{"id":56218,"date":"2020-02-07T00:00:00","date_gmt":"2020-02-06T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/dark-launch-v-istio-sekretnye-sluzhby"},"modified":"2020-02-18T14:04:26","modified_gmt":"2020-02-18T11:04:26","slug":"dark-launch-v-istio-sekretnye-sluzhby","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/dark-launch-v-istio-sekretnye-sluzhby","title":{"rendered":"Dark Launch v Istio: tajn\u00e9 slu\u017eby","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u201eNebezpe\u010d\u00ed je moje druh\u00e9 jm\u00e9no,\u201c \u0159\u00edkal Austin Powers, mu\u017e s mezin\u00e1rodn\u00edm tajemstv\u00edm. To, co je vysoce cen\u011bno superagenty a tajn\u00fdmi slu\u017ebami, se v\u0161ak pro po\u010d\u00edta\u010dov\u00e9 slu\u017eby v\u016fbec nehod\u00ed, kde je nuda mnohem lep\u0161\u00ed ne\u017e nebezpe\u010d\u00ed. <\/p>\n

\"Dark
\n
\nA Istio spolu s OpenShift a Kubernetes m\u011bn\u00ed nasazen\u00ed mikroslu\u017eeb na skute\u010dn\u011b nudn\u00fd a p\u0159edv\u00eddateln\u00fd proces \u2013 a to je skv\u011bl\u00e9. O tom a mnoh\u00e9m dal\u0161\u00edm si pov\u00edme ve \u010dtvrt\u00e9m a posledn\u00edm p\u0159\u00edsp\u011bvku ze s\u00e9rie o Istio.
\n<\/a><\/noindex><\/p>\n

Kdy\u017e je nuda to prav\u00e9<\/h3>\n

\nV na\u0161em p\u0159\u00edpad\u011b se nuda objevuje pouze v kone\u010dn\u00e9 f\u00e1zi, kdy zb\u00fdv\u00e1 jen sed\u011bt a sledovat proces. Ale k tomu je pot\u0159eba v\u0161echno p\u0159edem nastavit, a zde v\u00e1s \u010dek\u00e1 hodn\u011b zaj\u00edmav\u00e9ho.<\/p>\n

P\u0159i nasazen\u00ed nov\u00e9 verze va\u0161eho softwaru byste m\u011bli zv\u00e1\u017eit v\u0161echny mo\u017enosti minimalizace rizik. Pr\u00e1ce v paraleln\u00edm re\u017eimu je velmi efektivn\u00ed a osv\u011bd\u010den\u00fd zp\u016fsob testov\u00e1n\u00ed, a Istio umo\u017e\u0148uje zapojit pro tento \u00fa\u010del \u201etajnou slu\u017ebu\u201c (skrytou verzi va\u0161eho mikroservisu bez z\u00e1sahu do fungov\u00e1n\u00ed produk\u010dn\u00edho syst\u00e9mu). K tomu existuje dokonce speci\u00e1ln\u00ed term\u00edn \u2013 \u201eTajn\u00e9 spu\u0161t\u011bn\u00ed\u201c (Dark Launch), kter\u00e9 se aktivuje funkc\u00ed s nem\u00e9n\u011b \u0161pehovsk\u00fdm n\u00e1zvem \u201ezrcadlen\u00ed provozu\u201c.<\/p>\n

V\u0161imn\u011bte si, \u017ee v prvn\u00ed v\u011bt\u011b p\u0159edchoz\u00edho odstavce se pou\u017e\u00edv\u00e1 term\u00edn \u201enasazen\u00ed\u201c (deploy), a ne \u201espu\u0161t\u011bn\u00ed\u201c (release). Opravu byste m\u011bli m\u00edt mo\u017enost nasazovat \u2013 a samoz\u0159ejm\u011b pou\u017e\u00edvat \u2013 sv\u016fj mikroslu\u017ebu tak \u010dasto, jak budete cht\u00edt. Tento slu\u017eba by m\u011bla b\u00fdt schopna p\u0159ij\u00edmat a zpracov\u00e1vat provoz, vystavovat v\u00fdsledky a tak\u00e9 zapisovat do log\u016f a monitorovat. Ale sama o sob\u011b nemus\u00ed b\u00fdt tato slu\u017eba nutn\u011b uvoln\u011bna do produkce. Nasazen\u00ed a uvoln\u011bn\u00ed softwaru nejsou v\u017edy tot\u00e9\u017e. Nasazen\u00ed m\u016f\u017eete prov\u00e1d\u011bt v\u017edy, kdy\u017e chcete, ale uvoln\u011bn\u00ed \u2013 jen tehdy, kdy\u017e budete zcela p\u0159ipraveni.<\/p>\n

