{"id":78373,"date":"2020-04-19T01:42:20","date_gmt":"2020-04-18T23:42:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/luchshie-praktiki-i-rekomendaczii-dlya-zapuska-kontejnerov-i-kubernetes-v-proizvodstvennyh-sredah"},"modified":"2020-04-19T01:42:20","modified_gmt":"2020-04-18T23:42:20","slug":"luchshie-praktiki-i-rekomendaczii-dlya-zapuska-kontejnerov-i-kubernetes-v-proizvodstvennyh-sredah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/luchshie-praktiki-i-rekomendaczii-dlya-zapuska-kontejnerov-i-kubernetes-v-proizvodstvennyh-sredah","title":{"rendered":"Nejlep\u0161\u00ed postupy a doporu\u010den\u00ed pro spu\u0161t\u011bn\u00ed kontejner\u016f a Kubernetes v produk\u010dn\u00edch prost\u0159ed\u00edch","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Nejlep\u0161\u00ed postupy a doporu\u010den\u00ed pro spu\u0161t\u011bn\u00ed kontejner\u016f a Kubernetes v produk\u010dn\u00edch prost\u0159ed\u00edch\" src=\"\/wp-content\/uploads\/2020\/04\/f12a1ccc7a5f2c54857661067d995ab9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nEkosyst\u00e9m technologi\u00ed kontejnerizace se rychle vyv\u00edj\u00ed a m\u011bn\u00ed, a proto v t\u00e9to oblasti chyb\u00ed dobr\u00e9 pracovn\u00ed postupy. Nicm\u00e9n\u011b Kubernetes a kontejnery se st\u00e1le \u010dast\u011bji pou\u017e\u00edvaj\u00ed \u2014 jak pro modernizaci star\u00fdch aplikac\u00ed, tak pro v\u00fdvoj modern\u00edch cloudov\u00fdch aplikac\u00ed.\u00a0<\/p>\n<p>T\u00fdm <noindex><a rel=\"nofollow\" href=\"https:\/\/mcs.mail.ru\/containers\/\">Kubernetes aaS od Mail.ru<\/a><\/noindex> shrom\u00e1\u017edil p\u0159edpov\u011bdi, rady a nejlep\u0161\u00ed postupy pro l\u00eddry trhu od Gartneru, 451 Research, StacxRo\u0445 a dal\u0161\u00edch. Ty umo\u017en\u00ed zajistit a urychlit nasazen\u00ed kontejner\u016f v produk\u010dn\u00edch prost\u0159ed\u00edch.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Jak zjistit, zda je va\u0161e firma p\u0159ipravena nasazovat kontejnery v produk\u010dn\u00edm prost\u0159ed\u00ed<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.gartner.com\/en\/documents\/3902966\/best-practices-for-running-containers-and-kubernetes-in-\">Podle Gartneru<\/a><\/noindex>, v roce 2022 v\u00edce ne\u017e 75 % organizac\u00ed bude pou\u017e\u00edvat kontejnerizovan\u00e9 aplikace v produkci. To je v\u00fdrazn\u011b v\u00edce ne\u017e v sou\u010dasnosti, kdy tyto aplikace pou\u017e\u00edv\u00e1 m\u00e9n\u011b ne\u017e 30 % firem.\u00a0<\/p>\n<p>Podle <noindex><a rel=\"nofollow\" href=\"https:\/\/451research.com\/\">451 Research<\/a><\/noindex>, p\u0159edpokl\u00e1dan\u00fd trh pro pou\u017eit\u00ed kontejnerov\u00fdch technologi\u00ed v roce 2022 dos\u00e1hne 4,3 miliardy USD. To je v\u00edce ne\u017e dvojn\u00e1sobek p\u0159edpov\u011bd\u00ed z roku 2019, tempo r\u016fstu trhu \u010din\u00ed 30 %.<\/p>\n<p>V <noindex><a rel=\"nofollow\" href=\"https:\/\/portworx.com\/wp-content\/uploads\/2019\/05\/2019-container-adoption-survey.pdf\">pr\u016fzkumu Portworx a Aqua Security<\/a><\/noindex> 87 % respondent\u016f uvedlo, \u017ee v sou\u010dasnosti pou\u017e\u00edvaj\u00ed kontejnerov\u00e9 technologie. Pro srovn\u00e1n\u00ed \u2014 v roce 2017 to bylo 55 % respondent\u016f.\u00a0<\/p>\n<p>Navzdory rostouc\u00edmu z\u00e1jmu a n\u00e1r\u016fstu zav\u00e1d\u011bn\u00ed kontejner\u016f vy\u017eaduje jejich uveden\u00ed do produkce \u0161kolen\u00ed kv\u016fli technologick\u00e9 nezralosti a nedostatku know-how. Organizace by m\u011bly realisticky posoudit obchodn\u00ed procesy, kter\u00e9 vy\u017eaduj\u00ed kontejnerizaci aplikac\u00ed. IT l\u00edd\u0159i by m\u011bli zv\u00e1\u017eit, zda maj\u00ed pot\u0159ebn\u00e9 dovednosti k postupu vp\u0159ed s ohledem na pot\u0159ebu rychl\u00e9ho \u0161kolen\u00ed.\u00a0<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.gartner.com\/en\/documents\/3902966\/best-practices-for-running-containers-and-kubernetes-in-\">Odborn\u00edci Gartner<\/a><\/noindex> se domn\u00edvaj\u00ed, \u017ee ot\u00e1zky na n\u00ed\u017ee uveden\u00e9m obr\u00e1zku pomohou pochopit, zda jste p\u0159ipraveni k nasazen\u00ed kontejner\u016f v produkci:<\/p>\n<p><img decoding=\"async\" alt=\"Nejlep\u0161\u00ed postupy a doporu\u010den\u00ed pro spu\u0161t\u011bn\u00ed kontejner\u016f a Kubernetes v produk\u010dn\u00edch prost\u0159ed\u00edch\" src=\"\/wp-content\/uploads\/2020\/04\/88131f4fc6ef0e318b92c730152c334c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h2>Nej\u010dast\u011bj\u0161\u00ed chyby p\u0159i pou\u017e\u00edv\u00e1n\u00ed kontejner\u016f v produkci<\/h2>\n<p>\nOrganizace \u010dasto podce\u0148uj\u00ed \u00fasil\u00ed pot\u0159ebn\u00e9 k provozu kontejner\u016f v produkci. