"Mene ne bambanci tsakanin Kubernetes da OpenShift?" – wannan tambaya taso tare da m daidaito. Ko da yake a zahiri wannan kamar tambayar yadda mota ta bambanta da injin. Idan muka ci gaba da kwatankwacin, to, mota ita ce ƙãre samfurin, za ka iya amfani da shi nan da nan, a zahiri: shiga da tafi. A daya bangaren kuma, domin injin ya kai ka wani wuri, sai a fara kara masa wasu abubuwa da dama domin a samu mota iri daya.
Saboda haka, Kubernetes shine injin da aka haɗa motar alamar OpenShift (dandamali), wanda zai kai ku ga burin ku.
A cikin wannan labarin muna son tunatar da ku kuma mu bincika mahimman abubuwan da ke gaba a cikin ɗan daki-daki:
- Kubernetes shine zuciyar dandalin OpenShift kuma yana da 100% ƙwararrun Kubernetes, gaba ɗaya buɗe tushen kuma ba tare da ƙarancin mallakar mallaka ba. A takaice:
- API ɗin OpenShift cluster shine XNUMX% Kubernetes.
- Idan kwandon yana gudana akan kowane tsarin Kubernetes, to zai gudana akan OpenShift ba tare da wani canje-canje ba. Babu buƙatar yin canje-canje ga aikace-aikacen.
- OpenShift ba kawai yana ƙara fasali masu amfani da ayyuka ga Kubernetes ba. Kamar mota, OpenShift ya fita daga cikin akwatin, ana iya sanya shi cikin samarwa nan da nan, kuma, kamar yadda za mu nuna a ƙasa, yana sa rayuwar mai haɓakawa ta fi sauƙi. Shi ya sa OpenShift ya haɗu a cikin mutane biyu. Yana da babban nasara kuma sanannen dandamali na PaaS na masana'antu daga hangen mai haɓakawa. Kuma a lokaci guda, yana da babban abin dogaro da kwantena-as-a-Service mafita daga mahangar aikin masana'antu.
OpenShift shine Kubernetes tare da takaddun shaida na CNCF 100%.
OpenShift ya dogara ne akan . Sabili da haka, bayan horarwa mai kyau, masu amfani suna mamakin ikon kubectl. Kuma waɗanda suka canza zuwa OpenShift daga Kubernetes Cluster sau da yawa suna faɗin nawa suke son hakan bayan sun tura kubeconfig zuwa gungu na OpenShift, duk rubutun da ke akwai suna aiki mara kyau.
Wataƙila kun ji labarin mai amfani da layin umarni na OpenShift da ake kira OC. Yana da cikakken umarni da jituwa tare da kubectl, kuma yana ba da mataimaka masu amfani da yawa waɗanda zasu zo da amfani yayin aiwatar da ayyuka da yawa. Amma da farko, ɗan ƙarin game da dacewa da OC da kubectl:
kubectl umarni
Ƙungiyoyin OC
kubectl samun kwafsa
oc samun kwando
kubectl sami wuraren suna
oc samun wuraren suna
kubectl ƙirƙirar -f ƙaddamarwa.yaml
oc ƙirƙirar -f ƙaddamarwa.yaml
Ga yadda sakamakon amfani da kubectl akan OpenShift API yayi kama:
Kubectl sami kwasfa - mayar da kwasfa kamar yadda aka zata.
Kubectl sami wuraren suna – yana mayar da wuraren suna kamar yadda aka zata.
Umurnin kubectl ƙirƙirar -f mydeployment.yaml yana ƙirƙirar albarkatun kubernetes kamar kowane dandamali na Kubernetes, kamar yadda aka nuna a bidiyon da ke ƙasa:
A takaice dai, duk Kubernetes APIs suna da cikakkiyar samuwa a cikin OpenShift yayin da suke kiyaye daidaiton 100%. Shi ya sa .
OpenShift yana ƙara fasali masu amfani zuwa Kubernetes
Kubernetes APIs suna samuwa 100% a cikin OpenShift, amma daidaitaccen kubectl mai amfani da Kubernetes a fili ba shi da aiki da dacewa. Shi ya sa Red Hat ya ƙara fasali masu amfani da kayan aikin layin umarni zuwa Kubernetes, kamar OC (gajeren abokin ciniki na OpenShift) da ODO (OpenShift DO, wannan mai amfani yana nufin masu haɓakawa).
