Críochnaíonn an t-alt seo an tsraith nótaí aistrithe faoin údar OpenWhisk . Inniu féachfaimid ar an bpróiseas chun OpenWhisk a imscaradh thar Kubernetes le horduithe ceartaithe chun oibriú le leaganacha reatha d’fheidhmchláir. Clúdóidh sé freisin an próiseas a bhaineann le feidhmeanna OpenWhisk a rith ag baint úsáide as Knative agus TektonCD ar Kubernetes ag baint úsáide as am rite Nodejs.
OpenWhisk a imscaradh ar Kubernetes
Thar chúpla lá, rinne mé triail as OpenWhisk a imscaradh go Kubernetes chun talamh tástála simplí tapa a chruthú. Agus ós rud é go bhfuil Kubernetes nua agam, creidim gur caitheadh lá go leith ar imscaradh rathúil. IN Tá treoracha an-soiléir ag na stórtha maidir le himscaradh OpenWhisk ar Kubernetes. Seo iad na treoracha imlonnaithe a rinneadh le haghaidh Mac (Déanfaidh mé gach rud freisin Linux, mar is fearr liom Linux. — thart. aistritheoir).
- Suiteáil an bainisteoir pacáiste
asdf, tar éis dúinn a cheartú go huathoibríoch~/.bash_profilenó a chomhionann mar seo:
$ brew install asdf
$ [ -s "/usr/local/opt/asdf/asdf.sh" ] && . /usr/local/opt/asdf/asdf.sh
$ source ~/.bash_profile[Ar Linux Ní gá an chéim seo, cé go bhfuil deoch ar fáil. — thart. aistritheoir]
- Breiseáin á gcur leis
minikubeиkubelet:
$ asdf plugin-add kubectl
$ asdf plugin-add minikube[Arís, scipeáilimid an chéim seo Linux. — thart. aistritheoir]
- Suiteáil minikube agus kubelet:
$ asdf install kubectl 1.9.0
$ asdf global kubectl 1.9.0
$ asdf install minikube 0.25.2
$ asdf global minikube 0.25.2[tá leaganacha sonracha suiteáilte, ach rinne mé seiceáil ar gach rud ar na leaganacha is déanaí atá ar fáil le haghaidh LinuxTá amhras orm gur féidir leat an leagan is déanaí a shuiteáil go sábháilte. — thart. aistritheoir]
Ar Linux Déantar an chéim seo rud éigin mar seo (tá gach rud suiteáilte i ~/bin, atá i mo PATH, nóta an aistritheora):
$ curl -L0 minikube https://storage.googleapis.com/minikube/releases/latest/minikube-linux-amd64 && chmod +x minikube && mv minikube ~/bin/
$ curl -L0 https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/linux/amd64/kubectl && chmod +x kubectl && mv kubectl ~/bin/- Cruthaigh meaisín fíorúil minikube (ní mór VirtualBox a bheith réamhshuiteáilte):
$ minikube start --cpus 2 --memory 4096 --kubernetes-version=v1.9.0 --extra-config=apiserver.Authorization.Mode=RBAC[Oibríonn gach rud domsa leis an bhfoireann minikube start , gan paraiméadair agus le luachanna réamhshocraithe. — thart. aistritheoir]
$ minikube start
minikube v1.5.2 on Debian 8.11
Automatically selected the 'virtualbox' driver
Downloading VM boot image ...
> minikube-v1.5.1.iso.sha256: 65 B / 65 B [--------------] 100.00% ? p/s 0s
> minikube-v1.5.1.iso: 143.76 MiB / 143.76 MiB [-] 100.00% 5.63 MiB p/s 26s
Creating virtualbox VM (CPUs=2, Memory=4096MB, Disk=20000MB) ...
Preparing Kubernetes v1.16.2 on Docker '18.09.9' ...
Downloading kubelet v1.16.2
Downloading kubeadm v1.16.2
Pulling images ...
