The present disclosure relates generally to cloud computing and, more particularly, to methods and apparatus to orchestrate infrastructure installation of a hybrid system in a distributed environment such as a cloud computing environment.
Virtualizing computer systems provides benefits such as an ability to execute multiple computer systems on a single hardware computer, replicating computer systems, moving computer systems among multiple hardware computers, and so forth.
“Infrastructure-as-a-Service” (also commonly referred to as “IaaS”) generally describes a suite of technologies provided as an integrated solution to allow for elastic creation of a virtualized, networked, and pooled computing platform (sometimes referred to as a “cloud computing platform”). Enterprises may use IaaS as a business-internal organizational cloud computing platform (sometimes referred to as a “private cloud”) that gives an application developer access to infrastructure resources, such as virtualized servers, storage, and networking resources. By providing ready access to the hardware resources required to run an application, the cloud computing platform enables developers to build, deploy, and manage the lifecycle of a web application (or any other type of networked application) at a greater scale and at a faster pace than ever before.
Cloud computing environments may include many processing units (e.g., servers). Other components of a cloud computing environment include storage devices, networking devices (e.g., switches), etc. Current cloud computing environment configuration relies on much manual user input and configuration to install, configure, and deploy the components of the cloud computing environment.
Cloud computing is based on the deployment of many physical resources across a network, virtualizing the physical resources into virtual resources, and provisioning the virtual resources to perform cloud computing services and applications. Example systems for virtualizing computer systems are described in U.S. patent application Ser. No. 11/903,374, entitled “METHOD AND SYSTEM FOR MANAGING VIRTUAL AND REAL MACHINES,” filed Sep. 21, 2007, and granted as U.S. Pat. No. 8,171,485, U.S. Provisional Patent Application No. 60/919,965, entitled “METHOD AND SYSTEM FOR MANAGING VIRTUAL AND REAL MACHINES,” filed Mar. 26, 2007, and U.S. Provisional Patent Application No. 61/736,422, entitled “METHODS AND APPARATUS FOR VIRTUALIZED COMPUTING,” filed Dec. 12, 2012, all three of which are hereby incorporated herein by reference in their entirety.
Cloud computing platforms may provide many powerful capabilities for performing computing operations. However, taking advantage of these computing capabilities manually may be complex and/or require significant training and/or expertise. Prior techniques to providing cloud computing platforms and services often require customers to understand details and configurations of hardware and software resources to establish and configure the cloud computing platform. Methods and apparatus disclosed herein facilitate the management of virtual machine resources in cloud computing platforms.
A virtual machine is a software computer that, like a physical computer, runs an operating system and applications. An operating system installed on a virtual machine is referred to as a guest operating system. Because each virtual machine is an isolated computing environment, virtual machines (VMs) can be used as desktop or workstation environments, as testing environments, to consolidate server applications, etc. Virtual machines can run on hosts or clusters. The same host can run a plurality of VMs, for example.
As disclosed in detail herein, methods and apparatus disclosed herein provide for automation of management tasks such as provisioning multiple virtual machines for a multiple-machine computing system (e.g., a group of servers that inter-operate), linking provisioned virtual machines and tasks to desired systems to execute those virtual machines or tasks, and/or reclaiming cloud computing resources that are no longer in use. The improvements to cloud management systems (e.g., the vCloud Automation Center (vCAC) from VMware®, the vRealize Automation Cloud Automation Software from VMware®), interfaces, portals, etc. disclosed herein may be utilized individually and/or in any combination. For example, all or a subset of the described improvements may be utilized.
As used herein, availability refers to the level of redundancy required to provide continuous operation expected for the workload domain. As used herein, performance refers to the computer processing unit (CPU) operating speeds (e.g., CPU gigahertz (GHz)), memory (e.g., gigabytes (GB) of random access memory (RAM)), mass storage (e.g., GB hard drive disk (HDD), GB solid state drive (SSD)), and power capabilities of a workload domain. As used herein, capacity refers to the aggregate number of resources (e.g., aggregate storage, aggregate CPU, etc.) across all servers associated with a cluster and/or a workload domain. In examples disclosed herein, the number of resources (e.g., capacity) for a workload domain is determined based on the redundancy, the CPU operating speed, the memory, the storage, the security, and/or the power requirements selected by a user. For example, more resources are required for a workload domain as the user-selected requirements increase (e.g., higher redundancy, CPU speed, memory, storage, security, and/or power options require more resources than lower redundancy, CPU speed, memory, storage, security, and/or power options).
Many different types of virtualization environments exist. Three example types of virtualization environment are: full virtualization, paravirtualization, and operating system virtualization.
Full virtualization, as used herein, is a virtualization environment in which hardware resources are managed by a hypervisor to provide virtual hardware resources to a virtual machine. In a full virtualization environment, the virtual machines do not have direct access to the underlying hardware resources. In a typical full virtualization environment, a host operating system with embedded hypervisor (e.g., VMware ESXi®) is installed on the server hardware. Virtual machines including virtual hardware resources are then deployed on the hypervisor. A guest operating system is installed in the virtual machine. The hypervisor manages the association between the hardware resources of the server hardware and the virtual resources allocated to the virtual machines (e.g., associating physical random access memory (RAM) with virtual RAM). Typically, in full virtualization, the virtual machine and the guest operating system have no visibility and/or direct access to the hardware resources of the underlying server. Additionally, in full virtualization, a full guest operating system is typically installed in the virtual machine while a host operating system is installed on the server hardware. Example full virtualization environments include VMware ESX®, Microsoft Hyper-V®, and Kernel Based Virtual Machine (KVM).
