Service deployment system, method and apparatus, electronic device, storage medium, and product

Abstract

The present disclosure relates to the field of cloud computing, and provides a service deployment system, method and apparatus, an electronic device, a storage medium, and a product. The method comprises: receiving a second deployment request, sent by a client, for a target service directed at a second virtual private cloud, wherein the second deployment request comprises a deployment file, and the deployment file comprises resource description information for resources required for operation of the target service corresponding to the second virtual private cloud, and an automated script; on the basis of the deployment file and in a first virtual private cloud, configuring, for the target service corresponding to the second virtual private cloud, the resources required for the operation; and upon completion of resource configuration, loading a target image file from an object storage service of the first virtual private cloud into the configured computing resources, so as to complete the deployment of the target service directed at the second virtual private cloud. In the present disclosure, resources required for operation of a target service can be automatically configured, and an image file of the target service can be automatically loaded, thereby achieving automated deployment of the target service and simplifying the complexity of the deployment process.

Description

Service deployment systems, methods, apparatus, electronic devices, storage media and products

[0001] This disclosure claims priority to Chinese Patent Application No. 202411460021.1, filed with the China Patent Office on October 17, 2024, entitled “Service Deployment System, Method, Apparatus, Electronic Device, Storage Medium and Product”, the entire contents of which are incorporated herein by reference. Technical Field

[0002] This disclosure relates to the field of cloud computing technology, and in particular to a service deployment system, method, apparatus, electronic device, storage medium, and product. Background Technology

[0003] A bastion host is a management platform that provides users with operation and maintenance (O&M) and security auditing capabilities. It centrally manages O&M permissions, controls user actions throughout the process, and provides real-time O&M scenario reconstruction. Deploying a bastion host service in a cloud computing environment ensures that O&M activities are authentic, permissions are controllable, and operations are auditable, thereby resolving issues such as difficulty in managing cloud resources, unclear O&M responsibilities and permissions, and difficulty in tracing O&M events.

[0004] To deploy a bastion host service in a cloud computing environment, operations and maintenance personnel manually write code based on the resource description information of the resources required for the bastion host service to run. This code requests computing resources (such as ECS (Elastic Compute Service)) and storage resources (such as RDS (Relational Database Service)) required for the bastion host service to run in the virtual private cloud used to provide the bastion host service. After completing the resource request, operations and maintenance personnel manually write automated scripts and run these scripts to complete the deployment of the bastion host service.

[0005] However, the entire deployment process requires manual operation by maintenance personnel, making it rather cumbersome. Summary of the Invention

[0006] This disclosure provides a service deployment system, method, apparatus, electronic device, storage medium, and product that simplifies the complexity of the service deployment process. The technical solution is as follows:

[0007] In a first aspect, a service deployment system is provided, the system comprising: a client and an automated deployment platform, the automated deployment platform being able to access a first virtual private cloud, the first virtual private cloud being able to provide target services for managing resources in a second virtual private cloud;

[0008] The client is used to respond to a first deployment request for a target service of the second virtual private cloud, upload the target image file corresponding to the target service to the object storage service of the first virtual private cloud, and send a second deployment request for the target service to the automated deployment platform. The second deployment request includes a deployment file, which includes resource description information of the resources required for the target service of the second virtual private cloud to run and an automation script.

[0009] The automated deployment platform is used to respond to the second deployment request, and based on the deployment file, configure the resources required for the operation of the target service corresponding to the second virtual private cloud in the first virtual private cloud. After the resource configuration is completed, the target image file in the object storage service is loaded into the configured computing resources to complete the deployment of the target service to the second virtual private cloud.

[0010] Secondly, a service deployment method is provided, the method comprising:

[0011] Receive a second deployment request sent by the client for a target service in a second virtual private cloud. The second deployment request includes a deployment file, which includes resource description information of the resources required for the target service to run in the second virtual private cloud and an automation script.

[0012] Based on the deployment file, in the first virtual private cloud, configure the resources required for the operation of the target service corresponding to the second virtual private cloud;

[0013] After the resource configuration is completed, the target image file in the object storage service of the first virtual private cloud is loaded into the configured computing resources to complete the deployment of the target service for the second virtual private cloud.

[0014] Thirdly, a service deployment method is provided, the method comprising:

[0015] In response to a first deployment request for a target service to a second virtual private cloud, a deployment interface for the target service is displayed, the deployment interface including upload controls and configuration controls;

[0016] In response to a configuration operation on the configuration control, a deployment file is obtained, the deployment file including resource description information of the resources required for the runtime of the target service corresponding to the second virtual private cloud and an automation script;

[0017] In response to a touch operation on the upload control, a second deployment request for the target service is sent to the automated deployment platform, and the target image file of the target service is uploaded to the object storage service of the first virtual private cloud. The second deployment request includes the deployment file and is used to request the automated deployment platform to deploy the target service for the second virtual private cloud in the first virtual private cloud.

[0018] Fourthly, a service deployment apparatus is provided, the apparatus comprising:

[0019] The receiving module is used to receive a second deployment request sent by the client for a target service of the second virtual private cloud. The second deployment request includes a deployment file, which includes resource description information of the resources required for the target service to run corresponding to the second virtual private cloud and an automation script.

[0020] The configuration module is used to configure the resources required for the operation of the target service corresponding to the second virtual private cloud in the first virtual private cloud based on the deployment file;

[0021] The loading module is used to load the target image file in the object storage service of the first virtual private cloud into the configured computing resources after the resource configuration is completed, so as to complete the deployment of the target service for the second virtual private cloud.

