System level update protection based on VM priority in a multi-tenant cloud environment

• US 10,169,069 B2
• Filed: 04/06/2017
• Issued: 01/01/2019
• Est. Priority Date: 04/06/2017
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Jain, Chethan, H R, Manjunatha, Ward, Maria R.
• Primary Examiner(s): Kim, Dong U
• Application Number:
  US15/481,339
• Publication Number:
  US 20180293093A1
• Time in Patent Office: 635 Days
• CPC Class Codes: G06F 2009/4557 Distribution of virtual machine instances; Migration and load balancing
• CPC Class Codes: G06F 2009/45575 Starting, stopping, suspending or resuming virtual machine instances
• CPC Class Codes: G06F 2009/45579 I/O management, e.g. providing access to device drivers or storage
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: H04L 67/62 Establishing a time schedule for servicing the requests

Abstract

Embodiments include systems, methods, and computer program products to perform an operation for managing system activities in a cloud computing environment. The operation generally includes determining a type of system activity to perform on one or more servers in the cloud computing environment. The operation also includes identifying a set of locking parameters available for restricting system activity on the one or more servers. Each locking parameter corresponds to a different type of system activity. The operation further includes determining whether to perform the type of system activity based on a value of a locking parameter of the set of locking parameters associated with the type of system activity.

Claims

1. A computer-implemented method for managing system activities in a cloud computing environment, comprising:

determining a type of system activity to perform on one or more servers in the cloud computing environment;

identifying a set of locking parameters at a plurality of hierarchal levels of the cloud computing environment available for restricting system activity on the one or more servers, wherein each locking parameter corresponds to a different type of system activity and is associated with a particular hierarchal level of the plurality of hierarchal levels;

determining whether to perform the type of system activity based on a value of a locking parameter of the set of locking parameters that is associated with the type of system activity, the particular hierarchal level of the plurality of hierarchal levels associated with the locking parameter of the set of locking parameters, and a priority associated with the type of system activity; and

performing the type of system activity after determining to perform the type of system activity.

2. The computer-implemented method of claim 1, wherein the value of the locking parameter is set by a virtual machine (VM) hosted on one of the one or more servers.

3. The computer-implemented method of claim 2, wherein the VM expects the type of system activity to affect at least one of resources used by the VM, performance of the VM, and one or more workloads of the VM.

4. The computer-implemented method of claim 2, wherein performing the type of system activity comprises, upon determining that the value of the locking parameter indicates a request from the VM to refrain from performing the type of system activity:

postponing the type of system activity for a period of time;

or

refraining from performing the type of system activity while the value of the locking parameter indicates the request to refrain from performing the type of system activity.

5. The computer-implemented method of claim 2, wherein performing the type of system activity comprises, upon determining that the value of the locking parameter indicates a request from the VM to refrain from performing the type of system activity:

overriding the value of the locking parameter; and

performing the type of system activity after overriding the value of the locking parameter.

6. The computer-implemented method of claim 2, wherein performing the type of system activity comprises performing the type of system activity upon determining that the value of the locking parameter does not indicate a request from the VM to refrain performing the type of system activity.

7. The computer-implemented method of claim 1, wherein the value of the locking parameter is set by at least one administrator of the one or more servers in the cloud computing environment.

8. The computer-implemented method of claim 7, wherein performing the type of system activity comprises, upon determining that the value of the locking parameter indicates a request from the at least one administrator to refrain from performing the type of system activity, refraining from performing the type of system activity while the value of the locking parameter indicates the request to refrain performing the type of system activity.

9. The computer-implemented method of claim 1, wherein the type of system activity is determined from a plurality of system activities, and wherein the plurality of system activities comprise at least one of a firmware update, resource optimization procedure, virtual machine (VM) migration, restart of the one or more servers, and shutdown of the one or more servers.