Paravirtualization, as used herein, is a virtualization environment in which hardware resources are managed by a hypervisor to provide virtual hardware resources to a virtual machine and guest operating systems are also allowed direct access to some or all of the underlying hardware resources of the server (e.g., without accessing an intermediate virtual hardware resource). In a typical paravirtualization system, a host operating system (e.g., a Linux-based operating system) is installed on the server hardware. A hypervisor (e.g., the Xen® hypervisor) executes on the host operating system. Virtual machines including virtual hardware resources are then deployed on the hypervisor. The hypervisor manages the association between the hardware resources of the server hardware and the virtual resources allocated to the virtual machines (e.g., associating physical random access memory (RAM) with virtual RAM). In paravirtualization, the guest operating system installed in the virtual machine is configured also to have direct access to some or all of the hardware resources of the server. For example, the guest operating system may be precompiled with special drivers that allow the guest operating system to access the hardware resources without passing through a virtual hardware layer. For example, a guest operating system may be precompiled with drivers that allow the guest operating system to access a sound card installed in the server hardware. Directly accessing the hardware (e.g., without accessing the virtual hardware resources of the virtual machine) may be more efficient, may allow for performance of operations that are not supported by the virtual machine and/or the hypervisor, etc.
Operating system virtualization is also referred to herein as container virtualization. As used herein, operating system virtualization refers to a system in which processes are isolated in an operating system. In a typical operating system virtualization system, a host operating system is installed on the server hardware. Alternatively, the host operating system may be installed in a virtual machine of a full virtualization environment or a paravirtualization environment. The host operating system of an operating system virtualization system is configured (e.g., utilizing a customized kernel) to provide isolation and resource management for processes that execute within the host operating system (e.g., applications that execute on the host operating system). The isolation of the processes is known as a container. Several containers may share a host operating system. Thus, a process executing within a container is isolated the process from other processes executing on the host operating system. Thus, operating system virtualization provides isolation and resource management capabilities without the resource overhead utilized by a full virtualization environment or a paravirtualization environment. Alternatively, the host operating system may be installed in a virtual machine of a full virtualization environment or a paravirtualization environment. Example operating system virtualization environments include Linux Containers LXC and LXD, Docker™, OpenVZ™, etc.
In some instances, a data center (or pool of linked data centers) may include multiple different virtualization environments. For example, a data center may include hardware resources that are managed by a full virtualization environment, a paravirtualization environment, and an operating system virtualization environment. In such a data center, a workload may be deployed to any of the virtualization environments.
The cloud computing platform provider 110 provisions virtual computing resources (e.g., virtual machines, or “VMs,” 114) that may be accessed by users of the cloud computing platform 110 (e.g., users associated with an administrator 116 and/or a developer 118) and/or other programs, software, device. etc.
An example application 102 of
As illustrated in
In some examples disclosed herein, a lighter-weight virtualization is employed by using containers in place of the VMs 114 in the development environment 112. Example containers 114a are software constructs that run on top of a host operating system without the need for a hypervisor or a separate guest operating system. Unlike virtual machines, the containers 114a do not instantiate their own operating systems. Like virtual machines, the containers 114a are logically separate from one another. Numerous containers can run on a single computer, processor system and/or in the same development environment 112. Also like virtual machines, the containers 114a can execute instances of applications or programs (e.g., an example application 102a) separate from application/program instances executed by the other containers in the same development environment 112.
The example application director 106 of
The example topology generator 120 generates a basic blueprint 126 that specifies a logical topology of an application to be deployed. The example basic blueprint 126 generally captures the structure of an application as a collection of application components executing on virtual computing resources. For example, the basic blueprint 126 generated by the example topology generator 120 for an online store application may specify a web application (e.g., in the form of a Java web application archive or “WAR” file including dynamic web pages, static web pages, Java servlets, Java classes, and/or other property, configuration and/or resources files that make up a Java web application) executing on an application server (e.g., Apache Tomcat application server) that uses a database (e.g., MongoDB) as a data store. As used herein, the term “application” generally refers to a logical deployment unit, including one or more application packages and their dependent middleware and/or operating systems. Applications may be distributed across multiple VMs. Thus, in the example described above, the term “application” refers to the entire online store application, including application server and database components, rather than just the web application itself In some instances, the application may include the underlying hardware and/or virtual computing hardware utilized to implement the components.
The example basic blueprint 126 of
The example deployment plan generator 122 of the example application director 106 of
The example deployment director 124 of
The example cloud manager 138 of
The example blueprint manager 140 of the illustrated example manages the creation of multi-machine blueprints that define the attributes of multiple virtual machines as a single group that can be provisioned, deployed, managed, etc. as a single unit. For example, a multi-machine blueprint may include definitions for multiple basic blueprints that make up a service (e.g., an e-commerce provider that includes web servers, application servers, and database servers). A basic blueprint is a definition of policies (e.g., hardware policies, security policies, network policies, etc.) for a single machine (e.g., a single virtual machine such as a web server virtual machine and/or container). Accordingly, the blueprint manager 140 facilitates more efficient management of multiple virtual machines and/or containers than manually managing (e.g., deploying) basic blueprints individually. Example management of multi-machine blueprints is described in further detail in conjunction with
The example blueprint manager 140 of
The resource manager 144 of the illustrated example facilitates recovery of cloud computing resources of the cloud provider 110 that are no longer being activity utilized. Automated reclamation may include identification, verification and/or reclamation of unused, underutilized, etc. resources to improve the efficiency of the running cloud infrastructure.