[0022] Fifthly, a service deployment apparatus is provided, the apparatus comprising:

[0023] The display module is configured to display the deployment interface of the target service in response to a first deployment request for a target service in a second virtual private cloud. The deployment interface includes upload controls and configuration controls.

[0024] The acquisition module is used to acquire a deployment file in response to a configuration operation on the configuration control. The deployment file includes resource description information of the resources required for the target service to run in the second virtual private cloud and an automation script.

[0025] The sending module is configured to respond to a touch operation on the upload control by sending a second deployment request for the target service to the automated deployment platform and uploading the target image file of the target service to the object storage service of the first virtual private cloud. The second deployment request includes the deployment file and is used to request the automated deployment platform to deploy the target service for the second virtual private cloud in the first virtual private cloud based on the deployment file and the target image file.

[0026] In a sixth aspect, an electronic device is provided, including a processor and a memory; the memory stores at least one piece of program code; the at least one piece of program code is invoked and executed by the processor to implement the service deployment method of the first aspect, or the service deployment method of the second aspect.

[0027] In a seventh aspect, a computer-readable storage medium is provided, wherein at least one computer program is stored therein, and the at least one computer program, when executed by a processor, is capable of implementing the service deployment method described in the first aspect or the service deployment method described in the second aspect.

[0028] Eighthly, a computer program product is provided, the computer program product comprising a computer program that, when executed by a processor, can implement the service deployment method as described in the first aspect, or the service deployment method as described in the second aspect.

[0029] The beneficial effects of the technical solutions provided in this disclosure are:

[0030] This disclosure provides a service deployment system for deploying a target service in a first virtual private cloud (VPN) for a user's second VPN. The system includes a client and an automated deployment platform. In response to a first deployment request for the target service in the second VPN, the client uploads the target image file corresponding to the target service to the object storage service of the first VPN and sends a second deployment request to the automated deployment platform. This second deployment request includes a deployment file for the target service in the second VPN. The deployment file includes resource description information of the resources required for the target service to run and an automation script. Based on the resource description information in the deployment file, the automated deployment platform can automatically configure the resources required for the target service to run and automatically load the target service image file based on the automation script, thereby achieving automatic deployment of the target service. Since the automatic configuration and target service application processes do not require manual operation by maintenance personnel, the complexity of the deployment process is greatly simplified, and deployment efficiency is improved. Furthermore, manual deployment by maintenance personnel may result in human error and inconsistencies, while the automated deployment of this disclosure avoids these problems and improves service availability. Attached Figure Description

[0031] To more clearly illustrate the technical solutions in the embodiments of this disclosure, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of this disclosure. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0032] Figure 1 is a structural diagram of a service deployment system provided in an embodiment of this disclosure;

[0033] Figure 2 is a flowchart of a service deployment method provided in an embodiment of this disclosure;

[0034] Figure 3 is a flowchart of the entire deployment of a bastion host service provided in an embodiment of this disclosure;

[0035] Figure 4 is a schematic diagram of a service deployment device provided in an embodiment of this disclosure;

[0036] Figure 5 is a schematic diagram of a service deployment device provided in an embodiment of this disclosure;

[0037] Figure 6 shows a structural block diagram of an electronic device provided by an exemplary embodiment of the present disclosure. Detailed Implementation

[0038] To make the objectives, technical solutions, and advantages of this disclosure clearer, the embodiments of this disclosure will be described in further detail below with reference to the accompanying drawings.

[0039] It is understood that the terms "each," "multiple," and "any," etc., used in the embodiments of this disclosure, include "multiple" (two or more), "each" (each of the corresponding multiples), and "any" (any one of the corresponding multiples). For example, multiple words include 10 words, and "each word" refers to each of the 10 words, while "any word" refers to any one of the 10 words.

[0040] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this disclosure are all information and data authorized by the user or fully authorized by all parties. Furthermore, the collection, use and processing of the relevant data must comply with the relevant laws, regulations and standards of the relevant countries and regions, and corresponding operation portals are provided for users to choose to authorize or refuse.

[0041] Before implementing the embodiments of this disclosure, the terms used in the embodiments of this disclosure will be explained first.

[0042] A Virtual Private Cloud (VPC) is a single-tenant network architecture, belonging to a specific private network. To ensure tenant data security, VPCs are not interconnected. Within a VPC, tenants control their own private network, such as selecting IP (Internet Protocol) address ranges, configuring routing tables and gateways, and utilizing various cloud resources such as ECS, RDS, and SLB (Server Load Balancing).

[0043] Bastion hosts are management platforms that provide users with operation and maintenance and security auditing. They can centrally manage operation and maintenance permissions, control user operation behavior throughout the process, and restore operation and maintenance scenarios in real time. They can ensure that the identity of operation and maintenance behavior can be identified, permissions can be controlled, and operations can be audited, thereby solving problems such as difficulty in resource management, unclear operation and maintenance responsibilities and permissions, and difficulty in tracing operation and maintenance events.

[0044] Resource orchestration is a simple and easy-to-use cloud resource management and automated operation and maintenance service. Users describe the dependencies and configurations of multiple cloud resources through templates. Orchestration templates are also a standardized way of delivering resources and applications, and can be edited and modified at any time, making Infrastructure as Code possible.

[0045] Automatic deployment is a crucial component in supporting DevOps practices and managing CI (Continuous Integration) / CD (Continuous Delivery) pipelines.

[0046] ECS is an elastic and scalable computing service that provides high-performance, highly available computing resources and supports multiple operating systems and programming languages. Users can quickly create, start, and manage instances as needed, enabling flexible computing expansion. ECS supports various application scenarios, such as web servers, database servers, scientific computing, and big data processing.

