Hanya IaC (Infrastructure as Code) ya ƙunshi ba wai kawai na lambar da aka adana a cikin ma'adana ba, har ma da mutane da tsarin da ke kewaye da wannan lambar. Shin zai yiwu a sake amfani da hanyoyin daga haɓaka software zuwa sarrafa abubuwan more rayuwa da bayanin? Zai yi kyau a kiyaye wannan ra'ayin yayin da kuke karanta labarin.

Wannan rubutun nawa ne wasanni a kan DevopsConf 2019-05-28.

Slides da bidiyo

Turanci
Harshen Rasha
Dry Run 2019-04-24 SpbLUG
Bidiyo (RU) daga DevopsConf 2019-05-28
Bidiyo(RU) daga DINS DevOps MARAICE 2019-06-20
nunin faifai

Kamfanoni a matsayin tarihin bash

A ce ka zo wani sabon aiki, sai su ce maka: “Muna da Kamfanoni a matsayin Code". A gaskiya shi dai itace Kamfanoni a matsayin tarihin bash ko misali Takardu azaman tarihin bash. Wannan lamari ne na gaske, alal misali, Denis Lysenko ya bayyana irin wannan lamari a cikin wani jawabi Yadda za a maye gurbin duka kayan aikin kuma fara barci cikin kwanciyar hankali, ya bayyana yadda suka samu daidaiton kayayyakin more rayuwa na aikin daga tarihin bash.

Tare da wasu sha'awa, za mu iya cewa Kamfanoni a matsayin tarihin bash wannan shine kamar code:

sake haifuwa: Kuna iya ɗaukar tarihin bash, gudanar da umarni daga can, kuma kuna iya, ta hanya, samun tsarin aiki azaman fitarwa.
versioning: kun san wanda ya shigo da abin da suka yi, kuma, ba gaskiya ba ne cewa wannan zai kai ku ga tsarin aiki a wurin fita.
tarihin: labarin wanda ya aikata. kawai ba za ku iya amfani da shi ba idan kun rasa uwar garken.

Menene zan yi?

Kamfanoni a matsayin Code

Ko da irin wannan bakon lamarin kamar Kamfanoni a matsayin tarihin bash zaka iya ja shi da kunnuwa Kamfanoni a matsayin Code, amma idan muna son yin wani abu mai rikitarwa fiye da tsohuwar uwar garken LAMP, za mu zo ga ƙarshe cewa wannan lambar tana buƙatar gyara ko ta yaya, canza, ingantawa. Na gaba muna so muyi la'akari da daidaitattun tsakanin Kamfanoni a matsayin Code da haɓaka software.

BUSHE

A kan aikin haɓaka tsarin ajiya, akwai ƙaramin aiki lokaci-lokaci saita SDS: muna fitar da sabon saki - yana buƙatar fitar da shi don ƙarin gwaji. Aikin yana da sauqi qwarai:

shiga nan ta hanyar ssh kuma aiwatar da umarnin.
kwafi fayil ɗin a can.
gyara saitin nan.
fara sabis a can
...
RIGA!

Don ma'anar da aka kwatanta, bash ya fi isa, musamman a farkon matakan aikin, lokacin da aka fara farawa. Wannan ba laifi kayi amfani da bash, amma bayan lokaci akwai buƙatun don tura wani abu makamancin haka, amma ɗan bambanta. Abu na farko da ke zuwa a zuciya shine kwafi-paste. Kuma yanzu muna da rubutun kamanni guda biyu waɗanda suke yin kusan abu ɗaya. Bayan lokaci, adadin rubutun ya karu, kuma mun fuskanci gaskiyar cewa akwai wata dabarar kasuwanci don ƙaddamar da shigarwa wanda ke buƙatar daidaitawa tsakanin rubutun daban-daban, wannan yana da rikitarwa sosai.

Sai ya zama cewa akwai irin wannan aiki kamar BUSHE (Kada ku Maimaita Kanku). Manufar ita ce a sake amfani da lambar data kasance. Yana da sauƙi, amma ba mu zo ga wannan ba nan da nan. A cikin yanayinmu, ra'ayin banal ne: don raba saiti daga rubutun. Wadancan. dabarun kasuwanci na yadda ake tura shigarwa daban, daidaitawa daban.

