{"id":30272,"date":"2019-10-31T21:34:36","date_gmt":"2019-10-31T18:34:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kubernetes-1-14-obzor-osnovnyh-novshestv\/"},"modified":"2019-10-31T21:34:36","modified_gmt":"2019-10-31T18:34:36","slug":"kubernetes-1-14-obzor-osnovnyh-novshestv","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/kubernetes-1-14-obzor-osnovnyh-novshestv","title":{"rendered":"Kubernetes 1.14: peamiste uuenduste \u00fclevaade","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Kubernetes 1.14: peamiste uuenduste \u00fclevaade\" src=\"\/wp-content\/uploads\/2019\/03\/8fb5be29668f55ec42d31eb47200b639.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSel \u00f6\u00f6l <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/sig-release\/tree\/master\/releases\/release-1.14#timeline\">toimub<\/a><\/noindex> on j\u00e4rgmine Kubernetes'i versioon \u2014 <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/sig-release\/tree\/master\/releases\/release-1.14\">1.14<\/a><\/noindex>. Meie blogi traditsiooni kohaselt anname \u00fclevaate peamistest muudatustest selle suurep\u00e4rase avatud l\u00e4htekoodiga toote uues versioonis.<\/p>\n<p>Selle refleksiooni ettevalmistamiseks kasutatud teave on v\u00f5etud <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.google.com\/spreadsheets\/u\/1\/d\/116X6E-lmDJG5UZPlqDAFw8hN9vS6SNY4qRNZ9fKtsMU\/edit#gid=0\">Kubernetes'i t\u00e4iustuste j\u00e4lgimise tabelist<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/blob\/release-1.14\/CHANGELOG-1.14.md\">CHANGELOG-1.14<\/a><\/noindex> ja vastavatest probleemidest, t\u00f5mbenimistest, Kubernetes'i t\u00e4iustuste ettepanekutest (KEP).<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Alustame olulise sissejuhatusega SIG cluster-lifecycle poolt: <b>d\u00fcnaamilised t\u00f5rkevarustatud klastrid<\/b> Kubernetes (t\u00e4psemalt \u00f6eldes isehallatavad HA-deployments) on n\u00fc\u00fcd <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/enhancements\/issues\/357\">v\u00f5imalik luua<\/a><\/noindex> tavaliste (\u00fche s\u00f5lmega klastrite kontekstis) k\u00e4skudega <code>kubeadm'ile.<\/code> (<code>init<\/code> ja <code>liitu<\/code>). L\u00fchidalt \u00f6eldes, selleks:<\/p>\n<ul>\n<li> klastriga kasutatavad sertifikaadid kantakse \u00fcle saladustesse;<\/li>\n<li> klastri etcd kasutamise v\u00f5imaldamiseks K8s-klastris (st eemaldades senise v\u00e4list s\u00f5ltuvuse) on kaasatud <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/coreos\/etcd-operator\">etcd-operator<\/a><\/noindex>;<\/li>\n<li> dokumenteeritakse soovitatavad seaded v\u00e4list koormuse tasakaalustajat, mis tagab t\u00f5rkevarustatud konfiguratsiooni (hiljem plaanitakse s\u00f5ltuvuse v\u00e4ljaj\u00e4tmist, kuid mitte antud etapis).<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Kubernetes 1.14: peamiste uuenduste \u00fclevaade\" src=\"\/wp-content\/uploads\/2019\/03\/0e82b7e8db1ad117dc87f68fa4669431.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>HA-klastri Kubernetes'i arhitektuur, mis on loodud kubeadm-iga<\/i><\/p>\n<p>Rakenduse \u00fcksikasju saab tutvuda <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.google.com\/document\/d\/1P3oUJ_kdaRSTlGONujadGBpYegjn4RjBNZLHZ4zU7lI\/edit#\">disainiettepanekus<\/a><\/noindex>. See funktsioon oli t\u00f5eliselt kauaoodatud: alfa versioon oodati juba K8s 1.9-s, kuid see ilmus alles n\u00fc\u00fcd.