[0047] RDS is a cloud database service based on multiple database engines such as MySQL, SQL Server, PostgreSQL, and Oracle. Users can create, manage, back up, and restore databases through a simple and easy-to-use console, without needing to worry about the underlying hardware and system configuration. RDS provides standardized database services, including guarantees in terms of security, availability, and performance, meeting the needs of enterprise-level applications.

[0048] ENI (Elastic Network Interface) is a virtual network interface that can be associated with a cloud server instance to achieve network connectivity.

[0049] Cloud computing refers to the delivery and usage model of IT infrastructure, meaning obtaining necessary resources in an on-demand and easily scalable manner through a network. In a broader sense, cloud computing also refers to the delivery and usage model of services, meaning obtaining necessary services in an on-demand and easily scalable manner through a network. These services can be IT and software related, internet-related, or other services. Cloud computing is a product of the development and integration of traditional computer and network technologies such as grid computing, distributed computing, parallel computing, utility computing, network storage technologies, virtualization, and load balancing.

[0050] With the development of the internet, real-time data streams, and the diversification of connected devices, as well as the demands for search services, social networks, mobile commerce, and open collaboration, cloud computing has developed rapidly. Unlike previous parallel distributed computing, cloud computing is conceptually poised to revolutionize the entire internet model and enterprise management model, and it is already being applied to the deployment of cloud services.

[0051] Taking the deployment of a bastion host service in a cloud computing environment as an example, the relevant technologies require operations and maintenance personnel to manually write code to apply for the computing resources (such as ECS) and storage resources (such as RDS) required for the bastion host service to run in the virtual private cloud used to provide the service, based on the resource description information. After completing the resource application, the operations and maintenance personnel manually write automated scripts to complete the configuration, construction, deployment, and testing of the bastion host service. The entire process is divided into two stages: resource application and application deployment. After manually applying for resources, the operations and maintenance personnel manually deploy the application. The entire deployment process is extremely cumbersome and inefficient, and is prone to human error and inconsistencies, resulting in poor service availability. In addition, both resource application and application deployment require manual operation by operations and maintenance personnel, making it impossible to achieve smooth resource scaling and resulting in high operation and maintenance costs.

[0052] This disclosure provides a service deployment method that eliminates the need for operations and maintenance personnel to manually apply for resources or write automated scripts. Based on the deployment interface of the bastion host service, a deployment file is configured. This file automatically generates the necessary computing and storage resources for the bastion host according to the orchestration configuration and enables automated, one-click deployment of the bastion host service. This method merges the resource application and application deployment phases into one, eliminating the need for operations and maintenance personnel to wait for resource applications to complete before deploying the service. This simplifies the deployment process and improves operational efficiency. Furthermore, it reduces the probability of human error. Once the deployment file is configured, operations and maintenance personnel do not need to worry about subsequent resource production and application deployment, ensuring deployment consistency. They no longer need to manually apply for resources, only maintain the deployment file, reducing maintenance complexity and improving service availability. Additionally, operations and maintenance personnel can dynamically adjust resource allocation as needed, reducing operational costs.

[0053] Figure 1 illustrates a service deployment system provided in an embodiment of this disclosure. Referring to Figure 1, the system includes a client 101 and an automated deployment platform 102. A communication connection is established between the client 101 and the automated deployment platform 102, allowing the client 101 to access the automated deployment platform 102. The automated deployment platform 102 can access a first virtual private cloud (VPN), which provides a target service for managing resources in a second VPN. The first VPN is owned by a cloud service provider, and the second VPN is owned by a tenant. The target service can be a bastion host service, etc. In other words, this system is used to deploy the target service in the first VPN for tenants of the second VPN, so as to manage resources in the second VPN based on the target service deployed in the first VPN.

[0054] The client 101 can be the front end of the automated deployment service, and can be installed on electronic devices such as laptops or desktop computers. In response to a first deployment request for a target service in the second virtual private cloud, the client 101 uploads the target image file corresponding to the target service to the object storage service of the first virtual private cloud, and sends a second deployment request for the target service to the automated deployment platform. The second deployment request includes a deployment file containing resource description information of the resources required for the target service to run in the second virtual private cloud, including computing resources, storage resources, network resources, etc. The resource description information includes the size of the resources and their relationships. The deployment file may also include automation scripts used to automatically run the target service image file, thereby achieving the application deployment of the target service.

[0055] The automated deployment platform 102 serves as the backend for automated deployment services. This platform can be a standalone physical server, a server cluster or distributed system comprised of multiple physical servers, or a cloud server providing basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms. In response to a second deployment request, the automated deployment platform 102, based on the deployment file, configures the necessary resources for the target service corresponding to the second virtual private cloud within the first virtual private cloud. These resources include computing resources, storage resources, and network resources. Specifically, it can configure computing and storage resources for the second virtual private cloud within the first virtual private cloud, establish associations between the configured computing and storage resources, and then establish a communication connection between the configured computing resources and the second virtual private cloud. This communication connection is used for the computing resources to access and manage the resources of the second virtual private cloud. After the resource configuration is complete, the target image file in the object storage service is loaded into the configured computing resources to complete the deployment of the target service for the second virtual private cloud.

[0056] This disclosure provides a service deployment method. Taking the system shown in Figure 1 as an example of executing this disclosure embodiment, and referring to Figure 2, the method flow provided by this disclosure embodiment includes:

[0057] 201. In response to a first deployment request for a target service to a second virtual private cloud, the client displays a deployment interface for the target service, which includes a first upload control, a configuration control, and a second upload control.

