CN113112248A

CN113112248A - Project management method, system, electronic equipment and storage medium

Info

Publication number: CN113112248A
Application number: CN202110551636.5A
Authority: CN
Inventors: 卢景浩
Original assignee: Beijing Minglue Zhaohui Technology Co Ltd
Current assignee: Beijing Minglue Zhaohui Technology Co Ltd
Priority date: 2021-05-20
Filing date: 2021-05-20
Publication date: 2021-07-13

Abstract

The application discloses a project management method, a system, an electronic device and a storage medium, wherein the project management method comprises the following steps: a creating step: creating custom resources and controllers by expanding the functions of the cluster; the control steps are as follows: monitoring the change of the user-defined resource through the controller, when the user-defined resource changes, checking the sum of space resources by the controller, creating space and resource limits, and binding the permission of a tenant by the controller. The invention provides a project concept, a plurality of spaces can be contained in the project, and a tenant can create a management space in the project according to the actual project requirement, allocate space resources and manage users of each space, so that allocation of each space resource under the project is better allocated, and a cluster administrator is optimized.

Description

Project management method, system, electronic equipment and storage medium

Technical Field

The present application relates to the field of cloud service project management, and in particular, to a project management method, system, electronic device, and storage medium.

Background

From the electric age of the industrial age to the information network age, with the development of science and technology, the cloud age is a staged age of the technological progress of human beings. Nowadays, with the rise of cloud services, the cloud of enterprises is a necessary trend. Most enterprises use kuber nets to implement their own containerization. Multi-tenant management is a problem that cloud services have to solve. The method comprises the steps of resource allocation, permission isolation and fine-grained management permission subdivision under tenants. In practical use, a project has a plurality of sub-projects, and resource sharing and certain isolation of the plurality of sub-projects need to be ensured. The resource management and the authority distribution of the current space dimension cannot meet the requirements of resource sharing, sub-project authority management and resource isolation of the project dimension in actual use. For example, a project group uses a plurality of spaces for resource isolation, and if the project group needs to frequently adjust the resources of each space, operation and maintenance personnel need to manually adjust the resources and maintain the total resources of the whole project unchanged.

Disclosure of Invention

The embodiment of the application provides a project management method, a project management system, electronic equipment and a storage medium, and aims to at least solve the problems of free allocation of multi-tenant resources and fine-grained project management in a container cloud service. The method and the system can realize the ability of the tenant to manage a plurality of spaces and allocate the resources of the spaces or share the resources of the whole project, optimize the management ability of the tenant on the project, improve the utilization rate of the resources and optimize the work of cluster operation and maintenance personnel.

The invention provides a project management method, which comprises the following steps:

a creating step: creating custom resources and controllers by expanding the functions of the cluster;

the control steps are as follows: monitoring the change of the user-defined resource through the controller, when the user-defined resource changes, checking the sum of space resources by the controller, creating space and resource limits, and binding the permission of a tenant by the controller.

In the project management method, the custom resource includes a project management resource and a project resource.

The above project management method further includes a right allocation step of allocating a read right of the project resource, and a read right and a modification right of the project management to the tenant.

In the above project management method, the controlling step includes:

a monitoring step: monitoring the change of the project resource and the project management resource through the controller;

and (3) checking: checking, by the controller, a sum of space resources when the project management resources are changed;

a space creating step: when the sum of the space resources is smaller than or equal to a threshold value, creating a space through the controller, and binding the authority of the tenant with the authority of the space;

creating a resource limit step: resource limitations of the space are created.

The present invention also provides a project management system, which is applicable to the project management method, and the project management system includes:

a creation unit: creating custom resources and controllers by expanding the functions of the cluster;

a control unit: monitoring the change of the user-defined resource through the controller, when the user-defined resource changes, checking the sum of space resources by the controller, creating space and resource limits, and binding the permission of a tenant by the controller.

In the project management system, the custom resource includes a project management resource and a project resource.

The project management system further comprises a permission allocation unit, which allocates the read permission of the project resource, and the read permission and the modification permission of the project management to the tenant.