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.gartner.com\/en\/documents\/3902966\/best-practices-for-running-containers-and-kubernetes-in-\">Gartner zjistil<\/a><\/noindex> n\u011bkolik b\u011b\u017en\u00fdch chyb ve sc\u00e9n\u00e1\u0159\u00edch klient\u016f p\u0159i pou\u017e\u00edv\u00e1n\u00ed kontejner\u016f v produk\u010dn\u00edch prost\u0159ed\u00edch:<\/p>\n<p><img decoding=\"async\" alt=\"Nejlep\u0161\u00ed postupy a doporu\u010den\u00ed pro spu\u0161t\u011bn\u00ed kontejner\u016f a Kubernetes v produk\u010dn\u00edch prost\u0159ed\u00edch\" src=\"\/wp-content\/uploads\/2020\/04\/81600b7b2a5e58a25b1271dfe37db142.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h2>Jak zajistit bezpe\u010dnost kontejner\u016f<\/h2>\n<p>\nBezpe\u010dnost nelze \u0159e\u0161it \"potom\". Mus\u00ed b\u00fdt integrov\u00e1na do procesu DevOps, proto vznikl dokonce speci\u00e1ln\u00ed term\u00edn \u2014 DevSecOps. Organizace mus\u00ed pl\u00e1novat <noindex><a rel=\"nofollow\" href=\"https:\/\/mcs.mail.ru\/blog\/na-puti-v-oblako-2-0-pjat-kljuchevyh-tendencij-dlja-bezopasnosti-kontejnerov\">ochranu kontejnerov\u00e9ho prost\u0159ed\u00ed<\/a><\/noindex> b\u011bhem cel\u00e9ho \u017eivotn\u00edho cyklu v\u00fdvoje, kter\u00fd zahrnuje procesy kompilace a v\u00fdvoje, nasazen\u00ed a spu\u0161t\u011bn\u00ed aplikace.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.gartner.com\/en\/documents\/3902966\/best-practices-for-running-containers-and-kubernetes-in-\">Doporu\u010den\u00ed od spole\u010dnosti Gartner<\/a><\/noindex>:\u00a0<\/p>\n<ol>\n<li>Integrujte proces skenov\u00e1n\u00ed obraz\u016f aplikac\u00ed pro vyhled\u00e1v\u00e1n\u00ed zranitelnost\u00ed do kontinu\u00e1ln\u00edho integra\u010dn\u00edho \/ kontinu\u00e1ln\u00edho dod\u00e1vac\u00edho (CI\/CD) procesu. Aplikace jsou skenov\u00e1ny b\u011bhem f\u00e1z\u00ed kompilace a spu\u0161t\u011bn\u00ed softwaru. Zd\u016frazn\u011bte pot\u0159ebu skenov\u00e1n\u00ed a identifikace komponent open source, knihoven a framework\u016f. Pou\u017e\u00edv\u00e1n\u00ed zastaral\u00fdch zraniteln\u00fdch verz\u00ed od vyvoj\u00e1\u0159\u016f je jedn\u00edm z hlavn\u00edch d\u016fvod\u016f zranitelnost\u00ed kontejner\u016f.<\/li>\n<li>Zlep\u0161ujte konfiguraci pomoc\u00ed test\u016f Center for Internet Security (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.cisecurity.org\/\">CIS<\/a><\/noindex>), kter\u00e9 jsou dostupn\u00e9 jak pro Docker, tak pro Kubernetes.<\/li>\n<li>Nezapome\u0148te aplikovat kontrolu p\u0159\u00edstupu, zajist\u011bte odd\u011blen\u00ed povinnost\u00ed a implementujte politiku spr\u00e1vy tajemstv\u00ed. D\u016fv\u011brn\u00e9 informace, jako jsou kl\u00ed\u010de Secure Sockets Layer (SSL) nebo datab\u00e1zov\u00e9 p\u0159ihla\u0161ovac\u00ed \u00fadaje, jsou \u0161ifrov\u00e1ny orchestrace nebo extern\u00edmi kontroln\u00edmi slu\u017ebami a poskytov\u00e1ny v dob\u011b b\u011bhu.<\/li>\n<li>Vyvarujte se kontejner\u016fm s vy\u0161\u0161\u00edmi opr\u00e1vn\u011bn\u00edmi pomoc\u00ed spr\u00e1vy bezpe\u010dnostn\u00edch politik, co\u017e sn\u00ed\u017e\u00ed potenci\u00e1ln\u00ed rizika napaden\u00ed.<\/li>\n<li>Pou\u017e\u00edvejte bezpe\u010dnostn\u00ed n\u00e1stroje, kter\u00e9 poskytuj\u00ed whitelisty, behavior\u00e1ln\u00ed monitorov\u00e1n\u00ed a detekci anom\u00e1li\u00ed k prevenci zlovoln\u00fdch \u010dinnost\u00ed.<\/li>\n<\/ol>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.stackrox.com\/post\/2019\/07\/kubernetes-security-101\/\">Doporu\u010den\u00ed od spole\u010dnosti StacxRox<\/a><\/noindex>:<\/p>\n<ol>\n<li>Vyu\u017eijte integrovan\u00e9 funkce Kubernetes. Nastavte p\u0159\u00edstup pro u\u017eivatele pomoc\u00ed rol\u00ed. Ujist\u011bte se, \u017ee neposkytujete zbyte\u010dn\u00e1 opr\u00e1vn\u011bn\u00ed jednotliv\u00fdm subjekt\u016fm, i kdy\u017e m\u016f\u017ee trvat n\u011bjak\u00fd \u010das, ne\u017e promysl\u00edte minim\u00e1ln\u011b pot\u0159ebn\u00e1 opr\u00e1vn\u011bn\u00ed. M\u016f\u017ee se zd\u00e1t l\u00e1kav\u00e9 d\u00e1t administr\u00e1torovi clustera \u0161irok\u00e1 opr\u00e1vn\u011bn\u00ed, proto\u017ee to \u0161et\u0159\u00ed \u010das v po\u010d\u00e1te\u010dn\u00edm st\u00e1diu. Jak\u00e9koli kompromisy nebo chyby v \u00fa\u010dtech mohou m\u00edt v budoucnu katastrof\u00e1ln\u00ed n\u00e1sledky.