<\/p>\n<h2>API<\/h2>\n<p>\nMeeskond <code>rakenda<\/code> ja \u00fcldse <b>deklaratiivne haldus objektidega<\/b> <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/enhancements\/issues\/555\">v\u00e4ljatoodud<\/a><\/noindex> kohast <code>kubectl<\/code> apiserverisse. Arendajad selgitavad oma otsust l\u00fchidalt, et <code>kubectl apply<\/code> on Kubernetes'i konfiguratsioonidega t\u00f6\u00f6tamise p\u00f5hiosa, kuid \u201eon t\u00e4is vigu ja on keeruline parandada\u201c, mist\u00f5ttu tuleb see funktsionaalsus viia korralikku seisu ja \u00fcle tuua juhtimisplaadini. Lihtsad ja selged n\u00e4ited t\u00e4nap\u00e4evastest probleemidest:<\/p>\n<p><img decoding=\"async\" alt=\"Kubernetes 1.14: peamiste uuenduste \u00fclevaade\" src=\"\/wp-content\/uploads\/2019\/03\/379b0d830491bbb0e7ac3c3ccfff71c4.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTeave rakenduse kohta - <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/enhancements\/blob\/master\/keps\/sig-api-machinery\/0006-apply.md\">KEP<\/a><\/noindex>. Praegune valmisolek - alfa versioon (\u00fcleminek beetaversioonile on planeeritud j\u00e4rgmises Kubernetes'e v\u00e4ljaandes).<\/p>\n<p>Alfa versioonis sai k\u00e4ttesaadavaks <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/enhancements\/issues\/692\">v\u00f5imalus<\/a><\/noindex> OpenAPI v3 skeemi kasutamine <b>CustomResources'i OpenAPI-dokumentatsiooni koostamiseks ja avaldamiseks<\/b> (CR), mida kasutatakse K8s-i kasutaja m\u00e4\u00e4ratletud ressursside (CustomResourceDefinition, CRD) valideerimiseks serveri poolel. OpenAPI avaldamine CRD jaoks v\u00f5imaldab klientidel (nt <code>kubectl<\/code>) valida valideerimise enda poolel (raames <code>kubectl create<\/code> ja <code>kubectl apply<\/code>) ja esitada skeemidokumentatsiooni (<code>kubectl explain<\/code>). Lisainformatsioon - <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/enhancements\/blob\/master\/keps\/sig-api-machinery\/00xx-publish-crd-openapi.md\">KEP<\/a><\/noindex>.<\/p>\n<p>Varem olemas olnud logid <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/74837\">avatakse n\u00fc\u00fcd<\/a><\/noindex> lipu <code>O_APPEND<\/code> (mitte <code>O_TRUNC<\/code>) logide kaotamise v\u00e4ltimiseks teatud olukordades ning mugavuse huvides logide k\u00e4rpimist v\u00e4listab vastavad t\u00f6\u00f6riistad.<\/p>\n<p>Samuti tuleb m\u00e4rkida Kubernetes API kontekstis, et <code>PodSandbox<\/code> ja <code>PodSandboxStatus<\/code> <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/73833\">lisatud<\/a><\/noindex> v\u00e4li <code>runtime_handler<\/code> informatsiooni jaoks <code>RuntimeClass<\/code> pod'is (lisateavet saate lugeda artiklis <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/424331\/\">Kubernetes 1.12 v\u00e4ljaannet<\/a><\/noindex>, kus see klass ilmus alfa-versioonina), ja Admission Webhook\u2019ides <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/74998\">on rakendatud<\/a><\/noindex> v\u00f5imalust m\u00e4\u00e4rata, milliseid versioone <code>AdmissionReview<\/code> nad toetavad. L\u00f5puks, Admission Webhook\u2019ide reeglites on n\u00fc\u00fcd <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/74477\">v\u00f5imalik piirata<\/a><\/noindex> nende rakenduste suurus namespace'ide ja klastriraamide osas.<\/p>\n<h2>Salvestusruumid<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/storage\/volumes\/#local\"><code><b>P\u00fcsivad kohalikud mahud<\/b><\/code><\/a><\/noindex>, mis olid beeta-versioonis alates <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/353114\/\">K8s 1.10<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/74769\">on kuulutatud<\/a><\/noindex> stabiilseteks (GA): see feature gate ei ole enam v\u00e4ljal\u00fclitatud ja see eemaldatakse Kubernetes 1.17 versioonis.