1. OC mai amfani - mafi ƙarfi da dacewa sigar Kubectl
Misali, ba kamar kubectl ba, yana ba ku damar ƙirƙirar sabbin wuraren suna da sauƙin sauya mahallin, kuma yana ba da umarni da yawa masu amfani ga masu haɓakawa, kamar gina hotunan kwantena da tura aikace-aikacen kai tsaye daga lambar tushe ko binaries (Source-to-image, s2i).
Bari mu kalli misalan yadda ginanniyar mataimaka da ci-gaba na aikin OC ke taimakawa wajen sauƙaƙa ayyukan yau da kullun.
Misali na farko shine sarrafa sararin samaniya. Kowane gungu na Kubernetes koyaushe yana da wuraren suna da yawa. Yawancin lokaci ana amfani da su don ƙirƙirar yanayin haɓakawa da samarwa, amma kuma ana iya amfani da su, alal misali, ba kowane mai haɓakawa da akwatin yashi na sirri. A aikace, wannan yana haifar da mai haɓakawa ya kasance yana canzawa akai-akai tsakanin wuraren suna, tunda kubectl yana gudana a cikin mahallin sarari na yanzu. Saboda haka, game da kubectl, mutane suna amfani da rubutun taimako don wannan. Amma lokacin amfani da OC, don canzawa zuwa sararin da ake so, kawai a ce "oc project namespace".
Kar ku tuna abin da ake kira sararin sunan da kuke buƙata? Babu matsala, kawai rubuta "oc samu ayyukan" don nuna cikakken jerin. Mai shakka yana mamakin yadda wannan zai yi aiki idan kawai kuna da damar yin amfani da iyakataccen yanki na wuraren suna akan tari? To, saboda kubectl kawai yana yin wannan daidai idan RBAC ta ba ku damar ganin duk wuraren da ke kan gungu, kuma a cikin manyan gungu ba kowa ake ba da irin wannan izini ba. Don haka, muna amsawa: ga OC wannan ba matsala ba ne kuma zai iya samar da cikakken jerin abubuwa a cikin irin wannan yanayin. Waɗannan ƙananan abubuwa ne waɗanda ke haɓaka tsarin haɗin gwiwar kamfanoni na Openshift da ingantaccen haɓakar wannan dandamali dangane da masu amfani da aikace-aikacen.
2. ODO - ingantaccen sigar kubectl don masu haɓakawa
Wani misali na Red Hat OpenShift na ingantawa akan Kubernetes shine mai amfani da layin umarni na ODO. An tsara shi don masu haɓakawa kuma yana ba ku damar tura lambar gida cikin sauri zuwa gungu na OpenShift mai nisa. Hakanan yana iya daidaita ayyukan cikin gida don daidaita duk canje-canjen lambar zuwa kwantena akan gungu na OpenShift mai nisa ba tare da sake ginawa, yin rajista, da sake tsara hotuna ba.
Bari mu kalli yadda OC da ODO suke yin aiki tare da kwantena da Kubernetes cikin sauƙi.
Kawai kwatanta guda biyu na ayyukan aiki lokacin da aka gina su akan kubectl, da lokacin da ake amfani da OC ko ODO.
• Ƙaddamar da lambar akan OpenShift ga waɗanda ba sa jin YAML:
Kubernetes/kubectl
$>git clone
1- Ƙirƙiri Dockerfile wanda ke gina hoton daga lamba
-----
DAGA kumburi
WORKDIR /usr/src/app
COPY kunshin*.json ./
COPY index.js ./
COPY ./app ./app
RUN npm shigar
Farashin 3000
CMD ["npm", "fara"]
—————
2- Muna gina hoton
$>podman gina...
3- Shiga cikin rajista
ku login...
4- Sanya hoton a cikin rajista
turawa
5- Ƙirƙirar fayilolin yaml don ƙaddamar da aikace-aikacen (deployment.yaml, service.yaml, ingress.yaml) - wannan shine mafi ƙanƙanta.
6- Sanya fayiloli masu bayyanawa:
Kubectl apply -f .