\u00a0<\/li>\n<li>Vyvarujte se duplicitn\u00edch p\u0159\u00edstupov\u00fdch opr\u00e1vn\u011bn\u00ed. N\u011bkdy m\u016f\u017ee b\u00fdt u\u017eite\u010dn\u00e9 m\u00edt r\u016fzn\u00e9 role se vz\u00e1jemn\u011b p\u0159ekr\u00fdvaj\u00edc\u00edmi se opr\u00e1vn\u011bn\u00edmi, ale to m\u016f\u017ee v\u00e9st k probl\u00e9m\u016fm s provozem a tak\u00e9 vytvo\u0159it \"mrtv\u00e9 z\u00f3ny\" p\u0159i odstra\u0148ov\u00e1n\u00ed opr\u00e1vn\u011bn\u00ed. Krom\u011b toho je d\u016fle\u017eit\u00e9 odstra\u0148ovat nevyu\u017e\u00edvan\u00e9 a neaktivn\u00ed role.<\/li>\n<li>Nastavte s\u00ed\u0165ov\u00e9 politiky: izolujte moduly pro omezen\u00ed p\u0159\u00edstupu; jasn\u011b povolte p\u0159\u00edstup k internetu t\u011bm modul\u016fm, kter\u00e9 to pot\u0159ebuj\u00ed, pomoc\u00ed \u0161t\u00edtk\u016f; jasn\u011b povolte komunikaci mezi t\u011bmi moduly, kter\u00e9 si mus\u00ed vz\u00e1jemn\u011b komunikovat.\u00a0<\/li>\n<\/ol>\n<p><\/p>\n<h2>Jak organizovat monitorov\u00e1n\u00ed kontejner\u016f a slu\u017eeb v nich<\/h2>\n<p>\nBezpe\u010dnost a monitorov\u00e1n\u00ed \u2014 <noindex><a rel=\"nofollow\" href=\"https:\/\/mcs.mail.ru\/blog\/vyvody-o-kubernetes-chto-volnuet-kompanii-pri-vnedrenii\">hlavn\u00ed probl\u00e9my firem<\/a><\/noindex> p\u0159i nasazov\u00e1n\u00ed cluster\u016f Kubernetes. V\u00fdvoj\u00e1\u0159i se v\u017edy v\u00edce zam\u011b\u0159uj\u00ed na funkce aplikac\u00ed, kter\u00e9 vytv\u00e1\u0159ej\u00ed, ne\u017e na aspekty <noindex><a rel=\"nofollow\" href=\"https:\/\/mcs.mail.ru\/blog\/kubernetes-monitoring-instruments\">monitorov\u00e1n\u00ed t\u011bchto aplikac\u00ed.<\/a><\/noindex>.\u00a0<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.gartner.com\/en\/documents\/3902966\/best-practices-for-running-containers-and-kubernetes-in-\">Doporu\u010den\u00ed od spole\u010dnosti Gartner<\/a><\/noindex>:<\/p>\n<ol>\n<li>Sna\u017ete se monitorovat stav kontejner\u016f nebo slu\u017eeb v nich spole\u010dn\u011b s monitorov\u00e1n\u00edm hostitelsk\u00fdch syst\u00e9m\u016f.<\/li>\n<li>Dejte p\u0159ednost v\u00fdrobc\u016fm a n\u00e1stroj\u016fm s hlubokou integrac\u00ed do orchestrace kontejner\u016f, zejm\u00e9na Kubernetes.<\/li>\n<li>Vyberte n\u00e1stroje, kter\u00e9 poskytuj\u00ed detailn\u00ed protokolov\u00e1n\u00ed, automatick\u00e9 objevov\u00e1n\u00ed slu\u017eeb a doporu\u010den\u00ed v re\u00e1ln\u00e9m \u010dase pomoc\u00ed anal\u00fdzy a\/nebo strojov\u00e9ho u\u010den\u00ed.<\/li>\n<\/ol>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/orangematter.solarwinds.com\/2020\/03\/03\/monitoring-tips-for-your-container-environment\/\">V blogu SolarWinds doporu\u010duj\u00ed<\/a><\/noindex>:<\/p>\n<ol>\n<li>Pou\u017e\u00edvat n\u00e1stroje pro automatick\u00e9 objevov\u00e1n\u00ed a sledov\u00e1n\u00ed metriky kontejneru, korelaci metrik v\u00fdkonnosti, jako je CPU, pam\u011b\u0165 a doba bezporuchovosti.<\/li>\n<li>Zajistit optim\u00e1ln\u00ed pl\u00e1nov\u00e1n\u00ed kapacity p\u0159edpov\u00edd\u00e1n\u00edm term\u00edn\u016f vy\u010derp\u00e1n\u00ed kapacity na z\u00e1klad\u011b ukazatel\u016f monitorov\u00e1n\u00ed kontejner\u016f.<\/li>\n<li>Organizovat monitorov\u00e1n\u00ed aplikac\u00ed, kter\u00e9 jsou um\u00edst\u011bny v kontejnerech, podle parametr\u016f dostupnosti a v\u00fdkonnosti, co\u017e je u\u017eite\u010dn\u00e9 jak pro pl\u00e1nov\u00e1n\u00ed kapacity, tak pro odstra\u0148ov\u00e1n\u00ed probl\u00e9m\u016f s v\u00fdkonem.<\/li>\n<li>Automatizovat pracovn\u00ed postupy, poskytovat podporu pro \u0159\u00edzen\u00ed a \u0161k\u00e1lov\u00e1n\u00ed kontejner\u016f a jejich prost\u0159ed\u00ed.<\/li>\n<li>Automatizovat kontrolu p\u0159\u00edstupu k monitorov\u00e1n\u00ed u\u017eivatelsk\u00fdch z\u00e1klad\u016f, odpojen\u00ed zastaral\u00fdch a hostuj\u00edc\u00edch \u00fa\u010dt\u016f, odstra\u0148ov\u00e1n\u00ed nadbyte\u010dn\u00fdch opr\u00e1vn\u011bn\u00ed.<\/li>\n<li>Ujistit se, \u017ee v\u00e1\u0161 n\u00e1strojov\u00fd set dok\u00e1\u017ee sledovat tyto kontejnery a aplikace v r\u016fzn\u00fdch prost\u0159ed\u00edch (cloudov\u00fdch, m\u00edstn\u00edch nebo hybridn\u00edch) pro vizualizaci a porovn\u00e1v\u00e1n\u00ed v\u00fdkonu v infrastruktu\u0159e, s\u00edt\u00edch, syst\u00e9mech a aplikac\u00edch.