SOLID don CFM

A tsawon lokaci aikin ya girma kuma na halitta ci gaba shine fitowar Mai yiwuwa. Babban dalilin bayyanarsa shine akwai gwaninta akan ƙungiyar kuma ba a tsara bash ɗin don dabaru masu rikitarwa ba. Ansible kuma ya fara ƙunshi hadaddun dabaru. Don hana hadaddun dabaru rikiɗa zuwa hargitsi, akwai ƙa'idodi don tsara lamba a cikin haɓaka software MULKI Har ila yau, alal misali, Grigory Petrov a cikin rahoton "Me yasa ƙwararren IT ke buƙatar alamar sirri" ya tayar da tambayar cewa an tsara mutum ta hanyar da ya fi sauƙi a gare shi ya yi aiki tare da wasu ƙungiyoyin zamantakewa, a cikin ci gaban software. abubuwa ne. Idan muka haɗa waɗannan ra'ayoyin biyu kuma muka ci gaba da haɓaka su, za mu lura cewa za mu iya amfani da su MULKI don sauƙaƙa don kiyayewa da gyara wannan tunani a nan gaba.

Ka'idar Nauyi Daya

Kowane aji yana yin aiki ɗaya ne kawai.

Babu buƙatar haɗa lamba da yin dodanni na spaghetti na allahntaka monolithic. Ya kamata kayan aikin ya ƙunshi tubali masu sauƙi. Ya zama cewa idan kun raba littafin wasan kwaikwayo mai yiwuwa zuwa ƙananan ɓangarorin, karanta Ayyukan da za su iya, to suna da sauƙin kiyayewa.

Ƙa'idar Rufewa

Buɗe/rufe ƙa'ida.

Buɗe zuwa tsawo: yana nufin cewa za a iya tsawaita ɗabi'ar mahaɗan ta hanyar ƙirƙirar sabbin nau'ikan mahaɗan.
Rufewa don canzawa: Sakamakon tsawaita ɗabi'ar mahaluži, bai kamata a yi canje-canje ga lambar da ke amfani da waɗannan abubuwan ba.

Da farko, mun tura kayan aikin gwaji akan injunan kama-da-wane, amma saboda gaskiyar cewa dabarun kasuwanci na turawa ya bambanta da aiwatarwa, mun ƙara yin birgima zuwa baremetall ba tare da wata matsala ba.

Ka'idar Sauya Liskov

Ka'idar maye gurbin Barbara Liskov. Abubuwan da ke cikin shirin dole ne su kasance masu maye gurbinsu tare da misalan nau'ikan su ba tare da canza aiwatar da shirin daidai ba.

Idan ka kalle shi sosai, ba sifa ce ta kowane irin aiki da za a iya amfani da shi a wurin ba MULKI, gabaɗaya game da CFM ne, alal misali, akan wani aikin ya zama dole a tura aikace-aikacen Java mai akwatin akan Java daban-daban, sabobin aikace-aikacen, bayanan bayanai, OS, da sauransu. Yin amfani da wannan misalin, zan yi la'akari da ƙarin ƙa'idodi MULKI

A cikin yanayinmu, akwai yarjejeniya a cikin ƙungiyar abubuwan more rayuwa cewa idan mun shigar da rawar imbjava ko oraclejava, to muna da java binary executable. Wannan wajibi ne saboda Matsayi na sama ya dogara da wannan hali; suna tsammanin java. A lokaci guda, wannan yana ba mu damar maye gurbin aiwatarwa / sigar java ɗaya tare da wani ba tare da canza dabarun ƙaddamar da aikace-aikacen ba.

Matsalar a nan ta ta'allaka ne a cikin gaskiyar cewa ba zai yiwu a aiwatar da wannan a cikin Ansible ba, sakamakon hakan wasu yarjejeniyoyin sun bayyana a cikin ƙungiyar.

