the attributes of the service instances to complete the operation of related cloud services.

[0068] Figure 5 The diagram illustrates a service instance model for a cloud server, encompassing compute, storage, network, images, snapshots, monitoring, and alerts. In the diagram, compute represents the cloud server compute node, network represents the network to which the resource belongs, image represents the image information of the operating system used by the service instance, storage represents the data disk information used by the service instance, and snapshot represents the snapshot information of the service instance model.

[0069] The configuration properties and instance operations for each part are cloud servers, as follows:

[0070] The attributes of a cloud server include: ID, name, status, internal IP address, private IP address, configuration, image, and other information.

[0071] Cloud server related functions: Get a list of cloud servers, create a cloud server, start a cloud server, stop a cloud server, restart a cloud server, delete a cloud server, and get a list of cloud server configurations.

[0072] The storage attributes include: ID, name, storage configuration (size), and whether the storage configuration supports customizable configuration, etc.

[0073] Storage-related functions: Get storage list, create storage, delete storage, mount storage, unmount storage, get storage configuration list.

[0074] The attributes of an image include: ID, name, operating system, image format, and additional information.

[0075] Image-related functions: Get image list, create image, delete image.

[0076] The network attributes include: ID, name, gateway, mask, and additional information.

[0077] Network-related functions: Get network list, add network, delete network, get network configuration list.

[0078] The attributes of a snapshot include: ID, name, snapshot configuration, creation time, status, and additional information.

[0079] Snapshot-related functions: Get a list of snapshots, create a snapshot, and delete a snapshot.

[0080] In this embodiment, service attributes and operations are created using the service instance model based on the content and usage of the service instance, and the operation and display attributes of the service instance are configured, thereby realizing the control of service instances on the heterogeneous cloud platform.

[0081] Example 2

[0082] This embodiment provides a centralized management and control device for a heterogeneous cloud platform, including:

[0083] The first building module is used to build a service management model for classifying and managing cloud services;

[0084] The second building module is used to build a northbound identity and permission model, which is used to manage resource control, identity and permission configuration based on the resource pool and cloud base of the deployment area corresponding to the cloud service deployment area, and to unify northbound identity authentication.

[0085] The third building module is used to build the instance management model and configure the attributes and operations of service instances.

[0086] In this embodiment, by constructing a unified service management model, a northbound identity and permission model, and an instance management model, the same cloud services provided by heterogeneous cloud platforms with different cloud technologies are centrally managed and controlled, thereby achieving efficient management and optimization of cloud computing in various private cloud scenarios.

[0087] In some implementations, a service management model is constructed, including:

[0088] Based on the requirements for listing cloud services, relevant information on the same cloud services provided by heterogeneous cloud platforms is collected in a unified manner; and a service management model is built based on the relevant information to shield the differences in underlying cloud technologies and to manage the same cloud services provided by heterogeneous cloud platforms in a unified manner.

[0089] The relevant information includes service categories, service content, technical support, and service deployment; in some implementations, cloud services include cloud servers, and the relevant information also includes service pricing, service monitoring, service alarms, and service application items.

[0090] In some practical application examples, x86, Huawei Cloud, and Alibaba Cloud all provide cloud computing. Their heterogeneous cloud platforms all offer cloud servers as a cloud service. When building a service management model using cloud servers as an example, it's necessary to collect relevant information about cloud servers on these three heterogeneous cloud platforms (x86, Huawei Cloud, and Alibaba Cloud), including service classification, service content, technical support, and service deployment. This also includes service pricing, service monitoring, service alerts, and service request items. In some cases, other extended relevant information may also be included, depending on the specific circumstances.

[0091] The following are examples illustrating the above information:

[0092] Service Classification: Services are classified according to the service type of cloud resources. The primary classification includes: computing, storage, network, middleware, cloud database, big data, etc. The secondary classification of computing in the primary classification includes: elastic computing, etc.

[0093] Service Content: Describe the same cloud service offered across different cloud technologies, including service overview, advantages, functions, and application scenarios. For example, cloud server services include providing virtual machine resources based on virtualization technology for application systems. These virtual machine resources include production and development / testing resources, with different configurations available. Supported operating systems include Windows and Linux. Service Advantages: Describe the service advantages in terms of security, high availability, and elasticity. Service Functions: Introduce service functions based on the characteristics of the service instance, such as snapshots, block storage, VPCs, security groups, and images. Application Scenarios: Provide solutions for web servers or application servers.