The example blueprint manager 140 provides a user interface for a user of the blueprint manager 140 (e.g., the administrator 116, the developer 118, etc.) to specify blueprints (e.g., basic blueprints and/or multi-machine blueprints) to be assigned to an instance of a multi-machine blueprint 208. For example, the user interface may include a list of previously generated basic blueprints (e.g., the web server blueprint 202, the application server blueprint 204, the database server blueprint 206, etc.) to allow selection of desired blueprints. The blueprint manager 140 combines the selected blueprints into the definition of the multi-machine blueprint 208 and stores information about the blueprints in a multi-machine blueprint record defining the multi-machine blueprint 208. The blueprint manager 140 may additionally include a user interface to specify other characteristics corresponding to the multi-machine blueprint 208. For example, a creator of the multi-machine blueprint 208 may specify a minimum number and a maximum number of each blueprint component of the multi-machine blueprint 208 that may be provisioned during provisioning of the multi-machine blueprint 208.
Accordingly, any number of virtual machines (e.g., the virtual machines associated with the blueprints in the multi-machine blueprint 208) and/or containers may be managed collectively. For example, the multiple virtual machines corresponding to the multi-machine blueprint 208 may be provisioned based on an instruction to provision the multi-machine blueprint 208, may be power cycled by an instruction, may be shut down by an instruction, may be booted by an instruction, etc. As illustrated in
The multi-machine blueprint 208 maintains the reference to the basic blueprints 202, 204, 206. Accordingly, changes made to the blueprints (e.g., by a manager of the blueprints different than the manager of the multi-machine blueprint 208) may be incorporated into future provisioning of the multi-machine blueprint 208. Accordingly, an administrator maintaining the source blueprints (e.g., an administrator charged with managing the web server blueprint 202) may change or update the source blueprint and the changes may be automatically propagated to the machines provisioned from the multi-machine blueprint 208. For example, if an operating system update is applied to a disk image referenced by the web server blueprint 202 (e.g., a disk image embodying the primary disk of the web server blueprint 202), the updated disk image is utilized when deploying the multi-machine blueprint. Additionally, the blueprints may specify that the machines 210A, 210B, 210C of the multi-machine service 210 provisioned from the multi-machine blueprint 208 operate in different environments. For example, some components may be physical machines, some may be on-premise virtual machines, and some may be virtual machines at a cloud service.
Several multi-machine blueprints may be generated to provide one or more varied or customized services. For example, if virtual machines deployed in the various States of the United States require different settings, a multi-machine blueprint could be generated for each state. The multi-machine blueprints could reference the same build profile and/or disk image, but may include different settings specific to each state. For example, the deployment workflow may include an operation to set a locality setting of an operating system to identify a particular state in which a resource is physically located. Thus, a single disk image may be utilized for multiple multi-machine blueprints reducing the amount of storage space for storing disk images compared with storing a disk image for each customized setting.
As shown in the example of
In the example installation 300, each vA 320, 322, 324 includes a management endpoint 340, 342, 344. Each component server 330, 332, 334, 336 includes a management agent 350, 352, 354, 356. The management agents 350-356 can communicate with their respective endpoint 340 to facilitate transfer of data, execution of tasks, etc., for example.
In certain examples, management endpoints 340, 342, 344 share a data store, and any management agent 350-356 can connect to any management endpoint 340, 342, 344 to retrieve a task and/or associated data from the data store. Thus, management endpoints 340, 342, 344 are interconnected via the data store. In certain examples, a management endpoint 340-342 doubles as an agent 350-356, allowing the endpoint 340-344 on a vA 320-324 to automate a task on another vA 320-324. Additionally, in certain examples, each agent 350-356 maintains a pool of available endpoints 340-344. If an endpoint 340-344 becomes unresponsive, the agent 350-356 can automatically switch to a different endpoint 340-344, from which the agent 350-356 can retrieve execution tasks. Agents 350-356 connected via different endpoints 340-344 can initiate task execution from a plurality of vAs 320-324, even if not currently connected to that vA 320-324 because, due to the connection between endpoints 340-344, for example.
In certain examples, the management agents 350-356 synchronize component servers 330-336 with the vA 320-324 and facilitate host access and associated services (e.g., hostd, ntpd, sfcbd, slpd, wsman, vobd, etc.). The management agents 350-356 can communicate with their respective endpoint 340 to facilitate transfer of data, execution of tasks, etc., for example. The relationship between management endpoint 340, 342, 344 and associated management agents 350, 352, 354, 356 can be used to deploy and install software on multiple component machines 330, 332, 334, 336. In certain examples, component servers 330-336 can be installed and/or managed even when the vA 320-324 and/or its endpoint 340-344 are physically restricted from accessing the server 330-336 and/or its agent 350-356. The agent 350-356 polls the endpoint 340-344 for work items, so an inbound connection to the component server 330-336 can be absent, for example.
In certain examples, a graphical user interface associated with a front end of the load balancer 310 guides a customer through one or more questions to determine system requirements for the installation 300. Once the customer has completed the questionnaire and provided firewall access to install the agents 350-356, the agents 350-356 communicate with the endpoint 340 without customer involvement. Thus, for example, if a new employee needs a Microsoft Windows® machine, a manager selects an option (e.g., clicks a button, etc.) via the graphical user interface to install a VM 114 and/or container 114a that is managed through the installation 300. To the user, he or she is working on a single machine, but behind the scenes, the virtual appliance (vA) 320 is accessing different servers 330-336 depending upon what functionality is to be executed.
In certain examples agents 350-356 are deployed in a same data center as the endpoint 340 to which the agents 350-356 are associated. The deployment can include a plurality of agent servers 330-336 distributed worldwide, and the deployment can be scalable to accommodate additional server(s) with agent(s) to increase throughput and concurrency, for example.