In the above project management system, the control unit includes:

a monitoring module: monitoring the change of the project resource and the project management resource through the controller;

an inspection module: checking, by the controller, a sum of space resources when the project management resources are changed;

a space creation module: when the sum of the space resources is smaller than or equal to a threshold value, creating a space through the controller, and binding the authority of the tenant with the authority of the space;

creating a resource restriction module: resource limitations of the space are created.

The present invention also provides an electronic device, including a memory, a processor, and a computer program stored on the memory and executable on the processor, wherein the processor implements any of the above-mentioned project management methods when executing the computer program.

The present invention also provides an electronic device readable storage medium having stored thereon computer program instructions which, when executed by the processor, implement the project management method of any of the above.

Compared with the related technology, the invention provides the concept of the project, the project comprises a plurality of spaces, and the tenant can create the management space in the project according to the actual project requirement, allocate the space resource and manage the users of each space. The method can well endow tenant project level authority management, and better score distribution of each space resource under the project. Meanwhile, cluster managers are optimized, and operation and maintenance work of space change caused by change of specific services is not needed, so that cloud service and data capacity are improved.

The details of one or more embodiments of the application are set forth in the accompanying drawings and the description below to provide a more thorough understanding of the application.

Drawings

The accompanying drawings, which are included to provide a further understanding of the application and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the application and together with the description serve to explain the application and not to limit the application. In the drawings:

FIG. 1 is a flow diagram of a project management method according to an embodiment of the present application;

FIG. 2 is a flow chart of control steps according to an embodiment of the present application;

FIG. 3 is a diagram of a project management method architecture according to an embodiment of the present application;

FIG. 4 is a schematic diagram of a project management system according to the present invention;

FIG. 5 is a block diagram of an electronic device according to an embodiment of the present application;

wherein the reference numerals are:

a creation unit: 41;

a right assignment unit: 42;

a control unit: 43;

a monitoring module: 431;

an inspection module: 432;

a space creation module: 433;

creating a resource restriction module: 434;

81: a processor;

82: a memory;

83: a communication interface;

80: a bus.

Detailed Description

In order to make the objects, technical solutions and advantages of the present application more apparent, the present application will be described and illustrated below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the present application and are not intended to limit the present application. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments provided in the present application without any inventive step are within the scope of protection of the present application.

It is obvious that the drawings in the following description are only examples or embodiments of the present application, and that it is also possible for a person skilled in the art to apply the present application to other similar contexts on the basis of these drawings without inventive effort. Moreover, it should be appreciated that in the development of any such actual implementation, as in any engineering or design project, numerous implementation-specific decisions must be made to achieve the developers' specific goals, such as compliance with system-related and business-related constraints, which may vary from one implementation to another.

Reference in the specification to "an embodiment" means that a particular feature, structure, or characteristic described in connection with the embodiment can be included in at least one embodiment of the specification. The appearances of the phrase in various places in the specification are not necessarily all referring to the same embodiment, nor are separate or alternative embodiments mutually exclusive of other embodiments. Those of ordinary skill in the art will explicitly and implicitly appreciate that the embodiments described herein may be combined with other embodiments without conflict.

Unless defined otherwise, technical or scientific terms referred to herein shall have the ordinary meaning as understood by those of ordinary skill in the art to which this application belongs. Reference to "a," "an," "the," and similar words throughout this application are not to be construed as limiting in number, and may refer to the singular or the plural. The present application is directed to the use of the terms "including," "comprising," "having," and any variations thereof, which are intended to cover non-exclusive inclusions; for example, a process, method, system, article, or apparatus that comprises a list of steps or modules (elements) is not limited to the listed steps or elements, but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus. Reference to "connected," "coupled," and the like in this application is not intended to be limited to physical or mechanical connections, but may include electrical connections, whether direct or indirect. The term "plurality" as referred to herein means two or more. "and/or" describes an association relationship of associated objects, meaning that three relationships may exist, for example, "A and/or B" may mean: a exists alone, A and B exist simultaneously, and B exists alone. The character "/" generally indicates that the former and latter associated objects are in an "or" relationship. Reference herein to the terms "first," "second," "third," and the like, are merely to distinguish similar objects and do not denote a particular ordering for the objects.

The invention is based on cloud service multi-tenant management, and brief introduction is made below.