[0094] Technical Support: Configure the technical support personnel information corresponding to the services based on different cloud technologies and technical routes.

[0095] Service Deployment: Adapt to the underlying cloud technologies managed by the heterogeneous cloud platform, logically dividing the deployment locations. Service instances are then deployed in the selected location. For example, multiple data centers are built in Beijing, Nanjing, and Hohhot, each with a different cloud infrastructure. The actual deployment and delivery areas are determined through logically divided deployment locations.

[0096] Service pricing: Pricing is based on cloud service specifications and the number of instances. For example, cloud servers are priced according to different specifications, such as the number of CPU cores, memory size, and data disk storage capacity.

[0097] Service Request Items: Configure service request form options based on the attributes of the cloud service instance, such as the cloud server's operating system, number of CPU cores, memory size, data disk size and quantity, deployment location, and resource usage time.

[0098] Figure 2 The image shows an example of a service management model. By collecting information about the same cloud service—cloud servers—that can be provided by heterogeneous cloud platforms with different cloud technologies, management forms such as service classification, service content, service deployment, service evaluation, service pricing configuration, and service application items can be obtained. This allows for the abstract construction of a service management model that takes relevant information as input and the corresponding listed cloud services as output. This model is displayed as a service catalog.

[0099] In some embodiments, the heterogeneous cloud platform includes heterogeneous cloud platforms in multiple deployment regions; constructing a northbound identity and permission model includes: logically dividing different deployment locations into corresponding resource pools, with different deployment locations corresponding to different versions of the underlying heterogeneous cloud platform; and establishing a northbound identity and permission model through resource pools and northbound user authentication to shield the differences in the underlying heterogeneous cloud platform version and identity and permission, and to perform cloud resource management and identity and permission configuration management for heterogeneous cloud platforms in different deployment locations.

[0100] In this embodiment, when establishing a unified northbound identity and permission (authentication) model for various heterogeneous cloud platforms, the management of cloud resources across multiple regions and various heterogeneous cloud technologies is addressed by dividing the logic corresponding to different deployment locations into corresponding resource pools. Different deployment locations correspond to different versions of underlying cloud technologies. By establishing a northbound identity and permission model through resource pools and northbound user authentication, the differences in underlying cloud technology versions and identity and permission are masked, enabling unified management of cloud resources with different technologies at different deployment locations.

[0101] For example, data centers are established in multiple regions such as Beijing, Nanjing, and Hohhot. Each data center has Microsoft, Alibaba, and Huawei cloud resources under management and involves different purposes such as production or testing. Cloud resource management and identity permission configuration management are carried out through resource pools (Beijing Huawei Cloud Production Resource Pool, Beijing Alibaba Cloud Production Resource Pool, Beijing Microsoft Cloud Production Resource Pool, Beijing Huawei Cloud Development and Testing Resource Pool, Beijing Alibaba Cloud Development and Testing Resource Pool, Beijing Microsoft Cloud Development and Testing Resource Pool, etc.) and cloud bases in the deployment areas, thereby achieving unified management and control of heterogeneous cloud resources.

[0102] Figure 3 The example shown is a northbound identity and permission model. It performs northbound identity authentication on the resource pool information corresponding to the deployment location logic of the same cloud service provided by heterogeneous cloud platforms. By shielding the differences in underlying cloud technology versions and identity and permission, it can uniformly manage cloud resources with different technologies in different deployment locations.

[0103] In some implementations, an instance management model is constructed, including: constructing an instance control model that configures the attributes and operations of service instances based on the content and usage of the service instances.

[0104] In this embodiment, when establishing a unified instance management model for various heterogeneous cloud platforms, taking the cloud server service provided by all heterogeneous cloud platforms as an example: cloud server instances using different cloud technologies involve resources in multiple data centers (e.g., Beijing Shahe, Nanjing, Hohhot) and different deployment locations. Cloud resource management and identity permission configuration are managed through resource pools (Beijing Huawei Cloud production resource pool, Beijing Alibaba Cloud production resource pool, Beijing Microsoft Cloud production resource pool, Beijing Huawei Cloud development and testing resource pool, Beijing Alibaba Cloud development and testing resource pool, Beijing Microsoft Cloud development and testing resource pool, etc.) and the cloud base of the deployment region. Based on unified identity authentication, service instance configuration, and service instance operations (power on, power off, restart, snapshot, configuration change), the management of instances on multiple heterogeneous cloud platforms is achieved, shielding the differences in underlying cloud technology networks, resource sets, specifications, and images.