Example services can include catalog services, identity services, component registry services, event broker services, IaaS, XaaS, etc. Catalog services provide a user interface via which a user can request provisioning of different preset environments (e.g., a VM including an operating system and software and some customization, etc.), for example. Identity services facilitate authentication and authorization of users and assigned roles, for example. The component registry maintains information corresponding to installed and deployed services (e.g., uniform resource locators for services installed in a VM/vA, etc.), for example. The event broker provides a messaging broker for event-based communication, for example. The IaaS provisions one or more VMs and/or containers for a customer via the vA 320. The XaaS can extend the provisioning to also request, approve, provision, operate, and decommission any type of catalog items (e.g., storage, applications, accounts, and anything else that the catalog provides as a service).
The example event broker 430 provides a mechanism to handle tasks which are transferred between services with the orchestrator 420. The example authentication provider 440 (e.g., VMware Horizon™ services, etc.) authenticates access to services and data, for example.
The components of the vA 320 access each other through REST API calls behind the internal reverse proxy 450 (e.g., a high availability (HA) proxy HAProxy) which provides a high availability load balancer and proxy for Transmission Control Protocol (TCP)- and Hypertext Transfer Protocol (HTTP)-based application requests. In this example, the proxy 450 forwards communication traffic from within the vA 320 and/or between vAs 320, 322, 324 of
In certain examples, a cloud computing (e.g., vCAC™, vRA™, etc.) deployment includes one or more vAs 320-324 and one or more component servers 330-336 (e.g., Microsoft Windows™ machines, etc.) on which are installed components (e.g., software such as Web services, application services, database services, etc.) that form the IaaS portion of the product. In a distributed and/or high availability deployment, a plurality of component servers 330-336 form the installed product, and having to install the IaaS components manually on all of the component servers 330-336 is a time-consuming process, involving, among other things, multiple context switches and many opportunities for user misconfiguration of the deployed system. For example, manual installation involves installing components on an appliance, downloading an installer, and then visit each server to install the components manually using the installer. However, if a component is deployed out of order, the installation may not function. Additionally, data entry is required for each manual installation, and mis-typing of the manual data entry can invalidate the entire installation. Further, such a mistake may not be realized until the erroneous installation is deployed, resulting in lost time, money, errors, and inoperable systems. Simplification and automation of this process reduces the time needed and errors involved in setting up a new instance of the cloud computing system.
In certain examples, rather than requiring customers to manually install an IaaS component on each server 330-336, installation can be executed on each node from a centralized location via the management agent 350-356 installed on each component server 330-336. The agent 350-356 is installed and registered with the vA 320. After registration, communication with the vA 320 is authenticated using a client certificate and signed token(s). The vA's 320 root credentials are not persisted on the server 330-336. Each instance of the management agent 350-356 has a node identifier (ID), which uniquely identifies the agent 330-336 in a cluster of machines 330-336 forming the cloud deployment. After registration, the agent 330-336 starts polling the vA 320 in a configurable time interval to obtain commands to be executed. The commands are executed by the corresponding server 330-336, and a result is reported back to the vA 320 by the agent 350-356 and can be used for further processing, for example.
In certain examples, installation of a hybrid system including a plurality of appliances 320-324 and component servers 330-336 having a plurality of roles can be orchestrated via the management agents 350-356. Using the management agents 350-356 in communication with the management endpoints 340-344 at their respective vAs 320-324, the example installation 300 can be coordinated without manual user action throughout phases of the installation.
The example agent 350 also includes an agent control processor 520. The agent control processor 520 executes instructions to control the agent 350 for command and/or other application execution, communication, storage, etc. The instructions can be transmitted to the agent control processor 520 via the communication interface 510 and/or via a data storage 530, for example.
The example data storage 530 includes a configuration file 540 and a machine identifier 550. The example configuration file 540 can include information such as credentials to authenticate and/or validate the agent 350 to the vA 320, etc. Credentials can include a certificate (e.g., with a public key and private key for authentication, etc.), a unique identifier, etc. The example agent control processor 520 can process instructions, generate communications, etc. The example data storage 530 can also include instructions (e.g., computer program code, etc.) to be executed by the agent control processor 520.
At 606, a management agent 350 (and/or 352-356) is installed on each component server 330 (and/or 332-336). At 608, each server 330 (and/or 332-336) acknowledges the installation of the management agent 350 (and/or 352-356). The acknowledgement can include an authentication of management agent 350 credentials by the vA 320, for example. Authentication and/or authorization can include an exchange and verification of a certificate, identifier, etc., associated with the management agent 350 and/or its associated server 330 by the vA 320, for example.
For example, a cloud-based installation may include one or more vAs 320-324 and one or more servers 330-336 (e.g., “Windows™ machines”, etc.) on which a plurality of components (e.g., five, six, seven, ten, etc.) are installed (e.g., applications, database, management, etc.) to form an IaaS in a distributed, high availability environment. The management agents 350-356 communicate with the management endpoint(s) 340-344 to receive commands, execute commands, install software, upgrade an installation at the server 330-336, etc.
Each management agent 350-356 has a node identifier (ID) that uniquely identifies the agent 350-356 in a cluster of machines 330-336 forming the system 300. When installing the agent 350-356, an address and root credentials of the primary vA 320 are entered so that the agent 350-356 can register itself in the vA 320. After the registration, communication with the vA 320 is authenticated using a client certificate and signed token(s). In certain examples, since the certificate is used for communication between the agent 350-356 and the endpoint 340, the root credentials of the vA 320 are not persisted on the machines 330-336.