Organizace nudy je zaj\u00edmav\u00e1<\/h3>\n

\nPod\u00edvejte se na n\u00e1sleduj\u00edc\u00ed pravidlo sm\u011brov\u00e1n\u00ed Istio, kter\u00e9 sm\u011bruje v\u0161echny HTTP po\u017eadavky na mikroslu\u017ebu recommendation v1 (v\u0161echny p\u0159\u00edklady jsou z Istio Tutorial GitHub repo<\/a><\/noindex>), z\u00e1rove\u0148 je zrcadl\u00ed na mikroslu\u017ebu recommendation v2:<\/p>\n

\"Dark
\nV\u0161imn\u011bte si zna\u010dky mirror:<\/code> na spodn\u00ed \u010d\u00e1sti obrazovky \u2013 pr\u00e1v\u011b ona ur\u010duje zrcadlen\u00ed provozu. Ano, tak jednodu\u0161e!<\/p>\n

V\u00fdsledkem tohoto pravidla bude to, \u017ee v\u00e1\u0161 produk\u010dn\u00ed syst\u00e9m (v1) nad\u00e1le zpracov\u00e1v\u00e1 p\u0159\u00edchoz\u00ed dotazy, ale tyto dotazy budou asynchronn\u011b zrcadleny na v2, co\u017e znamen\u00e1, \u017ee tam budou odes\u00edl\u00e1ny jejich pln\u00e9 duplik\u00e1ty. T\u00edmto zp\u016fsobem budete moci testovat v\u00fdkon v2 v re\u00e1ln\u00fdch podm\u00ednk\u00e1ch \u2013 na skute\u010dn\u00fdch datech a provozu \u2013 ani\u017e byste zasahovali do \u010dinnosti produk\u010dn\u00edho syst\u00e9mu. P\u0159ev\u00e1d\u00ed to testovac\u00ed organizaci na nudnou \u010dinnost? Ano, bezpochyby. Ale d\u011bl\u00e1 se to zaj\u00edmav\u011b.<\/p>\n

P\u0159id\u00e1me dramati\u010dno<\/h3>\n

\nV\u0161imn\u011bte si, \u017ee v k\u00f3du v2 je t\u0159eba zohlednit situace, kdy p\u0159\u00edchoz\u00ed dotazy mohou v\u00e9st k zm\u011bn\u011b dat. Samotn\u00e9 dotazy se zrcadl\u00ed snadno a pr\u016fhledn\u011b, ale zp\u016fsob zpracov\u00e1n\u00ed v testovac\u00ed verzi je na v\u00e1s \u2013 a to u\u017e je trochu vzru\u0161uj\u00edc\u00ed.<\/p>\n

Opakujme d\u016fle\u017eit\u00fd bod <\/h3>\n

\nTajn\u00fd start se zrcadlen\u00edm provozu (Dark Launch\/Request Mirroring) lze prov\u00e1d\u011bt, ani\u017e by to jakkoli ovlivnilo k\u00f3d.<\/p>\n

Podn\u011bt k zamy\u0161len\u00ed<\/h3>\n

\nA co kdy\u017e m\u00edsto zrcadlen\u00ed dotaz\u016f pos\u00edlat \u010d\u00e1st z nich nikoli na v1, ale na v2? Nap\u0159\u00edklad jedno procento v\u0161ech dotaz\u016f nebo pouze dotazy od ur\u010dit\u00e9 skupiny u\u017eivatel\u016f. A pak, p\u0159i pohledu na to, jak funguje v2, postupn\u011b p\u0159ev\u00e9st na novou verzi v\u0161echny dotazy. Nebo naopak vr\u00e1tit v\u0161e na v1, pokud n\u011bco nep\u016fjde u v2 podle pl\u00e1nu. Zd\u00e1 se, \u017ee se tomu \u0159\u00edk\u00e1 Canary Deployment (\u201ekan\u00e1rov\u00e9 nasazen\u00ed\u201c \u2013 term\u00edn vych\u00e1z\u00ed z dolov\u00e1n\u00ed<\/a><\/noindex>, a pokud by m\u011bl rusk\u00fd p\u016fvod, pravd\u011bpodobn\u011b by obsahoval odkaz na ko\u010dky<\/a><\/noindex>), a nyn\u00ed se na to pod\u00edv\u00e1me podrobn\u011bji.<\/p>\n

