Permission Compatibility Check for Cluster Deployment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing configuration management systems and orchestration systems in computing clusters face challenges in ensuring permissions compatibility, with differences in objects checked, types of permission checks, and mechanisms, leading to misalignment and potential failures in deployment due to missing permissions.
Innovation Solution
A method and system that integrate permission checks into the change review flow of the configuration management system, verifying user identities against the orchestration system's access permissions, ensuring that changes are compatible and authorized, and maintaining orchestration system access permissions mechanisms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If permission checks are performed separately in configuration management system and orchestration system, then each system can maintain its own permission mechanisms, but permission compatibility cannot be ensured leading to deployment failures
Solution Approach 1:
The patent merges permission checks from the configuration management system and the orchestration system into a unified check performed by the CI/CD system. This integration ensures that permission compatibility is verified before deployment, preventing deployment failures while avoiding the complexity of maintaining separate permission mechanisms in both systems.
Solution Approach 2:
The patent performs permission compatibility checks as part of the change review flow before the actual deployment occurs. By conducting this preliminary verification, the system identifies permission issues in advance, allowing them to be resolved before deployment and ensuring reliable deployment outcomes.
2Reliability
If the configuration management system emulates the orchestration system's permission mechanisms, then permission compatibility can be checked, but the emulation becomes complex and maintenance-heavy
Solution Approach 1:
The patent introduces the CI/CD system as an intermediary that performs the permission compatibility check. Instead of the configuration management system emulating the orchestration system's complex permission mechanisms, the CI/CD system acts as a mediator that verifies permission compatibility by querying both systems and comparing their permission requirements, thereby avoiding the complexity of emulation.
3Reliability
If permission checks are integrated into the change review flow, then permission compatibility is verified before deployment, but the change review process becomes more time-consuming
Solution Approach 1:
The patent performs permission compatibility checks as part of the change review flow, conducting the verification before the deployment decision is made. This preliminary action ensures that permission issues are identified early, preventing costly deployment failures and rework, thereby improving overall efficiency despite the additional check.
Data Source
AI summary
A method and a system for checking permissions compatibility between a configuration management system and an orchestration system of a computing cluster are disclosed. The method comprises: identifying a request to approve a change in at least one file of the computing cluster. Retrieving from a repository of the configuration management system an identity of a user for performing the change. Acquiring a denial response or an approval response received in response to a query provisioned to the orchestration system, the query is for rights to change the at least one file using the identity of the user. In response to the approval response, entering the approval response, into the configuration management system for confirming the checking permissions compatibility is approved. In response to the denial received, sending a message to the configuration management system, the message is indicative that the checking permissions compatibility is not approved.