Patent Application
20190310879
Aspects of the present disclosure relate to cloud computing networks, and in particular, to cloud computing environments enabling the execution of scripts and/or workflows.
Cloud computing typically involves the continuous provisioning, monitoring, and updating of various computing components and cloud services. In order to implement any given modification, upgrade, and/or the like, often times a developer must develop and execute one or more independent scripts and access various independent environments (e.g., test and production environments) associated with the cloud deployment to implement the modifications or upgrades. Typically, in such scenarios, the scripts are not well organized, not well-contained, etc., and often require labor-intensive interaction from developers to execute.
Alternatively or additionally, when attempting to use a script to implement a modification, upgrade, and/or the like, the developer may be required to contact an operational engineer that has the appropriate credentials to validate and permanently execute the requested change at the desired computing component and/or cloud service. Thus, the scripts/code required to resolve the changes requests may be distributed amongst different developers/operational engineers to effectuate the change, all of which is time consuming, labor-intensive, and expensive.
It is with these problems, among others, that aspects of the present disclosure where conceived.
The foregoing and other objects, features, and advantages of the present disclosure set forth herein will be apparent from the following description of particular embodiments of those inventive concepts, as illustrated in the accompanying drawings. Also, in the drawings the like reference characters refer to the same parts throughout the different views. The drawings depict only typical embodiments of the present disclosure and, therefore, are not to be considered limiting in scope.
Aspects of the present disclosure involve a system that consolidates, coordinates, and/or otherwise automates multiple scripts into an executable process, such as a workflow. The multiple scripts are configured to implement various upgrades, modifications, configurations, and/or the like at various computing components and/or computing devices deployed within a distributed communications network (e.g., a cloud network). Each of the multiple scripts included in the workflow may be functionally independent and written in various programming languages and/or dependent on the output of other functionally independent scripts.
The generated workflow consolidates and coordinates the scripts (and their various dependencies and requirements) into a single workflow or executable process that may be executed at the various computing components and/or computing devices of the distributed communications network. In one specific example, the workflows may contain the credentials necessary to validate and authorize the execution of a script at a given computing device or computing component. In another example, the credentials used to execute the script may be maintained by the system and may be different than the credentials used to access the machines, components, etc., on which the scripts may be executed. Separating the credentials from the enables the system to control access to the scripts and/or the machines, components, etc.
The generated workflow may be executed within the distributed network of computing devices on demand or at any point, thereby causing the upgrade or modification to associated with the incorporated script(s) to be automatically implemented at the various computing devices or computing components deployed within the distributed network.
The computing environment 100 includes a server computing device 102 that is in communication with communication devices (1221, 1222, . . . , 122n) located at one or more geographic locations. The server computing device 102, may be a processing device that functionally connects or otherwise communicates (e.g., using the one or more networks 110a, 100b) with communication devices (1221, 1222, . . . , 122n) included within the computing environment 100. The communication devices (1221, 1222, . . . , 122n) may be any of, or any combination of, a personal computer; handheld computer; mobile phone; digital assistant; smart phone; server; application; and the like. In one embodiment, each of the communication devices (1221, 1222, . . . , 122n) may include a processor-based platform that operates on any suitable operating system, such as Microsoft® Windows®, Linux®, Android, and/or the like that is capable of executing software processes, software, applications, etc. The communication devices (1221, 1222, . . . , 122n) devices may also include a communication system to communicate with the various components of the computing environment 100 via a wireline and/or wireless communications, such as networks 110a, 100b. In the illustrated embodiment, some of the communication devices (1221, 1222, . . . , 122n) are connected to a single communications network. It is contemplated that every communication devices (1221, 1222, . . . , 122n) may be connected to a single network. Alternatively, some of the communication devices (1221, 1222, . . . , 122n) may be connected to multiple networks.
The server computing device 102 includes a database 120, a script execution engine 126, and a processor 130. The database 120 may be a database, data store, storage and/or the like, for storing data involved in generating workflows from multiple scripts. In one specific example, the database 120 may store scripts and associated credentials for authorizing access and execution of a script at one or more of the communication devices (1221, 1222, . . . , 122n) included within the computing environment 100.