Canary Deployment v Istio: usnad\u0148ujeme uveden\u00ed do provozu<\/h2>\n

<\/p>\n

Ostro a postupn\u011b<\/h3>\n

\nPodstata modelu Canary Deployment je velmi jednoduch\u00e1: p\u0159i spu\u0161t\u011bn\u00ed nov\u00e9 verze va\u0161eho softwaru (v na\u0161em p\u0159\u00edpad\u011b \u2013 mikroslu\u017eby) nejprve umo\u017en\u00edte p\u0159\u00edstup mal\u00e9 skupin\u011b u\u017eivatel\u016f. Pokud v\u0161e prob\u00edh\u00e1 norm\u00e1ln\u011b, postupn\u011b tuto skupinu zvy\u0161ujete, dokud nov\u00e1 verze neza\u010dne m\u00edt probl\u00e9my, nebo \u2013 pokud se tak nikdy nestane \u2013 nakonec p\u0159ejdete na tuto verzi v\u0161echny u\u017eivatele. P\u0159em\u00fd\u0161liv\u011b a postupn\u011b zav\u00e1d\u011bjte novou verzi a kontrolovan\u011b p\u0159ep\u00ednejte u\u017eivatele na ni, abyste minimalizovali rizika a maximalizovali zp\u011btnou vazbu.<\/p>\n

Samoz\u0159ejm\u011b, Istio usnad\u0148uje Canary Deployment, nebo\u0165 nab\u00edz\u00ed hned n\u011bkolik v\u00fdborn\u00fdch mo\u017enost\u00ed pro inteligentn\u00ed sm\u011brov\u00e1n\u00ed po\u017eadavk\u016f. A ano, to v\u0161e lze prov\u00e9st, ani\u017e byste se dotkli va\u0161eho zdrojov\u00e9ho k\u00f3du.<\/p>\n

Filtrujeme prohl\u00ed\u017ee\u010d<\/h3>\n

\nJedn\u00edm z nejjednodu\u0161\u0161\u00edch krit\u00e9ri\u00ed pro sm\u011brov\u00e1n\u00ed je p\u0159esm\u011brov\u00e1n\u00ed na z\u00e1klad\u011b prohl\u00ed\u017ee\u010de. P\u0159edstavte si, \u017ee chcete, aby na v2 odch\u00e1zely pouze po\u017eadavky z prohl\u00ed\u017ee\u010de Safari. Takhle to ud\u011bl\u00e1te:<\/p>\n

\"Dark
\nAplikujeme toto pravidlo sm\u011brov\u00e1n\u00ed a pak p\u0159\u00edkazem curl<\/code> budeme v cyklu simulovat skute\u010dn\u00e9 po\u017eadavky na mikroslu\u017ebu. Jak je vid\u011bt na obr\u00e1zku, v\u0161echny odch\u00e1zej\u00ed na v1:<\/p>\n

\"Dark
\nA kde je provoz na v2? Proto\u017ee v na\u0161em p\u0159\u00edkladu ve\u0161ker\u00e9 po\u017eadavky poch\u00e1zely pouze z na\u0161\u00ed p\u0159\u00edkazov\u00e9 \u0159\u00e1dky, \u017e\u00e1dn\u00fd tam prost\u011b nen\u00ed. Ale v\u011bnujte pozornost doln\u00edm \u0159\u00e1dk\u016fm na obr\u00e1zku naho\u0159e: to je reakce na to, \u017ee jsme provedli po\u017eadavek z prohl\u00ed\u017ee\u010de Safari, kter\u00fd vyk\u00e1zal toto:<\/p>\n

\"Dark<\/p>\n

Neomezen\u00e1 moc<\/h3>\n

\nU\u017e jsme psali, \u017ee regul\u00e1rn\u00ed v\u00fdrazy nab\u00edzej\u00ed velmi siln\u00e9 mo\u017enosti pro sm\u011brov\u00e1n\u00ed po\u017eadavk\u016f. Pod\u00edvejte se na n\u00e1sleduj\u00edc\u00ed p\u0159\u00edklad (domn\u00edv\u00e1me se, \u017ee ch\u00e1pete, co d\u011bl\u00e1):<\/p>\n

