TW202238374A - Provision and management system and method for container infrastructure service and computer readable medium - Google Patents

Abstract

The present invention is a provision and management system and method for container infrastructure service and thereof, which performs the following steps: providing storage space and deploying the network according to parameters of service nodes to construct a shared environment required by a container service platform; and constructing master-slave computing nodes and firewalls and configuring the parameters of the cluster stored in the shared environment in the master-slave computing node, filtering out the only master computing node from the master-slave computing node by using a locking mechanism and a first-in-first-out algorithm and enabling the network between the storage space and the master-slave computing nodes. The goal of accelerating the installation service in the present invention can be achieved by judging the dependencies between various resources. The present invention further provides a computer-readable medium for performing a provision and management method for container infrastructure service.

Description

Container Service Infrastructure Provisioning Management System, Method, and Computer-Readable Medium

The present invention relates to container service infrastructure technology, in particular to a container service infrastructure supply and management system, method and computer-readable medium.

With the rise of the cloud native (Cloud Native) concept, technologies such as containers, software development concepts (DevOps, which is the combination of Development and Operations), and microservices have risen, making it easier to integrate and deploy new versions of service applications, and In the stages of building, testing, and running applications, there is no need to spend huge additional burdens, and the cost of cloudification is reduced. Coupled with the portability of containers, it is more flexible to expand and extend application services, attracting more enterprise service applications to invest in containers. In the technological environment, enterprises began to move traditional applications to the cloud for planning and execution, so as to achieve the goal of cloud-based service applications.

However, even though the service application technology for integrating and deploying new versions has been developed to a considerable extent, how to simplify the procedures, improve the efficiency of supply and installation, and reduce the cost of resources and maintenance and operation is still very important. In addition, the network security of the service platform is also the focus of service users, and this will be the goal of enterprise service providers to devote themselves to research and development.

In view of this, how to provide a container service infrastructure technology that can be simpler and faster to build and meet the requirements of low cost, high efficiency and security in the integration and deployment of new versions of service application technology It will become the goal that those skilled in the art are striving to pursue.

In order to solve the above-mentioned problems in the prior art, the present invention proposes a new container service infrastructure supply and installation management mechanism technology and method for container service infrastructure, and provides enterprises and individuals with a simple and fast solution for building container service platform infrastructure , through the above-mentioned purpose, the efficiency of resource utilization and supply and installation can be improved, the cost of resources and maintenance and operation can be reduced, and the network security of the entire service platform can be strengthened.

The present invention proposes a container service infrastructure supply and installation management system, which includes: a service template collaborative management module, which is used to organize serial computing resources, storage resources, network resources, network address translation resources, firewall resources, and routing resources , to adjust its state to be able to be used to complete the provisioning infrastructure; the computing resource management module is connected to the service template collaborative management module to set the path of the storage resource, network configuration configuration, and virtual machine template , and parallel processing and deployment of multiple computing nodes to determine the only main computing node; and the network resource management module is connected to the service template collaborative management module to determine the deployment of the main virtual address and logical isolation network gate Network address translation (NAT) of the channel address, deploy the multiple computing nodes, configure the internal and external and external and internal firewall rules of the server and storage cluster, and deploy the external network routing table of the logically isolated network To connect to the configuration server, wherein the storage space and deployment network are provided based on the service node parameters, so as to construct the shared environment required by the container service platform, and configure the storage clusters in the shared environment in the multiple computing nodes parameters to complete the provisioning and management of the infrastructure of the container service platform.

In one embodiment, the container service infrastructure provisioning management system further includes a storage resource management module linked to the service template collaborative management module, which is used to manage and configure the storage space.

In one embodiment, the container service infrastructure provisioning management system further includes a resource distribution management module linked to the service template collaborative management module, which is used to allocate the network resource, the storage resource and the computing resource.

In one embodiment, the network resource management module further includes dividing the network into a management network segment and a service network segment, so that the container service platform is established on the logically isolated network of the service network segment.