Cloud services are an augmentation, usage, and interaction model for internet-based related services, typically involving the provision of dynamically scalable and often virtualized resources over the internet. Cloud is a metaphor of network and internet. In the past, telecommunications networks were often represented by clouds and later also by the abstraction of the internet and the underlying infrastructure. The cloud service means that a required service is obtained through a network in an on-demand and easily-extensible manner. Such services may be I T related to software, the internet, or other services. It means that computing power can also be circulated as a commodity over the internet. Cloud services will operate more like the internet by distributing computing over a large number of distributed computers, rather than local computers or remote servers. This enables the enterprise to switch resources to the required applications, accessing the computers and storage systems on demand. It is better to switch from the old single generator mode to the mode of centralized power supply of the power plant. It means that the computing power can be circulated as a commodity, like gas and water, and is convenient to take and low in cost. The biggest difference is that it is transmitted over the internet.

The multi-tenant technology or multi-lease technology is a software architecture technology that can ensure data isolation between users while sharing the same system or program components in a multi-user environment. Multi-tenant simply means that a single instance can serve multiple organizations. The multi-tenant technology is how to provide services, which are the same as or even customizable to a plurality of clients, in a single system architecture and service in a shared data center, and can still guarantee data isolation of customers. A system supporting multi-tenant technology needs to perform virtual partitioning on its data and configuration in design, so that each tenant or organization of the system can use a separate system instance, and each tenant can perform personalized configuration on the leased system instance according to its own needs.

The multi-tenant technology can realize sharing of the system instances among a plurality of tenants, and meanwhile, can realize personalized customization of the system instances of the tenants. By using the multi-tenant technology, the shared part of the system commonality can be ensured, and the individual parts are isolated independently. Through resource multiplexing among a plurality of tenants, the resources are operated, managed and maintained, and the cost of development and application is effectively saved. Moreover, sharing a single instance of an application among tenants may enable all tenants to upgrade simultaneously when the application is upgraded. Meanwhile, as a plurality of tenants share the core code of the system, when the system is upgraded, only the same core code needs to be upgraded.

In the existing resource management mode based on the kubernets space, resources are only divided into specific spaces and cannot be subdivided. In actual use, a cluster administrator divides a plurality of spaces, limits the resource amount of the spaces, authorizes tenants to each space, and uses the resources of the current space. If one tenant needs to use a plurality of spaces, an administrator is needed to bind the tenant into the spaces for use. The spaces may belong to the same project, and business connection exists between the spaces. The key technology of the invention is that operation and maintenance personnel manage the authority distribution mechanism of the cluster space through the project, and simultaneously, tenants can freely manage the space through the project. The process is as follows: project management/project resource-monitor-controller-check that the sum of the space resources should not exceed the number of resources defined in the project resource-create the resource limit, bind rights, of the project management defined space. Therefore, the invention mainly solves the problems of free allocation of multi-tenant resources and fine-grained project management in the re-container cloud service. The method and the system can realize the ability of the tenant to manage a plurality of spaces and allocate the resources of the spaces or share the resources of the whole project, optimize the management ability of the tenant on the project and improve the utilization rate of the resources. Meanwhile, the work of cluster operation and maintenance personnel is optimized, and the management of the operation and maintenance personnel on the content of the specific project is solved.

The invention provides a project management method, a project management system, electronic equipment and a storage medium, the project management system provides a project concept, a plurality of spaces can be contained in the project, and tenants can create management spaces in the project according to actual project requirements, allocate space resources and manage users in each space. Specifically, the tenant can freely create/delete a space in the project space, adjust the resource usage amount of each space, and bind the user to the project to manage the sub-project. The method can well endow tenant project level authority management, and better score distribution of each space resource under the project. Meanwhile, a cluster manager is optimized, only cluster resources are bound to projects, and operation and maintenance work of space change caused by change of specific services is not needed.

The embodiments of the present application will be described below by taking the management of items in container arrangement as an example.