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/enhancements\/issues\/559\">V\u00f5imalus<\/a><\/noindex> keskkonnamuutujate kasutamine nn <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/tasks\/inject-data-application\/downward-api-volume-expose-pod-information\/#capabilities-of-the-downward-api\">Downward API<\/a><\/noindex> (nt pod'i nime) kaustade nimede jaoks, mida moodustatakse nagu <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/storage\/volumes\/#using-subpath\"><code>subPath<\/code><\/a><\/noindex>, on saanud edasiarenduse \u2013 uue v\u00e4lja <code>subPathExpr<\/code>, mille abil m\u00e4\u00e4ratakse n\u00fc\u00fcd vajalik kaustanimi. Algne funktsioon ilmus Kubernetes 1.11, kuid j\u00e4i ka 1.14 versiooniks alfa-kategooria.<\/p>\n<p>Nagu ka eelmises Kubernetes v\u00e4ljaandes, on palju olulisi muudatusi aktiivselt areneva CSI (Container Storage Interface) jaoks:<\/p>\n<h3>CSI<\/h3>\n<p>\nSaab k\u00e4ttesaadav (alfaversioonis) <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/enhancements\/issues\/556\">toetamine<\/a><\/noindex> <b>m\u00f5\u00f5tmete muutmine CSI-mahute jaoks<\/b>. Selle kasutamiseks on vajalik aktiveerida funktsioonigrupp nimega <code>ExpandCSIVolumes<\/code>, samuti peab konkreetne CSI-draiver toetama seda toimingut.<\/p>\n<p>Veel \u00fcks CSI funktsioon alfaversioonis \u2014 <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/enhancements\/issues\/596\">v\u00f5imalus<\/a><\/noindex> otseselt viitama (st ilma PV\/PVC kasutamiseta) CSI-\u00fcksustele pod'i spetsifikatsiooni raames. See <b>eemaldab piirangu kasutada CSI-d ainult kaugehitusena<\/b>, avades uksed <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes-csi.github.io\/docs\/ephemeral-local-volumes.html\">kohalikule ajutisele mahule<\/a><\/noindex>. Kasutamiseks (<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/vladimirvivien\/kubernetes.github.io\/blob\/b78107abfdb2b5877973b84062d93cdf98ef1b9c\/content\/en\/docs\/concepts\/storage\/volumes.md#csi-ephemeral-volumes\">dokumendi n\u00e4ide<\/a><\/noindex>) tuleb aktiveerida <code>CSIInlineVolume<\/code> funktsioonigrupp.<\/p>\n<p>On toimunud edusamme ka Kubernetes'i \"sisemuses\", mis on seotud CSI-ga, ja mis ei ole l\u00f5ppkasutajatele (s\u00fcsteemiadministraatoritele) nii n\u00e4htavad... Praegu peavad arendajad toetama iga salvestuspakkuja kahte versiooni: \u00fcks \u2014 \"vana meetodi\" j\u00e4rgi, K8s koodibaasis (in-tree), ja teine \u2014 uue CSI raames <i>(rohkem lugege n\u00e4iteks) <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/424211\/\">siit<\/a><\/noindex>)<\/i>. See tekitab arusaadavaid ebamugavusi, mida tuleb k\u00f5rvaldada, kui CSI stabiilsemaks muutub. Lihtsalt v\u00f5tta ja kuulutada vananenud (deprecated) sisemine (in-tree) pistikprogrammid on praktiliselt v\u00f5imatu, sest <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/reference\/using-api\/deprecation-policy\/#deprecating-parts-of-the-api\">vastava Kubernetes'i poliitika<\/a><\/noindex>.<\/p>\n<p>K\u00f5ik see on viinud selleni, et alfa-versioonid on saavutatud <b><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/enhancements\/issues\/625\">migratsiooniprotsess<\/a><\/noindex> pluginite sisekood<\/b>, ellu viidud nii in-tree kui ka CSI pluginid, mist\u00f5ttu arendajate mured piirdub \u00fche versiooni toetamisega, samas kui \u00fchilduvus vanade API-dega s\u00e4ilitatakse ja need saab t\u00fchistada tavap\u00e4rase stsenaariumi j\u00e4rgi. Oodatakse, et j\u00e4rgmise Kubernetes'i versiooni (1.15) jooksul migratsioon k\u00f5ikide pilveteenuse pakkujate pluginatesse, rakendamine saab beetaversiooni staatuse ja aktiveeritakse K8s installatsioonides vaikimisi. T\u00e4iendavad \u00fcksikasjad on <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/community\/blob\/master\/contributors\/design-proposals\/storage\/csi-migration.md\">disainiettepanekus<\/a><\/noindex>. Selle migratsiooni tagaj\u00e4rjeks oli ka <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/74544\">SelfLink<\/a><\/noindex> piirangute t\u00fchistamine, mida seadsid konkreetsed pilveteenuse pakkujad (AWS, Azure, GCE, Cinder).