{"id":91771,"date":"2020-08-18T07:42:25","date_gmt":"2020-08-18T05:42:25","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/predstavlyaem-contour-napravlyaem-trafik-k-prilozheniyam-v-kubernetes"},"modified":"2020-08-18T07:42:25","modified_gmt":"2020-08-18T05:42:25","slug":"predstavlyaem-contour-napravlyaem-trafik-k-prilozheniyam-v-kubernetes","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/predstavlyaem-contour-napravlyaem-trafik-k-prilozheniyam-v-kubernetes","title":{"rendered":"P\u0159edstavujeme Contour: sm\u011brujeme provoz k aplikac\u00edm v Kubernetes","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"P\u0159edstavujeme<\/p>\n

<\/p>\n

S radost\u00ed oznamujeme, \u017ee Contour byl um\u00edst\u011bn v inkub\u00e1toru projekt\u016f Cloud Native Computing Foundation (CNCF). <\/p>\n

<\/p>\n

Pokud jste je\u0161t\u011b nesly\u0161eli o Contour \u2014 to je jednoduch\u00fd a \u0161k\u00e1lovateln\u00fd ingress controller s otev\u0159en\u00fdm zdrojov\u00fdm k\u00f3dem pro sm\u011brov\u00e1n\u00ed provozu k aplikac\u00edm, kter\u00e9 b\u011b\u017e\u00ed v Kubernetes. <\/p>\n

<\/p>\n

Podrobn\u011b se pod\u00edv\u00e1me na to, jak funguje, uk\u00e1\u017eeme \u201emapu v\u00fdvoje\u201c na nadch\u00e1zej\u00edc\u00edch konferenc\u00edch Kubecon a CloudNativeCon Europe<\/a><\/noindex>. <\/p>\n

<\/p>\n

V tomto \u010dl\u00e1nku v\u00e1m nab\u00eddneme sezn\u00e1men\u00ed s prac\u00ed Contour. Vysv\u011btl\u00edme, co znamen\u00e1 p\u0159ijet\u00ed projektu do CNCF. A tak\u00e9 se pod\u011bl\u00edme o pl\u00e1ny do budoucna pro rozvoj projektu.<\/p>\n

<\/p>\n

Konference KubeCon a CloudNativeCon shroma\u017e\u010fuj\u00ed p\u0159\u00edznivce modern\u00edch technologi\u00ed a in\u017een\u00fdry, kte\u0159\u00ed maj\u00ed z\u00e1jem nejen o dal\u0161\u00ed vzd\u011bl\u00e1v\u00e1n\u00ed, ale i o propagaci cloudov\u00fdch v\u00fdpo\u010dt\u016f. Na akc\u00edch se \u00fa\u010dastn\u00ed odborn\u00edci z praxe a hlavn\u00ed v\u00fdvoj\u00e1\u0159i popul\u00e1rn\u00edch projekt\u016f, jako jsou Kubernetes, Prometheus, gRPC, Envoy, OpenTracing a dal\u0161\u00ed.<\/p><\/blockquote>\n

<\/a><\/noindex><\/p>\n

Ve\u0161ker\u00e1 pozornost na Ingress<\/h2>\n

<\/p>\n

Nejprve \u00favod. Komunita Kubernetes ji\u017e ur\u010dila, jak p\u0159istupovat k \u00fakol\u016fm spu\u0161t\u011bn\u00ed pracovn\u00edch z\u00e1t\u011b\u017e\u00ed a poskytov\u00e1n\u00ed p\u0159\u00edstupu od z\u00e1t\u011b\u017e\u00ed k \u00falo\u017ei\u0161ti. Ale v ot\u00e1zk\u00e1ch vytv\u00e1\u0159en\u00ed s\u00edt\u00ed a zaji\u0161t\u011bn\u00ed propojen\u00ed st\u00e1le existuje prostor pro inovace. Hlavn\u00edm, a p\u0159itom velmi d\u016fle\u017eit\u00fdm \u00fakolem je doru\u010dov\u00e1n\u00ed extern\u00edho provozu dovnit\u0159 klastru. V Kubernetes se tomu \u0159\u00edk\u00e1 Ingress, to je p\u0159esn\u011b to, co Contour d\u011bl\u00e1. Je to n\u00e1stroj, kter\u00fd m\u016f\u017eete snadno pou\u017e\u00edt v klastru pro doru\u010dov\u00e1n\u00ed provozu podle pot\u0159eby, ale s funk\u010dn\u00edm z\u00e1zem\u00edm pro budoucnost, jakmile poroste v\u00e1\u0161 klastr Kubernetes.<\/p>\n

<\/p>\n

Technicky Contour funguje prost\u0159ednictv\u00edm nasazen\u00ed Envoy<\/a><\/noindex> pro zaji\u0161t\u011bn\u00ed zp\u011btn\u00e9ho proxy a vyva\u017eova\u010de zat\u00ed\u017een\u00ed. P\u016fvodn\u011b podporuje dynamick\u00e9 aktualizace nastaven\u00ed a m\u016f\u017ee b\u00fdt roz\u0161i\u0159ov\u00e1n na multiteam klastry Kubernetes s r\u016fzn\u00fdmi strategiemi vyva\u017eov\u00e1n\u00ed zat\u00ed\u017een\u00ed.<\/p>\n