The present invention further proposes a container service infrastructure provisioning management method, which includes: provisioning storage space and deploying network according to service node parameters to construct a shared environment required by the container service platform; and constructing master-slave computing nodes and firewalls, And configure the parameters of the storage cluster in the shared environment in the master-slave computing node, and then install the master-slave computing node in parallel, and use the locking mechanism and the first-in-first-out algorithm to filter out the only master computing node Nodes and a network between the storage space and the master-slave computing nodes are opened in parallel.

In the above method, the step of constructing the shared environment required by the container service platform includes dividing the network into a management network segment and a service network segment, so that the container service platform is established on a logically isolated network of the service network segment .

In the above method, the step of constructing the master-slave computing node includes obtaining a pre-built virtual machine template from the database, combining the service node parameters and the virtual machine template input by the user to generate the master-slave computing node Multiple groups of service nodes.

In the above-mentioned method, the step of constructing a firewall further includes obtaining the network address of the configuration server management configuration source and the unique primary virtual network address of network resource distribution from the database, and obtaining The network address translation server generates a port number corresponding to the configuration server service during resource deployment, so as to establish firewall rules to penetrate the network.

In the aforementioned method, according to the dependency of computing nodes, different firewall rules are combined by the master computing node to establish the first firewall rule for the only master computing node to connect to the configuration server and the master-slave computing node connection The second firewall rule of the storage space.

The present invention further provides a computer-readable medium, which is applied to a computing device or a computer and stores instructions to execute the above-mentioned container service infrastructure supply and installation management method.

In summary, the present invention proposes a container service infrastructure supply and installation management mechanism, which is a simple and fast way to build container service platform infrastructure. According to the resource demand parameters input by users, one-click provisioning and installation is adopted, combined with the container service platform foundation The facility service supply and installation template uses the tree structure of the container service infrastructure supply and installation management mechanism to dynamically generate service supply and installation nodes according to the regional configuration of supply and installation resources. Among them, the root node (root) is mainly used as an extraction The shared environment required by the container service platform, the unified deployment of the network architecture and storage space of the container service infrastructure supply and installation management mechanism, reduces the consumption required for supply and installation, and dynamically generates multiple tree child nodes (child) in parallel according to resource requirements. Supply and install master-slave computing nodes and firewalls to achieve the goal of accelerating supply and installation services.

1: Container service infrastructure supply and installation management system

11: Service template collaborative management module

12:Computing resource management module

13: Network resource management module

14: Storage resource management module

15: Resource distribution management module

2: Supply and installation process management database

501-505: Process

601-611: Process

S41-S42: Steps

FIG. 1 is a schematic architecture diagram of a container service infrastructure supply and installation management system of the present invention.

FIG. 2 is a tree diagram of the container service infrastructure supply and management mechanism of the present invention.

FIG. 3 is a network architecture diagram of the container service infrastructure provisioning management mechanism of the present invention.

FIG. 4 is a step diagram of the container service infrastructure provisioning management method of the present invention.

FIG. 5 is a flow chart of each module necessary for constructing the container service infrastructure provisioning management mechanism of the present invention.

FIG. 6 is a flow chart of a specific embodiment of a container service infrastructure provisioning management mechanism of the present invention.

The following describes the technical content of the present invention through specific embodiments, and those skilled in the art can easily understand the advantages and effects of the present invention from the content disclosed in this specification. However, the present invention can also be implemented or applied in other different specific implementation forms.

FIG. 1 is a schematic architecture diagram of a container service infrastructure supply and installation management system of the present invention. As shown in the figure, the present invention proposes a container service infrastructure supply and installation management system 1, which can execute the container service infrastructure supply and installation management mechanism. The collaborative management module 11 receives user requirements and launches provisioning and installation. In the process of supplying and installing the entire service platform, in order to reduce the complexity of resource integration among network resources, storage resources, and computing resources, and to effectively reduce operation and maintenance Cost, the present invention judges the dependencies between various resources through the supply and installation process, and then ensures the correctness of the container service infrastructure for the supply and installation. Among them, the container service infrastructure supply and installation management system 1 is linked to the supply and installation process management for storing relevant data Database 2 , the container service infrastructure supply and installation management system 1 includes a service template collaborative management module 11 , a computing resource management module 12 and a network resource management module 13 .