At 610, other appliances (e.g., other vAs 324, etc.) are identified to the vA 320. For example, the primary vA 320 is informed of other appliances (e.g., vA 322, 324, etc.) to be included in the configuration. At 612, a role is provided for each server 330 (and/or 332-336). For example, the server 330 is assigned a role as a database server. Alternatively, the server 330 is assigned a role as a Web server. The server 330 may be assigned a role as an application server, for example. The server 330 may be assigned a role as a Windows™ server, for example.
Each role is associated with one or more rules that guide and/or establish criteria for the associated role. Each rule can be associated with one or more prerequisites for a server 330-336 to execute the rule and perform the role. In a high availability (HA) environment, rules may specify that there are at least two servers 330-336 for each role to provide redundancy and increased availability if one server 330 of a given role is busy or otherwise unavailable, for example.
At 614, the vA 320 evaluates or checks applicable rule prerequisite(s) for a given role to ensure the associated server 330 can perform the role. The vA 320 attempts to fix or otherwise remedy any error(s) identified in its evaluation of the server 330. For example, prerequisites can include a determination of whether the load balancer 310, vA 320-324, and/or component server 330-336, etc., is/are reachable, and an associated fix can include an address look-up and resolution. Another prerequisite can include registration of the server 330-336 and/or other IaaS node with the vA 320-324, and an associated fix can include registration of the server 330-336 and/or other IaaS node with the vA 320-324, such as described above, for example. Another fix of a server 330-336 error can include downloading and installing a service pack on the server 330-336, for example. Another prerequisite can include database (e.g., object-relational database such as Postgres, etc.) access, and an associated fix can include access and log in to the database, for example.
At 616, the server 330 reports back to the vA 320 with an indication of what cannot be automatically fixed. For example, the server 330 generates a report of what prerequisite errors were fixed and what prerequisite errors were identified and not fixed, and sends 616 the report to the vA 320.
At 618, errors that were identified but not fixed in the prerequisite checks are handled based on data entry at the vA 320. For example, via the trigger 601, the user can provide data entry and/or one or more automated scripts can be executed to provide answer(s), setting(s), address(es), password(s), credential(s), etc., to satisfy missing prerequisite information for the server 330 at the vA 320. In certain examples, the data entry 618 can be guided by a wizard for component address(es), username(s), identity of service(s) to be executed, identification of port(s) (e.g., default or custom), database credentials/address, etc. In certain examples, a user provides data entry which is recorded and converted into a script for subsequent automated execution, for example.
At 620, once data entry is complete, the vA 320 asks to configure the load balancer (LB) 310 with an external device/system 603. Thus, the LB 310 can be configured with information regarding connected components 320-324, 330-336, etc., and their capabilities and ability to distribute workload for a plurality of tasks. Using data and the management agent(s) 350-356, rules and/or other prerequisites are sent to server(s) 330-336 along with other instructions to configure a particular customer environment.
At 622, the vA 320 validates the server(s) 330-336, and, at 624, the vA 320 validates itself. For example, at 622, the vA 320 sends one or more commands to the server 330 based on the role of the server 330 (e.g., install web service (validate=true), install manager service, etc.) to validate the installation and/or other configuration of the server 330. The server 330 returns an indication of whether or not the validation is okay (e.g., has been completed successfully, etc.). At 626, if the validation failed, repeated data entry 618 can be used to adjust network settings and/or other change in data to then repeat validation at 622, for example. At 628, if validation is successful, then the installation, configuration, and validation process is complete.
At 630, a snapshot of the installation is obtained. The snapshot forms a recovery point. The snapshot stores the configuration for later use, restoration, error recovery, etc. At 632, the installation is executed. First, at 632, the installation is executed at the vA 320 (e.g., the primary appliance). Then, at 634, the installation occurs at the server 330 (e.g., via the management agent 350). At 636, the installation occurs at the vA 322 (e.g., a secondary appliance). Thus, a sequence of commands is built and targeted for an environment including server(s) 330. The commands are triggered for orchestration of services via the management agent(s) 350. The central or primary vA 320 does not have access to individual nodes but instead can be accessed by the management agent(s) 350-356 of the respective server(s) 330-336, which acts to execute installation instructions from the vA 320. The vA 320 awaits acknowledgement from the agent(s) 350-356.
As illustrated in the example of
Some or all of the commands 702 have certain dependency 704 on other command(s) 702. That is, one command 702 may depend on nothing, but another command 702 may depend on a prior command 702. Thus, while some commands can be executed in parallel and/or otherwise asynchronously, other commands must be executed serially and/or otherwise synchronously when their dependency 704 has been satisfied, for example.
The vA1320 builds and then deploys the installation including copies of involved components. Each component server 330-336 polls the vA1320 for work. The endpoint 340 of the vA 320 examines the queue 702 to determine a next task. If the next task has no dependency 704, the endpoint 350 transmits the task to the server 330-336 via its agent 350-356 for execution. If the task in the queue 702 has a dependency 704, then the endpoint 340 determines whether the dependent task has been completed, started, or not yet started, for example. If the dependent task has not yet started, for example, then the endpoint 340 will not pass the associated task from the queue 702 to the server 330-336.