[0105] Figure 4 The example shown is an instance management model. Based on the content and usage information of service instances provided in heterogeneous cloud platforms, the model configures service instance configurations and service instance operations, generates corresponding service work orders for display, and shields the differences in underlying cloud technology networks, resource sets, specifications and images, thereby enabling the management of instances from multiple heterogeneous cloud platforms.

[0106] In some implementations, cloud services include cloud servers, and the instance management model is adapted based on the attributes of the service instances of the cloud servers, including:

[0107] Based on the attributes of the service instances of the cloud server, the system adapts and manages the computing, storage, network, image, snapshot, monitoring, and alarm information used, and completes the creation, deletion, power-on, power-off, and restart of the cloud server; the creation, deletion, and mounting of data disks; the creation and deletion of the network security groups to which the cloud server belongs; the updating of the image to which the cloud server belongs; and the creation and backup of snapshots for the entire cloud server or specified data disks.

[0108] In this embodiment, a concise heterogeneous cloud platform integration and control model is proposed by integrating the service management models, unified northbound identity and permission models, and instance management models of various heterogeneous clouds. This model enables unified management of cloud services provided by cloud platforms with different cloud technologies, and provides users with unified northbound identity and permissions. Furthermore, the instance management model can be adapted according to the attributes of the service instances to complete the operation of related cloud services.

[0109] Figure 5 The diagram illustrates a service instance model for a cloud server, encompassing compute, storage, network, images, snapshots, monitoring, and alerts. In the diagram, compute represents the cloud server compute node, network represents the network to which the resource belongs, image represents the image information of the operating system used by the service instance, storage represents the data disk information used by the service instance, and snapshot represents the snapshot information of the service instance model.

[0110] The configuration properties and instance operations for each part are cloud servers, as follows:

[0111] The attributes of a cloud server include: ID, name, status, internal IP address, private IP address, configuration, image, and other information.

[0112] Cloud server related functions: Get a list of cloud servers, create a cloud server, start a cloud server, stop a cloud server, restart a cloud server, delete a cloud server, and get a list of cloud server configurations.

[0113] The storage attributes include: ID, name, storage configuration (size), and whether the storage configuration supports customizable configuration, etc.

[0114] Storage-related functions: Get storage list, create storage, delete storage, mount storage, unmount storage, get storage configuration list.

[0115] The attributes of an image include: ID, name, operating system, image format, and additional information.

[0116] Image-related functions: Get image list, create image, delete image.

[0117] The network attributes include: ID, name, gateway, mask, and additional information.

[0118] Network-related functions: Get network list, add network, delete network, get network configuration list.

[0119] The attributes of a snapshot include: ID, name, snapshot configuration, creation time, status, and additional information.

[0120] Snapshot-related functions: Get a list of snapshots, create a snapshot, and delete a snapshot.

[0121] In this embodiment, the instance management model is adapted according to the attributes of the service instance to obtain the information of the above service instance model, and then displayed in the form of a form, thereby completing the management and control of service instances on the heterogeneous cloud platform.

[0122] Example 3

[0123] This embodiment provides an application example:

[0124] 1. Develop a service management model. Business implementation personnel collect and organize service categories, content, deployment locations, technical support, and service configurations based on service deployment requirements. For example, cloud management across various technical architectures provides cloud services such as computing resources (cloud servers) and load balancing. The service management model abstracts away the underlying cloud technologies and manages cloud services through categorization. Service management is constructed from several aspects, including service classification, service content, technical support, service deployment, service pricing, service monitoring, service alerts, and service request items. In terms of service classification: services are categorized according to the service type of cloud resources (primary categories: computing, storage, networking, middleware, cloud databases, big data, etc.; secondary categories under primary category computing: elastic computing, etc.); in terms of service content: descriptions of services, advantages, functions, and application scenarios are provided for the same cloud services offered by different cloud technologies (e.g., cloud server service content: providing virtual machine resources based on virtualization technology for application systems, including production and development testing resources, while providing resources with different specifications and configurations, supporting operating systems including Windows and Linux. Service advantages: describing service advantages in terms of security, high availability, and elasticity. Service functions: introducing service functions based on the characteristics of service instances, such as snapshots, block storage, VPCs, security groups, and images. Application scenarios: providing solutions for web servers or application servers); in terms of technical support: configuring the corresponding technical support personnel information for services based on different cloud technologies and technical routes; in terms of service deployment: adapting to the actual cloud technologies managed at the underlying layer of heterogeneous cloud platforms, logically dividing into deployment locations and service instance activation selections. For example, multiple data centers can be built in Beijing, Nanjing, and Hohhot, each with a different cloud infrastructure. Deployment locations are logically defined to pinpoint the actual delivery areas. Regarding service pricing: pricing is based on cloud service specifications and the number of instances. For instance, cloud servers are priced according to different specifications, such as the number of CPU cores, memory size, and data disk storage capacity. Regarding service application items: service application form options are configured based on the attributes of the cloud service instance, such as the cloud server's operating system, number of CPU cores, memory size, data disk size and quantity, deployment location, and resource usage time.