Ƙa'idar Rarraba Interface

Ƙa'idar rabuwa ta mu'amala: “Yawancin musaya na abokin ciniki sun fi maƙasudin maƙasudin gaba ɗaya.

Da farko, mun yi ƙoƙari mu sanya duk sauye-sauye na ƙaddamar da aikace-aikacen a cikin littafin wasan kwaikwayo guda ɗaya mai yiwuwa, amma yana da wuya a goyan baya, da kuma tsarin lokacin da muke da ƙayyadaddun ƙirar waje (abokin ciniki yana tsammanin tashar jiragen ruwa 443), to, za a iya haɗa kayan aiki daga mutum ɗaya. tubali don takamaiman aiwatarwa.

Ƙa'idar Juyar da Dogara

Ka'idar jujjuyawar dogaro. Moduloli a manyan matakan bai kamata su dogara da kayayyaki a ƙananan matakan ba. Duk nau'ikan kayayyaki biyu dole ne su dogara da abstractions. Abstractions kada ya dogara da cikakkun bayanai. Dole ne cikakkun bayanai su dogara da abstractions.

Anan misalin zai dogara ne akan antipattern.

Ɗaya daga cikin abokan cinikin yana da girgije mai zaman kansa.
Mun yi odar injunan kama-da-wane a cikin gajimare.
Amma saboda yanayin gajimare, ƙaddamar da aikace-aikacen yana da alaƙa da abin da hypervisor VM yake kunne.

Wadancan. Dabarun ƙaddamar da aikace-aikacen babban matakin ya gudana tare da dogaro zuwa ƙananan matakan hypervisor, kuma wannan yana nufin matsaloli yayin sake amfani da wannan dabaru. Kar ku yi haka.

hulda

Kamfanoni a matsayin lamba ba kawai game da lamba ba ne, har ma game da alaƙar lamba da mutane, game da hulɗar tsakanin masu haɓaka abubuwan more rayuwa.

Yanayin bas

Bari mu ɗauka cewa kuna da Vasya akan aikin ku. Vasya ya san komai game da kayan aikin ku, menene zai faru idan Vasya ya ɓace ba zato ba tsammani? Wannan lamari ne na gaske, domin za a iya buge shi da motar bas. Wani lokaci yana faruwa. Idan wannan ya faru da sanin game da lambar, tsarinsa, yadda yake aiki, bayyanar da kalmomin shiga ba a rarraba a tsakanin ƙungiyar ba, to za ku iya fuskantar wasu yanayi mara kyau. Don rage waɗannan haɗari da rarraba ilimi a cikin ƙungiyar, zaku iya amfani da hanyoyi daban-daban

Biyu Devopsing

Ba haka bane a matsayin wasa, cewa admins sun sha giya, canza kalmomin shiga, da analogue na shirye-shiryen biyu. Wadancan. injiniyoyi biyu suna zaune a kwamfuta ɗaya, madannai guda ɗaya kuma su fara saita abubuwan more rayuwa tare: kafa uwar garken, rubuta rawar da za ta iya, da sauransu. Yana da kyau, amma bai yi mana aiki ba. Amma lokuta na musamman na wannan aikin sunyi aiki. Wani sabon ma'aikaci ya zo, mashawarcinsa yana ɗaukar aiki na gaske tare da shi, yana aiki kuma yana canja wurin ilimi.

Wani lamari na musamman shine kiran aukuwa. A lokacin matsala, ƙungiyar masu aiki da waɗanda ke da hannu sun taru, ana nada shugaba ɗaya, wanda ke raba allonsa kuma ya faɗi yanayin tunani. Sauran mahalarta suna bin tunanin jagora, leken asirin dabaru daga na'urar wasan bidiyo, duba cewa basu rasa layi a cikin log ɗin ba, kuma su koyi sabbin abubuwa game da tsarin. Wannan hanya ta yi aiki sau da yawa fiye da a'a.

Binciken Code

A zahiri, ya fi tasiri don yada ilimi game da abubuwan more rayuwa da kuma yadda yake aiki ta amfani da bita na lamba:

An kwatanta kayan aikin ta hanyar lamba a cikin ma'ajin.
Canje-canje na faruwa a wani reshe daban.
A yayin buƙatar haɗin kai, zaku iya ganin delta na canje-canje a cikin kayan aikin.