[0058] The target service can be a service that manages resources on a virtual private cloud (VPN), such as a bastion host service. A first VPN is used to provide the target service and is owned by the cloud service provider of the target service. A second VPN is owned by the tenant and is the recipient of the target service. To manage resources on the second VPN, the tenant can send a first deployment request to the client to deploy the target service on the first VPN. This first deployment request may include the tenant's account information and relevant information about the second VPN. Upon receiving the first deployment request for the target service on the second VPN, the client displays a deployment interface for the target service. This interface may include upload controls and configuration controls. The upload controls include a first upload control and a second upload control. The first upload control is used by operations personnel to upload the target image file of the target service. The configuration control is used by operations personnel to configure the deployment file for the target service corresponding to the second VPN. The second upload control is used by operations personnel to upload the deployment file.

[0059] 202. In response to a touch operation on the first upload control, upload the target image file of the acquired target service to the object storage service of the first virtual private cloud.

[0060] Based on the displayed deployment interface of the target service, operations and maintenance personnel can obtain the target image file of the target service, which is a version of the target service's image files. To facilitate the acquisition of the target image file by operations and maintenance personnel, the client can store multiple image files corresponding to the target service, each with a different version number. After receiving the first deployment request, operations and maintenance personnel can determine the version number of the target service corresponding to the second virtual private cloud based on the relevant information of the second virtual private cloud, and then, based on that version number, obtain the target image file corresponding to that version number from the multiple image files of the target service.

[0061] Because a tenant requests to deploy a target service for a second virtual private cloud within a first virtual private cloud, and the target image file is stored on the client, in order to deploy the target service for the second virtual private cloud within the first virtual private cloud, after obtaining the target image file, the operations and maintenance personnel can touch the first upload control. In response to the touch operation on the first upload control, the client uploads the obtained target image file of the target service to the object storage service of the first virtual private cloud. The object storage service is used to store the image file of the target service.

[0062] Optionally, to reduce the resource consumption caused by uploading the target image file, the client can query whether the target image file is stored in the object storage service before uploading it to the target service. If the target image file is stored in the object storage service, the client does not need to upload the obtained target image file. The subsequent automated deployment platform can deploy the target service for the second virtual private cloud based on the target image file already stored in the object storage service, thereby reducing the consumption of network resources and storage resources on the first virtual private cloud.

[0063] 203. Retrieve deployment files in response to configuration operations on configuration controls.

[0064] Typically, deploying services in a Virtual Private Cloud (VPN) requires not only the service's image file but also the necessary computing, storage, and network resources. Related technologies require operations personnel to manually request resources for the service to be deployed and manually write automation scripts. This approach results in high complexity during service deployment and is prone to errors during manual operation, leading to service unavailability. To reduce the complexity of the service deployment process and improve service availability, in this embodiment, operations personnel can configure a deployment file for the target service corresponding to the second VPN based on the configuration controls on the target service's deployment interface. This deployment file includes resource description information of the resources required for the target service to run in the second VPN and automation scripts. Based on this deployment file, the target service corresponding to the second VPN can be automatically deployed in the first VPN. Specifically, the configuration controls on the deployment interface can provide configuration options corresponding to resource description information for various resources, as well as options for generating automated scripts. The configuration options can be used by operations and maintenance personnel to select the required resource types, the size and quantity of each type of resource, and the relationships between different resources. The automated script generation options are used by operations and maintenance personnel to select the acquisition and execution methods of image files. In response to the operations and maintenance personnel's selection of configuration and generation options, the system obtains the content items selected by the operations and maintenance personnel in these options, and then generates deployment files based on the content items selected by the operations and maintenance personnel.

[0065] 204. In response to a touch operation on the second upload control, the client sends a second deployment request for the target service to the automated deployment platform.

[0066] After the deployment file is generated, operations personnel can tap the second upload control. In response to this tap, the client can send a second deployment request for the target service to the automated deployment platform. This second deployment request includes the deployment file, and may also include information about the second virtual private cloud, tenant account information, etc. Furthermore, to reduce the network resources consumed by uploading the deployment file and improve the security of the deployed target service, the deployment file is typically encrypted and compressed before being uploaded.

[0067] 205. The automated deployment platform receives a second deployment request from the client for the target service in the second virtual private cloud. Based on the deployment file, it configures the resources required for the operation of the target service corresponding to the second virtual private cloud in the first virtual private cloud.

[0068] The automated deployment platform receives a second deployment request and, in response, executes the operation of deploying the target service for the second virtual private cloud within the first virtual private cloud. Specifically, based on the deployment files, the automated deployment platform first configures the resources required for the operation of the target service corresponding to the second virtual private cloud within the first virtual private cloud. These resources include computing resources, storage resources, network resources, etc. After the resource configuration is completed, the target image file in the object storage service of the first virtual private cloud is loaded into the configured computing resources to complete the deployment of the target service for the second virtual private cloud.

[0069] When configuring the resources required for the operation of the target service corresponding to the second virtual private cloud in the first virtual private cloud based on the deployment file, the automated deployment platform can use the following methods:

[0070] 2051. The automated deployment platform parses the deployment file to obtain resource description information of the resources required for the target service to run in the second virtual private cloud.

[0071] As mentioned earlier, the deployment files received by the automated deployment platform are actually compressed and encrypted. To read the information in the deployment files, the automated deployment platform needs to parse them to obtain the parsed content. This parsed content can indicate the resource description information required for the target service corresponding to the second virtual private cloud to run. This resource description information can include the quantity and size of each type of resource. For computing resources such as ECS, the resource description information includes the required number of ECS instances and the size of each ECS instance; for storage resources such as RDS, the resource description information includes the required number of RDS instances and the size of each RDS instance; for network resources, the resource description information is used to indicate how to connect the computing resources and the second virtual private cloud. This resource description information also includes the relationships between different resources, such as the relationships between computing resources and storage resources. The parsed content may also include automation scripts, which are used to automatically load and run the image file of the target service.