The service template collaborative management module 11 is used to organize serial computing resources, storage resources, network resources, network address translation resources, firewall resources, and routing resources, so as to adjust their states to be used to complete the supply and installation infrastructure.

The computing resource management module 12 is connected to the service template collaborative management module 11, and is used to set the storage resource path, network configuration configuration, virtual machine template, and parallel processing and deployment of multiple computing nodes to make decisions and Determine the only main computing node. In short, the computing resource management module 12 provides the deployment of computing nodes from a virtual machine (VM) template and determines the unique primary computing node, setting clusters, storage resource paths, network configuration configuration, and configuring the unique primary computing node for all computing nodes. Calculate the network address (IP) of the node, and set different role levels (for example: Master (Master), Worker (Worker)).

The network resource management module 13 is connected to the service template collaborative management module 11, and is used to make decisions and decide to deploy the network address translation (NAT) of the main virtual address and the logically isolated network gateway address, and deploy the multiple The inner-outer and outer-inner firewall rules of a computing node, configuration server and storage cluster are established, and the external network routing table of the logically isolated network is deployed to connect the configuration server.

The network resource management module 13 further includes dividing the network into a management network segment and a service network segment, so that the container service platform is established on the logically isolated network of the service network segment. Specifically, for information security considerations, the network architecture is divided into a management network segment and a service network segment, and the container service platform is built on a logically isolated network of the service network segment. Therefore, network penetration is required when deploying the platform.

The present invention provides the storage space and deploys the network through the service node parameters to construct the shared environment required by the container service platform, and configures the parameters of the storage cluster in the shared environment in the master-slave computing nodes to complete the container service platform. Infrastructure supply and management.

In one embodiment, the container service infrastructure provisioning management system 1 further includes a storage resource management module 14 connected to the service template collaborative management module 11 for managing and configuring the storage space. Specifically, the storage resource management module 14 can be used to manage and configure storage space, and record space information.

In another embodiment, the container service infrastructure provisioning management system 1 further includes a resource distribution management module 15 linked to the service template collaborative management module 11, which is used to distribute the network resources, the storage resources and the computing resource. Specifically, the resource allocation management module 15 can be used to allocate network resources, storage resources and computing resources, and handle related resource setting issues.

In addition, the new container service infrastructure supply and installation management mechanism of the present invention involves three types of resources: network resources, storage resources, and computing resources. In one embodiment, the network resource can be, for example, an interface network address (Interface IP), a gateway network address (Gateway IP), a virtual area network (VLAN), a network function virtualization (NFV) network Resources such as road interfaces, firewalls, or routing tables; the storage resources may be resources such as storage clusters; the computing resources may be resources such as virtual devices.

To sum up, the present invention designs a configuration system and method for a new container service infrastructure supply and installation management mechanism for cloud services, and provides network operators with low-complexity, high-security container service platform network services, and satisfies the requirements of The flexible configuration of the cloud environment solves the problem of maintenance and operation and the migration of heterogeneous cloud platforms, so as to reduce the trouble of cloud-based service applications.

FIG. 2 is a tree diagram of the container service infrastructure supply and installation management mechanism of the present invention, and FIG. 3 is a network architecture diagram of the container service infrastructure supply and installation management mechanism of the present invention. As shown in FIG. 2, the structure diagram generated by the container service infrastructure supply and installation management mechanism of the service template collaborative management module 11 in FIG. 1 of the present invention is a tree diagram for two-stage infrastructure combination and installation, wherein, The root node (root) in the first stage is mainly used to install storage space and deploy the network to build the shared environment required by the container service platform, while the child node (child) in the second stage can build master-slave Computing nodes and firewalls and configure the shared environment generated in the first stage. Through parallel provisioning of computing nodes, the lock mechanism is adopted for the master-slave computing nodes, and the unique master node is selected using the advanced first-in-first-out algorithm, and the storage space and storage space are opened in parallel. Between computing nodes The network, that is, the second stage is the deployment of the main (Master) computing node and its firewall, and the deployment of the worker (worker) computing node and its firewall.