The script engine 126 provides a mechanism that automatically consolidates and coordinates multiple scripts into a single executable process or workflow 144. In particular, the script engine 144 may obtain script(s) from a developer device 105, which may be any of, or any combination of, a personal computer; handheld computer; mobile phone; digital assistant; smart phone; server; application; and the like, similar to the communication devices (1221, 1222, . . . , 122n). For example, a user at the developer device 105 may interact with one or more interactive interfaces/input forms (e.g. a user-interface or graphical user-interface (GUI)) may be generated for providing scripts to the server computing device 102. In particular, the server device 102, via the processor 130, may provide a mechanism, process, and/or application, which, when executed, generates interfaces for receiving or otherwise defining scripts from users. The interfaces may include interactive elements, such as buttons, forms, activity logs, fields, streaming capabilities for streaming script data, selections, inputs, streams, images, etc. For example, in one embodiment, one or more web pages may be displayed that allow users to access to provide scripts. In such a scenario, the server computing device 102 functions as a web server.
In some embodiments, the script execution engine 126 may receive a script and validate credentials corresponding to the script. More specifically, various devices within the communication devices (1221, 1222, . . . , 122n) devices may require the validation and/or verification of credentials to enable actions be performed by a script at the respective device. Thus, the script engine 126 may process credentials (e.g., username and password) associated with the script and/or the computing device of the communications network 100 upon which the script may be executed. When successful, the validated credentials may be stored in the generated workflow 144 (illustrated as s1, s1, s1) so that the verification and/or validation of the script does not need to be performed during subsequent executions of the script or workflow containing the script. In other embodiments, some other indication of a validation of the credentials may be stored or otherwise associated with the workflow 144.
The workflow 144 may be executed (illustrated at 150) within the computing environment 100, for example at the communication devices (1221, 1222, . . . , 122n), to implement the functions of each individual script included within the generated workflow 144, regardless of whether the scripts are written in different programming languages (e.g., Powershell, Python, Containers) or regardless of whether the scripts depend on the functions of other scripts. Thus, in the instance where each of the script is initially generated in a different programming language or, as stated above, the generated workflows may incorporate the necessary credentials, permissions, parameters, etc., required to automatically validate the scripts execution within the computing environment 100. Thus, during execution of the workflow, the credentials do not have to be re-validated or verified.
Referring now to
Referring again to
In one specific example, the system may include store or otherwise maintain credentials for all of the machines, computing devices, and/or the like, on which a script may be executed. More specifically, the system may store unique credentials for individual users, such as developers and engineers, that enable access to the system (not the actual machine credentials on which the script is executed) and a unique set of permissions. But the credentials are not the same as and are not stored on the machines (e.g., local development machines) and/or computing components on which a given script will be executed. For example, a developer may only have permissions to run scripts on a single Virtual Machine (“VM”) belonging to that developer. Or maybe the developer has read-only permissions to access all VMs of a network, but read/write access to only a subset of all of the VMs. The system enforces these permissions on a per-user level, not a per-script level. So a developer may write a script, upload it to the system, execute it against an applicable VM (e.g., a development VM) for testing and hand the script off to an operations engineer. The operations engineer has permissions in the system to run the exact same script on more VMs, including production ones. Thus, the system generates different credentials to the same script based on what a specific user requests to run the script.
In another example, the system may also control access to the output of a script. A script does not necessarily deploy services or change configuration—it could also function to, for example, “count the number of customers who use feature X.” It's possible that the developer who wrote the script does not have permission to see its output when run against certain customers. The system controls such permissions and credentials for the user executing the script.
Referring again to
In one specific example, the generated workflow may resolve a dependency of one or more of the input scripts provided by a user. At step 208, the generated workflow including one or more input scripts is executed at the applicable computing components deployed within the distributed network.
Components of the computer 300 may include various hardware components, such as a processing unit 302, a data storage 304 (e.g., a system memory), and a system bus 306 that couples various system components of the computer 300 to the processing unit 302. The system bus 306 may be any of several types of bus structures including a memory bus or memory controller, a peripheral bus, and a local bus using any of a variety of bus architectures. For example, such architectures may include Industry Standard Architecture (ISA) bus, Micro Channel Architecture (MCA) bus, Enhanced ISA (EISA) bus, Video Electronics Standards Association (VESA) local bus, and Peripheral Component Interconnect (PCI) bus also known as Mezzanine bus.