10. A system, comprising:

a processor; and

a memory storing one or more instructions which, when executed by the processor, perform an operation for managing system activities in a cloud computing environment, the operation comprising;

determining a type of system activity to perform on one or more servers in the cloud computing environment;

identifying a set of locking parameters at a plurality of hierarchal levels of the cloud computing environment available for restricting system activity on the one or more servers, wherein each locking parameter corresponds to a different type of system activity and is associated with a particular hierarchal level of the plurality of hierarchal levels;

determining whether to perform the type of system activity based on a value of a locking parameter of the set of locking parameters that is associated with the type of system activity, the particular hierarchal level of the plurality of hierarchal levels associated with the locking parameter of the set of locking parameters, and a priority associated with the type of system activity; and

performing the type of system activity after determining to perform the type of system activity.

11. The system of claim 10, wherein the value of the locking parameter is set by a virtual machine (VM) hosted on one of the one or more servers.

12. The system of claim 11, wherein performing the type of system activity comprises, upon determining that the value of the locking parameter indicates a request from the VM to refrain from performing the type of system activity:

postponing the type of system activity for a period of time;

or

refraining from performing the type of system activity while the value of the locking parameter indicates the request to refrain from performing the type of system activity.

13. The system of claim 11, wherein performing the type of system activity comprises, upon determining that the value of the locking parameter indicates a request from the VM to refrain from performing the type of system activity:

overriding the value of the locking parameter; and

performing the type of system activity after overriding the value of the locking parameter.

14. The system of claim 11, wherein the VM expects the type of system activity to affect at least one of resources used by the VM, performance of the VM, and one or more workloads of the VM.

15. The system of claim 10, wherein performing the type of system activity comprises, upon determining that the value of the locking parameter indicates a request, from at least one administrator of the one or more servers in the cloud computing environment, to refrain from performing the type of system activity, refraining from performing the type of system activity while the value of the locking parameter indicates the request to refrain performing the type of system activity.

16. A computer program product, comprising:

a computer-readable storage medium having computer-readable program code embodied therewith, the computer-readable program code executable by one or more computer processors to perform an operation for managing system activities in a cloud computing environment, the operation comprising;

determining a type of system activity to perform on one or more servers in the cloud computing environment;

identifying a set of locking parameters at a plurality of hierarchal levels of the cloud computing environment available for restricting system activity on the one or more servers, wherein each locking parameter corresponds to a different type of system activity and is associated with a particular hierarchal level of the plurality of hierarchal levels;

determining whether to perform the type of system activity based on a value of a locking parameter of the set of locking parameters that is associated with the type of system activity, the particular hierarchal level of the plurality of hierarchal levels associated with the locking parameter of the set of locking parameters, and a priority associated with the type of system activity; and

performing the type of system activity after determining to perform the type of system activity.

17. The computer program product of claim 16, wherein the value of the locking parameter is set by a virtual machine (VM) hosted on one of the one or more servers, and wherein the VM expects the type of system activity to affect at least one of resources used by the VM, performance of the VM, and one or more workloads of the VM.

18. The computer program product of claim 17, wherein performing the type of system activity comprises, upon determining that the value of the locking parameter indicates a request from the VM to refrain from performing the type of system activity:

postponing the type of system activity for a period of time;

or

refraining from performing the type of system activity while the value of the locking parameter indicates the request to refrain from performing the type of system activity.

19. The computer program product of claim 17, wherein performing the type of system activity comprises, upon determining that the value of the locking parameter indicates a request from the VM to refrain from performing the type of system activity:

overriding the value of the locking parameter; and

performing the type of system activity after overriding the value of the locking parameter.

20. The computer program product of claim 16, wherein performing the type of system activity comprises upon determining that the value of the locking parameter indicates a request, from at least one administrator of the one or more servers in the cloud computing environment, to refrain from performing the type of system activity, refraining from performing the type of system activity while the value of the locking parameter indicates the request to refrain performing the type of system activity.