For information security considerations, the container service infrastructure supply and installation management mechanism of the present invention proposes a logical isolation mechanism for security on the network architecture. As shown in Figure 3, the network is divided into management network segments and service network segments, and The container service platform is built on the logically isolated network of the service network segment. In short, the provisioning server and configuration server are set in the management network segment, which is separated from the service network segment of the client, and multiple computing nodes in the service network segment are located in a logically isolated network, while the storage The cluster is in another logically isolated network. Because multiple computing nodes are built on the logically isolated network, when the client has information security issues, it can avoid affecting the server on the supply and configuration side. In addition, when deploying the platform, network penetration is required, through the deployment and management of routing rules, firewall rules, Network Address Translation (Network Address Translation, NAT), and the use of port forwarding (Port Forwarding) and configuration server construction management Configure the necessary secure connections.

FIG. 4 is a step diagram of the container service infrastructure provisioning management method of the present invention. In step S41, the storage space is provisioned and the network is deployed according to the service node parameters, so as to construct the shared environment required by the container service platform. This step is mainly concerned with the supply and installation of storage space and deployment network, so as to establish the shared environment required by the container service platform.

When constructing the shared environment required by the above-mentioned container service platform, the network is divided into a management network segment and a service network segment, so that the container service platform is established on the logically isolated network of the service network segment, that is, the computing nodes are constructed on On the logically isolated network, it is avoided that when the client has information security problems, it will affect the server at the installation and configuration end.

In step S42, construct a master-slave computing node and a firewall, and configure the parameters of the storage cluster in the shared environment in the master-slave computing node, and install the master-slave computing node in parallel, the master-slave computing node The computing nodes adopt a locking mechanism and an advanced first-in-first-out algorithm to screen out the only master computing node and open the network between the storage space and the master-slave computing node in parallel. This step is to build master-slave computing nodes and firewalls, and cut out a piece of storage space from the shared environment for the computing nodes to mount, that is, configure the parameters of the storage cluster in the shared environment on the computing nodes, so that the computing nodes can use this to succeed The storage space cut out from the storage cluster connected to the shared environment, and further according to the dependencies between nodes, a corresponding network connection relationship is generated.

When constructing the firewall above, the network address of the configuration server management configuration source and the unique primary virtual network address of the network resource distribution are obtained from the database, and the network address translation server is generated during resource deployment. This configures the corresponding port number of the server service to establish firewall rules to penetrate the network. In addition, according to the dependencies of computing nodes, different firewall rules can be combined from the master computing node to establish a firewall rule for the only master computing node to connect to the configuration server and a firewall for the master and slave computing nodes to connect to the storage space rule.

FIG. 5 is a flow chart of each module necessary for constructing the container service infrastructure supply and installation management mechanism of the present invention, please refer to FIG. 1 for description. Figure 5 illustrates the necessary resource management and control process in the container service infrastructure supply and installation management system in Figure 1, which includes five major steps: the necessary process 501 for building a service template collaborative management module, and the necessary process 502 for building a resource distribution management module . The necessary flow 503 for building a storage resource management module, the necessary flow 504 for building a network resource management module, and the necessary flow 505 for building a computing resource management module.

The necessary process 501 for constructing the service template collaborative management module is a pre-work that the service template collaborative management module 11 of the container service infrastructure provisioning management system 1 can run successfully. In addition, service node parameters, service template specifications, service templates, and service node tree data structure levels must be set in the database. Layer, supply and installation application requirements interface, process status of service nodes (such as rent application, transaction, and lease cancellation), supply and installation process, etc., drive the necessary configuration for the overall system to coordinate management of supply and installation.

The necessary process 502 for constructing the resource dispatch management module is a pre-work that the resource dispatch management module 15 of the container service infrastructure provisioning management system 1 can run successfully. In addition, three types of resources need to be monitored and checked in the database settings, such as network resources, storage resources, computing resources and other resources. Furthermore, when the resource monitoring items are set, the system sets the status of the supplying resources required by the container service infrastructure supplying management system 1 in the database according to the status of the supplying resources, including application, change and removal. In addition, the container service infrastructure supply and installation management system 1 needs to establish multiple resource selection rules to perform resource item selection actions.