[0072] 2052. The automated deployment platform generates at least one resource configuration task based on resource description information.

[0073] Based on the resource description information read from the parsed content, the automated deployment platform can generate at least one resource configuration task. Each resource configuration task can be viewed as a thread; executing this task can generate a resource or perform an operation. When generating at least one resource configuration task based on resource description information, the automated deployment platform can generate at least one task based on the quantity of each type of resource and the relationships between different resources. For example, if the resource description information indicates the required network resources and indicates that the deployment of the second virtual private cloud requires two ECS instances and two RDS instances, with each ECS instance associated with one RDS instance, then eight resource configuration tasks can be generated. Two resource configuration tasks are used to configure the two ECS instances, two are used to configure the two RDS instances, two are used to establish the relationships between the ECS instances and RDS instances, and two are used to establish the network connection between each ECS instance and the second virtual private cloud. Alternatively, a single resource configuration task can be created to establish the network connection between the two ECS instances and the second virtual private cloud.

[0074] 2053. The automated deployment platform configures the resources required for the operation of the target service corresponding to the second virtual private cloud in the first virtual private cloud by executing at least one resource configuration task.

[0075] In this embodiment, the automated deployment platform executes at least one resource configuration task. When configuring the resources required for the operation of a target service corresponding to a second virtual private cloud in a first virtual private cloud, it executes a resource configuration task for configuring computing resources in the first virtual private cloud and a resource configuration task for configuring storage resources in the second virtual private cloud. After configuring the computing and storage resources, it executes a resource configuration task to establish the association between the configured computing and storage resources. To manage the resources in the second virtual private cloud, it also executes a resource configuration task to establish a network channel between the computing resources and the second virtual private cloud, creating a communication connection between the configured computing resources and the second virtual private cloud. This communication connection allows the computing resources to access and manage the resources in the second virtual private cloud. When establishing a network channel between computing resources and a second virtual private cloud, a network interface can be created in the second virtual private cloud. This network interface can be an ENI or similar. The address information of the computing resources being communicated can be written into this network interface. Thus, when a computing resource accesses the second virtual private cloud through this network interface, access is allowed for that computing resource, while access is not allowed for other computing resources.

[0076] This disclosure eliminates the need for operations and maintenance personnel to manually configure resources. It obtains resource description information of the resources required for the operation of the target service corresponding to the second virtual private cloud from the deployment file. Based on the resource description information, at least one resource configuration task is generated. By executing at least one resource configuration task, the resource configuration is automated, which simplifies the complexity of service deployment, reduces the probability of errors in the manual configuration process, and improves the availability of services.

[0077] 206. After the resource configuration is completed, the automated deployment platform loads the target image file from the object storage service of the first virtual private cloud into the configured computing resources to complete the deployment of the target service for the second virtual private cloud.

[0078] After resource configuration is complete, the automated deployment platform can load the target image file from the object storage service of the first virtual private cloud into the configured computing resources to complete the deployment of the target service to the second virtual private cloud. Specifically, after resource configuration, the configured computing resources, such as ECS instances, can send a script retrieval request to the automated deployment platform. Upon receiving this request, the platform retrieves the automated script obtained from parsing the deployment file and provides it to the computing resources. The computing resources then run the script, retrieving the target image file from the object storage service of the first virtual private cloud and loading it into the computing resources, thus completing the deployment of the target service to the second virtual private cloud. The target image file can be loaded as a Docker container.

[0079] This disclosure eliminates the need for operations and maintenance personnel to write scripts. It can read automated scripts from deployment files, simplifying the complexity of service deployment, reducing the probability of errors in the manual writing process, and improving service availability.

[0080] Furthermore, after deploying the target service for the second virtual private cloud within the first virtual private cloud, to ensure the availability of the deployed target service, the automated deployment platform will also verify the target image file loaded in the computing resources. If the version number of the target image file meets the version number requirement, the target image file is deemed to have passed verification. Once the target image file passes verification, the automated deployment service will also perform a health check on the target service corresponding to the second virtual private cloud. During this health check, the automated deployment platform can send probe messages to the computing resources and storage resources involved in the target service. Upon receiving response messages from these computing resources and storage resources, the target service corresponding to the second virtual private cloud is deemed to have passed the health check. When the target service corresponding to the second virtual private cloud passes the health check, the automated deployment service sends a notification message to the client, informing the client that the target service corresponding to the second virtual private cloud is available. Upon receiving this notification message, the client-side operations and maintenance personnel can use the target service to manage the resources of the second virtual private cloud. Of course, the client can also send this notification message to the tenants of the second virtual private cloud so that the tenants can understand the deployment status of the target service.

[0081] Furthermore, after the target service corresponding to the second virtual private cloud is deployed, operations and maintenance personnel can modify the deployment file on the deployment interface of the target service and send the modified deployment file to the automated deployment platform. The automated deployment platform then adjusts the computing resources, storage resources, etc., required by the deployed target service based on the modified deployment file, realizing dynamic scaling of the target service. During the scaling process, operations and maintenance personnel do not need to manually add or delete resources configured for the target service; they only need to modify the deployment file to achieve the purpose of dynamic scaling, making management more convenient and reducing operations and maintenance costs.

[0082] This disclosure merges the resource deployment and service deployment phases involved in deploying the target service into a single phase. Operations personnel no longer need to wait for resource configuration to complete before performing deployment operations, simplifying the service deployment process. Furthermore, in this embodiment, after the operations personnel configure the deployment files, the automated deployment platform completes the subsequent resource production and service deployment stages. This not only improves the efficiency and speed of deploying the target service but also reduces the probability of human error, ensuring service deployment consistency and availability.