<\/p>\n

Existuje mnoho alternativ k nasazen\u00ed Ingress Controller v Kubernetes, ale Contour je jedine\u010dn\u00fd t\u00edm, \u017ee vykon\u00e1v\u00e1 pouze tuto \u00falohu, a to s vysokou \u00farovn\u00ed v\u00fdkonu a s ohledem na bezpe\u010dnost a mo\u017enost pr\u00e1ce v multiplatformn\u00edm re\u017eimu.<\/p>\n

<\/p>\n

I kdy\u017e m\u016f\u017eete nasadit service mesh<\/a><\/noindex> Pro tuto ot\u00e1zku by to znamenalo dal\u0161\u00ed komplikace pro v\u00e1\u0161 cluster. Contour naopak nab\u00edz\u00ed jako \u0159e\u0161en\u00ed fungov\u00e1n\u00ed Ingress bez nutnosti op\u00edrat se o v\u011bt\u0161\u00ed strukturu service mesh \u2013 ale v p\u0159\u00edpad\u011b pot\u0159eby s n\u00ed bude schopen spolupracovat. T\u00edm se nab\u00edz\u00ed jak\u00fdsi postupn\u00fd p\u0159echod na Ingress, co\u017e rychle zaujalo mnoho u\u017eivatel\u016f.<\/p>\n

<\/p>\n

S\u00edla podpory CNCF<\/h2>\n

<\/p>\n

Contour, vytvo\u0159en\u00fd v z\u00e1v\u011bru roku 2017 v\u00fdvoj\u00e1\u0159i Heption, dos\u00e1hl verze 1.0 v listopadu 2019 a nyn\u00ed se m\u016f\u017ee pochlubit komunitou 600 \u00fa\u010dastn\u00edk\u016f na Slacku, 300 v\u00fdvoj\u00e1\u0159i, 90 commitery a 5 \u00fadr\u017eb\u00e1\u0159i. Jedn\u00edm z v\u00fdznamn\u00fdch fakt\u016f je, \u017ee je implementov\u00e1n r\u016fzn\u00fdmi firmami a organizacemi, v\u010detn\u011b Adobe, Kinvolk, Kintone, PhishLabs a Replicated. Pot\u00e9, co jsme zjistili, \u017ee u\u017eivatel\u00e9 nasazuj\u00ed Contour do v\u00fdroby a v\u00edme, \u017ee m\u00e1me stabiln\u00ed komunitu, se CNCF rozhodla, \u017ee Contour m\u016f\u017ee vstoupit p\u0159\u00edmo do inkub\u00e1toru, bez p\u00edskovi\u0161t\u011b.<\/p>\n

<\/p>\n

Pro n\u00e1s je to velmi d\u016fle\u017eit\u00e9, proto\u017ee takov\u00e9 pozv\u00e1n\u00ed ch\u00e1peme jako potvrzen\u00ed toho, \u017ee jsme udr\u017eiteln\u00e9, pohostinn\u00e9 a otev\u0159en\u00e9 spole\u010denstv\u00ed, kter\u00e9 odpov\u00edd\u00e1 technick\u00fdm c\u00edl\u016fm CNCF. Contour tak\u00e9 dob\u0159e spolupracuje v ekosyst\u00e9mu s dal\u0161\u00edmi projekty, jako jsou Kubernetes a Envoy. <\/p>\n

<\/p>\n

Douf\u00e1me, \u017ee \u010d\u00edm v\u00edce lid\u00ed k n\u00e1m p\u0159ich\u00e1z\u00ed, t\u00edm v\u00edce se zv\u00fd\u0161\u00ed rozmanitost a rychlost p\u0159id\u00e1v\u00e1n\u00ed nov\u00fdch funkc\u00ed. Budeme nad\u00e1le vyd\u00e1vat verze m\u011bs\u00ed\u010dn\u011b, tak\u017ee nenech\u00e1me u\u017eivatele dlouho \u010dekat na nov\u00e9 funkce, opravy chyb a zlep\u0161en\u00ed bezpe\u010dnostn\u00edch parametr\u016f.<\/p>\n

<\/p>\n

P\u0159\u00edsp\u011bvek do ekosyst\u00e9mu Kubernetes<\/h2>\n

<\/p>\n

V nejbli\u017e\u0161\u00ed budoucnosti chceme<\/a><\/noindex> shrom\u00e1\u017edit po\u017eadavky od komunity na nov\u00e9 funkce. N\u011bkter\u00e9 z t\u011bchto po\u017eadavk\u016f, nap\u0159\u00edklad podpora extern\u00ed autentizace, u\u017eivatel\u00e9 o\u010dek\u00e1vaj\u00ed pom\u011brn\u011b dlouho, ale zdroje pro to m\u00e1me a\u017e nyn\u00ed. Tak\u00e9 takov\u00fd \u00fakol m\u016f\u017ee b\u00fdt realizov\u00e1n pouze p\u0159i velk\u00e9m po\u010dtu zp\u011btn\u00e9 vazby od komunity.<\/p>\n

<\/p>\n

Dal\u0161\u00ed v\u011bci, kter\u00e9 pl\u00e1nujeme zrealizovat v nejbli\u017e\u0161\u00ed budoucnosti:<\/p>\n

<\/p>\n