<\/li>\n<\/ol>\n<p><\/p>\n<h2>Jak uchov\u00e1vat data a zajistit jejich bezpe\u010dnost<\/h2>\n<p>\nSe zvy\u0161uj\u00edc\u00edm se po\u010dtem pracovn\u00edch kontejner\u016f se zachov\u00e1n\u00edm stavu by si klienti m\u011bli b\u00fdt v\u011bdomi um\u00edst\u011bn\u00ed dat mimo hostitele, stejn\u011b jako pot\u0159eby ochrany t\u011bchto dat.\u00a0<\/p>\n<p>Podle \u00fadaj\u016f <noindex><a rel=\"nofollow\" href=\"https:\/\/portworx.com\/wp-content\/uploads\/2019\/05\/2019-container-adoption-survey.pdf\">ankety Portworx a Aqua Security<\/a><\/noindex>, bezpe\u010dnost dat je na prvn\u00edm m\u00edst\u011b v seznamu bezpe\u010dnostn\u00edch probl\u00e9m\u016f, kter\u00e9 uv\u00e1d\u00ed v\u011bt\u0161ina respondent\u016f (61%).\u00a0<\/p>\n<p>\u0160ifrov\u00e1n\u00ed dat je hlavn\u00ed strategi\u00ed bezpe\u010dnosti (64%), nicm\u00e9n\u011b respondenti tak\u00e9 pou\u017e\u00edvaj\u00ed monitorov\u00e1n\u00ed v re\u00e1ln\u00e9m \u010dase<\/p>\n<p>(49%), skenov\u00e1n\u00ed zranitelnost\u00ed v registrech (49%), skenov\u00e1n\u00ed zranitelnost\u00ed v CI\/CD pipeline (49%) a blokaci anom\u00e1li\u00ed prost\u0159ednictv\u00edm ochrany v re\u00e1ln\u00e9m \u010dase (48%).<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.gartner.com\/en\/documents\/3902966\/best-practices-for-running-containers-and-kubernetes-in-\">Doporu\u010den\u00ed od spole\u010dnosti Gartner<\/a><\/noindex>:<\/p>\n<ol>\n<li>Vyberte \u0159e\u0161en\u00ed pro ukl\u00e1d\u00e1n\u00ed dat, kter\u00e9 je zalo\u017eeno na principech <noindex><a rel=\"nofollow\" href=\"https:\/\/mcs.mail.ru\/blog\/perekhod-na-mikroservisy-opyt-m-video-eldorado-i-megafona\">mikroslu\u017eebn\u00ed architektury<\/a><\/noindex>. Je lep\u0161\u00ed zvolit ta, kter\u00e1 spl\u0148uj\u00ed po\u017eadavky na ukl\u00e1d\u00e1n\u00ed dat pro kontejnery, jsou hardwarov\u011b nez\u00e1visl\u00e1, spravuj\u00ed se pomoc\u00ed API, maj\u00ed distribuovanou architekturu, podporuj\u00ed m\u00edstn\u00ed nasazen\u00ed a nasazen\u00ed v ve\u0159ejn\u00e9m cloudu.<\/li>\n<li>Vyhn\u011bte se propriet\u00e1rn\u00edm plugin\u016fm a rozhran\u00edm. Vyberte v\u00fdrobce, kte\u0159\u00ed zaji\u0161\u0165uj\u00ed integraci s Kubernetes a podporuj\u00ed standardn\u00ed rozhran\u00ed, jako je CSI (Container Storage Interfaces).<\/li>\n<\/ol>\n<p><\/p>\n<h2>Jak pracovat se s\u00edt\u011bmi<\/h2>\n<p>\nTradi\u010dn\u00ed model podnikov\u00e9 s\u00edt\u011b, kde IT specialist\u00e9 vytv\u00e1\u0159ej\u00ed s\u00ed\u0165ov\u00e1 prost\u0159ed\u00ed pro v\u00fdvoj, testov\u00e1n\u00ed, zaji\u0161t\u011bn\u00ed kvality a v\u00fdrobu pro ka\u017ed\u00fd projekt, se ne v\u017edy dob\u0159e slu\u010duje s pracovn\u00edm postupem kontinu\u00e1ln\u00edho v\u00fdvoje. Nav\u00edc kontejnerov\u00e9 s\u00edt\u011b pokr\u00fdvaj\u00ed n\u011bkolik \u00farovn\u00ed.<\/p>\n<p>V <noindex><a rel=\"nofollow\" href=\"https:\/\/www.magalix.com\/blog\/kubernetes-cluster-networking-101\">v blogu Magalix shrom\u00e1\u017edili<\/a><\/noindex> pravidla na vysok\u00e9 \u00farovni, kter\u00fdm by m\u011bla odpov\u00eddat implementace clusterov\u00e9ho s\u00ed\u0165ov\u00e9ho \u0159e\u0161en\u00ed:<\/p>\n<ol>\n<li>Pody napl\u00e1novan\u00e9 na stejn\u00e9m uzlu by m\u011bly m\u00edt mo\u017enost vym\u011b\u0148ovat si data s jin\u00fdmi moduly bez pou\u017eit\u00ed NAT (p\u0159eklad s\u00ed\u0165ov\u00fdch adres).<\/li>\n<li>V\u0161echny syst\u00e9mov\u00e9 d\u00e9mony (b\u011b\u017e\u00edc\u00ed procesy, nap\u0159\u00edklad kubelet) na dan\u00e9m uzlu mohou komunikovat s podami b\u011b\u017e\u00edc\u00edmi na tomt\u00e9\u017e uzlu.<\/li>\n<li>Pody pou\u017e\u00edvaj\u00edc\u00ed <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.docker.com\/network\/host\/\">s\u00ed\u0165 hostitele,<\/a><\/noindex> by m\u011bly m\u00edt mo\u017enost se spojit se v\u0161emi ostatn\u00edmi pody na v\u0161ech ostatn\u00edch uzlech bez pou\u017eit\u00ed NAT. V\u0161imn\u011bte si, \u017ee s\u00ed\u0165 hostitele je podporov\u00e1na pouze na Linuxov\u00fdch hostitel\u00edch.<\/li>\n<\/ol>\n<p>\nS\u00ed\u0165ov\u00e1 \u0159e\u0161en\u00ed by m\u011bla b\u00fdt \u00fazce integrov\u00e1na s primitivy a politikami Kubernetes. IT mana\u017ee\u0159i by se m\u011bli sna\u017eit o vysokou m\u00edru automatizace s\u00edt\u011b, poskytovat v\u00fdvoj\u00e1\u0159\u016fm odpov\u00eddaj\u00edc\u00ed n\u00e1stroje a dostate\u010dnou flexibilitu.