System and method for a workload management and scheduling module to manage access to a compute environment according to local and non-local user identity information
First Claim
Patent Images
1. A method for managing a compute environment, comprising:
- periodically exporting locally-obtained identity information to an identity manager of a first compute environment as new identity information is discovered by a management module of the first compute environment;
in the event that workload needs to be transferred from the first compute environment to a second environment, allowing a management module of the second compute environment to access the identity information maintained by the identity manager of the first compute environment to ensure that user constraints are maintained for the workload when consuming resources of the second compute environment;
periodically importing identity information from the identity manager of the first compute environment into the management module that schedules workload that consumes resources in the first compute environment, wherein the identity information comprises exported local utilization of resources and credentials associated with at least one of users, groups of users, accounts, projects, classes, queues, and qualities of service;
resolving a conflict between exported identity information and local configuration information to yield a resolution, wherein the local configuration information comprises information on arrangement of computers and computer types in the first compute environment, and resolving the conflict comprises determining a priority between the exported identity information and the local configuration information of the first compute environment by applying precedent rules that determine whether the exported identity information or the local configuration information has precedence; and
modifying a behavior of the management module of the first compute environment to incorporate the identity information such that a scheduling decision associated with a location of resources in the first compute environment is based at least in part on the exported identity information and the resolution.
4 Assignments
0 Petitions
Accused Products
Abstract
A system, method and computer-readable media for managing a compute environment are disclosed. The method includes importing identity information from an identity manager into a module performs workload management and scheduling for a compute environment and, unless a conflict exists, modifying the behavior of the workload management and scheduling module to incorporate the imported identity information such that access to and use of the compute environment occurs according to the imported identity information. The compute environment may be a cluster or a grid wherein multiple compute environments communicate with multiple identity managers.
95 Citations
17 Claims
-
1. A method for managing a compute environment, comprising:
-
periodically exporting locally-obtained identity information to an identity manager of a first compute environment as new identity information is discovered by a management module of the first compute environment; in the event that workload needs to be transferred from the first compute environment to a second environment, allowing a management module of the second compute environment to access the identity information maintained by the identity manager of the first compute environment to ensure that user constraints are maintained for the workload when consuming resources of the second compute environment; periodically importing identity information from the identity manager of the first compute environment into the management module that schedules workload that consumes resources in the first compute environment, wherein the identity information comprises exported local utilization of resources and credentials associated with at least one of users, groups of users, accounts, projects, classes, queues, and qualities of service; resolving a conflict between exported identity information and local configuration information to yield a resolution, wherein the local configuration information comprises information on arrangement of computers and computer types in the first compute environment, and resolving the conflict comprises determining a priority between the exported identity information and the local configuration information of the first compute environment by applying precedent rules that determine whether the exported identity information or the local configuration information has precedence; and modifying a behavior of the management module of the first compute environment to incorporate the identity information such that a scheduling decision associated with a location of resources in the first compute environment is based at least in part on the exported identity information and the resolution. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15)
-
-
16. A system for managing a compute environment, the system comprising:
-
a processor; and a non-transitory computer-readable storage medium storing instructions, which, when executed by the processor, cause the processor to perform operations comprising; periodically exporting locally-obtained identity information to an identity manager of a first compute environment as new identity information is discovered by a management module of the first compute environment; in the event that workload needs to be transferred from the first compute environment to a second environment, allowing a management module of the second compute environment to access the identity information maintained by the identity manager of the first compute environment to ensure that user constraints are maintained for the workload when consuming resources of the second compute environment; periodically importing identity information from the identity manager of the first compute environment into the management module that schedules workload that consumes resources in the first compute environment, wherein the identity information comprises exported local utilization of resources and credentials associated with at least one of users, groups of users, accounts, projects, classes, queues, and qualities of service; resolving a conflict between exported identity information and local configuration information to yield a resolution, wherein the local configuration information comprises information on arrangement of computers and computer types in the first compute environment, and resolving the conflict comprises determining a priority between the exported identity information and the local configuration information of the first compute environment by applying precedent rules that determine whether the exported identity information or the local configuration information has precedence; and modifying a behavior of the management module of the first compute environment to incorporate the identity information such that a scheduling decision associated with a location of resources in the first compute environment is based at least in part on the exported identity information and the resolution.
-
-
17. A non-transitory computer-readable storage device storing instructions for managing a compute environment, which, when executed by a processor, cause the processor to perform operations comprising:
-
periodically exporting locally-obtained identity information to an identity manager of a first compute environment as new identity information is discovered by a management module of the first compute environment; in the event that workload needs to be transferred from the first compute environment to a second environment, allowing a management module of the second compute environment to access the identity information maintained by the identity manager of the first compute environment to ensure that user constraints are maintained for the workload when consuming resources of the second compute environment; periodically importing identity information from the identity manager of the first compute environment into the management module that schedules workload that consumes resources in the first compute environment, wherein the identity information comprises exported local utilization of resources and credentials associated with at least one of users, groups of users, accounts, projects, classes, queues, and qualities of service; resolving a conflict between exported identity information and local configuration information to yield a resolution, wherein the local configuration information comprises information on arrangement of computers and computer types in the first compute environment, and resolving the conflict comprises determining a priority between the exported identity information and the local configuration information of the first compute environment by applying precedent rules that determine whether the exported identity information or the local configuration information has precedence; and modifying a behavior of the management module of the first compute environment to incorporate the identity information such that a scheduling decision associated with a location of resources in the first compute environment is based at least in part on the exported identity information and the resolution.
-
Specification