{"id":38705,"date":"2019-10-31T22:25:24","date_gmt":"2019-10-31T19:25:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/pro-bezopasnye-novnc-konsoli-avtoskejling-v-kubernetes-haproxy-v-ostrovke-i-rabotu-adminov-s-programmistami\/"},"modified":"2019-10-31T22:25:24","modified_gmt":"2019-10-31T19:25:24","slug":"pro-bezopasnye-novnc-konsoli-avtoskejling-v-kubernetes-haproxy-v-ostrovke-i-rabotu-adminov-s-programmistami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/pro-bezopasnye-novnc-konsoli-avtoskejling-v-kubernetes-haproxy-v-ostrovke-i-rabotu-adminov-s-programmistami","title":{"rendered":"O bezpe\u010dn\u00fdch noVNC konzol\u00edch, automatick\u00e9m \u0161k\u00e1lov\u00e1n\u00ed v Kubernetes, Haproxy na \u201eOstrovku\u201c a spolupr\u00e1ci administr\u00e1tor\u016f s program\u00e1tory","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"O
\n
\nSd\u00edl\u00edme videoz\u00e1znamy p\u0159edn\u00e1\u0161ek z Selectel MeetUp: syst\u00e9mov\u00e9 administrativy.<\/p>\n

Kr\u00e1tk\u00e9 pozad\u00ed<\/h2>\n

\nSelectel MeetUp je setk\u00e1n\u00ed s kr\u00e1tk\u00fdmi p\u0159edn\u00e1\u0161kami a \u017eivou komunikac\u00ed. My\u0161lenka akce je jednoduch\u00e1: poslouchat skv\u011bl\u00e9 mluv\u010d\u00ed, komunikovat s kolegy, vym\u011b\u0148ovat si zku\u0161enosti, hovo\u0159it o sv\u00fdch probl\u00e9mech a sly\u0161et, jak je \u0159e\u0161ili ostatn\u00ed. Obecn\u011b se jedn\u00e1 o to, co se naz\u00fdv\u00e1 networking v IT komunit\u011b.<\/p>\n

Za\u010d\u00ednali jsme na mal\u00fdch meetupech o DevOps a vysok\u00e9 dostupnosti v informa\u010dn\u00edch syst\u00e9mech. Na posledn\u00edm byli v\u0161ichni mluv\u010d\u00ed pouze z Selectel, ale na z\u00e1klad\u011b zku\u0161enost\u00ed z DevOps jsme zjistili, \u017ee je t\u0159eba zv\u00e1t zaj\u00edmav\u00e9 lidi z jin\u00fdch spole\u010dnost\u00ed. A n\u00e1zvy by m\u011bly b\u00fdt srozumiteln\u011bj\u0161\u00ed ne\u017e jen po\u0159adov\u00e1 \u010d\u00edsla meetupu. Tak jsme letos ud\u011blali restart akce.<\/p>\n

12. z\u00e1\u0159\u00ed prob\u011bhlo prvn\u00ed setk\u00e1n\u00ed v nov\u00e9m form\u00e1tu. Spolu se mluv\u010d\u00edmi z \u00abVKontakte\u00bb, UseDesk, Studyworld jsme diskutovali o stavu a perspektiv\u00e1ch z\u00e1kaznick\u00e9ho servisu v rusk\u00e9m IT. Na tom jsme se rozhodli nezastavit. <\/p>\n

3. \u0159\u00edjna se v Selectel konal meetup pro syst\u00e9mov\u00e9 administr\u00e1tory. Tentokr\u00e1t jsme pozvali mluv\u010d\u00ed z firem Cogia.de, \u00abOstrovok\u00bb a Digital Vision Labs. Hovo\u0159ili o Kubernetes, legacy k\u00f3dov\u00e1n\u00ed v modern\u00edch syst\u00e9mech a pr\u00e1ci administr\u00e1tor\u016f s jin\u00fdmi odd\u011blen\u00edmi. P\u0159edstavte si - Petrohrad, ve\u010der, d\u00e9\u0161\u0165, a my m\u00e1me plnou konferen\u010dn\u00ed m\u00edstnost administr\u00e1tor\u016f. Jak se tady nem\u016f\u017eete nechat inspirovat? Vadim Isakanov p\u0159ijel na sv\u00e9 vystoupen\u00ed dokonce z \u010celjabinsku.<\/p>\n

Zat\u00edmco p\u0159em\u00fd\u0161l\u00edme o t\u00e9matu dal\u0161\u00edho meetupu, zve\u0159ej\u0148ujeme z\u00e1znamy p\u0159edn\u00e1\u0161ek pod kat.
\n<\/a><\/noindex><\/p>\n