[0125] 2. Based on the actual service deployment, cloud resource management and identity permission configuration are carried out through resource pools (Beijing Huawei Cloud production resource pool, Beijing Alibaba Cloud production resource pool, Beijing Microsoft Cloud production resource pool, Beijing Huawei Cloud development and testing resource pool, Beijing Alibaba Cloud development and testing resource pool, Beijing Microsoft Cloud development and testing resource pool, etc.) and the cloud base of the deployment area, with unified authorization for northbound permissions.

[0126] 3. Create an instance management model. Based on the content and usage of service instances, create service attributes and operations, configure the operation and display attributes of service instances, and achieve management and control of service instances. Taking cloud servers as an example: Based on the attributes of service instances, adapt and manage information such as computing, storage, network, images, snapshots, monitoring, and alarms used, and complete the creation, deletion, power-on, power-off, and restart of cloud servers; the creation, deletion, and mounting of data disks; the creation and deletion of network security groups to which cloud servers belong; the updating of images to which cloud servers belong (creating new images and deleting old images); and the creation of snapshot backups for the entire cloud server or a specific data disk, etc.

[0127] In this embodiment, service attributes and operations are created using the service instance model based on the content and usage of the service instance, and the operation and display attributes of the service instance are configured, thereby realizing the control of service instances on the heterogeneous cloud platform.

[0128] Example 4

[0129] Based on the above embodiments, this embodiment provides a computer device, including a memory, a processor, and a computer program stored in the memory, wherein the processor executes the computer program to implement the steps of the method described in the above embodiments.

[0130] In some embodiments of this example, a computer-readable storage medium is provided, on which a computer program is stored, which, when executed by a processor, implements the steps of the method described in the above embodiments.

[0131] In some embodiments of this example, a computer program product is provided, including a computer program / instructions, which, when executed by a processor, implements the steps of the method described in the above embodiments.

[0132] The processor may include, but is not limited to, one or more processors or microprocessors. Each processor may be implemented as an Application Specific Integrated Circuit (ASIC), Digital Signal Processor (DSP), Digital Signal Processing Device (DSPD), Programmable Logic Device (PLD), Field Programmable Gate Array (FPGA), controller, microcontroller, microprocessor, or other electronic component, for executing the methods in the above embodiments.

[0133] Computer-readable storage media can be implemented by any type of volatile or non-volatile storage device or a combination thereof. Computer-readable storage media may include, but are not limited to, random access memory (RAM), read-only memory (ROM), flash memory, EPROM memory, EEPROM memory, registers, and computer storage media (e.g., hard disks, floppy disks, solid-state drives, removable disks, CD-ROMs, DVD-ROMs, Blu-ray discs, etc.).

[0134] Computer-readable storage media may also store at least one computer-executable program / instruction, such as computer-readable instructions. Computer-readable storage media include, but are not limited to, volatile memory and / or non-volatile memory. Volatile memory may include, for example, random access memory (RAM) and / or cache memory. Computer-readable storage media may include, for example, read-only memory (ROM), hard disk, flash memory, etc. For example, a non-transitory computer-readable storage medium may be connected to a computing device such as a computer, and then, when the computing device executes the computer-readable instructions stored on the computer-readable storage medium, the various methods described above can be performed.

[0135] In addition, the computer device may include (but is not limited to) a data bus, an input / output (I / O) bus, a display, and input / output devices (e.g., keyboard, mouse, speakers, etc.).

[0136] The processor can communicate with external devices via the I / O bus through wired or wireless networks.

[0137] In one embodiment, the at least one computer-executable instruction may also be compiled into or comprise a software product / computer program product, wherein one or more computer-executable instructions are executed by a processor to perform the steps of the various functions and / or methods in the embodiments described herein.