\"Dark
\nTe\u010f u\u017e si pravd\u011bpodobn\u011b dovedete p\u0159edstavit, na co v\u0161echno jsou regul\u00e1rn\u00ed v\u00fdrazy schopn\u00e9.<\/p>\n

P\u016fsobit chyt\u0159e<\/h3>\n

\nChytr\u00e9 sm\u011brov\u00e1n\u00ed, zejm\u00e9na zpracov\u00e1n\u00ed z\u00e1hlav\u00ed paket\u016f za pou\u017eit\u00ed regul\u00e1rn\u00edch v\u00fdraz\u016f, v\u00e1m umo\u017e\u0148uje \u0159\u00eddit provoz podle va\u0161ich p\u0159edstav. A to v\u00fdrazn\u011b zjednodu\u0161uje uveden\u00ed nov\u00e9ho k\u00f3du do provozu \u2013 je to jednoduch\u00e9, nevy\u017eaduje to zm\u011bnu samotn\u00e9ho k\u00f3du a v p\u0159\u00edpad\u011b pot\u0159eby lze v\u0161e rychle vr\u00e1tit zp\u011bt.<\/p>\n

Zaujalo v\u00e1s to?<\/h3>\n

\nM\u00e1te chu\u0165 experimentovat s Istio, Kubernetes a OpenShift na sv\u00e9m po\u010d\u00edta\u010di? T\u00fdm Red Hat Developer Team<\/a><\/noindex> p\u0159ipravil skv\u011bl\u00fd u\u010debnice<\/a><\/noindex> na toto t\u00e9ma a zve\u0159ejnil v\u0161echny souvisej\u00edc\u00ed soubory. Tak\u017ee vp\u0159ed, a ni\u010deho se neomezujte.
\n\u2003<\/p>\n

Istio Egress: v\u00fdstup p\u0159es suven\u00fdr<\/h2>\n

\nPou\u017e\u00edv\u00e1n\u00edm Istio spolu s Red Hat OpenShift a Kubernetes si m\u016f\u017eete v\u00fdrazn\u011b usnadnit \u017eivot s mikroslu\u017ebami. Slu\u017eebn\u00ed s\u00ed\u0165 Istio je ukryta uvnit\u0159 pod\u016f Kubernetes, a v\u00e1\u0161 k\u00f3d se prov\u00e1d\u00ed (v\u011bt\u0161inou) isolovan\u011b. V\u00fdkon, snadnost zm\u011bny, trasov\u00e1n\u00ed a dal\u0161\u00ed \u2013 to v\u0161e je snadno pou\u017eiteln\u00e9 pr\u00e1v\u011b d\u00edky vyu\u017eit\u00ed sidecar kontejner\u016f. Ale co d\u011blat, kdy\u017e v\u00e1\u0161 mikroslu\u017eba mus\u00ed komunikovat s jin\u00fdmi slu\u017ebami, kter\u00e9 se nach\u00e1zej\u00ed za hranicemi va\u0161eho syst\u00e9mu OpenShift-Kubernetes?<\/p>\n

Zde p\u0159ich\u00e1z\u00ed na pomoc Istio Egress. Stru\u010dn\u011b \u0159e\u010deno, umo\u017e\u0148uje p\u0159\u00edstup k prost\u0159edk\u016fm (jin\u00fdmi slovy: \u201eslu\u017eb\u00e1m\u201d), kter\u00e9 nejsou sou\u010d\u00e1st\u00ed va\u0161ich pod\u016f Kubernetes. Pokud se neprov\u00e1d\u00ed \u017e\u00e1dn\u00e9 dodate\u010dn\u00e9 nastaven\u00ed, v prost\u0159ed\u00ed Istio Egress je provoz sm\u011brov\u00e1n pouze uvnit\u0159 clusteru pod\u016f a mezi takov\u00fdmi clustry na z\u00e1klad\u011b intern\u00edch IP tabulek. A takov\u00e9 omezen\u00ed funguje skv\u011ble, dokud nepot\u0159ebujete p\u0159\u00edstup k slu\u017eb\u00e1m zven\u010d\u00ed.<\/p>\n

Egress umo\u017e\u0148uje obej\u00edt v\u00fd\u0161e uveden\u00e9 IP tabulky, bu\u010f na z\u00e1klad\u011b pravidel Egress, nebo pro rozsah IP adres.<\/p>\n