The necessary process 503 for constructing the storage resource management module is a pre-work for the successful operation of the storage resource management module 14 of the container service infrastructure supply management system 1 . In addition, multiple groups of required monitoring storage resource information must be set in the database, such as storage cluster information. The information content is the information necessary for operations on the actual storage resources, including IP, account number, password, etc.

The necessary process 504 for constructing the network resource management module is a pre-work for the successful operation of the network resource management module 13 of the container service infrastructure provisioning management system 1 . In addition, the required monitoring network resource information must be set in the database, such as network security device information. The information content includes information necessary for network resources to operate, including IP, account number, password, etc.

The necessary process 505 for constructing the computing resource management module is a pre-work that the computing resource management module 12 of the container service infrastructure provisioning management system 1 can run successfully. In addition, the necessary virtual machine templates must be pre-built and related information managed in the database.

It should be noted that the above-mentioned processes are not in an absolute order, that is, the processes 501-505 may not be executed in order.

FIG. 6 is a flow chart of a specific embodiment of a container service infrastructure provisioning management mechanism of the present invention. As shown in the figure, the decision-making resource supply management may include two stages. The first stage includes processes 601-606, and the second stage includes processes 607-611. Please refer to FIG. 1 for description.

In the process 601, the service profile coordinates to configure storage, network, network address translation (NAT), firewall, and routing resources. In short, the service template collaborative management module 11 receives user service instructions, integrates the instruction parameters of storage, network, NAT, firewall, routing and other resources with the parameters in the service template to form service node parameters, and according to the service The node parameters are assembled into the required parameters of the interface, and the provisioning API is called to perform processes 602-606.

In the process 602, a decision is made to dispatch management resource items. In short, the resource distribution management module 15 receives the service node parameters, checks the network resources and storage resources required for monitoring under the database according to the parameter requirements, distributes the required provisioning resources and updates the resource status.

In the process 603, it is determined to deploy storage resource items. In short, the storage resource management module 14 receives service node parameters, sends a storage space request to the Storage Cluster, and returns storage space information, such as mounting path, storage space configuration file, login account and other information.

In the process 604, it is decided to deploy the NAT resource item. In short, the network resource management module 13 receives the service node parameters, obtains the main virtual address and the gateway address of logically isolated network resources in the database, and randomly obtains unoccupied and configured servers from the physical resource layer Multiple sets of port numbers corresponding to the service, and complete the internal main virtual address and port number conversion corresponding to the network address conversion setting of the gateway address and port number.

In the process 605, it is determined to deploy and configure the server firewall resource item. The network resource management module 13 obtains the configuration server management configuration source network address (IP) and the unique primary virtual IP of network resource distribution from the database, and generates a corresponding configuration server service when obtaining NAT resource deployment port number, build Multiple sets of firewall rules penetrate the network, set the external interface to correspond to the internal interface, and connect internal resources through port forwarding.

In the process 606, it is determined to deploy the routing resource item. The network resource management module 13 obtains the external IP of the configuration server and the external IP of the storage cluster from the database, and obtains the gateway address and the gateway interface from the logically isolated network resources to establish an external network routing table.

The above completes the configuration and installation of the physical resource layer in the first stage, and then returns to the process 601, and enters the second stage according to the instruction.

In the process 607, the service template cooperates to configure computing and firewall resources. That is to say, the service template collaborative management module 11 generates multiple sets of service nodes to process supply and installation resources in parallel.

In the process 608, a decision is made to distribute computing resource items. The resource distribution management module 15 sets and monitors the required network resources and computing resources in the database, obtains the supply and installation resources according to the pre-built network resource selection rules, and updates the status settings.

In the process 609, it is determined to deploy computing resource items. The computing resource management module 12 obtains pre-established VM template information from the database, deploys computing nodes from the virtual machine template, and decides and determines the only main computing node, setting clusters, storage resource paths, network configuration configuration, Configure the unique master computing node IP for all computing nodes, and set different master-slave role levels.