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.gartner.com\/en\/documents\/3902966\/best-practices-for-running-containers-and-kubernetes-in-\">Doporu\u010den\u00ed od spole\u010dnosti Gartner<\/a><\/noindex>:<\/p>\n<ol>\n<li>Zjist\u011bte, zda v\u00e1\u0161 CaaS (kontejner jako slu\u017eba) nebo va\u0161e s\u00ed\u0165 SDN (Software Defined Network) podporuje s\u00edt\u011b Kubernetes. Pokud ne nebo podpora nen\u00ed dostate\u010dn\u00e1, pou\u017eijte pro sv\u00e9 kontejnery s\u00ed\u0165ov\u00e9 rozhran\u00ed CNI (Container Network Interface), kter\u00e9 podporuje po\u017eadovanou funkcionalitu a politiky.<\/li>\n<li>Ujist\u011bte se, \u017ee v\u00e1\u0161 CaaS nebo PaaS (platforma jako slu\u017eba) podporuje vytv\u00e1\u0159en\u00ed p\u0159\u00edchoz\u00edch \u0159adi\u010d\u016f a\/nebo vyva\u017eova\u010d\u016f z\u00e1t\u011b\u017ee, kte\u0159\u00ed rozd\u011bluj\u00ed p\u0159\u00edchoz\u00ed provoz mezi uzly clusteru. Pokud tato mo\u017enost nen\u00ed k dispozici, zva\u017ete pou\u017eit\u00ed extern\u00edch proxy nebo mechanism\u016f service mesh.<\/li>\n<li>Vy\u0161kolte sv\u00e9 s\u00ed\u0165ov\u00e9 in\u017een\u00fdry k pr\u00e1ci se s\u00edt\u011bmi Linux a n\u00e1stroji pro automatizaci s\u00edt\u011b, abyste minimalizovali mezery ve dovednostech a zv\u00fd\u0161ili flexibilitu.<\/li>\n<\/ol>\n<p><\/p>\n<h2>Jak spravovat \u017eivotn\u00ed cyklus aplikac\u00ed<\/h2>\n<p>\nPro automatizovanou a bezprobl\u00e9movou dod\u00e1vku aplikac\u00ed je t\u0159eba doplnit orchestraci kontejner\u016f dal\u0161\u00edmi n\u00e1stroji pro automatizaci, jako jsou produkty infrastruktury jako k\u00f3d (IaC). Mezi n\u011b pat\u0159\u00ed Chef, Puppet, Ansible a Terraform.\u00a0<\/p>\n<p>Tak\u00e9 jsou vy\u017eadov\u00e1ny n\u00e1stroje pro automatizaci sestaven\u00ed a nasazen\u00ed aplikac\u00ed (viz \"<noindex><a rel=\"nofollow\" href=\"https:\/\/www.gartner.com\/en\/documents\/3970114\/magic-quadrant-for-application-release-orchestration#:~:text=ARO%20tools%20enable%20DevOps%20teams,part%20of%20digital%20business%20initiatives.\">Magick\u00fd kvadrant pro orchestraci vyd\u00e1n\u00ed aplikac\u00ed<\/a><\/noindex>\"). Kontejnery tak\u00e9 poskytuj\u00ed mo\u017enosti roz\u0161\u00ed\u0159en\u00ed, podobn\u011b jako mo\u017enosti, kter\u00e9 existovaly p\u0159i nasazen\u00ed virtu\u00e1ln\u00edch stroj\u016f (VM). T\u00edm p\u00e1dem by IT mana\u017ee\u0159i m\u011bli m\u00edt <noindex><a rel=\"nofollow\" href=\"https:\/\/mcs.mail.ru\/blog\/ci-cd-kubernetes\">n\u00e1stroje pro spr\u00e1vu \u017eivotn\u00edho cyklu kontejner\u016f<\/a><\/noindex>.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.gartner.com\/en\/documents\/3902966\/best-practices-for-running-containers-and-kubernetes-in-\">Doporu\u010den\u00ed od spole\u010dnosti Gartner<\/a><\/noindex>:<\/p>\n<ol>\n<li>Stanovte standardy z\u00e1kladn\u00edch obraz\u016f kontejner\u016f s ohledem na velikost, licencov\u00e1n\u00ed a flexibilitu pro p\u0159id\u00e1v\u00e1n\u00ed komponent\u016f v\u00fdvoj\u00e1\u0159i.<\/li>\n<li>Pou\u017e\u00edvejte syst\u00e9my pro spr\u00e1vu konfigurac\u00ed k \u0159\u00edzen\u00ed \u017eivotn\u00edho cyklu kontejner\u016f, kter\u00e9 ukl\u00e1daj\u00ed konfiguraci v vrstv\u00e1ch na z\u00e1klad\u011b z\u00e1kladn\u00edch obraz\u016f nach\u00e1zej\u00edc\u00edch se ve ve\u0159ejn\u00fdch nebo soukrom\u00fdch repozit\u00e1\u0159\u00edch.<\/li>\n<li>Integrujte platformu CaaS s n\u00e1stroji automatizace, abyste automatizovali cel\u00fd pracovn\u00ed tok aplikace.<\/li>\n<\/ol>\n<p><\/p>\n<h2>Jak spravovat kontejnery pomoc\u00ed orchestr\u00e1tor\u016f<\/h2>\n<p>\nHlavn\u00ed funkce pro nasazen\u00ed kontejner\u016f jsou poskytov\u00e1ny na \u00farovn\u00edch orchestrace a pl\u00e1nov\u00e1n\u00ed. P\u0159i pl\u00e1nov\u00e1n\u00ed jsou kontejnery um\u00edst\u011bny na nejoptim\u00e1ln\u011bj\u0161\u00edch hostitel\u00edch v clusteru, jak je ur\u010deno po\u017eadavky \u00farovn\u011b orchestrace.\u00a0<\/p>\n<p>Kubernetes se de facto stal standardem orchestrace kontejner\u016f s aktivn\u00ed komunitou, kterou podporuje v\u011bt\u0161ina p\u0159edn\u00edch komer\u010dn\u00edch poskytovatel\u016f.\u00a0<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.gartner.com\/en\/documents\/3902966\/best-practices-for-running-containers-and-kubernetes-in-\">Doporu\u010den\u00ed od spole\u010dnosti Gartner<\/a><\/noindex>:<\/p>\n<ol>\n<li>Definujte z\u00e1kladn\u00ed po\u017eadavky na bezpe\u010dnostn\u00ed ovl\u00e1dac\u00ed prvky, monitorov\u00e1n\u00ed, spr\u00e1vu politik, uchov\u00e1v\u00e1n\u00ed dat, spr\u00e1vu s\u00edt\u00ed a \u017eivotn\u00ed cyklus kontejner\u016f.