The computer 300 may further include a variety of computer-readable media 308 that includes removable/non-removable media and volatile/nonvolatile media, but excludes transitory propagated signals. Computer-readable media 308 may also include computer storage media and communication media. Computer storage media includes removable/non-removable media and volatile/nonvolatile media implemented in any method or technology for storage of information, such as computer-readable instructions, data structures, program modules or other data, such as RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other media that may be used to store the desired information/data and which may be accessed by the computer 300.
Communication media includes computer-readable instructions, data structures, program modules or other data in a modulated data signal such as a carrier wave or other transport mechanism and includes any information delivery media. The term “modulated data signal” means a signal that has one or more of its characteristics set or changed in such a manner as to encode information in the signal. For example, communication media may include wired media such as a wired network or direct-wired connection and wireless media such as acoustic, RF, infrared, and/or other wireless media, or some combination thereof. Computer-readable media may be embodied as a computer program product, such as software stored on computer storage media.
The data storage or system memory 304 includes computer storage media in the form of volatile/nonvolatile memory such as read only memory (ROM) and random access memory (RAM). A basic input/output system (BIOS), containing the basic routines that help to transfer information between elements within the computer 300 (e.g., during start-up) is typically stored in ROM. RAM typically contains data and/or program modules that are immediately accessible to and/or presently being operated on by processing unit 302. For example, in one embodiment, data storage 304 holds an operating system, application programs, and other program modules and program data.
Data storage 304 may also include other removable/non-removable, volatile/nonvolatile computer storage media. For example, data storage 304 may be: a hard disk drive that reads from or writes to non-removable, nonvolatile magnetic media; a magnetic disk drive that reads from or writes to a removable, nonvolatile magnetic disk; and/or an optical disk drive that reads from or writes to a removable, nonvolatile optical disk such as a CD-ROM or other optical media. Other removable/non-removable, volatile/nonvolatile computer storage media may include magnetic tape cassettes, flash memory cards, digital versatile disks, digital video tape, solid state RAM, solid state ROM, and the like. The drives and their associated computer storage media, described above and illustrated in
A user may enter commands and information through a user interface 310 or other input devices such as a tablet, electronic digitizer, a microphone, keyboard, and/or pointing device, commonly referred to as mouse, trackball or touch pad. Other input devices may include a joystick, game pad, satellite dish, scanner, or the like. Additionally, voice inputs, gesture inputs (e.g., via hands or fingers), or other natural user interfaces may also be used with the appropriate input devices, such as a microphone, camera, tablet, touch pad, glove, or other sensor. These and other input devices are often connected to the processing unit 302 through a user interface 310 that is coupled to the system bus 306, but may be connected by other interface and bus structures, such as a parallel port, game port or a universal serial bus (USB). A monitor 312 or other type of display device is also connected to the system bus 306 via an interface, such as a video interface. The monitor 312 may also be integrated with a touch-screen panel or the like.
The computer 300 may operate in a networked or cloud-computing environment using logical connections of a network interface or adapter 314 to one or more remote devices, such as a remote computer. The remote computer may be a personal computer, a server, a router, a network PC, a peer device or other common network node, and typically includes many or all of the elements described above relative to the computer 300. The logical connections depicted in
When used in a networked or cloud-computing environment, the computer 300 may be connected to a public and/or private network through the network interface or adapter 314. In such embodiments, a modem or other means for establishing communications over the network is connected to the system bus 306 via the network interface or adapter 314 or other appropriate mechanism. A wireless networking component including an interface and antenna may be coupled through a suitable device such as an access point or peer computer to a network. In a networked environment, program modules depicted relative to the computer 300, or portions thereof, may be stored in the remote memory storage device.
The foregoing merely illustrates the principles of the disclosure. Various modifications and alterations to the described embodiments will be apparent to those skilled in the art in view of the teachings herein. It will thus be appreciated that those skilled in the art will be able to devise numerous systems, arrangements and methods which, although not explicitly shown or described herein, embody the principles of the disclosure and are thus within the spirit and scope of the present disclosure. From the above description and drawings, it will be understood by those of ordinary skill in the art that the particular embodiments shown and described are for purposes of illustrations only and are not intended to limit the scope of the present disclosure. References to details of particular embodiments are not intended to limit the scope of the disclosure.