In the process 610, it is decided to deploy the computing node firewall project. The network resource management module 13 depends on the computing nodes, and combines different firewall rules corresponding to the master and slave computing nodes, and establishes a unique firewall rule for the master node to connect to the configuration server, and/or establishes a firewall rule for the master and slave nodes to connect to the storage space.

In the process 611, server configuration management settings are configured. This process is to configure the server host to connect to the deployed storage resources and computing resources through the network architecture built in the processes 604, 605, 606, and 610, complete the configuration and set the container service infrastructure, and report to the client interface.

The above is to complete the configuration and installation of the physical resource layer in the second stage. If there is a failure in the process 602-611, it will enter manual processing, that is, the error information will be manually processed by the maintenance and operation terminal.

The technology of this case is described below with a specific embodiment, please refer to FIG. 6 for description. When the user completes the parameter setting of the rental container service platform in the virtual network applied by the user and sends the order, the system backend will enter the supply and installation process.

In process 601, the demand for renting container services is received, and the first-stage service template is established according to the common resource storage cluster space, resource decision distribution, and unified NAT, firewall, and routing resources, and the storage space is configured in the first-stage service template size and virtual network parameters. In process 602, the system determines configurations such as resource area, resource service area, virtual firewall specification, main service virtual IP, and virtual network external interface according to the resource parameters configured in the first service template. In the process 603, the required resource space is cut out from the established common storage cluster space resource pool in the independent virtual network, and the storage space information required for subsequent computing node mounting is recorded in the database. In the process 604, a network forwarding address is established in the user virtual network to connect the configuration server and the main service IP. In the process 605, several port numbers of the firewall are opened in the user virtual network, and the configuration server and the main service IP are connected. In the process 606, a route to the storage cluster space and configuration server is established in the user virtual network, and all services of the first service template are completed here.

In the process 607, the service is activated on the computing nodes and the firewall of the independent resources, and the second-stage service template is established, and the parameters brought down by the order, the storage space size, the number of computing nodes, and the virtual network parameters are configured in the second-stage service template, In the second stage, computing nodes are the main supply and installation. The system generates several service templates according to the number of master and slave computing nodes (mainly divided into two types of templates, namely, the control computing node template and the working computing node template), and the service templates are installed in parallel. . In the process 608, each generated service template decides to distribute the resource area, resource service area, virtual firewall specification, virtual network pair External interface and other resource configuration. In process 609, since the main computing node in the control computing node needs to be determined first, the working node also needs to wait for the main computing node to appear. The two templates are installed mainly through locking (lock), and the main computing node is determined first. After the main computing node appears, all control computing nodes and working computing nodes will continue to complete provisioning and mount the storage cluster space cut out in the first stage. In the process 610, each service template establishes the firewall of its own computing node and activates it, and configures the network connection between the server and the computing node in the user's virtual network. In the process 611, the configuration server completes the construction of the entire container service.

Each module of the container service infrastructure supply and installation management system of the present invention can run in a computer device or server including a microprocessor and a memory. Algorithms, data, programs, etc. are stored in the memory or chip, and the microprocessor The device can load data from the memory or chip, or perform algorithms or programs to perform data analysis or calculation, etc., which will not be described in detail here.

In addition, the present invention also discloses a computer-readable medium, which is applied to a computing device or computer having a processor (such as CPU, GPU, etc.) and/or memory, and stores instructions, and the computing device or computer can be used to Executing the computer-readable medium through a processor and/or memory, so as to execute the above-mentioned method and each step when executing the computer-readable medium.

In summary, the container service infrastructure supply and installation management system, method, and computer-readable medium of the present invention are related to the container service infrastructure supply and installation management mechanism, and adopt the method of constructing a tree diagram of the container service infrastructure supply and installation management mechanism The tree structure provides a two-stage infrastructure combination and completes the container service platform. In the first stage, the root node (root) can install storage space and deploy the network to build the shared environment required by the container service platform. For information security considerations , the present invention divides the network architecture into a management network segment and a service network segment. The container service platform is built on the logically isolated network of the service network segment, and penetrates the network by deploying network resources. In the second stage, multiple Tree-like child nodes (child) construct master-slave computing nodes Configure the shared environment generated in the first stage with the firewall and install the computing nodes in parallel, adopt a locking mechanism for the master-slave nodes, use the advanced first-in-first-out algorithm to screen out the only master node, and open the network between the storage space and the computing nodes in parallel. Road, build a container service supply and installation platform, improve the speed and quality of supply and installation, adjust platform computing and capacity specifications, provide scalability, reduce the cost and complexity of construction and management, and increase availability.

