Self-service server change management

• US 10,447,757 B2
• Filed: 08/20/2015
• Issued: 10/15/2019
• Est. Priority Date: 08/20/2015
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Adam, Constantin M., Guo, Shang Q., Peterson, Brian L., Rofrano, John J., Wu, Frederick Y., Zeng, Sai
• Primary Examiner(s): Won, Michael
• Application Number:
  US14/831,051
• Publication Number:
  US 20170054598A1
• Time in Patent Office: 1,517 Days
• Field of Search: 709202, 709219, 709221, 709224, 709225, 709246
• CPC Class Codes: H04L 41/08 Configuration management of networks or network elements address allocation H04L61/50
• CPC Class Codes: H04L 41/5054 Automatic deployment of services triggered by the service manager, e.g. service implementation by automatic configuration of network components
• CPC Class Codes: H04L 67/00 Network arrangements or protocols for supporting network services or applications user-to-user messaging H04L51/00; network arrangements, protocols or services for supporting real-time applications in data packet communications networks H04L65/00
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1023 based on a hash applied to IP addresses or costs

Abstract

A method is provided to eliminate many of the manual steps in a server change management process, creating a self-service experience for a change requester. The method may automatically retrieve the current state of a server; constrain the requested change to a valid, feasible specification; verify that the requested change is compliant with business policies; implement the changes automatically; and develop a knowledge base of automated change risk that is used to modify the change management business process by identifying safe changes that can be performed outside of change windows and/or during change freezes. The method can be applied to changes to physical servers, virtual servers, and servers in a cloud environment.

Claims

1. A method for performing server change management, the method comprising:

receiving, by computer software running on computer hardware, a change request made by a requester, the requester having an identity corresponding to an authorization, with respect to server changes, to only request changes for a set of endpoints associated with an application, the set of endpoints being within an enterprise system having managed endpoints;

identifying, by the computer software running on the computer hardware, certain endpoints of the set of endpoints, the certain endpoints being available to the requester according to the authorization for making the requested change;

retrieving, by the computer software running on the computer hardware, a list of endpoints including the certain endpoints;

receiving, by the computer software running on the computer hardware, a selection by the requester of a first endpoint from the list of endpoints, the first endpoint being an endpoint on which the change request will be performed;

identifying, by the computer software running on the computer hardware, from within a set of possible change types, a subset of change types that may be performed on the first endpoint based on a governing policy;

receiving, by the computer software running on the computer hardware, a selection by the requester of a first change type from the subset of change types;

retrieving, by the computer software running on the computer hardware, a set of resource attributes of the first endpoint based on the first change type, the set of resource attributes being the names and characteristics of the first endpoint;

determining, by the computer software running on the computer hardware, a set of change parameters for the set of resource attributes, the set of change parameters being adjustable values associated with the set of resource attributes;

identifying, by the computer software running on the computer hardware, change window requirements for the first change type based on the set of change parameters;

evaluating, by the computer software running on the computer hardware, compliance of the set of change parameters with a set of business policies;

determining, by the computer software running on the computer hardware, that the first change type is a safe change capable of being performed outside of a change window;

executing, by the computer software running on the computer hardware, the change request on the first endpoint without regard for the change window; and

returning to the requester, by the computer software running on the computer hardware, an execution result of the change request.

2. The method of claim 1, further comprising:

routing, by the computer software running on the computer hardware, the change request to a change approver for approving the change request.

3. The method of claim 1, further comprising:

sequencing, by the computer software running on the computer hardware, the change request for execution in compliance with a change freeze period.

4. The method of claim 1, further comprising:

determining, by the computer software running on the computer hardware, that a set of manual execution steps is required to execute the requested change according to the first change type and the set of change parameters for the set of resource attributes;

routing, by the computer software running on the computer hardware, the change request to a change executor for performing the set of manual execution steps;

responsive to completion of the set of manual execution steps, determining a set of actions to be executed to complete the change request; and

executing the set of actions.

5. The method of claim 1, further comprising:

determining, by the computer software running on the computer hardware, that a hypervisor operation is required to execute the change request when a scope of the change request applies to more than just the first endpoint within the computer system; and

sending a set of instructions to a hypervisor for the hypervisor operation.

6. The method of claim 1, further comprising:

updating, by the computer software running on the computer hardware, configuration information of the first endpoint upon completion of executing the change request on the first endpoint; and

storing, by the computer software running on the computer hardware, an updated configuration information of the first endpoint.

7. The method of claim 1, further comprising:

coordinating, by the computer software running on the computer hardware, an execution process of a plurality of change requests during the scheduled change windows.