Each task in the queue 702 is also associated with and/or otherwise intended for a server 706. For example, server1 queries the vA1 to determine whether the queue 702 includes any task for server1. The endpoint 340 of the appliance vA1 determines that yes, task 3 in the queue 702 is for server1 (e.g., installation of web server on server1, etc.). However, task 3 depends on the execution of task 2 by the vA1, and task 2 depends on the execution of task 1 by the vA1. The endpoint vA1 does not release task 3 to the agent of server1 until the vA1 has executed tasks 1 and 2. Task 4 however, has no dependency 704, so the endpoint can release task 4 to the agent of server4 when the agent polls for its task. Additionally, in the example of
In certain examples, the vA 320 publishes the commands 702 to available servers 330-336 (e.g., via communication between the endpoint 340 and agents 350-356) and is aware of the sequence 702 and dependency 704 of the commands. The servers 330-336, however, accept and execute the commands without knowledge of the sequence 702 and dependency 704. For example, when a server 330-336 is instructed to install a component, the server's agent 350-356 facilitates a download of an installer from the vA 320, which the server 330-336 extracts and executes to install the component. Thus, the vA320 is aware of the servers 330-336 available to execute tasks but does not instruct the servers 330-36 to execute tasks. Rather, the servers 330-336 poll the queue of instructions 702, and the vA 320 checks whether dependencies 704 have been met to release the task to be performed by the server 330-336 and/or other component.
While example implementations of the example cloud computing system 100 and virtual machine installation 300 are illustrated in
Flowcharts representative of example machine readable instructions that may be executed to deploy and manage the example application director 106, example cloud provider 110, example cloud manager 138, example distributed execution managers 146A, 146B, example multi-machine service 210, example load balancer 310, example virtual appliances 320-324, example component servers 330-336, example management endpoints 340-344, example management agents 350-356, and/or, more generally, the example systems 100 and/or 300 of
As mentioned above, the example processes of
At block 804, components in the system 300 are identified. For example, a cloud-based installation may include one or more vAs 320-324 and one or more servers 330-336 (e.g., “Windows™ machines”, etc.) on which a plurality of components (e.g., five, six, seven, ten, etc.) are installed (e.g., applications, database, management, etc.) to form an IaaS in a distributed, high availability environment. The management agents 350-356 communicate with the management endpoint(s) 340-344 to receive commands, execute commands, install software, upgrade an installation at the server 330-336, etc. The system 300 can also include one or more devices such as a load balancer 310, etc.
At block 806, the management agent 350-356 is installed on each component server 330-336. Each server 330-336 acknowledges the installation of the management agent 350-356. The acknowledgement can include an authentication of management agent 350 credentials by the vA 320, for example. Authentication and/or authorization can include an exchange and verification of a certificate, identifier, etc., associated with the management agent 350 and/or its associated server 330 by the vA 320, for example.
In certain examples, each management agent 350-356 has a node identifier (ID) that uniquely identifies the agent 350-356 in a cluster of machines 330-336 forming the system 300. When installing the agent 350-356, an address and root credentials of the primary vA 320 are entered so that the agent 350-356 can register itself in the vA 320. After the registration, communication with the vA 320 is authenticated using a self-signed certificate. In certain examples, since the self-signed certificate is used for communication between the agent 350-356 and the endpoint 340, the root credentials of the vA 320 are not persisted on the machines 330-336.
At block 808, a role is provided for each server 330 (and/or 332-336). For example, the server 330 is assigned a role as a database server. Alternatively, the server 330 is assigned a role as a Web server. The server 330 may be assigned a role as an application server, for example. The server 330 may be assigned a role as a Windows™ server, for example.
Each role is associated with one or more rules that guide and/or establish criteria for the associated role. Each rule can be associated with one or more prerequisites for a server 330-336 to execute the rule and perform the role. In a high availability (HA) environment, rules may specify that there are at least two servers 330-336 for each role to provide redundancy and increased availability if one server 330 of a given role is busy or otherwise unavailable, for example.
At block 810, the vA 320 evaluates or checks applicable prerequisite(s) for a given role to ensure the associated server 330 can perform the role. For example, prerequisites can include a) a determination of whether the load balancer 310, vA 320-324, and/or component server 330-336, etc., is/are reachable; b) registration of the server 330-336 and/or other IaaS node with the vA 320-324; c) presence of a minimum software and/or firmware version; d) database (e.g., object-relational database such as Postgres, etc.) access; etc.
At block 812, an error is identified in the prerequisite evaluation. For example, a prerequisite may not be satisfied and may need to be addressed before installation can continue. If no error is identified, then control advances to block 820 to evaluate whether prerequisites remain to be evaluated. If an error is identified, then, at block 814, the error is evaluated to determine whether or not the error is automatically fixable by the vA 320 and/or other connected component. If the error is fixable, then, at block 816, the vA 320 automatically fixes the error. If the error is not automatically fixable, then, at block 818, the error is logged (e.g., included in a report, etc.).
At block 820, prerequisite(s) are evaluated for the role to determine whether or not additional prerequisite(s) remain to be evaluated. If prerequisite(s) remain to be evaluated, the control reverts to block 810 to evaluate the prerequisite(s) for the role(s).
If all prerequisite(s) have been evaluated, then, at block 822, the error log is reviewed to identify errors logged during prerequisite analysis. If no error has been logged, then, at block 828, a recovery point (e.g., a snapshot) is created for the system 300 configuration. However, if one or more errors are identified, then, at block 824, error resolution is attempted. For example, data entry can be provided via a user and/or one or more automated scripts to provide answer(s), setting(s), address(es), password(s), credential(s), etc., to satisfy missing prerequisite information for the server 330 at the vA 320. In certain examples, the data entry 618 can be guided by a wizard for component address(es), username(s), identity of service(s) to be executed, identification of port(s) (e.g., default or custom), database credentials/address, etc. In certain examples, a user provides data entry which is recorded and converted into a script for subsequent automated execution, for example.
At block 826, the vA 320 validates the server(s) 330-336 and itself. For example, the vA 320 sends one or more commands to the server 330 based on the role of the server 330 (e.g., install web service (validate=true), install manager service, etc.) to validate the installation and/or other configuration of the server 330. The server 330 returns an indication of whether or not the validation is okay (e.g., has been completed successfully, etc.). At block 826, if the validation failed, repeated data entry at block 824 can be used to adjust network settings and/or other change in data to then repeat validation at block 826, for example. If validation is successful, then the installation, configuration, and validation process is complete after the process has been conducted for each logged error (block 822).