P\u0159edstavme si, \u017ee m\u00e1me Java program, kter\u00fd prov\u00e1d\u00ed GET po\u017eadavek na httpbin.org\/headers.<\/p>\n

(httpbin.org je jen pohodln\u00fd prost\u0159edek pro testov\u00e1n\u00ed odchoz\u00edch slu\u017eeb.)<\/p>\n

Pokud zad\u00e1me do p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku curl http:\/\/httpbin.org\/headers<\/code>, uvid\u00edme n\u00e1sleduj\u00edc\u00ed:<\/p>\n

\"Dark
\nNebo lze otev\u0159\u00edt tuto adresu v prohl\u00ed\u017ee\u010di:<\/p>\n

\"Dark
\nJak vid\u00edme, nach\u00e1zej\u00edc\u00ed se slu\u017eba jednodu\u0161e vrac\u00ed p\u0159edan\u00e9 j\u00ed hlavi\u010dky.<\/p>\n

Importujeme bez obalu<\/h3>\n

\nNyn\u00ed vezmeme Java k\u00f3d t\u00e9to extern\u00ed slu\u017eby k na\u0161\u00ed syst\u00e9mu a spust\u00edme ji u sebe, kde, p\u0159ipom\u00edn\u00e1me, b\u011b\u017e\u00ed Istio. (M\u016f\u017eete to ud\u011blat sami, s odkazem na n\u00e1\u0161 tutori\u00e1l o Istio<\/a><\/noindex>.) Po sestaven\u00ed odpov\u00eddaj\u00edc\u00edho obrazu a spu\u0161t\u011bn\u00ed na platform\u011b OpenShift vyvol\u00e1me tuto slu\u017ebu p\u0159\u00edkazem curl egresshttpbin-istioegress.$(minishift ip).nip.io<\/code>, po \u010dem\u017e na obrazovce uvid\u00edme toto:<\/p>\n

\"Dark
\nCo se stalo? P\u0159ed chv\u00edl\u00ed to fungovalo. Co znamen\u00e1 Not Found? V\u017edy\u0165 jsme pro n\u011bj pr\u00e1v\u011b ud\u011blali curl<\/code>.<\/p>\n

Roz\u0161i\u0159ujeme IP tabulky na cel\u00fd internet<\/h3>\n

\nZa to m\u016f\u017ee (nebo m\u00e1 b\u00fdt vd\u011b\u010dn\u00fd) Istio. V\u017edy\u0165 Istio jsou jen sidecar kontejnery, kter\u00e9 odpov\u00eddaj\u00ed za objevov\u00e1n\u00ed a sm\u011brov\u00e1n\u00ed (a za \u0159adu dal\u0161\u00edch v\u011bc\u00ed, o kter\u00fdch jsme mluvili d\u0159\u00edve). Z tohoto d\u016fvodu tabulky IP v\u011bd\u00ed pouze o tom, co se nach\u00e1z\u00ed uvnit\u0159 va\u0161eho clusteru. A httpbin.org se nach\u00e1z\u00ed zven\u010d\u00ed a tud\u00ed\u017e nen\u00ed dostupn\u00fd. A zde p\u0159ich\u00e1z\u00ed Istio Egress \u2013 bez jak\u00fdchkoliv zm\u011bn ve va\u0161em zdrojov\u00e9m k\u00f3du.<\/p>\n

N\u00e1sleduj\u00edc\u00ed pravidlo Egress nut\u00ed Istio hledat (pokud je to nutn\u00e9, tak i po cel\u00e9m internetu) pot\u0159ebnou slu\u017ebu, v tomto p\u0159\u00edpad\u011b httpbin.org. Jak je vid\u011bt z tohoto souboru (egress_httpbin.yml), funk\u010dnost zde je docela jednoduch\u00e1:<\/p>\n