Launching Kubernetes ... Waiting for: apiserver
Done! kubectl is now configured to use "minikube"- Ag aistriú an líonra in Docker go mód promiscuous:
$ minikube ssh -- sudo ip link set docker0 promisc on- Cruthaigh ainmspás agus marcáil an nód oibrithe:
$ kubectl create namespace openwhisk
$ kubectl label nodes --all openwhisk-role=invoker- Faighimid a bhfuil sa stór agus sáraítear an cineál iontrála sa chomhad mycluster.yaml:
$ git clone https://github.com/apache/incubator-openwhisk-deploy-kube.git
$ cd incubator-openwhisk-deploy-kube/
$ cat << "EOF" > mycluster.yaml
whisk:
ingress:
type: NodePort
api_host_name: 192.168.99.100
api_host_port: 31001
nginx:
httpsNodePort: 31001
EOF- Suiteáil Helm agus imscaradh é á úsáid:
$ brew install kubernetes-helm
$ helm init # init Helm Tiller, не нужно на Helm v3+
$ kubectl get pods -n kube-system # verify that tiller-deploy is in the running state, не нужно на helm v3+
$ kubectl create clusterrolebinding tiller-cluster-admin --clusterrole=cluster-admin --serviceaccount=kube-system:default
$ helm install ./openwhisk/helm/ --namespace=openwhisk -f mycluster.yaml[Ar Linux Leis na leaganacha is déanaí (bhí v3.0.1 ar fáil) beidh sé beagán difriúil. — thart. aistritheoir]
$ curl -L0 https://get.helm.sh/helm-v3.0.1-linux-amd64.tar.gz | tar -xzvf - linux-amd64/helm --strip-components=1; sudo mv helm /usr/local/bin
$ kubectl create clusterrolebinding tiller-cluster-admin --clusterrole=cluster-admin --serviceaccount=kube-system:default
$ helm install ./openwhisk/helm/ --namespace=openwhisk --generate-name -f mycluster.yaml- Déanaimid seiceáil go bhfuil gach rud ardaithe (STATUS = Rith nó Críochnaithe):
$ kubectl get pods -n openwhisk
NAME READY STATUS RESTARTS AGE
openwhisk-1576070780-alarmprovider-6868dc694-plvpf 1/1 Running 1 1d5h
openwhisk-1576070780-apigateway-8d56f4979-825hf 1/1 Running 1 1d5h
openwhisk-1576070780-cloudantprovider-544bb46596-9scph 1/1 Running 1 1d5h
openwhisk-1576070780-controller-0 1/1 Running 2 1d5h
openwhisk-1576070780-couchdb-7fd7f6c7cc-42tw6 1/1 Running 1 1d5h
openwhisk-1576070780-gen-certs-z9nsb 0/1 Completed 0 1d5h
openwhisk-1576070780-init-couchdb-r2vmt 0/1 Completed 0 1d5h
openwhisk-1576070780-install-packages-27dtr 0/1 Completed 0 1d4h
openwhisk-1576070780-invoker-0 1/1 Running 1 1d5h
openwhisk-1576070780-kafka-0 1/1 Running 1 1d5h
openwhisk-1576070780-kafkaprovider-f8b4cf4fc-7z4gt 1/1 Running 1 1d5h
openwhisk-1576070780-nginx-6dbdbf69bc-5x76n 1/1 Running 1 1d5h
openwhisk-1576070780-redis-cfd8756f4-hkrt6 1/1 Running 1 1d5h
openwhisk-1576070780-wskadmin 1/1 Running 1 1d5h
openwhisk-1576070780-zookeeper-0 1/1 Running 1 1d5h
wskopenwhisk-1576070780-invoker-00-1-prewarm-nodejs10 1/1 Running 0 61s
wskopenwhisk-1576070780-invoker-00-2-prewarm-nodejs10 1/1 Running 0 61s
wskopenwhisk-1576070780-invoker-00-3-whisksystem-invokerhealtht 1/1 Running 0 59s- Cumrú wsk chun na hoibre:
$ wsk property set --apihost 192.168.99.100:31001
$ wsk property set --auth 23bc46b1-71f6-4ed5-8c54-816aa4f8c502:123zO3xZCLrMN6v2BKK1dXYFpXlPkccOFqm12CdAsMgRU4VrNZ9lyGVCGuMDGIwPDéanaimid seiceáil:
$ wsk -i list
Entities in namespace: default
packages
actions
triggers
rulesFadhbanna agus Réitigh
getsockopt: diúltaíodh don nasc
$ wsk -i list
error: Unable to obtain the list of entities for namespace 'default': Get http://192.168.99.100:31001/api/v1/namespaces/_/actions?limit=0&skip=0: dial tcp 192.168.99.100:31001: getsockopt: connection refusedAg seiceáil go bhfuil na coimeádáin san ainmspás openwhisk i stádas Running, mar uaireanta tuairteanna sé le hearráidí CreateContainerConfigError.