[0083] Taking the target service as a bastion host service as an example, Figure 3 shows a schematic diagram of the bastion host service deployment process. Referring to Figure 3, the deployment process includes the following steps:

[0084] The first step is for the operations and maintenance personnel to receive the bastion host service deployment request sent by the tenant to the tenant's virtual private cloud through the client they are using. In response to the deployment request, the operations and maintenance personnel obtain the image file corresponding to the bastion host on the client and upload the image file to the object storage service of the bastion host virtual private cloud.

[0085] The second step involves the operations and maintenance personnel using the bastion host service deployment interface displayed on the client to perform resource orchestration, network configuration, and other tasks. The client detects the operations and maintenance personnel's actions, obtains the deployment file, and uploads the deployment file to the bastion host automated deployment platform.

[0086] The third step involves the bastion host automated deployment platform parsing the deployment files uploaded by the client to obtain resource description information of the resources required for the bastion host service to be deployed, as well as automation scripts. Then, based on the resource description information, it generates at least one resource configuration task.

[0087] The fourth step involves the bastion host automated deployment platform executing at least one resource configuration task to configure computing resources (such as ECS) and storage resources (such as RDS) for the bastion host service to be deployed within the bastion host virtual private cloud. It then establishes the association between the computing and storage resources. Next, the platform executes at least one resource configuration task to create a network interface within the tenant's virtual private cloud, establishing a network channel between the allocated computing resources and the tenant's virtual private cloud. This allows the allocated computing resources to access the tenant's virtual private cloud, thereby enabling the management of tenant assets (including computing and storage resources) within the tenant's virtual private cloud.

[0088] Fifth, after the resource configuration is completed in the bastion host virtual private cloud, the configured computing resources can send a script retrieval request to the bastion host automated deployment platform. Upon receiving the script retrieval request, the bastion host automated deployment platform sends the automated script to the computing resource. By running the automated script, the computing resource can download the image file of the bastion host service uploaded by the client from the object system, and then load and deploy the image file in Docker mode, thereby completing the deployment of the bastion host service in the tenant virtual private cloud.

[0089] The sixth step, after deploying the bastion host service, involves the automated deployment platform verifying the loaded image file. If the image file passes verification, a health check is performed on the deployed bastion host service. If the bastion host service passes the health check, a notification message is sent to the client to inform the operations personnel that the bastion host service is available. Upon receiving this notification message, the operations personnel can use the bastion host service to manage resources on the tenant's virtual private cloud.

[0090] This disclosure reduces the cost for operations and maintenance (O&M) personnel to build and deploy bastion host services, freeing them from tedious operations and allowing them to focus on resource orchestration. O&M personnel only need to maintain the bastion host deployment files to achieve the production of computing and storage resources and the construction and deployment of the bastion host service. This solution merges the two phases of resource configuration and application deployment required by the bastion host into one phase. O&M personnel only need to perform a single configuration operation to complete the deployment of the bastion host service, improving the efficiency and speed of bastion host deployment, reducing the probability of human error, and ensuring service deployment consistency.

[0091] All of the above-mentioned optional technical solutions can be combined in any way to form optional embodiments of this disclosure, and will not be described in detail here.

[0092] Please refer to Figure 4, which shows a schematic diagram of a service deployment device provided in an embodiment of this disclosure. This device can be implemented through software, hardware, or a combination of both, and can be all or part of an electronic device. The device includes:

[0093] The receiving module 401 is used to receive a second deployment request sent by the client for a target service of the second virtual private cloud. The second deployment request includes a deployment file, which includes resource description information of the resources required for the target service to run corresponding to the second virtual private cloud and an automation script.

[0094] Configuration module 402 is used to configure the resources required for the operation of the target service corresponding to the second virtual private cloud in the first virtual private cloud based on the deployment file;

[0095] The loading module 403 is used to load the target image file in the object storage service of the first virtual private cloud into the configured computing resources after the resource configuration is completed, so as to complete the deployment of the target service for the second virtual private cloud.

[0096] In another embodiment of this disclosure, the configuration module 402 is used to parse the deployment file to obtain resource description information of the resources required for the operation of the target service corresponding to the second virtual private cloud; based on the resource description information, generate at least one resource configuration task; and configure the resources required for the operation of the target service corresponding to the second virtual private cloud in the first virtual private cloud by executing at least one resource configuration task.

[0097] In another embodiment of this disclosure, the configuration module 402 is configured to configure computing resources and storage resources for a second virtual private cloud in a first virtual private cloud by performing at least one resource configuration task, establish an association relationship between the configured computing resources and storage resources, establish a communication connection between the configured computing resources and the second virtual private cloud, and the communication connection is used for the computing resources to access the second virtual private cloud and manage the resources of the second virtual private cloud.

[0098] In another embodiment of this disclosure, the loading module 403 is used to obtain the automated script obtained by parsing the deployment file after the resource configuration is completed; and to provide the automated script to the computing resource so as to load the target image file into the computing resource by running the automated script in the computing resource, thereby completing the deployment of the target service for the second virtual private cloud.

[0099] In another embodiment of this disclosure, the device further includes:

[0100] The verification module is used to verify the target image file loaded in the computing resources;

[0101] The detection module is used to perform health checks on the target service corresponding to the second virtual private cloud when the target image file passes the verification.

[0102] The sending module is used to send a notification message to the client when the target service corresponding to the second virtual private cloud passes the health check. This notification message is used to notify the client that the target service corresponding to the second virtual private cloud is available.