The above-mentioned embodiments are for illustrative purposes only, and are not intended to limit the present invention. Anyone skilled in the art can make modifications and changes to the above-mentioned embodiments without departing from the spirit and scope of the present invention. Therefore, the protection scope of the present invention is defined by the scope of patent application attached to the present invention, as long as it does not affect the effect and implementation purpose of the present invention, it should be included in this disclosed technical content.

1: Container service infrastructure supply and installation management system

11: Service template collaborative management module

12:Computing resource management module

13: Network resource management module

14: Storage resource management module

15: Resource distribution management module

2: Supply and installation process management database

Claims (10)

A container service infrastructure supply and installation management system, including: The service template collaborative management module is used to organize serial computing resources, storage resources, network resources, network address translation resources, firewall resources, and routing resources, so as to adjust their status to be used to complete the supply and installation infrastructure; The computing resource management module is connected to the service template collaborative management module to set the storage resource path, network configuration configuration, virtual machine template, and parallel processing and deployment of multiple computing nodes to determine the only main computing node; and The network resource management module is linked to the service template collaborative management module, and is used to determine the network address translation between the main virtual address and the logically isolated network gateway address, deploy the multiple computing nodes, and configure the server Establish internal and external and external and internal firewall rules for servers and storage clusters, and deploy external network routing tables for the logically isolated network to connect to the configuration server, Among them, based on the service node parameters, the storage space is provided and the network is deployed, so as to construct the shared environment required by the container service platform, and the parameters of the storage cluster in the shared environment are configured in the multiple computing nodes to complete the container service platform The supply and management of infrastructure. The container service infrastructure provisioning management system of Claim 1 further includes a storage resource management module linked to the service template collaborative management module, which is used to manage and configure the storage space. The container service infrastructure provisioning management system of claim 1 further includes a resource distribution management module linked to the service template collaborative management module, which is used to distribute the network resources, the storage resources and the computing resources. For example, the container service infrastructure supply and management system of claim 1, wherein the network resource management module further includes dividing the network into a management network segment and a service network segment, so that the container service platform The station is established on the logically isolated network of the service network segment. A container service infrastructure supply and installation management method, comprising: Provide storage space and deploy network according to the service node parameters to build the shared environment required by the container service platform; and Construct the master-slave computing node and firewall, and configure the parameters of the storage cluster in the shared environment on the master-slave computing node, and then install the master-slave computing node in parallel, adopt a locking mechanism and first-in-first-out for the master-slave computing node Algorithm to screen out the only master computing node and open the network between the storage space and the master-slave computing node in parallel. According to claim 5, the container service infrastructure supply and installation management method, wherein the step of constructing the shared environment required by the container service platform includes dividing the network into a management network segment and a service network segment, so that the container service platform Established on the logically isolated network of the service network segment. As for the container service infrastructure supply and management method of claim item 5, the step of constructing the master-slave computing node includes obtaining a pre-established virtual machine template from the database, combining the service node parameters and the virtual machine template to generate as Multiple groups of service nodes of the master-slave computing node. The container service infrastructure supply and management method of claim item 5, wherein the step of constructing a firewall further includes obtaining the network address of the configuration server management configuration source and the unique primary virtual network address for network resource distribution from the database address, and obtain the port number corresponding to the configuration server service generated by the network address translation server during resource deployment, so as to establish firewall rules to penetrate the network. According to claim 8, the container service infrastructure supply and management method, wherein, according to the dependencies of the computing nodes, the master and slave computing nodes combine different firewall rules to establish the first link between the unique master computing node and the configuration server A firewall rule and a second firewall rule for connecting the master-slave computing node to the storage space. A computer-readable medium, used in a computing device or a computer, stores instructions to execute the container service infrastructure provisioning management method described in any one of claims 5-9.

Images