Example one

The embodiment provides a project management method. Referring to fig. 1-3, fig. 1 is a flowchart illustrating a project management method according to an embodiment of the present application; FIG. 2 is a flow chart of control steps according to an embodiment of the present application; fig. 3 is an architecture diagram of a project management method according to an embodiment of the present application, and as shown in the drawing, the project management method includes the following steps:

creation step S1: creating custom resources and controllers by expanding the functions of the cluster;

control step S2: monitoring the change of the user-defined resource through the controller, when the user-defined resource changes, checking the sum of space resources by the controller, creating space and resource limits, and binding the permission of a tenant by the controller.

In an embodiment, the custom resources include project management resources and project resources.

Specifically, the project resource self-defined resource is Spec; quota; manager (associated project management resource); status; quota; project management custom resources are as follows: spec; namespaces; -a name; quota; status; namespaces; -a name; quota;

in an embodiment, the project management method further includes a permission allocation step of allocating a read permission of the project resource, and a read permission and a modification permission of the project management to the tenant.

Specifically, in the permission allocation step, the tenant is granted with the read permission of the project resource, and the project management is modified and read permission. The tenant completes the functions of managing the space under the project, allocating resources and managing users by modifying the resources managed by the project.

In an embodiment, the controlling step S2 includes:

listening step S21: monitoring the change of the project resource and the project management resource through the controller;

checking step S22: checking, by the controller, a sum of space resources when the project management resources are changed;

space creation step S23: when the sum of the space resources is smaller than or equal to a threshold value, creating a space through the controller, and binding the authority of the tenant with the authority of the space;

create resource restriction step S24: resource limitations of the space are created.

Specifically, changes to the project resources and crd (custom resources) for project management are monitored. Associations are made to project management crd through the manager field of project resource crd. When the change of project management resources is checked, a space is created according to the namespaces field, the authority for binding the tenant to the current space is distributed, the resource limit of the space is created according to the quota field, and meanwhile, the sum of quota does not exceed the quota defined in the project resources.

Example two

Referring to fig. 4, fig. 4 is a schematic structural diagram of a project management system according to the present invention. As shown in fig. 4, the project management system of the present invention is applied to the project management method described above, and includes:

the creating unit 41: creating custom resources and controllers by expanding the functions of the cluster;

the control unit 42: monitoring the change of the user-defined resource through the controller, when the user-defined resource changes, checking the sum of space resources by the controller, creating space and resource limits, and binding the permission of a tenant by the controller.

In this embodiment, the custom resource includes a project management resource and a project resource.

In this embodiment, the project management system further includes a right allocation unit 42, which allocates the read right of the project resource, and the read right and the modification right of the project management to the tenant.

In the present embodiment, the control unit 42 includes:

the listening module 421: monitoring the change of the project resource and the project management resource through the controller;

the checking module 422: checking, by the controller, a sum of space resources when the project management resources are changed;

the space creation module 423: when the sum of the space resources is smaller than or equal to a threshold value, creating a space through the controller, and binding the authority of the tenant with the authority of the space;

create resource limits module 424: resource limitations of the space are created.

EXAMPLE III

Referring to fig. 5, this embodiment discloses a specific implementation of an electronic device. The electronic device may include a processor 81 and a memory 82 storing computer program instructions.

Specifically, the processor 81 may include a Central Processing Unit (CPU), or A Specific Integrated Circuit (ASIC), or may be configured to implement one or more Integrated circuits of the embodiments of the present Application.

Memory 82 may include, among other things, mass storage for data or instructions. By way of example, and not limitation, memory 82 may include a Hard Disk Drive (Hard Disk Drive, abbreviated to HDD), a floppy Disk Drive, a Solid State Drive (SSD), flash memory, an optical Disk, a magneto-optical Disk, tape, or a Universal Serial Bus (USB) Drive or a combination of two or more of these. Memory 82 may include removable or non-removable (or fixed) media, where appropriate. The memory 82 may be internal or external to the data processing apparatus, where appropriate. In a particular embodiment, the memory 82 is a Non-Volatile (Non-Volatile) memory. In particular embodiments, Memory 82 includes Read-Only Memory (ROM) and Random Access Memory (RAM). The ROM may be mask-programmed ROM, Programmable ROM (PROM), Erasable PROM (FPROM), Electrically Erasable PROM (EFPROM), Electrically rewritable ROM (EAROM), or FLASH Memory (FLASH), or a combination of two or more of these, where appropriate. The RAM may be a Static Random-Access Memory (SRAM) or a Dynamic Random-Access Memory (DRAM), where the DRAM may be a Fast Page Mode Dynamic Random-Access Memory (FPMDRAM), an Extended data output Dynamic Random-Access Memory (EDODRAM), a Synchronous Dynamic Random-Access Memory (SDRAM), and the like.