<\/p>\n<p>Lisaks sellele toetatakse plokiseadmeid, kasutades CSI (<code>CSIBlockVolume<\/code>) <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/74909\">muudetud<\/a><\/noindex> beetaversiooniks.<\/p>\n<h2>S\u00f5lmed \/ Kubelet<\/h2>\n<p>\nEsitatud alfa-versioon <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/enhancements\/issues\/727\">uuest endpoint'ist<\/a><\/noindex> Kubelet'is, mis on ette n\u00e4htud <b>peamiste ressursside kohta m\u00f5\u00f5tmiste edastamiseks<\/b>. \u00dcldiselt, kui varem sai Kubelet konteinerite kasutusstatistikat cAdvisorilt, siis n\u00fc\u00fcd tulevad need andmed konteineri t\u00e4itmisest l\u00e4bi CRI (Container Runtime Interface), samas on s\u00e4ilinud ka \u00fchilduvus vanade Docker versioonidega. Varem edastati Kubeletis kogutud statistika REST API kaudu, n\u00fc\u00fcd kasutatakse selleks l\u00f5pp-punkti, mis asub aadressil <code>\/metrics\/resource\/v1alpha1<\/code>. Pikemaajaline strateegia arendajate <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/issues\/68522\">koosneb<\/a><\/noindex> selleks, et v\u00e4hendada Kubelet'i pakutavate m\u00f5\u00f5dikute arvu. <i>Muide, neid m\u00f5\u00f5dikud <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/enhancements\/pull\/726\">nimetatakse n\u00fc\u00fcd<\/a><\/noindex> mitte \u00abcore metrics\u00bb, vaid \u00abresource metrics\u00bb ja neid kirjeldatakse kui \u00abfirst-class resources, such as cpu and memory\u00bb.<\/i><\/p>\n<p>K\u00fcll aga on huvitav n\u00fcanss: hoolimata gRPC l\u00f5pp-punkti selgest eelisest j\u00f5udluses v\u00f5rreldes erinevate Prometheuse formaadiga kasutusjuhtudega <i>(\u00fche v\u00f5rgu testi tulemus, vt allpool)<\/i>, eelistasid autorid tekstivormingut Prometheus, kuna selle j\u00e4lgimiss\u00fcsteemi selge \u00fclemuslikkus kogukonnas.<\/p>\n<blockquote><p><i>\u00abgRPC ei \u00fchildu peamiste j\u00e4lgimispipeline\u2019dega. Endpoint on kasulik ainult statistika edastamiseks Metrics Server\u2019isse v\u00f5i j\u00e4lgimiskomponentidesse, mis integreeruvad otse temaga. Kui Metrics Serveris on kasutusel va caching, siis Prometheuse tekstiformaadi toimivus <b>on piisavalt hea<\/b> meie jaoks, et eelistada Prometheust gRPC\u2019le, arvestades Prometheuse laialdast levikut kogukonnas. Kui OpenMetrics formaadi stabiilsus paraneb, saame l\u00e4heneda gRPC toimivusele proto-p\u00f5histe formaatide kaudu.\u00bb<\/i><\/p><\/blockquote>\n<p>\n<img decoding=\"async\" alt=\"Kubernetes 1.14: peamiste uuenduste \u00fclevaade\" src=\"\/wp-content\/uploads\/2019\/03\/ad7e45b61fc4676a2df3c2d33d5688b5.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>\u00dcks v\u00f5rdlevatest j\u00f5udluse testidest gRPC ja Prometheuse formaatide kasutamisest uues Kubeleti l\u00f5pp-punktis metrikate jaoks. Rohkem graafikute ja teiste detailide jaoks vaadake <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/enhancements\/blob\/master\/keps\/sig-node\/kubelet-resource-metrics-endpoint.md\">KEP<\/a><\/noindex>.<\/i><\/p>\n<p>Muudest muudatustest:<\/p>\n<ul>\n<li> Kubelet n\u00fc\u00fcd (korraga) <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/73802\">\u00fcritab peatada<\/a><\/noindex> tundmatud (unknown) konteinerid enne taask\u00e4ivitamise ja eemaldamise operatsioone.