Zku\u0161enosti v oblasti infrastrukturn\u00edch \u0159e\u0161en\u00ed ve 4 p\u0159edn\u00e1\u0161k\u00e1ch<\/h2>\n

<\/p>\n

noVNC konzole pro dedikovan\u00e9 servery, Alexander Nikiforov, Selectel<\/h3>\n

\nNa\u0161\u00edm \u00fakolem bylo poskytnout klient\u016fm vzd\u00e1len\u00fd p\u0159\u00edstup k ovl\u00e1d\u00e1n\u00ed serveru. Tento p\u0159\u00edstup je zalo\u017een na BMC modulu zapnut\u00e9m na z\u00e1kladn\u00ed desce. Ale p\u0159\u00edm\u00fd p\u0159\u00edstup k n\u011bmu p\u0159es ve\u0159ejnou IP adresu nese v\u00e1\u017en\u00e1 bezpe\u010dnostn\u00ed rizika a pokusy o izolaci zt\u011b\u017euj\u00ed pr\u00e1ci ze strany klienta. O cest\u011b, jak tento \u00fakol vy\u0159e\u0161it v Selectel, o tom, jak jsme za\u010d\u00ednali p\u0159ed p\u00e1r lety a co se d\u011bje pod kapotou p\u0159i spu\u0161t\u011bn\u00ed KVM konzole z na\u0161eho \u0159\u00edd\u00edc\u00edho panelu, hovo\u0159il Alexander Nikiforov.<\/p>\n

\r\n \"P\u0159ehr\u00e1t\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Autosk\u00e1lov\u00e1n\u00ed v Kubernetes, Vadim Isakanov, Cogia.de<\/h3>\n

\nJednou z kl\u00ed\u010dov\u00fdch funkc\u00ed Kubernetes je vyu\u017eit\u00ed pouze t\u011bch pot\u0159ebn\u00fdch zdroj\u016f, kdy\u017e si clustery a aplikace sami \u0161k\u00e1luj\u00ed. N\u00e1stroje pro automatick\u00e9 \u0161k\u00e1lov\u00e1n\u00ed v Kubernetes jsou nab\u00edzeny zdarma \"z krabice\". O arzen\u00e1lu t\u011bchto n\u00e1stroj\u016f a sv\u00e9 cest\u011b pr\u00e1ce s Kubernetes vypr\u00e1v\u011bl Vadim Isakanov z Cogia.de.<\/p>\n

\"Zvedn\u011bte ruku, kdo pracuje s Kubernetes. A te\u010f zvedn\u011bte ruku, kdo dob\u0159e zn\u00e1 Kubernetes.\"<\/p>\n

\r\n \"P\u0159ehr\u00e1t\r\n
<\/div>\r\n <\/div><\/center>
\nMimochodem, Vadim napsal o meetupu<\/a><\/noindex> na sv\u00e9 str\u00e1nce na Facebooku. Je tam zpr\u00e1va, slajdy z jeho prezentace a r\u016fzn\u00e9 post\u0159ehy. Vadime, d\u011bkuji!<\/p>\n

P\u0159\u00edb\u011bh bloud\u011bn\u00ed dokumentac\u00ed Haproxy, Denis Bo\u017eok, \u201eOstrovok\u201c<\/h3>\n

\nT\u00fdm Ostrovok.ru \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0440\u044f\u0434\u043a\u0430 130 \u043c\u0438\u043a\u0440\u043e\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432. \u041a\u043e\u0433\u0434\u0430 \u043a\u0442\u043e-\u0442\u043e \u0438\u0449\u0435\u0442 \u043e\u0442\u0435\u043b\u044c \u0432 \u041f\u0438\u0442\u0435\u0440\u0435, \u0437\u0430\u043f\u0440\u043e\u0441 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441 \u0430\u0433\u0440\u0435\u0433\u0430\u0446\u0438\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432, \u0430 \u043f\u043e\u0442\u043e\u043c \u0432 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u043c\u0438\u043a\u0440\u043e\u0441\u0435\u0440\u0432\u0438\u0441 Supplierd, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u043a\u0438\u0434\u044b\u0432\u0430\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u0432\u043d\u0435\u0448\u043d\u0438\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c \u043e\u0442\u0435\u043b\u0435\u0439. \u042d\u0442\u043e \u043e\u043a\u043e\u043b\u043e 450 \u0442\u044b\u0441\u044f\u0447 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u0432 \u043e\u0434\u0438\u043d \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u0438. \u0414\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0432\u043d\u0435\u0448\u043d\u0438\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 Nginx, \u0430 \u0441\u0435\u0439\u0447\u0430\u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 Haproxy. \u041e \u043d\u044e\u0430\u043d\u0441\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u043f\u0440\u0438 \u0442\u0430\u043a\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0435, \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b \u0414\u0435\u043d\u0438\u0441 \u0411\u043e\u0436\u043e\u043a.<\/p>\n