Invoker fós ag tosú — Init:1/2
Féadfaidh an próiseas a bhaineann le timpeallachtaí rite éagsúla a íoslódáil go leor ama a ghlacadh. Chun rudaí a bhrostú, is féidir leat liosta íosta giorraithe a shonrú sa chomhad mycluster.yaml:
whisk:
runtimes: "runtimes-minimal-travis.json"Coimeádán leis an ainm -suiteáil-pacáistí- tuairteanna go Earráid
Méadaigh na tréimhsí ama le haghaidh tástálacha beo.
Suiteáil OpenWhisk thar Knative
Rinne Priti Desai an tsuiteáil ar bharr braisle sa scamall IBM, chomh maith le mionkube rialta, ag baint úsáide as Knative Build agus BuildTemplates. Suiteáilfidh mé freisin ar bharr minukube, bunaithe ar conas inár mblag níos luaithe - ag baint úsáide as na leaganacha bogearraí is déanaí. Ós rud é go bhfuil Knative Build and BuildTemplates dímheasta go hoifigiúil, úsáidfidh mé an t-athsholáthar molta i bhfoirm Píblínte Tekton. Scríobhadh an chuid eile den alt tar éis na doiciméid le haghaidh Tekton Pipelines a léamh, ach tá sé bunaithe ar smaointe Priti. Chun oibriú, beidh rochtain ag teastáil uait ar roinnt Clárlann Docker - úsáidfidh mise, cosúil leis an údar bunaidh, DockerHub.
$ curl -L0 https://github.com/solo-io/gloo/releases/download/v1.2.10/glooctl-linux-amd64; chmod +x glooctl-linux-amd64; mv glooctl-linux-amd64 ~/bin
$ glooctl install knative
$ kubectl get pods -n knative-serving
NAME READY STATUS RESTARTS AGE
activator-77fc555665-rvrst 1/1 Running 0 2m23s
autoscaler-5c98b7c9b6-x8hh4 1/1 Running 0 2m21s
autoscaler-hpa-5cfd4f6845-w87kq 1/1 Running 0 2m22s
controller-7fd74c8f67-tprm8 1/1 Running 0 2m19s
webhook-74847bb77c-txr2g 1/1 Running 0 2m17s
$ kubectl get pods -n gloo-system
NAME READY STATUS RESTARTS AGE
discovery-859d7fbc9c-8xhvh 1/1 Running 0 51s
gloo-545886d9c6-85mwt 1/1 Running 0 51s
ingress-67d4996d75-lkkmw 1/1 Running 0 50s
knative-external-proxy-767dfd656c-wwv2z 1/1 Running 0 50s
knative-internal-proxy-6fdddcc6b5-7vqd8 1/1 Running 0 51s
Ag tógáil agus ag rith OpenWhisk ar bharr Knative
- Ag fáil na n-ábhar :
$ git clone https://github.com/tektoncd/catalog/
$ cd catalog/openwhisk- Shocraigh muid na sonraí chun rochtain a fháil ar an gClárlann mar athróga comhshaoil agus sábhálaimid iad mar rún Kubernetes:
$ export DOCKER_USERNAME=<your docker hub username>
$ export DOCKER_PASSWORD=<your docker hub password>
$ sed -e 's/${DOCKER_USERNAME}/'"$DOCKER_USERNAME"'/' -e 's/${DOCKER_PASSWORD}/'"$DOCKER_PASSWORD"'/' docker-secret.yaml.tmpl > docker-secret.yaml
$ kubectl apply -f docker-secret.yamlDéanaimid seiceáil:
$ kubectl get secret
NAME TYPE DATA AGE
dockerhub-user-pass kubernetes.io/basic-auth 2 21s- Cruthaigh cuntas le haghaidh timpeallachtaí foirgníochta:
$ kubectl apply -f service-account.yamlDéanaimid seiceáil:
$ kubectl get serviceaccount/openwhisk-runtime-builder
NAME SECRETS AGE
openwhisk-runtime-builder 2 31m- Cruthaigh tasc chun íomhá a thógáil do OpenWhisk
$ kubectl apply -f openwhisk.yaml
task.tekton.dev/openwhisk created- Déanaimid an tasc chun an íomhá a thógáil (ag úsáid NodeJS mar shampla):
Cruthaigh comhad taskrun.yaml leis an ábhar:
# Git Pipeline Resource for OpenWhisk NodeJS Runtime
apiVersion: tekton.dev/v1alpha1
kind: PipelineResource
metadata:
name: openwhisk-nodejs-runtime-git
spec:
type: git
params:
- name: revision
value: master
- name: url
value: https://github.com/apache/openwhisk-runtime-nodejs.git
---
# Image Pipeline Resource for OpenWhisk NodeJS Sample Application
apiVersion: tekton.dev/v1alpha1