\"Dark
\nSta\u010d\u00ed pouze aplikovat toto pravidlo:<\/p>\n

istioctl create -f egress_httpbin.yml -n istioegress\n<\/code><\/pre>\n
\nPravidla Egress lze zobrazit p\u0159\u00edkazem istioctl get egressrules<\/code>:<\/p>\n
\"Dark
\nA nakonec znovu spou\u0161t\u00edme p\u0159\u00edkaz curl<\/i> \u2013 a vid\u00edme, \u017ee v\u0161e funguje:<\/p>\n
\"Dark<\/p>\n
Mysl\u00edme otev\u0159en\u011b<\/h3>\n
\nJak vid\u00edte, Istio umo\u017e\u0148uje organizovat interakci i s vn\u011bj\u0161\u00edm sv\u011btem. Jin\u00fdmi slovy, m\u016f\u017eete st\u00e1le vytv\u00e1\u0159et slu\u017eby OpenShift a \u0159\u00eddit je p\u0159es Kubernetes, p\u0159i\u010dem\u017e v\u0161e dr\u017e\u00edte v podech, kter\u00e9 se podle pot\u0159eby \u0161k\u00e1luj\u00ed nahoru a dol\u016f. A z\u00e1rove\u0148 m\u016f\u017eete bez obav p\u0159istupovat k extern\u00edm slu\u017eb\u00e1m vzhledem k va\u0161emu prost\u0159ed\u00ed. A ano, je\u0161t\u011b jednou opakujeme, \u017ee to v\u0161e m\u016f\u017eete d\u011blat, ani\u017e byste se dot\u00fdkali sv\u00e9ho k\u00f3du.<\/p>\n
To byl posledn\u00ed p\u0159\u00edsp\u011bvek z s\u00e9rie o Istio. Z\u016fsta\u0148te s n\u00e1mi \u2013 \u010dek\u00e1 v\u00e1s spousta zaj\u00edmav\u00e9ho!
\n
Zdroj: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u00ab\u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u2013 \u043c\u043e\u0435 \u0432\u0442\u043e\u0440\u043e\u0435 \u0438\u043c\u044f\u00bb, \u2013 \u0433\u043e\u0432\u0430\u0440\u0438\u0432\u0430\u043b \u041e\u0441\u0442\u0438\u043d \u041f\u0430\u0443\u044d\u0440\u0441, \u0447\u0435\u043b\u043e\u0432\u0435\u043a-\u0437\u0430\u0433\u0430\u0434\u043a\u0430 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u043e\u0433\u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430. \u041d\u043e \u0442\u043e, \u0447\u0442\u043e \u0432 \u043f\u043e\u0447\u0435\u0442\u0435 \u0443 \u0441\u0443\u043f\u0435\u0440\u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0438 \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431, \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435 \u0433\u043e\u0434\u0438\u0442\u0441\u044f \u0434\u043b\u044f \u0441\u043b\u0443\u0436\u0431 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u0445, \u0433\u0434\u0435 \u0441\u043a\u0443\u043a\u043e\u0442\u0438\u0449\u0430 \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u043b\u0443\u0447\u0448\u0435 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0435\u0439. \u0418 Istio \u0432\u043c\u0435\u0441\u0442\u0435 OpenShift \u0438 Kubernetes \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u044e\u0442 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u043c\u0438\u043a\u0440\u043e\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0432 \u0434\u0435\u043b\u043e \u043f\u043e-\u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0441\u043a\u0443\u0447\u043d\u043e\u0435 \u0438 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u043e\u0435 \u2013 \u0438 \u044d\u0442\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u043e. \u041e\u0431 \u044d\u0442\u043e\u043c \u0438 \u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-56218","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dark Launch v Istio: tajn\u00e9 slu\u017eby | ProHoster","description":"\u201eNebezpe\u010d\u00ed je m\u00e9 druh\u00e9 jm\u00e9no,\u201c \u0159\u00edkal Austin Powers, mu\u017e-z\u00e1hada mezin\u00e1rodn\u00edho m\u011b\u0159\u00edtka.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/dark-launch-v-istio-sekretnye-sluzhby","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Dark Launch \u0432 Istio: \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b | ProHoster","og:description":"\u00ab\u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u2013 \u043c\u043e\u0435 \u0432\u0442\u043e\u0440\u043e\u0435 \u0438\u043c\u044f\u00bb, \u2013 \u0433\u043e\u0432\u0430\u0440\u0438\u0432\u0430\u043b \u041e\u0441\u0442\u0438\u043d \u041f\u0430\u0443\u044d\u0440\u0441, \u0447\u0435\u043b\u043e\u0432\u0435\u043a-\u0437\u0430\u0433\u0430\u0434\u043a\u0430 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u043e\u0433\u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/dark-launch-v-istio-sekretnye-sluzhby","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-06T21:00:00+00:00","article:modified_time":"2020-02-18T11:04:26+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"56218","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:28:24","updated":"2022-10-05 04:55:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/56218","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=56218"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/56218\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=56218"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=56218"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=56218"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}