\"Po \u0161kole jsem se u\u010dil na kucha\u0159e, pak jsem vzal \u0161patn\u00e9 recepty, prost\u011b d\u00e1l v\u0161e v mlze, a te\u010f odpov\u00edd\u00e1m za infrastrukturu ve spole\u010dnosti \"Ostrovok\".\"<\/p>\n

\r\n \"P\u0159ehr\u00e1t\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Jak skamar\u00e1dit r\u016fzn\u00e9 t\u00fdmy za 6 t\u00fddn\u016f, Popov Dmitrij, Digital Vision Labs<\/h3>\n

\nV ur\u010dit\u00e9m okam\u017eiku se t\u00fdm Digital Vision Labs setkal s probl\u00e9mem r\u016fstu: podnik byl p\u0159ipraven se zapojit do nov\u00fdch projekt\u016f, ale IT infrastruktura mu nesta\u010dila. Odd\u011blen\u00ed syst\u00e9mov\u00e9ho administrativy neust\u00e1le pracovalo v re\u017eimu krizov\u00e9 situace, hromadily se \u00fakoly, kter\u00e9 nebyly vy\u0159e\u0161eny. Efektivita klesala. O nejasn\u00fdch d\u016fvodech t\u00e9to situace a jak se poda\u0159ilo zlep\u0161it \u0159\u00edzen\u00ed projekt\u016f, vypr\u00e1v\u011bl Dmitrij Popov.<\/p>\n

\"V dob\u011b, kdy jsme si uv\u011bdomili, \u017ee je t\u0159eba n\u011bco zm\u011bnit, bylo p\u0159ibli\u017en\u011b 70 % po\u017eadavk\u016f od projektov\u00fdch mana\u017eer\u016f nespln\u011bno v\u010das. Dal\u0161\u00edch 25 % po\u017eadavk\u016f se ztratilo v syst\u00e9mu. A 100 % \u017e\u00e1dost\u00ed p\u0159i\u0161lo bez TZ. Dnes 27 % \u017e\u00e1dost\u00ed nen\u00ed spln\u011bno v\u010das (m\u00e1me je\u0161t\u011b co zlep\u0161ovat), 0 % \u017e\u00e1dost\u00ed se ztratilo v syst\u00e9mu a 9 % \u017e\u00e1dost\u00ed p\u0159ich\u00e1z\u00ed bez TZ.\"<\/p>\n

\r\n \"P\u0159ehr\u00e1t\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

V\u00fdb\u011br dal\u0161\u00edho t\u00e9matu je na v\u00e1s<\/h2>\n

\nJak se \u0159\u00edk\u00e1, pokud jste za\u010dali budovat IT komunitu, nen\u00ed mo\u017en\u00e9 se zastavit. Prvn\u00ed sez\u00f3na meetup\u016f je testovac\u00ed, budeme se v\u011bnovat r\u016fzn\u00fdm t\u00e9mat\u016fm a p\u0159\u00edstup\u016fm. Zat\u00edm nen\u00ed t\u00e9ma dal\u0161\u00edho meetupu ur\u010deno, bylo by skv\u011bl\u00e9, kdybyste navrhli t\u00e9mata pro setk\u00e1n\u00ed v koment\u00e1\u0159\u00edch a napsali, koho chcete vid\u011bt jako speakera. A my zorganizujeme dal\u0161\u00ed meetup na z\u00e1klad\u011b va\u0161ich zp\u011btn\u00fdch vazeb.<\/p>\n

Z nejbli\u017e\u0161\u00edch ud\u00e1lost\u00ed se 24. \u0159\u00edjna uskute\u010dn\u00ed na\u0161e ka\u017edoro\u010dn\u00ed konference Selectel Networking Academy. Z\u00e1stupci Extreme Networks, Juniper, Huawei, Arista Networks a Selectel vystoup\u00ed s prezentacemi o s\u00ed\u0165ov\u00fdch produktech a p\u0159\u00edpadech jejich pou\u017eit\u00ed.<\/p>\n

Zde jsou 3 d\u016fvody, pro\u010d by v\u00e1s konference mohla zaj\u00edmat:<\/p>\n