kind: PipelineResource
metadata:
name: openwhisk-nodejs-helloworld-image
spec:
type: image
params:
- name: url
value: docker.io/${DOCKER_USERNAME}/openwhisk-nodejs-helloworld
---
# Task Run to build NodeJS image with the action source
apiVersion: tekton.dev/v1alpha1
kind: TaskRun
metadata:
name: openwhisk-nodejs-helloworld
spec:
serviceAccountName: openwhisk-runtime-builder
taskRef:
name: openwhisk
inputs:
resources:
- name: runtime-git
resourceRef:
name: openwhisk-nodejs-runtime-git
params:
- name: DOCKERFILE
value: "./runtime-git/core/nodejs10Action/knative/Dockerfile"
- name: OW_ACTION_NAME
value: "nodejs-helloworld"
- name: OW_ACTION_CODE
value: "function main() {return {payload: 'Hello World!'};}"
- name: OW_PROJECT_URL
value: ""
outputs:
resources:
- name: runtime-image
resourceRef:
name: openwhisk-nodejs-helloworld-image
---Cuirimid na sonraí reatha don chomhad seo i bhfeidhm:
$ sed 's/${DOCKER_USERNAME}/'"$DOCKER_USERNAME"'/' -i taskrun.yamlDéanaimid iarratas:
$ kubectl apply -f taskrun.yaml
pipelineresource.tekton.dev/openwhisk-nodejs-runtime-git created
pipelineresource.tekton.dev/openwhisk-nodejs-helloworld-image created
taskrun.tekton.dev/openwhisk-nodejs-helloworld createdIs éard atá i gceist le seiceáil na hoibre ná ainm an choda a fháil agus a stádas a fheiceáil. Is féidir leat logáil isteach gach céime a fheiceáil freisin, mar shampla:
$ kubectl get taskrun
NAME SUCCEEDED REASON STARTTIME COMPLETIONTIME
openwhisk-nodejs-helloworld True Succeeded 5m15s 44s
$ kubectl get pod openwhisk-nodejs-helloworld-pod-4640d3
NAME READY STATUS RESTARTS AGE
openwhisk-nodejs-helloworld-pod-4640d3 0/6 Completed 0 5m20s
$ kubectl logs openwhisk-nodejs-helloworld-pod-4640d3 -c step-git-source-openwhisk-nodejs-runtime-git-r8vhr
{"level":"info","ts":1576532931.5880227,"logger":"fallback-logger","caller":"logging/config.go:69","msg":"Fetch GitHub commit ID from kodata failed: open /var/run/ko/refs/heads/master: no such file or directory"}
{"level":"info","ts":1576532936.538926,"logger":"fallback-logger","caller":"git/git.go:81","msg":"Successfully cloned https://github.com/apache/openwhisk-runtime-nodejs.git @ master in path /workspace/runtime-git"}
{"level":"warn","ts":1576532936.5395331,"logger":"fallback-logger","caller":"git/git.go:128","msg":"Unexpected error: creating symlink: symlink /tekton/home/.ssh /root/.ssh: file exists"}
{"level":"info","ts":1576532936.8202565,"logger":"fallback-logger","caller":"git/git.go:109","msg":"Successfully initialized and updated submodules in path /workspace/runtime-git"}Tar éis é a fhorghníomhú, beidh íomhá againn sa Chlárlann is féidir a imscaradh ag baint úsáide as an bhfóntas kn, atá deartha chun oibriú le seirbhísí Knative, mar shampla:
kn service create nodejs-helloworld --image docker.io/${DOCKER_USERNAME}/openwhisk-nodejs-helloworld
Service 'nodejs-helloworld' successfully created in namespace 'default'.
Waiting for service 'nodejs-helloworld' to become ready ... OK
Service URL:
http://nodejs-helloworld.default.example.comMá úsáideann tú Gloo, is féidir leat a fheidhmiúlacht a sheiceáil mar seo:
$ curl -H "Host: nodejs-helloworld.default.example.com" -X POST $(glooctl proxy url --name knative-external-proxy)
{"OK":true}
$ curl -H "Host: nodejs-helloworld.default.example.com" -X POST $(glooctl proxy url --name knative-external-proxy)
{"payload":"Hello World!"}Ailt eile sa tsraith
Foinse: will.com