After all logged errors have been evaluated, at block 828, recovery point is created. The recovery point can be formed from a snapshot taken of the installation, for example. The snapshot stores the configuration for later use, restoration, error recovery, etc. At block 830, the installation is executed. For example, the installation is executed at the vA 320 (e.g., the primary appliance). Then, the installation occurs at the server 330 (e.g., via the management agent 350). The installation also occurs at the vA 322 (e.g., a secondary appliance). Thus, a sequence of commands is built and targeted for particular server(s) 330. The commands are triggered for orchestration of services via the management agent(s) 350. The central or primary vA 320 does not have access to individual nodes but instead accesses the management agent(s) 350-356 of the respective server(s) 330-336, which acts to execute installation instructions from the vA 320. The vA 320 awaits acknowledgement from the agent(s) 350-356.
At block 906, an identified task is evaluated to identify a dependency. That is, some or all of the tasks 702 have a dependency 704 on other task(s) 702. That is, one task 702 may depend on nothing, but another task 702 may depend on a prior task 702. Thus, while some tasks 702 can be executed in parallel and/or otherwise asynchronously, other tasks 702 are to be executed serially and/or otherwise synchronously when their dependency 704 has been satisfied, for example.
At block 908, presence or absence of a dependency 704 for the task 702 is examined. If no dependency 704 exists, then, at block 910, the task 702 is deployed by the vA 320 for execution by the server 330-336.
At block 912, if a dependency exists, then the dependency 704 is evaluated to determine whether or not the dependency has been met. If the dependency 704 has been satisfied, then, at block 910, the task 702 is deployed by the vA 320 for execution by the server 330-336. However, if the dependency 704 has not been met, then, at block 914, the vA 320 does not release the task 702 to the server 330-336 until the dependency 704 has been satisfied.
For example, the server 330-336 queries the vA 320 to determine whether the queue 702 includes any task for the server 330-336. The endpoint 340 of the vA 320 determines that a task in the queue 702 is for the server 330-336. However, the task 702 depends on the execution of another task. The endpoint 340 of the vA 320 does not release the task 702 to the agent 350-356 of the server 330-36 until the vA 320 has executed the dependent task. If no dependencies are identified or the dependent task has already executed, however, the endpoint 340 can release the task to the agent 350-356 of the server 330-336 when the agent 350-356 polls the endpoint 340 for its task 702.
The processor 1012 of the illustrated example includes a local memory 1013 (e.g., a cache), and executes instructions to implement the example systems 100, 300 or portions thereof, such as the vA 320-324, component server 330-336, management endpoint 340-344, and management agent 350-356. The processor 1012 of the illustrated example is in communication with a main memory including a volatile memory 1014 and a non-volatile memory 1016 via a bus 1018. The volatile memory 1014 may be implemented by Synchronous Dynamic Random Access Memory (SDRAM), Dynamic Random Access Memory (DRAM), RAIVIBUS Dynamic Random Access Memory (RDRAM) and/or any other type of random access memory device. The non-volatile memory 1016 may be implemented by flash memory and/or any other desired type of memory device. Access to the main memory 1014, 1016 is controlled by a memory controller.
The processor platform 1000 of the illustrated example also includes an interface circuit 1020. The interface circuit 1020 may be implemented by any type of interface standard, such as an Ethernet interface, a universal serial bus (USB), and/or a PCI express interface.
In the illustrated example, one or more input devices 1022 are connected to the interface circuit 1020. The input device(s) 1022 permit(s) a user to enter data and commands into the processor 1012. The input device(s) can be implemented by, for example, an audio sensor, a microphone, a keyboard, a button, a mouse, a touchscreen, a track-pad, a trackball, isopoint and/or a voice recognition system.
One or more output devices 1024 are also connected to the interface circuit 1020 of the illustrated example. The output devices 1024 can be implemented, for example, by display devices (e.g., a light emitting diode (LED), an organic light emitting diode (OLED), a liquid crystal display, a cathode ray tube display (CRT), a touchscreen, a tactile output device, a printer and/or speakers). The interface circuit 1020 of the illustrated example, thus, typically includes a graphics driver card, a graphics driver chip or a graphics driver processor.
The interface circuit 1020 of the illustrated example also includes a communication device such as a transmitter, a receiver, a transceiver, a modem and/or network interface card to facilitate exchange of data with external machines (e.g., computing devices of any kind) via a network 1026 (e.g., an Ethernet connection, a digital subscriber line (DSL), a telephone line, coaxial cable, a cellular telephone system, etc.).
The processor platform 1000 of the illustrated example also includes one or more mass storage devices 1028 for storing software and/or data. Examples of such mass storage devices 1028 include flash devices, floppy disk drives, hard drive disks, optical compact disk (CD) drives, optical Blu-ray disk drives, RAID systems, and optical digital versatile disk (DVD) drives.
Coded instructions 1032 representative of the example machine readable instructions of
In certain examples, the processor 1012 can be used to implement the virtual appliance 320 (and vAs 322-324) and the component server 330 (and servers 332-336) and their components including the service provisioner 410, orchestrator 420, event broker 430, authentication provider 440, proxy 450, management endpoint 340, management agent 350, communication interface 510, agent control processor 520, data storage 530, etc.