OpenShift/oc
$> oc sabon-app - sunan_application_name
OpenShift/odo
$>git clone
$> ƙirƙira bangaren nodejs myapp
$> turawa
• Canja yanayin yanayi: canza filin suna ko tarin aiki.
Kubernetes/kubectl
1- Ƙirƙiri mahallin a cikin kubeconfig don aikin "myproject"
2-kubectl set-context…
OpenShift/oc
oc project "myproject"
Ikon ingancin: “Abu ɗaya mai ban sha'awa ya bayyana a nan, har yanzu yana cikin sigar alpha. Wataƙila za mu iya sanya shi cikin samarwa?”
Ka yi tunanin ana zaune a cikin motar tsere kuma ana gaya mana cewa: “Mun kafa sabon nau’in birki, kuma, a gaskiya, amincinsu bai yi daidai ba tukuna... Amma kada ka damu, za mu inganta su sosai a lokacin karatun. na gasar zakarun Turai." Yaya kuke son wannan bege? Mu a Red Hat ba mu da farin ciki sosai. 🙂
Don haka, muna ƙoƙarin riƙe nau'ikan alpha har sai sun isa balagagge kuma mun yi cikakken gwajin yaƙi kuma muna jin ba su da aminci don amfani. Yawancin lokaci, komai yana wucewa ta matakin Dev Preview farko, sannan ta hanyar sannan kawai ya fito a matsayin sakin jama'a (GA), wanda ya riga ya tsaya tsayin daka cewa ya dace da samarwa.
Me yasa haka? Domin, kamar yadda yake tare da haɓakar kowace software, ba duk ra'ayoyin farko a cikin Kubernetes ba ne ke kaiwa ga sakin ƙarshe. Ko kuma sun kai gare shi har ma suna riƙe aikin da aka yi niyya, amma aiwatar da su ya sha bamban da na sigar alpha. Tare da dubban dubban abokan cinikin Red Hat da ke amfani da OpenShift don tallafawa ayyuka masu mahimmanci na manufa, muna ba da fifiko na musamman ga kwanciyar hankali na dandalinmu da goyon bayan dogon lokaci.
Red Hat ta himmatu wajen sakin OpenShift akai-akai da sabunta sigar Kubernetes da ke zuwa tare da ita. Misali, fitowar GA na yanzu na OpenShift 4.3 a lokacin wannan rubutun ya haɗa da Kubernetes 1.16, wanda shine raka'a ɗaya kawai a bayan sigar Kubernetes mai lamba 1.17. Don haka, muna ƙoƙarin samar wa abokin ciniki Kubernetes-aji na kamfani da samar da ƙarin kulawar inganci yayin da muke fitar da sabbin nau'ikan OpenShift.
Software yana gyarawa: "Akwai rami a cikin nau'in Kubernetes wanda muke da shi a samarwa. Kuma za ku iya rufe shi ta hanyar sabunta nau'ikan nau'ikan uku kawai. Ko akwai wasu zaɓuɓɓuka?
A cikin aikin buɗe tushen Kubernetes, gyare-gyaren software yawanci ana fitar da su azaman wani ɓangare na sakin gaba, wani lokacin yana rufe abubuwan da suka gabata ɗaya ko biyu da suka gabata, suna ba da ɗaukar hoto kaɗan kamar watanni 6.
Red Hat tana alfahari da sakin gyare-gyare masu mahimmanci a baya fiye da wasu da kuma ba da tallafi na tsawon lokaci. Dauki misali gata Kubernetes haɓaka rauni (): An gano shi a cikin Kubernetes 1.11, kuma an sake yin gyaran gyare-gyare na abubuwan da suka gabata har zuwa sigar 1.10.11 kawai, yana barin wannan a cikin rami a cikin duk fitowar Kubernetes da ta gabata, daga 1.x zuwa 1.9.
Hakan kuma, (Kubernetes 1.2 yana can), yana ɗaukar fitowar OpenShift tara da nuna kulawa a sarari ga abokan ciniki (ƙarin cikakkun bayanai ).