<\/li>\n<li>Na z\u00e1klad\u011b t\u011bchto po\u017eadavk\u016f vyberte n\u00e1stroj, kter\u00fd nejl\u00e9pe vyhovuje va\u0161im pot\u0159eb\u00e1m a sc\u00e9n\u00e1\u0159\u016fm pou\u017eit\u00ed.<\/li>\n<li>Vyu\u017eijte v\u00fdzkumy spole\u010dnosti Gartner (viz \u201e<noindex><a rel=\"nofollow\" href=\"https:\/\/www.gartner.com\/en\/documents\/3886465\/how-to-choose-your-kubernetes-deployment-model\">Jak vybrat model nasazen\u00ed Kubernetes<\/a><\/noindex>\u201c), abyste porozum\u011bli v\u00fdhod\u00e1m a nev\u00fdhod\u00e1m r\u016fzn\u00fdch model\u016f nasazen\u00ed Kubernetes a vybrali ten nejvhodn\u011bj\u0161\u00ed pro v\u00e1\u0161 \u00fakol.<\/li>\n<li>Vyberte poskytovatele, kter\u00fd m\u016f\u017ee zajistit hybridn\u00ed orchestrace pro pracovn\u00ed kontejnery v n\u011bkolika prost\u0159ed\u00edch s t\u011bsnou integrac\u00ed s backendy, sd\u00edlen\u00fdmi pl\u00e1ny spr\u00e1vy a konzistentn\u00edmi modely cen\u011bn\u00ed.<\/li>\n<\/ol>\n<p><\/p>\n<h2>Jak vyu\u017e\u00edt mo\u017enosti cloudov\u00fdch poskytovatel\u016f<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.gartner.com\/en\/documents\/3902966\/best-practices-for-running-containers-and-kubernetes-in-\">Spole\u010dnost Gartner se domn\u00edv\u00e1<\/a><\/noindex>, \u017ee z\u00e1jem o nasazen\u00ed kontejner\u016f v ve\u0159ejn\u00e9m cloudu IaaS roste d\u00edky dostupnosti hotov\u00fdch nab\u00eddek CaaS a tak\u00e9 t\u011bsn\u00e9 integraci t\u011bchto nab\u00eddek s dal\u0161\u00edmi produkty nab\u00edzen\u00fdmi cloudov\u00fdmi poskytovateli.<\/p>\n<p>Cloudy IaaS nab\u00edzej\u00ed spot\u0159ebu zdroj\u016f na vy\u017e\u00e1d\u00e1n\u00ed, rychlou \u0161k\u00e1lovatelnost a <noindex><a rel=\"nofollow\" href=\"https:\/\/mcs.mail.ru\/blog\/managed-services-kak-autsors-pomozhet-sekonomit-zarplatu-it\">spr\u00e1vu slu\u017eeb<\/a><\/noindex>, co\u017e pom\u00e1h\u00e1 vyhnout se pot\u0159eb\u011b hlubok\u00fdch znalost\u00ed o infrastruktu\u0159e a jej\u00ed \u00fadr\u017eb\u011b. V\u011bt\u0161ina cloudov\u00fdch poskytovatel\u016f nab\u00edz\u00ed slu\u017ebu spr\u00e1vy kontejner\u016f a n\u011bkte\u0159\u00ed nab\u00edzej\u00ed n\u011bkolik mo\u017enost\u00ed orchestrace.\u00a0<\/p>\n<p>Kl\u00ed\u010dov\u00ed poskytovatel\u00e9 cloudov\u00fdch spravovan\u00fdch slu\u017eeb jsou uvedeni v tabulce:\u00a0<\/p>\n<p><strong>Cloudov\u00fd poskytovatel<\/strong><br \/>\n<strong>Typ slu\u017eby<\/strong><br \/>\n<strong>Produkt\/slu\u017eba<\/strong><\/p>\n<p>Alibaba<br \/>\nNative Cloud Service<br \/>\nAlibaba Cloud Container Service, Alibaba Cloud Container Service for Kubernetes<\/p>\n<p>Amazon Web Services (AWS)<br \/>\nNative Cloud Service<br \/>\nAmazon Elastic Container Services (ECS), Amazon ECS for Kubernetes (EKS), AWS Fargate<\/p>\n<p>Giant Swarm<br \/>\nMSP<br \/>\nGiant Swarm Managed Kubernetes Infrastructure<\/p>\n<p>Google<br \/>\nNative Cloud Service<br \/>\nGoogle Container Engine (GKE)<\/p>\n<p>IBM<br \/>\nNative Cloud Service<br \/>\nIBM Cloud Kubernetes Service<\/p>\n<p>Microsoft<br \/>\nNative Cloud Service<br \/>\nAzure Kubernetes Service, Azure Service Fabric<\/p>\n<p>Oracle<br \/>\nNative Cloud Service<br \/>\nOCI Container Engine for Kubernetes<\/p>\n<p>Platform9<br \/>\nMSP<br \/>\nManaged Kubernetes<\/p>\n<p>Red Hat<br \/>\nHosted Service<br \/>\nOpenShift Dedicated &#038; Online<\/p>\n<p>VMware<br \/>\nHosted Service<br \/>\nCloud PKS (Beta)<\/p>\n<p>Mail.ru Cloud Solutions*<br \/>\nNative Cloud Service<br \/>\nMail.ru Cloud Containers<\/p>\n<p>\n* Nezatajujeme, \u017ee jsme se tu sami p\u0159idali p\u0159i p\u0159ekladu \ud83d\ude42<\/p>\n<p>Poskytovatel\u00e9 ve\u0159ejn\u00fdch cloud\u016f tak\u00e9 p\u0159id\u00e1vaj\u00ed nov\u00e9 funkce a vyd\u00e1vaj\u00ed m\u00edstn\u00ed produkty. V bl\u00edzk\u00e9 budoucnosti budou poskytovatel\u00e9 cloud\u016f rozv\u00edjet podporu hybridn\u00edch a multi-cloudov\u00fdch prost\u0159ed\u00ed.\u00a0<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.gartner.com\/en\/documents\/3902966\/best-practices-for-running-containers-and-kubernetes-in-\">Doporu\u010den\u00ed Gartner<\/a><\/noindex><strong>:<\/strong><\/p>\n<ol>\n<li>Objektivn\u011b zhodno\u0165te schopnosti va\u0161\u00ed organizace zav\u00e1d\u011bt a spravovat relevantn\u00ed n\u00e1stroje a zva\u017ete alternativn\u00ed slu\u017eby pro spr\u00e1vu cloudov\u00fdch kontejner\u016f.