Babban abin da ya fi daukar hankali a nan shi ne, an zabo masu bitar ne daya bayan daya, bisa ga jadawalin, watau. tare da wani mataki na yuwuwar za ku hau zuwa wani sabon yanki na kayayyakin more rayuwa.

salon code

Bayan lokaci, squabbles sun fara bayyana a lokacin sake dubawa, saboda ... masu bita suna da nasu salon da jujjuyawar masu bitar suka jera su da salo daban-daban: 2 sarari ko 4, camelCase ko snake_case. Ba zai yiwu a aiwatar da wannan ba nan take.

Tunani na farko shine bayar da shawarar yin amfani da linter, bayan haka, kowa injiniya ne, kowa yana da wayo. Amma masu gyara daban-daban, OS, ba su dace ba
Wannan ya samo asali zuwa bot wanda ya rubuta zuwa slack ga kowane matsala mai matsala kuma ya haɗa abin da aka fitar. Amma a mafi yawan lokuta akwai abubuwa masu mahimmanci da za a yi kuma lambar ta kasance ba a gyara ba.

Green Gina Jagora

Lokaci ya wuce, kuma mun kai ga ƙarshe cewa aikata wanda bai ci wasu gwaje-gwaje ba ba za a iya ba da izinin shiga cikin maigidan ba. Voila! Mun ƙirƙira Green Build Master, wanda aka daɗe ana aiwatar da shi wajen haɓaka software:

Ana ci gaba da ci gaba a wani reshe na daban.
Gwaje-gwaje suna gudana akan wannan layin.
Idan gwaje-gwajen sun gaza, lambar ba za ta sanya ta cikin maigidan ba.

Yin wannan shawarar ya yi zafi sosai, domin... ya haifar da cece-kuce, amma abin ya dace, domin... Reviews sun fara karɓar buƙatun don haɗakarwa ba tare da bambance-bambance a cikin salon ba, kuma bayan lokaci adadin wuraren matsala ya fara raguwa.

Gwajin IaC

Baya ga duba salon, zaku iya amfani da wasu abubuwa, alal misali, don bincika cewa kayan aikin ku na iya turawa da gaske. Ko duba cewa canje-canje a cikin abubuwan more rayuwa ba zai haifar da asarar kuɗi ba. Me yasa ana iya buƙatar wannan? Tambayar tana da rikitarwa kuma ta falsafa, yana da kyau a amsa tare da labarin cewa ko ta yaya akwai mai sikelin atomatik akan Powershell wanda bai bincika yanayin iyaka ba => An ƙirƙiri ƙarin VM fiye da larura => abokin ciniki ya kashe kuɗi fiye da yadda aka tsara. Wannan ba shi da daɗi sosai, amma zai yuwu a kama wannan kuskure a matakan farko.

Wani zai iya tambaya, me yasa hadaddun ababen more rayuwa suka fi rikitarwa? Gwaje-gwaje don abubuwan more rayuwa, kamar na lamba, ba game da sauƙaƙewa bane, amma game da sanin yadda yakamata kayan aikin ku suyi aiki.

Gwajin IaC Pyramid

Gwajin IaC: Nazarin A tsaye

Idan kun tura dukkanin kayan aikin lokaci daya kuma duba cewa yana aiki, za ku iya gano cewa yana ɗaukar lokaci mai yawa kuma yana buƙatar lokaci mai yawa. Don haka, tushen dole ne ya zama wani abu da ke aiki da sauri, yana da yawa, kuma yana rufe wurare masu yawa na farko.

