Policy framework user interface

• US 10,198,467 B2
• Filed: 08/17/2015
• Issued: 02/05/2019
• Est. Priority Date: 07/31/2015
• Status: Active Grant

• Current Assignee: Vmware LLC (Broadcom, Inc.)
• Original Assignee: VMware, Inc. (Broadcom, Inc.)
• Inventors: Burk, Gregory T., Coote, Lachlan T., Yankov, Yanislav, Dumesny, Alain
• Primary Examiner(s): Keller, Michael A
• Assistant Examiner(s): Duong, Thao D
• Application Number:
  US14/828,441
• Publication Number:
  US 20170034075A1
• Time in Patent Office: 1,268 Days
• CPC Class Codes: G06F 15/161 Computing infrastructure, e.g. computer clusters, blade chassis or hardware partitioning casings, cabinets, racks or drawers for data centers H05K5/00
• CPC Class Codes: G06F 16/2365 Ensuring data consistency and integrity
• CPC Class Codes: G06F 16/285 Clustering or classification
• CPC Class Codes: H04L 41/08 Configuration management of networks or network elements address allocation H04L61/50
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/20 Network management software packages
• CPC Class Codes: H04L 47/20 Traffic policing
• CPC Class Codes: H04L 47/762 triggered by the network
• CPC Class Codes: H04L 47/827 Aggregation of resource allocation or reservation requests

Abstract

Some embodiments provide, for a policy framework that manages application of a plurality of policies to a plurality of resources in a computing environment, a method for providing a user interface. The method displays a first display area for viewing and editing policies imported by the policy framework from a first several heterogeneous sources. The method displays a second display area for viewing and editing information regarding computing resources imported by the policy framework from a second several heterogeneous sources. The method displays a third display area for viewing and editing binding rules for binding the policies to the computing resources.

Claims

1. For a policy framework that manages application of a plurality of policies to a plurality of resources in a computing environment, a method for providing a user interface, the method comprising:

displaying a first display area for viewing and editing a policy imported by the policy framework from a first plurality of heterogeneous sources of a virtual machine computing environment;

extracting policy information from the policy;

storing a wrapper with the policy to form a primitive policy, the wrapper identifying a policy rule identified in the policy information, the wrapper utilizing a first language different than a second language utilized by the policy;

displaying a second display area for viewing and editing information regarding a computing resource imported by the policy framework from a second plurality of heterogeneous sources;

displaying a third display area for viewing and editing a binding rule for binding the policy to the computing resource;

associating the primitive policy with the computing resource based on the binding rule;

generating a first composite policy for the resource, wherein the first composite policy includes a first reference identifying the primitive policy; and

transmitting a plurality of policies referenced within the first composite policy, including the primitive policy and the wrapper, to a policy engine of the virtual machine computing environment, the policy engine to apply the primitive policy by reading the wrapper using the first language without reading the primitive policy using the second language.

2. The method of claim 1, wherein the first display area is displayed when a first selectable item is selected, the second display area is displayed when a second selectable item is selected, and the third display area is displayed when a third selectable item is selected.

3. The method of claim 2, wherein the first display area displays a list of imported policies and composite policies generated from imported policies, each of the policies in the list selectable to display additional information about a selected policy.

4. The method of claim 3, wherein the first display area further displays (i) an editable set of binding rules that bind the selected policy to resources and (ii) a set of computing resources to which the selected policy is bound.

5. The method of claim 3 further comprising:

with the first display area displayed, receiving a selection to edit one of the policies in the list; and

in response to the selection, displaying a fourth display area for editing the selected policy.

6. The method of claim 5, wherein the selected policy is a composite policy and the fourth display area provides tools for adding and removing component policies from the composite policy.

7. The method of claim 5, wherein the fourth display area provides tools to edit content of the primitive policy.

8. The method of claim 5, wherein the second display area displays a list of resources for which information is imported into the policy framework, each of the resources in the list selectable to display additional information about a selected resource.

9. The method of claim 8, wherein the second display area further displays (i) an editable set of categories to which the selected resource belongs and (ii) a set of policies that are bound to the selected resource.

10. The method of claim 1, wherein the third display area displays a list of binding rules that are selectable for editing.

11. The method of claim 10 further comprising:

with the third display area displayed, receiving a selection to edit one of the binding rules in the list; and

in response to the selection, displaying a fourth display area for editing the selected binding rule.

12. The method of claim 11, wherein the fourth display area provides tools for (i) adding and removing policies bound by the binding rule and (ii) adding and removing categories of resources to which the policies are bound by the binding rule.

13. A non-transitory machine readable medium comprising a program which when executed causes a machine to at least:

display a first display area for viewing and editing a policy imported by a policy framework from a first plurality of heterogeneous sources of a virtual machine computing environment;

extract policy information from the policy;

store a wrapper with the policy to form a primitive policy, the wrapper identifying a policy rule identified in the policy information, the wrapper utilizing a first language different than a second language utilized by the policy;

display a second display area for viewing and editing information regarding a computing

resource imported by the policy framework from a second plurality of heterogeneous sources;

display a third display area for viewing and editing a bindings rule for binding the policy to the computing resource

associate the primitive policy with the computing resource based on the binding rule;

generate a first composite policy for the resource, wherein the first composite policy includes a first reference identifying the primitive policy; and

transmit a plurality of policies referenced within the first composite policy, including the primitive policy and the wrapper, to a policy engine of the virtual machine computing environment, the policy engine to apply the primitive policy by reading the wrapper using the first language without reading the primitive policy using the second language.

14. The non-transitory machine readable medium of claim 13, wherein the first display area is displayed when a first selectable item is selected, the second display area is displayed when a second selectable item is selected, and the third display area is displayed when a third selectable item is selected.

15. The non-transitory machine readable medium of claim 13, wherein the first display area displays (i) a list of the imported policies and composite policies generated from the imported policies, each of the policies in the list selectable to display additional information about a selected policy, (ii) an editable set of binding rules that bind a selected policy to resources, and (iii) a set of computing resources to which the selected policy is bound.

16. The non-transitory machine readable medium of claim 15, wherein the program, when executed, cause the machine to display a fourth display area for editing a selected policy, the fourth display area displayed when a selection to edit one of the policies in the list is received.

17. The non-transitory machine readable medium of claim 16, wherein when the selected policy is a composite policy, the fourth display area provides tools for adding and removing component policies from the composite policy.

18. The non-transitory machine readable medium of claim 16, wherein when the selected policy is a primitive policy, the fourth display area provides tools to edit content of the primitive policy.

19. The non-transitory machine readable medium of claim 13, wherein the second display area displays (i) a list of resources for which information is imported into the policy framework, each of the resources in the list selectable to display additional information about a selected resource, (ii) an editable set of categories to which a selected resource belongs and (iii) a set of policies that are bound to the selected resource.

20. The non-transitory machine readable medium of claim 13, wherein the third display area displays a list of binding rules that are selectable for editing.

21. The non-transitory machine readable medium of claim 20, wherein the program, when executed, cause the machine to display a fourth display area for editing a selected binding rule, the fourth display area displayed when a selection to edit one of the binding rules in the list is received, wherein the fourth display area provides tools for (i) adding and removing policies bound by the binding rule and (ii) adding and removing categories of resources to which the policies are bound by the binding rule.