<\/li>\n<li>Pe\u010dliv\u011b vyb\u00edrejte softwarov\u00e9 \u0159e\u0161en\u00ed, pou\u017e\u00edvejte open source tam, kde je to mo\u017en\u00e9.<\/li>\n<li>Vyberte si poskytovatele s jednotn\u00fdm opera\u010dn\u00edm modelem v hybridn\u00edch prost\u0159ed\u00edch, kter\u00fd nab\u00edz\u00ed spr\u00e1vu sjednocen\u00fdch clustr\u016f z jednoho panelu, a tak\u00e9 poskytovatele, kte\u0159\u00ed usnad\u0148uj\u00ed samostatn\u00e9 vyu\u017e\u00edv\u00e1n\u00ed IaaS.<\/li>\n<\/ol>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.replex.io\/blog\/a-cios-guide-to-kubernetes-best-practices-in-production\">N\u011bkolik rad pro v\u00fdb\u011br poskytovatele Kubernetes aaS z blogu Replex<\/a><\/noindex>:<\/p>\n<ol>\n<li>Hledejte distribuce, kter\u00e9 podporuj\u00ed vysokou dostupnost hned \"z krabice\". To zahrnuje podporu pro v\u00edce z\u00e1kladn\u00edch architektur, vysoce dostupn\u00e9 komponenty etcd, jako\u017e i z\u00e1lohov\u00e1n\u00ed a obnovu.<\/li>\n<li>Pro zaji\u0161t\u011bn\u00ed mobility prost\u0159ed\u00ed Kubernetes je lep\u0161\u00ed vyb\u00edrat cloudov\u00e9 poskytovatele, kte\u0159\u00ed podporuj\u00ed \u0161irokou \u0161k\u00e1lu model\u016f nasazen\u00ed: od lok\u00e1ln\u00edch po hybridn\u00ed a multi-cloudov\u00e9.\u00a0<\/li>\n<li>Nab\u00eddky poskytovatel\u016f je tak\u00e9 dobr\u00e9 hodnotit z hlediska jednoduchosti nastaven\u00ed, instalace a vytvo\u0159en\u00ed clustru, jako\u017e i aktualizac\u00ed, monitorov\u00e1n\u00ed a odstra\u0148ov\u00e1n\u00ed probl\u00e9m\u016f. Z\u00e1kladn\u00ed po\u017eadavek \u2014 podpora pln\u011b automatizovan\u00fdch aktualizac\u00ed clustru s nulov\u00fdm v\u00fdpadkem. Vybran\u00e9 \u0159e\u0161en\u00ed by m\u011blo tak\u00e9 umo\u017e\u0148ovat spou\u0161t\u011bn\u00ed aktualizac\u00ed ru\u010dn\u011b.\u00a0<\/li>\n<li>Spr\u00e1va identity a p\u0159\u00edstupu je d\u016fle\u017eit\u00e1 jak z hlediska bezpe\u010dnosti, tak z hlediska spr\u00e1vy. Ujist\u011bte se, \u017ee vybran\u00fd distribuce Kubernetes podporuje integraci s autentiza\u010dn\u00edmi a autoriza\u010dn\u00edmi n\u00e1stroji, kter\u00e9 se pou\u017e\u00edvaj\u00ed ve spole\u010dnosti. RBAC a podrobn\u00e1 kontrola p\u0159\u00edstupu jsou tak\u00e9 d\u016fle\u017eit\u00fdmi soubory funkc\u00ed.<\/li>\n<li>Vybran\u00fd distribu\u010dn\u00ed syst\u00e9m by m\u011bl m\u00edt bu\u010f vlastn\u00ed s\u00ed\u0165ov\u00e9 \u0159e\u0161en\u00ed definovan\u00e9 softwarem, kter\u00e9 pokr\u00fdv\u00e1 \u0161irok\u00e9 spektrum po\u017eadavk\u016f r\u016fzn\u00fdch aplikac\u00ed nebo infrastruktury, nebo podporovat jednu z obl\u00edben\u00fdch realizac\u00ed s\u00edt\u00ed na z\u00e1klad\u011b CNI, v\u010detn\u011b Flannel, Calico, kube-router nebo OVN.<\/li>\n<\/ol>\n<p>\nNasazen\u00ed kontejner\u016f do produkce se st\u00e1v\u00e1 hlavn\u00edm sm\u011brem, co\u017e dokl\u00e1daj\u00ed v\u00fdsledky pr\u016fzkumu proveden\u00e9ho na <noindex><a rel=\"nofollow\" href=\"https:\/\/www.gartner.com\/en\/documents\/3902966\/best-practices-for-running-containers-and-kubernetes-in-\">sezen\u00ed Gartner<\/a><\/noindex> o infrastruktu\u0159e, operac\u00edch a cloudov\u00fdch strategi\u00edch (IOCS) v prosinci 2018:<\/p>\n<p><img decoding=\"async\" alt=\"Nejlep\u0161\u00ed postupy a doporu\u010den\u00ed pro spu\u0161t\u011bn\u00ed kontejner\u016f a Kubernetes v produk\u010dn\u00edch prost\u0159ed\u00edch\" src=\"\/wp-content\/uploads\/2020\/04\/f9bcab53abb5ff6f19bcdc36ed106147.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nJak vid\u00edme, 27 % respondent\u016f ji\u017e pou\u017e\u00edv\u00e1 kontejnery v pr\u00e1ci a 63 % m\u00e1 v pl\u00e1nu tak u\u010dinit.<\/p>\n<p>V <noindex><a rel=\"nofollow\" href=\"https:\/\/portworx.com\/wp-content\/uploads\/2019\/05\/2019-container-adoption-survey.pdf\">pr\u016fzkumu Portworx a Aqua Security<\/a><\/noindex> 24 % respondent\u016f uvedlo, \u017ee investuj\u00ed v\u00edce ne\u017e p\u016fl milionu dolar\u016f ro\u010dn\u011b do kontejnerov\u00fdch technologi\u00ed, zat\u00edmco 17 % respondent\u016f utr\u00e1c\u00ed v\u00edce ne\u017e milion dolar\u016f ro\u010dn\u011b.\u00a0<\/p>\n<p><i>\u010cl\u00e1nek p\u0159ipravila t\u00fdm cloudov\u00e9 platformy <\/i><noindex><a rel=\"nofollow\" href=\"https:\/\/mcs.mail.ru\/\"><i>Mail.ru Cloud Solutions<\/i><\/a><\/noindex><i>.