<\/li>\n<li> VPN-teenuse kasutamisel <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/workloads\/pods\/podpreset\/\"><code>PodPreset\u2019id<\/code><\/a><\/noindex> n\u00fc\u00fcd init-konteineril on <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/71479\">lisatakse<\/a><\/noindex> sama teave, mis tavalisel konteineril.<\/li>\n<li> Kubelet <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/73659\">alustanud kasutama<\/a><\/noindex> <code>usageNanoCores<\/code> CRI statistikateenuse pakkujast, samuti s\u00f5lmedele ja konteineritele Windows\u2019is <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/74788\">on lisatud<\/a><\/noindex> v\u00f5rgu statistikat.<\/li>\n<li> Operatsioonis\u00fcsteemi ja arhitektuuri teave kirjutatakse n\u00fc\u00fcd labelitesse. <code>kubernetes.io\/os<\/code> ja <code>kubernetes.io\/arch<\/code> Node'ide (t\u00f6\u00f6tav versioon muutus beetast GA-ks).<\/li>\n<li> V\u00f5imalus m\u00e4\u00e4rata spetsiifiline s\u00fcsteemne kasutajagrupp konteinerite jaoks pod'is (<code>RunAsGroup<\/code>, lisandus versioonis <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/415349\/\">K8s 1.11<\/a><\/noindex>) <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/73007\">edasi liikunud<\/a><\/noindex> beetaversiooni (vaikimisi sisse l\u00fclitatud).<\/li>\n<li> du ja find, mida kasutatakse cAdvisoris, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/74675\">asendatud<\/a><\/noindex> Go-realiseerimisega.<\/li>\n<\/ul>\n<p><\/p>\n<h2>CLI<\/h2>\n<p>\ncli-runtime'is ja kubectl's <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/74140\">lisatud<\/a><\/noindex> lipp -k integreerimiseks <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes-sigs\/kustomize\"><b>kustomize<\/b><\/a><\/noindex> (muide, selle arendamine toimub n\u00fc\u00fcd eraldi hoidlas), st spetsiaalsetest kaustadest kustomization'i t\u00e4iendavate YAML-failide t\u00f6\u00f6tlemiseks (kuidas neid kasutada vt <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/enhancements\/blob\/master\/keps\/sig-cli\/kustomize-file-processing-integration.md\">KEP<\/a><\/noindex>):<\/p>\n<p><img decoding=\"async\" alt=\"Kubernetes 1.14: peamiste uuenduste \u00fclevaade\" src=\"\/wp-content\/uploads\/2019\/03\/e38550cfb642d81237aad4d87b9b3386.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Lihtsa kustomization faili kasutamise n\u00e4ide <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes-sigs\/kustomize\/blob\/master\/docs\/glossary.md#kustomization\">kustomization<\/a><\/noindex> (v\u00f5imalik on ka keerulisem kustomize rakendus <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes-sigs\/kustomize\/blob\/master\/docs\/glossary.md#overlay\">overlays<\/a><\/noindex>)<\/i><\/p>\n<p>Lisaks:<\/p>\n<ul>\n<li> <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/71651\">Lisatud<\/a><\/noindex> uus k\u00e4sk <code>kubectl create cronjob<\/code>, mille nimi r\u00e4\u00e4gib enda eest.<\/li>\n<li> V <code>kubectl logs<\/code> on n\u00fc\u00fcd v\u00f5imalik <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/67573\">\u00fchendada<\/a><\/noindex> lipud <code>-f<\/code> (<code>--follow<\/code> logide voogesitamiseks) ja <code>-l<\/code> (<code>--selector<\/code> label query jaoks).<\/li>\n<li> kubectl <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/72641\">\u00f5ppisid<\/a><\/noindex> failide kopeerimist, kasutades wild card'i.<\/li>\n<li> Meeskonda <code>kubectl wait<\/code> <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/70599\">lisasid<\/a><\/noindex> lipuke <code>--all<\/code> k\u00f5igi m\u00e4\u00e4ratud ressursit\u00fc\u00fcpide valimiseks nimedega ruumis.