Bash yana da hankali

Bari mu kalli misali maras muhimmanci. zaɓi duk fayiloli a cikin kundin adireshi na yanzu kuma kwafi zuwa wani wuri. Abu na farko da ke zuwa a zuciya:

for i in * ; do 
    cp $i /some/path/$i.bak
done

Idan akwai sarari a cikin sunan fayil fa? To, ok, muna da wayo, mun san yadda ake amfani da zance:

for i in * ; do cp "$i" "/some/path/$i.bak" ; done

Sannu da aikatawa? A'a! Menene idan babu komai a cikin kundin adireshi, watau. globbing ba zai yi aiki ba.

find . -type f -exec mv -v {} dst/{}.bak ;

Da kyau yanzu? A'a... Manta abin da zai iya zama a cikin sunan fayil n.

touch x
mv x  "$(printf "foonbar")"
find . -type f -print0 | xargs -0 mv -t /path/to/target-dir

Kayan aikin bincike a tsaye

Matsalar daga mataki na baya za a iya kamawa lokacin da muka manta da maganganun, don wannan akwai magunguna da yawa a cikin yanayi. Shellcheck, gabaɗaya akwai su da yawa, kuma da alama za ku iya samun linter don tarin ku a ƙarƙashin IDE ɗin ku.

Harshe
kayan aiki

Bash
Shellcheck

Ruby
RuboCop

python
Pilint

m
Mai yiwuwa Lint

Gwajin IaC: Gwajin Raka'a

Kamar yadda muka gani daga misalin da ya gabata, linters ba su da ikon komi kuma ba za su iya nuna duk wuraren da ake samun matsala ba. Ƙari ga haka, ta hanyar kwatanci tare da gwaji a cikin haɓaka software, za mu iya tunawa da gwajin naúrar. Abin da ke zuwa a rai nan da nan shi ne shunit, junit, rspec, mafi kyau. Amma abin da za a yi da mai yiwuwa, shugaba, gishiri da sauran irin su?

A farkon munyi magana akai MULKI kuma ya kamata ababen more rayuwa su kunshi kananan tubali. Lokacin su ya zo.

An raba abubuwan more rayuwa zuwa ƙananan tubali, alal misali, Matsayi mai yiwuwa.
Ana tura wani nau'in mahalli, ya zama docker ko VM.
Muna amfani da rawar da muke takawa ga wannan yanayin gwaji.
Muna duba cewa komai yayi aiki kamar yadda muka zata (muna gudanar da gwaje-gwaje).
Mun yanke shawara ok ko a'a.

Gwajin IaC: Kayan aikin Gwaji na Raka

Tambaya, menene gwaje-gwaje na CFM? Kuna iya gudanar da rubutun kawai, ko kuma kuna iya amfani da shirye-shiryen da aka yi don wannan:

CFM
kayan aiki

Mai yiwuwa
Testinfra

kai
Dubawa

kai
Sabis na musamman

gishiri
gulma

Misali don testinfra, duba masu amfani test1, test2 wanzu kuma suna cikin rukuni sshusers:

def test_default_users(host):
    users = ['test1', 'test2' ]
    for login in users:
        assert host.user(login).exists
        assert 'sshusers' in host.user(login).groups

Me za a zaba? Tambayar tana da wuyar gaske kuma ba ta da tabbas, ga misalin canje-canje a cikin ayyukan akan github don 2018-2019:

Tsarin Gwajin IaC

Tambayar ta taso: yadda za a haɗa shi duka tare da kaddamar da shi? Can dauka ka yi da kanka idan akwai isassun adadin injiniyoyi. Ko kuma kuna iya ɗaukar shirye-shiryen da aka yi, kodayake ba su da yawa sosai:

CFM
kayan aiki

Mai yiwuwa
kwayoyin

kai
Gwajin dafa abinci

Terraform
Mafi Girma

Misalin canje-canje a ayyukan akan github na 2018-2019:

Molecule vs. Kitchen

Da farko mu gwada amfani da testkitchen:

Ƙirƙiri VM a layi daya.
Aiwatar da ayyuka masu dacewa.
Gudanar da dubawa.

Don ayyukan 25-35 ya yi aiki na mintuna 40-70, wanda ya daɗe.

Mataki na gaba shine canzawa zuwa jenkins/docker/mai yiwuwa/molecule. Idolojik komai daya ne

Littattafan wasan kwaikwayo.
Yi layi a matsayin.
Kaddamar da kwantena
Aiwatar da ayyuka masu dacewa.
Gudu testinfra.
Duba rashin ƙarfi.