8. A computer program product for performing server change management, the computer program product comprising a non-transitory computer readable storage medium having stored thereon:

first program instructions programmed to receive a change request made by a requester, the requester having an identity corresponding to an authorization, with respect to server changes, to only request changes for a set of endpoints associated with an application, the set of endpoints being within an enterprise system having managed endpoints;

second program instructions programmed to identify, by the computer software running on the computer hardware, certain endpoints of the set of endpoints, the certain endpoints being available to the requester according to the authorization for making the requested change;

third program instructions programmed to retrieve a list of endpoints including the certain endpoints;

fourth program instructions programmed to receive a selection by the requester of a first endpoint from the list of endpoints, the first endpoint being an endpoint on which the change request will be performed;

fifth program instructions programmed to identify from within a set of possible change types, a subset of change types that may be performed on the first endpoint based on a governing policy;

sixth program instructions programmed to receive a selection by the requester of a first change type from the subset of change types;

seventh program instructions programmed to retrieve a set of resource attributes of the first endpoint based on the first change type, the set of resource attributes being the names and characteristics of the first endpoint;

eighth program instructions programmed to determine a set of change parameters for the set of resource attributes, the set of change parameters being adjustable values associated with the set of resource attributes;

ninth program instructions programmed to identify change window requirements for the first change type based on the set of change parameters;

tenth program instructions programmed to evaluate compliance of the set of change parameters with a set of business policies;

eleventh program instructions programmed to determine that the first change type is a safe change capable of being performed outside of a change window;

twelfth program instructions programmed to execute the change request on the first endpoint without regard for the change window; and

thirteenth program instructions programmed to return to the requester an execution result of the change request.

9. The computer program product of claim 8, further comprising:

fourteenth program instructions programmed to route the change request to a change approver for approving the change request.

10. The computer program product of claim 8, further comprising:

fourteenth program instructions programmed to sequence the change request for execution in compliance with a change freeze period.

11. The computer program product of claim 8, further comprising:

fourteenth program instructions programmed to determine that a set of manual execution steps is required to execute the requested change according to the first change type and the set of change parameters for the set of resource attributes;

fifteenth program instructions programmed to route the change request to a change executor for performing the set of manual execution steps;

sixteenth program instructions programmed to, responsive to completion of the set of manual execution steps, determine a set of actions to be executed to complete the change request; and

seventeenth program instructions programmed to execute the set of actions.

12. The computer program product of claim 8, further comprising:

fourteenth program instructions programmed to determine that a hypervisor operation is required to execute the change request when a scope of the change request applies to more than just the first endpoint within the computer system; and

fifteenth program instructions programmed to send a set of instructions to a hypervisor for the hypervisor operation.

13. The computer program product of claim 8, further comprising:

fourteenth program instructions programmed to update configuration information of the first endpoint upon completion of executing the change request on the first endpoint; and

fifteenth program instructions programmed to store an updated configuration information of the first endpoint.

14. The computer program product of claim 8, further comprising:

fourteenth program instructions programmed to coordinate an execution process of a plurality of change requests during the scheduled change windows.

15. A computer system for performing server change management, the computer system comprising:

a processor(s) set; and

a computer readable storage medium;

wherein;

the processor set is structured, located, connected and/or programmed to run program instructions stored on the computer readable storage medium; and

the program instructions include;

first program instructions programmed to receive a change request made by a requester, the requester having an identity corresponding to an authorization, with respect to server changes, to only request changes for a set of endpoints associated with an application, the set of endpoints being within an enterprise system having managed endpoints;

second program instructions programmed to identify, by the computer software running on the computer hardware, certain endpoints of the set of endpoints, the certain endpoints being available to the requester according to the authorization for making the requested change;

third program instructions programmed to retrieve a list of endpoints including the certain endpoints;

fourth program instructions programmed to receive a selection by the requester of a first endpoint from the list of endpoints, the first endpoint being an endpoint on which the change request will be performed;

fifth program instructions programmed to identify from within a set of possible change types, a subset of change types that may be performed on the first endpoint based on a governing policy;

sixth program instructions programmed to receive a selection by the requester of a first change type from the subset of change types;

seventh program instructions programmed to retrieve a set of resource attributes of the first endpoint based on the first change type, the set of resource attributes being the names and characteristics of the first endpoint;

eighth program instructions programmed to determine a set of change parameters for the set of resource attributes, the set of change parameters being adjustable values associated with the set of resource attributes;

ninth program instructions programmed to identify change window requirements for the first change type based on the set of change parameters;

tenth program instructions programmed to evaluate compliance of the set of change parameters with a set of business policies;

eleventh program instructions programmed to determine that the first change type is a safe change capable of being performed outside of a change window;

twelfth program instructions programmed to execute the change request on the first endpoint without regard for the change window; and

thirteenth program instructions programmed to return to the requester an execution result of the change request.

16. The computer system of claim 15, further comprising:

fourteenth program instructions programmed to route the change request to a change approver for approving the change request.

17. The computer system of claim 15, further comprising:

fourteenth program instructions programmed to sequence the change request for execution in compliance with a change freeze period.

18. The computer system of claim 15, further comprising:

fourteenth program instructions programmed to determine that a set of manual execution steps is required to execute the requested change according to the first change type and the set of change parameters for the set of resource attributes;

fifteenth program instructions programmed to route the change request to a change executor for performing the set of manual execution steps;

sixteenth program instructions programmed to, responsive to completion of the set of manual execution steps, determine a set of actions to be executed to complete the change request; and

seventeenth program instructions programmed to execute the set of actions.

19. The computer system of claim 15, further comprising:

fourteenth program instructions programmed to determine that a hypervisor operation is required to execute the change request when a scope of the change request applies to more than just the first endpoint within the computer system; and

fifteenth program instructions programmed to send a set of instructions to a hypervisor for the hypervisor operation.

20. The computer system of claim 15, further comprising:

fourteenth program instructions programmed to update configuration information of the first endpoint upon completion of executing the change request on the first endpoint; and

fifteenth program instructions programmed to store an updated configuration information of the first endpoint.