<\/li>\n<\/ul>\n<p><\/p>\n<h2>Muud<\/h2>\n<p>\nStabiilse (GA) oleku said j\u00e4rgmised v\u00f5imalused:<\/p>\n<ul>\n<li> <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/workloads\/pods\/pod-lifecycle\/#pod-readiness-gate\"><code>ReadinessGate<\/code><\/a><\/noindex>, mis kasutatakse pod'i spetsifikatsioonis t\u00e4iendavate tingimuste m\u00e4\u00e4ratlemiseks, mida arvesse v\u00f5etakse pod'i valmisoleku m\u00e4\u00e4ramisel;<\/li>\n<li> Toetav suured lehed (funktsiooni v\u00e4rav nimega <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/tasks\/manage-hugepages\/scheduling-hugepages\/\"><code>HugePages<\/code><\/a><\/noindex>);<\/li>\n<li> <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/services-networking\/dns-pod-service\/#pod-s-dns-config\">CustomPodDNS<\/a><\/noindex>;<\/li>\n<li> PriorityClass API, <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/configuration\/pod-priority-preemption\/\">Pod Priority &amp; Preemption<\/a><\/noindex>.<\/li>\n<\/ul>\n<p>\nTeised muudatused, mis on esitatud Kubernetes 1.14:<\/p>\n<ul>\n<li> RBAC poliitika ei paku enam vaikimisi ligip\u00e4\u00e4su API-le <code>discovery<\/code> ja <code>access-review<\/code> kasutajatele, kellel puudub autentimine <i>(unauthenticated)<\/i>.<\/li>\n<li> CoreDNS ametlik tugi <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/69940\">on tagatud<\/a><\/noindex> ainult Linuxile, seega kui kasutate kubeadm'i selle (CoreDNS) juurutamiseks klastris, peavad s\u00f5lmed t\u00f6\u00f6tama ainult Linuxis (selle piirangu jaoks kasutatakse nodeSelectors).<\/li>\n<li> CoreDNS vaikimisi konfiguratsioon on n\u00fc\u00fcd <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/73267\">kasutab<\/a><\/noindex> <noindex><a rel=\"nofollow\" href=\"https:\/\/coredns.io\/plugins\/forward\/\">plugin forward<\/a><\/noindex> asemel proxy. Lisaks on CoreDNS <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/74137\">on lisatud<\/a><\/noindex> readinessProbe, mis takistab koormuse tasakaalustamist vastavatesse (mitte teenindavatesse) pod'idesse.<\/li>\n<li> Kubeadm'is, etappides <code>init<\/code> v\u00f5i <code>upload-certs<\/code>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/73907\">on n\u00fc\u00fcd v\u00f5imalik<\/a><\/noindex> laadida \u00fcles sertifikaadid, mis on vajalikud uue control-plane'i \u00fchendamiseks kubeadm-certs salvestusega (kasutatakse lippu <code>--experimental-upload-certs<\/code>).<\/li>\n<li> Windowsi installatsioonide jaoks on saadaval alfa versioon <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/enhancements\/issues\/689\">toetust<\/a><\/noindex> gMSA (Group Managed Service Account) \u2014 spetsiaalsed kontod Active Directory's, mida saavad kasutada konteinerid.<\/li>\n<li> GCE jaoks <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/kubernetes\/pull\/70144\">on aktiveeritud<\/a><\/noindex> mTLS kr\u00fcpteerimine jne ja kube-apiserveri vahel.<\/li>\n<li> Kasutatavates\/s\u00f5ltuvates tarkvarauuendustes: Go 1.12.1, CSI 1.1, CoreDNS 1.3.1, Docker 18.09 toetus kubeadm-is, ja minimaalne toetatud Docker API versioon on 1.26.<\/li>\n<\/ul>\n<p><\/p>\n<h2>P.S.<\/h2>\n<p>\nLugege ka meie blogist:<\/p>\n<ul>\n<li> \u00ab<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/company\/flant\/blog\/432208\/\">Kubernetes 1.13: \u00fclevaade peamistest uuendustest<\/a><\/noindex>\u00bb;<\/li>\n<li> \u00ab<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/company\/flant\/blog\/424331\/\">Kubernetes 1.12: \u00fclevaade peamistest uuendustest<\/a><\/noindex>\u00bb;<\/li>\n<li> \u00ab<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/company\/flant\/blog\/415349\/\">Kubernetes 1.11: peamiste uuenduste \u00fclevaade<\/a><\/noindex>\u00bb;<\/li>\n<li> \u00ab<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/company\/flant\/blog\/353114\/\">Kubernetes 1.10: peamiste uuenduste \u00fclevaade<\/a><\/noindex>\u00bb.