From the foregoing, it will be appreciated that the above disclosed methods, apparatus and articles of manufacture facilitate installation of a virtual appliance and associated component servers as an IaaS in a distributed environment such as a cloud computing environment and management of agents in the distributed environment. Examples disclosed herein facilitate self-evaluation and installation of servers and agents without further user intervention or cloud oversight.
As described above, rather than requiring customers to manually install the IaaS on each component server, the installation of each node can be facilitated from a centralized location via a management endpoint and management agents running on each component server. The management agents are registered with the virtual appliance, and further communication between the agent and the appliance is authenticated using a self-signed certificate. The appliance's root credentials are not persisted on the individual component servers. Each instance of the management agent has a node identifier, which uniquely identifies the node in the cluster of machines forming the infrastructure deployment. After registration, the management agent starts polling the virtual appliance in configurable time for commands to be executed. The commands are executed by the server(s), and the result(s) is/are reported back to the virtual appliance and can be used for further processing.
Certain examples provide an apparatus. The example apparatus includes a first virtual appliance including a management endpoint, the first virtual appliance to organize tasks to be executed to install a computing infrastructure. The example apparatus includes a first component server to execute tasks, the component server including a management agent to communicate with the management endpoint to receive a task to be executed to install the computing infrastructure, the first virtual appliance to associate a role with the first component server and to determine whether the first component server satisfies a prerequisite associated with the role, the first virtual appliance to facilitate addressing an error when the first component server is determined not to satisfy the prerequisite.
In certain examples, the first virtual appliance of the example apparatus is to facilitate addressing the error by at least one of a) automatically fixing the error such that the first component server satisfies the prerequisite or b) facilitating data entry to resolve the error.
In certain examples, the first virtual appliance of the example apparatus is to validate the first component server to confirm resolution of the error.
In certain examples, the first virtual appliance of the example apparatus is to capture a snapshot as a recovery point for installation of the computing infrastructure.
In certain examples, the first virtual appliance of the example apparatus is to facilitate installation of a service on the first component server by deploying the task to the first component server.
In certain examples, the management agent of the first component server of the example apparatus is to poll the management endpoint of the first virtual appliance to request the task.
In certain examples, the first virtual appliance of the example apparatus is to evaluate a dependency associated with the task and evaluate whether an identified dependency is satisfied or unsatisfied, and wherein the first virtual appliance is to deploy the task to the first component server when no unsatisfied dependency is found and is to hold the task when an unsatisfied dependency is found.
Certain examples provide a method. The example method includes deploying, by executing an instruction with a processor, a first virtual appliance, the first virtual appliance including a management endpoint, the first virtual appliance to organize tasks to be executed to install a computing infrastructure. The example method includes installing, by executing an instruction with the processor, a first component server to execute tasks, the component server including a management agent to communicate with the management endpoint. The example method includes associating, by executing an instruction with the processor, the first virtual appliance with a role. The example method includes determining, by executing an instruction with the processor, whether the first component server satisfies a prerequisite associated with the role. The example method includes facilitating, by executing an instruction with the processor, addressing of an error by the first virtual appliance when the first component server is determined not to satisfy the prerequisite.
In certain examples, facilitating addressing of the error includes facilitating addressing of the error by at least one of a) automatically fixing the error such that the first component server satisfies the prerequisite or b) facilitating data entry to resolve the error.
In certain examples, the method further includes validating, by executing an instruction with the processor, the first component server to confirm resolution of the error.
In certain examples, the method further includes capturing, by executing an instruction with the processor, a snapshot as a recovery point for installation of the computing infrastructure.
In certain examples, the method further includes facilitating, by executing an instruction with the processor, installation of a service on the first component server by deploying the task to the first component server.
In certain examples, the method further includes polling, by executing an instruction with the processor, of the management endpoint of the first virtual appliance by the management agent of the first component server to request the task.
In certain examples, the method further includes evaluating, by executing an instruction with the processor, a dependency associated with the task; evaluating, by executing an instruction with the processor, whether an identified dependency is satisfied or unsatisfied; deploying, by executing an instruction with the processor, the task to the first component server when no unsatisfied dependency is found; and holding, by executing an instruction with the processor, the task when an unsatisfied dependency is found.
Certain examples provide a computer readable storage medium including instructions that, when executed, cause a machine to at least: deploy a first virtual appliance, the first virtual appliance including a management endpoint, the first virtual appliance to organize tasks to be executed to install a computing infrastructure; install a first component server to execute tasks, the component server including a management agent to communicate with the management endpoint; associate the first virtual appliance with a role; determine whether the first component server satisfies a prerequisite associated with the role; and facilitate addressing of an error by the first virtual appliance when the first component server is determined not to satisfy the prerequisite.
In certain examples, the instructions, when executed, cause the machine to facilitate addressing of the error including facilitating addressing of the error by at least one of a) automatically fixing the error such that the first component server satisfies the prerequisite or b) facilitating data entry to resolve the error.
In certain examples, the instructions, when executed, further cause the machine to validate the first component server to confirm resolution of the error.
In certain examples, the instructions, when executed, further cause the machine to facilitate installation of a service on the first component server by deploying the task to the first component server.
In certain examples, the instructions, when executed, further cause the machine to facilitate polling of the management endpoint of the first virtual appliance by the management agent of the first component server to request the task.
In certain examples, the instructions, when executed, further cause the machine to: evaluate a dependency associated with the task; evaluate whether an identified dependency is satisfied or unsatisfied; deploy the task to the first component server when no unsatisfied dependency is found; and hold the task when an unsatisfied dependency is found.
Although certain example methods, apparatus and articles of manufacture have been disclosed herein, the scope of coverage of this patent is not limited thereto. On the contrary, this patent covers all methods, apparatus and articles of manufacture fairly falling within the scope of the claims of this patent.