[0138] In the embodiments provided in this disclosure, it should be understood that the disclosed apparatus and methods can also be implemented in other ways. The apparatus embodiments described above are merely illustrative; for example, the flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of apparatus, methods, and computer program products according to various embodiments of this disclosure. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions marked in the blocks may occur in a different order than those marked in the drawings. For example, two consecutive blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in a block diagram and / or flowchart, and combinations of blocks in block diagrams and / or flowcharts, can be implemented using a dedicated hardware-based system that performs the specified function or action, or using a combination of dedicated hardware and computer instructions.

[0139] It should be noted that, in this disclosure, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitation, an element limited by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.

[0140] While the embodiments disclosed herein are as described above, the foregoing content is merely for the purpose of facilitating understanding of this disclosure and is not intended to limit this disclosure. Any person skilled in the art to which this disclosure pertains may make any modifications and changes in form and detail of the implementation without departing from the spirit and scope of this disclosure; however, the scope of patent protection of this disclosure shall still be determined by the scope defined in the appended claims.

Claims

1. A centralized management and control method for a heterogeneous cloud platform, characterized in that, include: Build a service management model to classify and manage cloud services; Construct a northbound identity and permission model to manage resource control, identity and permission configuration based on the resource pool and cloud base of the deployment region, and unify northbound identity authentication. Build an instance management model for configuring the attributes and operations of service instances.

2. The centralized management and control method for heterogeneous cloud platforms according to claim 1, characterized in that, The construction of the service management model includes: Based on the requirements for listing cloud services, relevant information on the same cloud services provided by heterogeneous cloud platforms is collected in a unified manner. The relevant information includes service classification, service content, technical support and service deployment. Based on the aforementioned information, a service management model is constructed to shield the differences in underlying cloud technologies and to uniformly manage the same cloud services provided by heterogeneous cloud platforms.

3. The centralized management and control method for heterogeneous cloud platforms according to claim 2, characterized in that, The cloud service includes a cloud server, and the relevant information also includes service pricing, service monitoring, service alarms, and service application items.

4. The centralized management and control method for heterogeneous cloud platforms according to claim 2, characterized in that, The heterogeneous cloud platform includes heterogeneous cloud platforms with multiple deployment areas; The construction of the northbound identity and permission model includes: Different deployment locations are logically divided into corresponding resource pools, and different deployment locations correspond to different versions of the underlying heterogeneous cloud platform; A northbound identity and permission model is established through the resource pool and northbound user authentication to shield the differences in versions and identity permissions of the underlying heterogeneous cloud platforms, and to manage the cloud resource control, identity and permission configuration of heterogeneous cloud platforms in different deployment locations.

5. The centralized management and control method for heterogeneous cloud platforms according to claim 2, characterized in that, The construction of the instance management model includes: constructing an instance control model that configures the attributes and operations of the service instance based on the content and usage of the service instance.

6. The centralized management and control method for heterogeneous cloud platforms according to claim 1, characterized in that, The cloud service includes a cloud server, and the instance management model is adapted based on the attributes of the service instances of the cloud server, including: Based on the attributes of the service instances of the cloud server, the system adapts and manages the computing, storage, network, image, snapshot, monitoring, and alarm information used, and completes the creation, deletion, power-on, power-off, and restart of the cloud server; the creation, deletion, and mounting of data disks; the creation and deletion of the network security groups to which the cloud server belongs; the updating of the image to which the cloud server belongs; and the creation and backup of snapshots for the entire cloud server or specified data disks.

7. A centralized management and control device for a heterogeneous cloud platform, characterized in that, include: The first building module is used to build a service management model for classifying and managing cloud services; The second building module is used to build a northbound identity and permission model, which is used to manage resource control, identity and permission configuration based on the resource pool and cloud base of the deployment area corresponding to the cloud service deployment area, and to unify northbound identity authentication. The third building module is used to build the instance management model and configure the attributes and operations of service instances.

8. A computer device, comprising a memory, a processor, and a computer program stored in the memory, characterized in that, The processor executes the computer program to implement the steps of the method according to any one of claims 1 to 6.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When executed by a processor, the computer program implements the steps of the method according to any one of claims 1 to 6.

10. A computer program product comprising a computer program / instructions, characterized in that, When executed by a processor, the computer program implements the steps of the method according to any one of claims 1 to 6.

Images