Rikicin ayyuka 40 da gwaje-gwaje na dozin sun fara ɗaukar kusan mintuna 15.

Abin da za a zaɓa ya dogara da abubuwa da yawa, kamar tarin da aka yi amfani da shi, gwaninta a cikin ƙungiyar, da dai sauransu. a nan kowa ya yanke shawara da kansa yadda za a rufe tambayar gwaji na Unit

Gwajin IaC: Gwajin Haɗin Kai

Mataki na gaba a cikin dala gwajin ababen more rayuwa zai zama gwaje-gwajen haɗin kai. Suna kama da gwajin Unit:

An raba abubuwan more rayuwa zuwa ƙananan tubali, misali ayyuka masu yiwuwa.
Ana tura wani nau'in mahalli, ya zama docker ko VM.
Don wannan yanayin gwajin nema da yawa Matsayi mai yiwuwa.
Muna duba cewa komai yayi aiki kamar yadda muka zata (muna gudanar da gwaje-gwaje).
Mun yanke shawara ok ko a'a.

Kusan magana, ba ma bincika aikin kowane ɓangaren tsarin kamar a cikin gwaje-gwajen naúrar, muna bincika yadda aka daidaita sabar gaba ɗaya.

Gwajin IaC: Ƙarshen Gwajin Ƙarshe

A saman dala ana gaishe mu da gwajin Ƙarshe zuwa Ƙarshe. Wadancan. Ba ma duba aikin sabar daban, rubutun daban, ko bulo na kayan aikin mu daban. Mun bincika cewa yawancin sabobin sun haɗa tare, kayan aikin mu suna aiki kamar yadda muke tsammani. Abin takaici, ban taba ganin shirye-shiryen da aka yi da akwatin ba, watakila saboda ... Abubuwan ababen more rayuwa galibi na musamman ne kuma suna da wahalar yin samfuri da ƙirƙirar tsarin gwaji. Sakamakon haka, kowa ya kirkiro nasa mafita. Akwai bukata, amma babu amsa. Don haka, zan gaya muku abin da yake don tura wasu zuwa tunani mai kyau ko kuma shafa hancina a cikin gaskiyar cewa an ƙirƙira komai tun kafin mu.

Aiki mai tarin tarihi. Ana amfani da shi a cikin manyan kungiyoyi kuma tabbas kowannenku ya ketare hanya tare da shi a kaikaice. Aikace-aikacen yana goyan bayan bayanan bayanai da yawa, haɗin kai, da sauransu. Sanin abin da abubuwan more rayuwa zasu yi kama shine babban fayil ɗin docker-compose, da sanin waɗanne gwaje-gwajen da za a gudanar a cikin wane yanayi Jenkins ne.

Wannan tsarin ya yi aiki na dogon lokaci, har sai a cikin tsarin bincike Ba mu yi ƙoƙarin canja wurin wannan zuwa Openshift ba. Kwantena sun kasance iri ɗaya, amma yanayin ƙaddamarwa ya canza (sannu DRY kuma).

Tunanin binciken ya ci gaba, kuma a cikin buɗaɗɗen aiki sun sami irin wannan abu kamar APB (Bundle Playbook mai dacewa), wanda ke ba ka damar tattara ilimin yadda ake tura abubuwan more rayuwa cikin akwati. Wadancan. akwai abin da za a iya maimaitawa, wanda za a iya gwadawa na ilimin yadda ake tura kayan aikin.

Duk wannan ya yi kyau har sai mun shiga cikin abubuwan more rayuwa daban-daban: muna buƙatar Windows don gwaje-gwaje. A sakamakon haka, sanin abin da, inda, yadda za a tura, da gwaji yana cikin jenkins.

Kammalawa

Kamfanoni kamar yadda Code yake

Code a cikin ma'ajiyar.
Mu'amalar dan Adam.
Gwajin ababen more rayuwa.

links

source: www.habr.com

Abin da Na Koyi Daga Gwajin Layin Layi 200 na Code Infrastructure Code