Yadda OpenShift da Red Hat ke motsa Kubernetes gaba
Red Hat ita ce babbar mai ba da gudummawa ta biyu mafi girma ta software ga buɗaɗɗen aikin Kubernetes, a bayan Google kawai, tare da 3 daga cikin 5 mafi yawan masu haɓakawa da suka fito daga Red Hat. Wani abin da ba a sani ba: yawancin ayyuka masu mahimmanci sun bayyana a cikin Kubernetes daidai a yunƙurin Red Hat, musamman, kamar:
- RBAC. Kubernetes ba su da ayyukan RBAC (ClusterRole, ClusterRoleBinding) har sai injiniyoyin Red Hat sun yanke shawarar aiwatar da su a matsayin wani ɓangare na dandalin kanta, kuma ba azaman ƙarin ayyukan OpenShift ba. Shin Red Hat yana jin tsoron inganta Kubernetes? Tabbas ba haka bane, saboda Red Hat yana bin ka'idodin buɗaɗɗen tushe kuma baya buga wasannin Open Core. Haɓakawa da sabbin abubuwa waɗanda al'ummomin ci gaba ke tafiyar da su, maimakon na mallakar mallaka, sun fi dacewa kuma sun fi karɓuwa, wanda ya yi daidai da babban burinmu na sanya software mai buɗewa ta fi amfani ga abokan cinikinmu.
- Manufofin tsaro don kwasfa (Manufofin Tsaro na Pod). Wannan manufar gudanar da aikace-aikacen amintattu a cikin kwas ɗin an fara aiwatar da shi a cikin OpenShift a ƙarƙashin sunan SCC (Matsalolin Tsaro). Kuma kamar yadda yake a cikin misalin da ya gabata, Red Hat ya yanke shawarar gabatar da waɗannan ci gaba a cikin aikin Kubernetes na buɗe don kowa ya iya amfani da su.
Za a iya ci gaba da wannan jerin misalai, amma kawai muna so mu nuna cewa Red Hat yana da gaske don haɓaka Kubernetes kuma ya sa ya zama mafi kyau ga kowa.
A bayyane yake cewa OpenShift shine Kubernetes. Menene bambance-bambancen? 🙂
Muna fatan cewa ta hanyar karanta wannan zuwa yanzu kun gane cewa Kubernetes shine ainihin ɓangaren OpenShift. Babban, amma nesa da guda ɗaya. A takaice dai, shigar da Kubernetes kawai ba zai ba ku dandamalin tsarin kasuwanci ba. Kuna buƙatar ƙara ingantaccen aiki, hanyar sadarwa, tsaro, saka idanu, sarrafa loggu, da ƙari. Bugu da ƙari, za ku yi wasu zaɓuka masu tsauri daga ɗimbin kayan aikin da ake da su (don jin daɗin bambancin yanayin yanayin, kawai duba. ) kuma ko ta yaya tabbatar da daidaito da daidaituwa don su yi aiki a matsayin daya. Bugu da kari, kuna buƙatar yin sabuntawa akai-akai da gwajin koma baya a duk lokacin da aka fitar da sabon sigar kowane ɓangaren abubuwan da kuke amfani da su. Wato baya ga ƙirƙira da kuma kula da ita kanta dandamali, kuna buƙatar magance duk wannan software. Ba shi yiwuwa a sami lokaci mai yawa don magance matsalolin kasuwanci da samun fa'ida mai fa'ida.
Amma game da OpenShift, Red Hat yana ɗaukar duk waɗannan rikice-rikice akan kansa kuma kawai yana ba ku cikakkiyar dandamali mai aiki, wanda ya haɗa da ba Kubernetes kanta kaɗai ba, har ma da dukkan saitin kayan aikin buɗe tushen da suka dace waɗanda ke juya Kubernetes zuwa ainihin aji na kasuwanci. Maganin da za ku iya nan da nan kuma gaba ɗaya cikin nutsuwa don ƙaddamar da samarwa. Kuma ba shakka, idan kuna da wasu tarin fasahar ku, to zaku iya haɗa OpenShift cikin hanyoyin da ake da su.
Dubi hoton da ke sama: duk abin da ke waje da Kubernetes rectangle shine inda Red Hat ya ƙara aikin da Kubernetes ba shi da shi, kamar yadda suke faɗa, ta hanyar zane. Kuma a yanzu za mu dubi manyan wuraren.