<\/i><\/p>\n<p><strong>Co dal\u0161\u00edho si p\u0159e\u010d\u00edst na toto t\u00e9ma<\/strong>:<\/p>\n<ol>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/mailru\/blog\/483444\/\">Nejlep\u0161\u00ed praktiky DevOps: zpr\u00e1va DORA<\/a><\/noindex>.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/mailru\/blog\/490362\/\">Kubernetes v pir\u00e1tsk\u00e9m duchu s \u0161ablonou pro nasazen\u00ed<\/a><\/noindex>.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/mcs.mail.ru\/blog\/25-poleznyh-instrumentov-kubernetes-razvertyvanie-i-upravlenie\">25 u\u017eite\u010dn\u00fdch n\u00e1stroj\u016f pro nasazen\u00ed a implementaci Kubernetes<\/a><\/noindex>.<\/li>\n<\/ol>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/mailru\/blog\/495338\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u042d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u044b\u0441\u0442\u0440\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0438 \u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432 \u044d\u0442\u043e\u0439 \u0441\u0444\u0435\u0440\u0435 \u043d\u0435 \u0445\u0432\u0430\u0442\u0430\u0435\u0442 \u0445\u043e\u0440\u043e\u0448\u0438\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u0440\u0430\u043a\u0442\u0438\u043a. \u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 Kubernetes \u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432\u0441\u0435 \u0447\u0430\u0449\u0435 \u2014 \u043a\u0430\u043a \u0434\u043b\u044f \u043c\u043e\u0434\u0435\u0440\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0442\u0430\u0440\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\u00a0 \u041a\u043e\u043c\u0430\u043d\u0434\u0430 Kubernetes aaS \u043e\u0442 Mail.ru \u0441\u043e\u0431\u0440\u0430\u043b\u0430 \u043f\u0440\u043e\u0433\u043d\u043e\u0437\u044b, \u0441\u043e\u0432\u0435\u0442\u044b \u0438 \u043b\u0443\u0447\u0448\u0438\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0438 \u0434\u043b\u044f \u043b\u0438\u0434\u0435\u0440\u043e\u0432 \u0440\u044b\u043d\u043a\u0430 \u043e\u0442 Gartner, 451 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":78374,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-78373","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/luchshie-praktiki-i-rekomendaczii-dlya-zapuska-kontejnerov-i-kubernetes-v-proizvodstvennyh-sredah\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041b\u0443\u0447\u0448\u0438\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0438 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 Kubernetes \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/luchshie-praktiki-i-rekomendaczii-dlya-zapuska-kontejnerov-i-kubernetes-v-proizvodstvennyh-sredah\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-04-18T23:42:20+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-04-18T23:42:20+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Nejlep\u0161\u00ed praktiky a doporu\u010den\u00ed pro spu\u0161t\u011bn\u00ed kontejner\u016f a Kubernetes v produk\u010dn\u00edch prost\u0159ed\u00edch | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/luchshie-praktiki-i-rekomendaczii-dlya-zapuska-kontejnerov-i-kubernetes-v-proizvodstvennyh-sredah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041b\u0443\u0447\u0448\u0438\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0438 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 Kubernetes \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 | ProHoster","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/luchshie-praktiki-i-rekomendaczii-dlya-zapuska-kontejnerov-i-kubernetes-v-proizvodstvennyh-sredah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-18T23:42:20+00:00","article:modified_time":"2020-04-18T23:42:20+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"78373","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:59:34","updated":"2022-10-07 00:18:57","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/78373","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=78373"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/78373\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/78374"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=78373"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=78373"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=78373"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}