Automatic parameter value generation

Patent metadata

Field	Value
Publication number	US-10740477-B2
Application number	US-201916356773-A
Country	US
Kind code	B2
Filing date	Mar 18, 2019
Priority date	Aug 23, 2016
Publication date	Aug 11, 2020
Grant date	Aug 11, 2020

Abstract

Automatic parameter value generation is disclosed. It is determined that a parameter value generation trigger associated with a parameter has occurred. A parameter value in accordance with a format of the parameter value is obtained. At least one location associated with a first component to which the parameter value is to be communicated is determined. The parameter value is communicated to the at least one location, and a parameter value refresh policy associated with the first component is determined.

First claim

What is claimed is:

1. A method, comprising:
maintaining, by a computing device comprising a processor device, configuration information comprising a plurality of parameter records, each parameter record identifying a set of components and a parameter format that identifies a format of a parameter value to be generated for the set of components, each set of components comprising at least one component;
selecting a particular parameter record for a first component associated with the particular parameter record;
obtaining a parameter value in accordance with the format of the parameter value associated with the particular parameter record;
based on the particular parameter record, determining a parameter value refresh policy associated with the first component; and
wherein the parameter value refresh policy indicates that the first component is to be restarted, and causing the first component to restart.

2. The method of claim 1 wherein the parameter value refresh policy indicates that the first component and a second component are to be restarted, and further comprising
causing the second component to restart.

3. The method of claim 1 further comprising:
communicating the parameter value to a location associated with the first component.

4. The method of claim 3 further comprising determining the location associated with the first component to which the parameter value is to be communicated by accessing the particular parameter record to determine the location.

5. The method of claim 3 wherein the location comprises a location of a file in which the parameter value is stored.

6. The method of claim 1 further comprising:
accessing a timestamp that identifies a time of a previous generation of a previous parameter value for the first component;
determining that a predetermined period of time has lapsed since the time identified by the timestamp; and
wherein selecting the particular parameter record for the first component associated with the particular parameter record further comprises:
selecting the particular parameter record for the first component associated with the particular parameter record in response to determining that the predetermined period of time has lapsed since the time identified by the timestamp.

7. The method of claim 1 wherein the particular parameter record identifies the first component and a second component, and wherein the particular parameter record comprises a first location identifier that identifies a location associated with the first component and a second location identifier that identifies a location associated with the second component.

8. The method of claim 1 wherein the parameter value comprises a certificate, and the format of the parameter value comprises a certificate format.

9. The method of claim 1 wherein obtaining the parameter value in accordance with the format of the parameter value comprises generating the parameter value in accordance with the format of the parameter value.

10. The method of claim 1 wherein obtaining the parameter value in accordance with the format of the parameter value comprises:
requesting the parameter value from a parameter value generating component; and
receiving the parameter value.

11. A computing device, comprising:
a memory; and
a processor device coupled to the memory to:
maintain configuration information comprising a plurality of parameter records, each parameter record identifying a set of components and a parameter format that identifies a format of a parameter value to be generated for the set of components, each set of components comprising at least one component;
select a particular parameter record for a first component associated with the particular parameter record;
obtain a parameter value in accordance with the format of the parameter value associated with the particular parameter record;
based on the particular parameter record, determine a parameter value refresh policy associated with the first component; and
wherein the parameter value refresh policy indicates that the first component is to be restarted, and cause the first component to restart.

12. The computing device of claim 11 wherein the parameter value refresh policy indicates that the first component and a second component are to be restarted, and wherein the processor device is further to
cause the second component to restart.

13. A non-transitory computer program product stored on a non-transitory computer-readable storage medium and including instructions configured to cause a processor device to:
maintain configuration information comprising a plurality of parameter records, each parameter record identifying a set of components and a parameter format that identifies a format of a parameter value to be generated for the set of components, each set of components comprising at least one component;
select a particular parameter record for a first component associated with the particular parameter record;
obtain a parameter value in accordance with the format of the parameter value associated with the particular parameter record;
based on the particular parameter record, determine a parameter value refresh policy associated with the first component; and
wherein the parameter value refresh policy indicates that the first component is to be restarted, and cause the first component to restart.

14. The method of claim 1 wherein the first component comprises a process configured to execute on a computing device.

Assignees

• Red Hat Inc

Inventors

• Mcpherson Daniel
• Parees Benjamin M
• Coleman Clayton P

Classifications

• G06F21/604 Primary

  Tools and structures for managing or administering access control systems · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title

• G06F21/45

  Structures or tools for the administration of authentication · CPC title