The memory 82 may be used to store or cache various data files for processing and/or communication use, as well as possible computer program instructions executed by the processor 81.

The processor 81 implements any of the item management methods in the above embodiments by reading and executing computer program instructions stored in the memory 82.

In some of these embodiments, the electronic device may also include a communication interface 83 and a bus 80. As shown in fig. 5, the processor 81, the memory 82, and the communication interface 83 are connected via the bus 80 to complete communication therebetween.

The communication interface 83 is used for implementing communication between modules, devices, units and/or equipment in the embodiment of the present application. The communication port 83 may also be implemented with other components such as: the data communication is carried out among external equipment, image/data acquisition equipment, a database, external storage, an image/data processing workstation and the like.

Bus 80 includes hardware, software, or both to couple the components of the computer device to each other. Bus 80 includes, but is not limited to, at least one of the following: data Bus (Data Bus), Address Bus (Address Bus), Control Bus (Control Bus), Expansion Bus (Expansion Bus), and Local Bus (Local Bus). By way of example, and not limitation, Bus 80 may include an Accelerated Graphics Port (AGP) or other Graphics Bus, an Enhanced Industry Standard Architecture (EISA) Bus, a Front-Side Bus (FSB), a Hyper Transport (HT) Interconnect, an ISA (ISA) Bus, an InfiniBand (InfiniBand) Interconnect, a Low Pin Count (LPC) Bus, a memory Bus, a microchannel Architecture (MCA) Bus, a PCI (Peripheral Component Interconnect) Bus, a PCI-Express (PCI-X) Bus, a Serial Advanced Technology Attachment (SATA) Bus, a Video Electronics Bus (audio Electronics Association), abbreviated VLB) bus or other suitable bus or a combination of two or more of these. Bus 80 may include one or more buses, where appropriate. Although specific buses are described and shown in the embodiments of the application, any suitable buses or interconnects are contemplated by the application.

The electronic device may be connected to an item management system to implement the method described in connection with fig. 1-3.

In summary, according to the concept of the project, the tenant can freely create/delete the space in the project space, adjust the resource usage amount of each space, and bind the user to the project, so as to manage the sub-project. The method can well endow tenant project level authority management, and better score distribution of each space resource under the project. Meanwhile, a cluster manager is optimized, and operation and maintenance work of space change caused by change of specific services is not needed.

The above-mentioned embodiments only express several embodiments of the present application, and the description thereof is more specific and detailed, but not construed as limiting the scope of the invention. It should be noted that, for a person skilled in the art, several variations and modifications can be made without departing from the concept of the present application, which falls within the scope of protection of the present application. Therefore, the protection scope of the present patent application shall be subject to the protection scope of the appended claims.

Claims

1. A project management method, characterized in that the project management method comprises:

2. The project management method of claim 1, wherein the custom resources comprise project management resources and project resources.

3. The project management method according to claim 2, further comprising a right assignment step of assigning a read right of the project resource, and a read right and a modification right of the project management to the tenant.

4. The item management method according to claim 2, wherein said controlling step comprises:

creating a resource limit step: resource limitations of the space are created.

5. An item management system, adapted to the item management method of any one of claims 1 to 4, the item management system comprising:

6. The project management system of claim 5, wherein the custom resources comprise project management resources and project resources.

7. The project management system of claim 6, further comprising a right assignment unit for assigning a read right of the project resource, and a read right and a modification right of the project management to the tenant.

8. The project management system according to claim 7, wherein said control unit comprises:

9. An electronic device comprising a memory, a processor, and a computer program stored on the memory and executable on the processor, wherein the processor implements the project management method of any of claims 1 to 4 when executing the computer program.

10. An electronic device readable storage medium having computer program instructions stored thereon that, when executed by the processor, implement the project management method of any of the above.