[0103] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0104] Please refer to Figure 5, which shows a schematic diagram of a service deployment device provided in an embodiment of this disclosure. This device can be implemented through software, hardware, or a combination of both, and can be all or part of an electronic device. The device includes:

[0105] Display module 501 is configured to display a deployment interface for the target service in response to a first deployment request for a target service in a second virtual private cloud. The deployment interface includes upload controls and configuration controls.

[0106] The acquisition module 502 is used to acquire the deployment file in response to the configuration operation of the configuration control. The deployment file includes resource description information of the resources required for the runtime of the target service corresponding to the second virtual private cloud and the automation script.

[0107] The sending module 503 is used to respond to a touch operation on the upload control, send a second deployment request for the target service to the automated deployment platform, and upload the target image file of the target service to the object storage service of the first virtual private cloud. The second deployment request includes a deployment file and is used to request the automated deployment platform to deploy the target service for the second virtual private cloud in the first virtual private cloud based on the deployment file and the target image file.

[0108] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0109] Figure 6 shows a structural block diagram of an electronic device 600 provided in an exemplary embodiment of the present disclosure. Typically, the electronic device 600 includes a processor 601 and a memory 602.

[0110] The processor 601 can be implemented using at least one of the following hardware forms: DSP (Digital Signal Processing), FPGA (Field-Programmable Gate Array), and PLA (Programmable Logic Array). The processor 601 may also include a main processor and a coprocessor. The main processor is used to process data in the wake-up state; the coprocessor is a low-power processor used to process data in the standby state. In some embodiments, the processor 601 may integrate a GPU (Graphics Processing Unit), which is responsible for rendering and drawing the content to be displayed on the screen. In some embodiments, the processor 601 may also include an artificial intelligence processor for handling computational operations related to machine learning.

[0111] The memory 602 may include one or more computer-readable storage media, which may be non-transitory computer-readable storage media, such as CD-ROM (Compact Disc Read-Only Memory), ROM, RAM (Random Access Memory), magnetic tape, floppy disk, and optical data storage devices. The computer-readable storage medium stores at least one computer program, which, when executed, can implement the aforementioned service deployment method.

[0112] Of course, the aforementioned electronic device may also include other components, such as input / output interfaces and communication components. Input / output interfaces provide an interface between the processor and peripheral interface modules, which can be output devices, input devices, etc. Communication components are configured to facilitate wired or wireless communication between the electronic device and other devices.

[0113] Those skilled in the art will understand that the structure shown in FIG6 does not constitute a limitation on the electronic device 600, and may include more or fewer components than shown, or combine certain components, or employ different component arrangements.

[0114] This disclosure provides a computer-readable storage medium storing at least one computer program that, when executed by a processor, can implement the above-described service deployment method.

[0115] This disclosure provides a computer program product, which includes a computer program that, when executed by a processor, can implement the above-described service deployment method.

[0116] The above embodiments are only used to illustrate the technical solutions of this disclosure, and are not intended to limit it. Although this disclosure has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this disclosure.

Claims

1. A service deployment system, wherein, The system includes: a client and an automated deployment platform, the automated deployment platform being able to access a first virtual private cloud, the first virtual private cloud being able to provide target services for managing resources in a second virtual private cloud; The client is used to respond to a first deployment request for a target service of the second virtual private cloud, upload the target image file corresponding to the target service to the object storage service of the first virtual private cloud, and send a second deployment request for the target service to the automated deployment platform. The second deployment request includes a deployment file, which includes resource description information of the resources required for the target service of the second virtual private cloud to run and an automation script. The automated deployment platform is used to respond to the second deployment request, and based on the deployment file, configure the resources required for the operation of the target service corresponding to the second virtual private cloud in the first virtual private cloud. After the resource configuration is completed, the target image file in the object storage service is loaded into the configured computing resources to complete the deployment of the target service to the second virtual private cloud.

2. A service deployment method, wherein, The method includes: Receive a second deployment request sent by the client for a target service in a second virtual private cloud. The second deployment request includes a deployment file, which includes resource description information of the resources required for the target service to run in the second virtual private cloud and an automation script. Based on the deployment file, in the first virtual private cloud, configure the resources required for the operation of the target service corresponding to the second virtual private cloud; After the resource configuration is completed, the target image file in the object storage service of the first virtual private cloud is loaded into the configured computing resources to complete the deployment of the target service for the second virtual private cloud.

3. The method according to claim 2, wherein, Based on the deployment file, configuring the resources required for the operation of the target service corresponding to the second virtual private cloud in the first virtual private cloud includes: The deployment file is parsed to obtain resource description information of the resources required for the operation of the target service corresponding to the second virtual private cloud; Based on the resource description information, at least one resource configuration task is generated; By executing the at least one resource configuration task, resources required for the operation of the target service corresponding to the second virtual private cloud are configured in the first virtual private cloud.

4. The method according to claim 3, wherein, The step of configuring the resources required for the operation of the target service corresponding to the second virtual private cloud in the first virtual private cloud by executing the at least one resource configuration task includes: By executing the at least one resource configuration task, computing resources and storage resources are configured for the second virtual private cloud in the first virtual private cloud, an association is established for the configured computing resources and storage resources, and a communication connection is established between the configured computing resources and the second virtual private cloud. The communication connection is used for the computing resources to access the second virtual private cloud and manage the resources of the second virtual private cloud.

5. The method according to any one of claims 2-4, wherein, After resource configuration is completed, the target image file in the object storage service of the first virtual private cloud is loaded into the configured computing resources to complete the deployment of the target service for the second virtual private cloud, including: After resource configuration is complete, obtain the automated script obtained by parsing the deployment file; The automated script is provided to the computing resource so that by running the automated script in the computing resource, the target image file is loaded into the computing resource, thereby completing the deployment of the target service for the second virtual private cloud.