<\/li>\n<\/ul>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/445196\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u042d\u0442\u043e\u0439 \u043d\u043e\u0447\u044c\u044e \u0441\u043e\u0441\u0442\u043e\u0438\u0442\u0441\u044f \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0440\u0435\u043b\u0438\u0437 Kubernetes \u2014 1.14. \u041f\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u0434\u043b\u044f \u043d\u0430\u0448\u0435\u0433\u043e \u0431\u043b\u043e\u0433\u0430 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u0438, \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u043e \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f\u0445 \u0432 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u0437\u0430\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e Open Source-\u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0434\u043b\u044f \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0438 \u044d\u0442\u043e\u0433\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430, \u0432\u0437\u044f\u0442\u0430 \u0438\u0437 \u0442\u0430\u0431\u043b\u0438\u0446\u044b Kubernetes enhancements tracking, CHANGELOG-1.14 \u0438 \u0441\u043e\u043e\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 issues, pull requests, Kubernetes Enhancement Proposals (KEP). \u041d\u0430\u0447\u043d\u0451\u043c \u0441 \u0432\u0430\u0436\u043d\u043e\u0433\u043e \u0432\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0442 SIG cluster-lifecycle: \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30272","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u042d\u0442\u043e\u0439 \u043d\u043e\u0447\u044c\u044e\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/kubernetes-1-14-obzor-osnovnyh-novshestv\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Kubernetes 1.14: \u043e\u0431\u0437\u043e\u0440 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u043d\u043e\u0432\u0448\u0435\u0441\u0442\u0432 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u042d\u0442\u043e\u0439 \u043d\u043e\u0447\u044c\u044e\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/kubernetes-1-14-obzor-osnovnyh-novshestv\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:34:36+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:34:36+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kubernetes 1.14: peamiste uuenduste \u00fclevaade | ProHoster","description":"Sel \u00f6\u00f6l","canonical_url":"https:\/\/prohoster.info\/et\/blog\/kubernetes-1-14-obzor-osnovnyh-novshestv","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Kubernetes 1.14: \u043e\u0431\u0437\u043e\u0440 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u043d\u043e\u0432\u0448\u0435\u0441\u0442\u0432 | ProHoster","og:description":"\u042d\u0442\u043e\u0439 \u043d\u043e\u0447\u044c\u044e","og:url":"https:\/\/prohoster.info\/et\/blog\/kubernetes-1-14-obzor-osnovnyh-novshestv","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:34:36+00:00","article:modified_time":"2019-10-31T18:34:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30272","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 00:28:09","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:37:28","updated":"2026-01-21 00:28:09","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30272","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=30272"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30272\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=30272"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=30272"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=30272"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}