6. The method according to any one of claims 2-5, wherein, After the resource configuration is completed, the target image file in the object storage service of the first virtual private cloud is loaded into the configured computing resources to complete the deployment of the target service for the second virtual private cloud, and the process further includes: Verify the target image file loaded in the computing resources; Once the target image file passes verification, a health check is performed on the target service corresponding to the second virtual private cloud. When the target service corresponding to the second virtual private cloud passes the health check, it sends a notification message to the client. The notification message is used to notify the client that the target service corresponding to the second virtual private cloud is available.

7. The method according to any one of claims 2-6, wherein, Before uploading the target image file to the object storage service of the first virtual private cloud, the method further includes: Check whether the target image file is already stored in the object storage service; If it has already been stored, the upload operation will not be performed; If not stored, the operation of uploading the target image file to the object storage service is performed.

8. The method according to any one of claims 2-7, wherein, The deployment files are encrypted and compressed before being sent to the automated deployment platform; The method further includes: after receiving the second deployment request, decrypting and decompressing the deployment file to obtain the resource description information and the automation script.

9. The method according to any one of claims 2-8, wherein, The loading of the target image file into the configured computing resources includes: The target image file is loaded into the computing resource in a containerized manner, wherein the containerization method includes the Docker container runtime environment.

10. The method according to claim 6, wherein, Verification of the target image file loaded in the computing resources includes: Obtain the version number of the target image file and determine whether the version number meets the preset version number requirements; If the conditions are met, the target image file is determined to have passed verification.

11. The method according to claim 6, wherein, Perform health checks on the target services corresponding to the second virtual private cloud, including: Send probe messages to the computing resources, storage resources, and network resources on which the target service depends; If a response message is received from the resource, it is determined that the target service has passed the health check.

12. The method according to any one of claims 2-11, wherein, After the deployment of the target service is completed, the following is also included: Receive the updated deployment file, which includes modifications to the resource description information; Based on the updated deployment file, adjust the computing and / or storage resources used by the deployed target service to achieve dynamic scaling up and down of the target service.

13. The method according to any one of claims 3-12, wherein, The resource description information includes the specifications and quantity of computing resources, the specifications and quantity of storage resources, network resource configuration parameters, and the relationships between the resources. The computing resources include Elastic Cloud Servers (ECS), the storage resources include Relational Databases (RDS), and the network resource configuration parameters are used to establish a communication connection between the computing resources and the second virtual private cloud.

14. A service deployment method, wherein, The method includes: In response to a first deployment request for a target service to a second virtual private cloud, a deployment interface for the target service is displayed, the deployment interface including upload controls and configuration controls; In response to a configuration operation on the configuration control, a deployment file is obtained, the deployment file including resource description information of the resources required for the runtime of the target service corresponding to the second virtual private cloud and an automation script; In response to a touch operation on the upload control, a second deployment request for the target service is sent to the automated deployment platform, and the target image file of the target service is uploaded to the object storage service of the first virtual private cloud. The second deployment request includes the deployment file and is used to request the automated deployment platform to deploy the target service for the second virtual private cloud in the first virtual private cloud.

15. The method according to claim 14, wherein, The upload control includes a first upload control and a second upload control, and the configuration control is used to configure the resource description information; The method includes: In response to a touch operation on the first upload control, the target image file of the target service is uploaded to the object storage service of the first virtual private cloud; In response to a touch operation on the second upload control, a second deployment request, including the deployment file, is sent to the automated deployment platform.

16. A service deployment apparatus, wherein, The device includes: The receiving module is used to receive a second deployment request sent by the client for a target service of the second virtual private cloud. The second deployment request includes a deployment file, which includes resource description information of the resources required for the target service to run corresponding to the second virtual private cloud and an automation script. The configuration module is used to configure the resources required for the operation of the target service corresponding to the second virtual private cloud in the first virtual private cloud based on the deployment file; The loading module is used to load the target image file in the object storage service of the first virtual private cloud into the configured computing resources after the resource configuration is completed, so as to complete the deployment of the target service for the second virtual private cloud.

17. A service deployment apparatus, wherein, The device includes: The display module is configured to display the deployment interface of the target service in response to a first deployment request for a target service in a second virtual private cloud. The deployment interface includes upload controls and configuration controls. The acquisition module is used to acquire a deployment file in response to a configuration operation on the configuration control. The deployment file includes resource description information of the resources required for the target service to run in the second virtual private cloud and an automation script. The sending module is configured to respond to a touch operation on the second upload control by sending a second deployment request for the target service to the automated deployment platform and uploading the target image file of the target service to the object storage service of the first virtual private cloud. The second deployment request includes the deployment file and is used to request the automated deployment platform to deploy the target service for the second virtual private cloud in the first virtual private cloud based on the deployment file and the target image file.

18. An electronic device, wherein, It includes a processor and a memory; the memory stores at least one piece of program code; the at least one piece of program code is called and executed by the processor to implement the service deployment method as described in any one of claims 2 to 13, or the service deployment method as described in claim 14 or 15.

19. A computer-readable storage medium, wherein, The computer-readable storage medium stores at least one computer program, which, when executed by a processor, is capable of implementing the service deployment method as described in any one of claims 2 to 13, or the service deployment method as described in claim 14 or 15.

20. A computer program product, wherein, The computer program product includes a computer program that, when executed by a processor, can implement the service deployment method as described in any one of claims 2 to 13, or the service deployment method as described in claim 14 or 15.

Images