1. Mai ƙarfi OS azaman tushe: RHEL CoreOS ko RHEL
Red Hat ya kasance babban mai ba da gudummawar rarraba Linux don aikace-aikacen masu mahimmanci na kasuwanci fiye da shekaru 20. Ƙwararrun da muke tarawa da sabuntawa akai-akai a wannan yanki yana ba mu damar bayar da ingantaccen abin dogaro da aminci don aikin masana'antu na kwantena. RHEL CoreOS yana amfani da kwaya iri ɗaya kamar RHEL, amma an inganta shi da farko don ayyuka irin su kwantena masu gudana da kuma tafiyar da gungu na Kubernetes: rage girmansa da rashin iya canzawa ya sa ya fi sauƙi don saita gungu, autoscaling, ƙaddamar da faci, da dai sauransu. Duk waɗannan fasalulluka sun sa ya fi sauƙi. ingantaccen tushe don isar da ƙwarewar mai amfani iri ɗaya tare da OpenShift a cikin kewayon mahalli da yawa, daga ƙaramin ƙarfe zuwa gajimare masu zaman kansu da na jama'a.
2. Automation na IT ayyuka
Ƙaddamar da tsarin shigarwa ta atomatik da ayyukan rana-4 (wato, ayyukan yau da kullum) shine babban batu na OpenShift, yana sa ya fi sauƙi don gudanarwa, sabuntawa, da kuma kula da aikin dandalin kwandon a matakin mafi girma. Ana samun wannan ta hanyar tallafi ga masu aiki na Kubernetes a matakin kernel na OpenShift XNUMX.
OpenShift 4 kuma cikakken tsarin yanayin yanayin mafita ne dangane da ma'aikatan Kubernetes, wanda Red Hat kanta ta haɓaka da kuma ta abokan hulɗa na ɓangare na uku (duba. Red Hat, ko kantin kayan aiki , wanda Red Hat ya ƙirƙira don masu haɓaka ɓangare na uku).
Kundin kundin tsarin OpenShift 4 da aka haɗa ya ƙunshi fiye da masu aiki Kubernetes 180
3. Kayan Aikin Haɓaka
Tun daga 2011, OpenShift yana samuwa azaman dandamali na PaaS (Platform-as-a-Service) wanda ke sauƙaƙa rayuwa ga masu haɓakawa, yana taimaka musu su mai da hankali kan coding, kuma suna ba da tallafi na asali don harsunan shirye-shirye kamar Java, Node.js. , PHP, Ruby, Python, Go, da CI/CD ci gaba da haɗin kai da sabis na bayarwa, bayanan bayanai, da dai sauransu OpenShift 4 yana bayarwa , wanda ya haɗa da fiye da sabis na 100 bisa ga ma'aikatan Kubernetes waɗanda Red Hat suka haɓaka da abokanmu.
Ba kamar Kubernetes ba, OpenShift 4 yana da GUI mai sadaukarwa (), wanda ke taimaka wa masu haɓakawa da ƙoƙarin tura aikace-aikacen daga tushe daban-daban (git, rajista na waje, Dockerfile, da sauransu) zuwa cikin wuraren sunansu kuma yana hango alaƙar da ke tsakanin abubuwan aikace-aikacen.
Bugu da ƙari, OpenShift yana ba da saitin kayan aikin haɓaka Codeready, wanda, musamman, ya haɗa da , cikakken IDE mai cike da kwantena tare da haɗin yanar gizo wanda ke gudana kai tsaye a saman OpenShift kuma yana aiwatar da tsarin IDE-as-a-service. A gefe guda, ga waɗanda suke son yin aiki sosai a cikin yanayin gida, akwai Codeready Containers, cikakken nau'in OpenShift 4 wanda za'a iya tura shi akan kwamfutar tafi-da-gidanka.
Haɗin IDE azaman sabis don ingantaccen ci gaba akan dandamalin Kubernetes/OpenShift
OpenShift yana ba da cikakken tsarin CI / CD kai tsaye daga cikin akwatin, ko dai dangane da kwantena Jenkins da plugin. don yin aiki tare da bututun mai, ko tsarin CI/CD mai tushen Kubernetes (a halin yanzu a cikin sigar preview Tech). Duk waɗannan hanyoyin guda biyu suna haɗawa sosai tare da na'ura mai ba da hanya tsakanin hanyoyin sadarwa na OpenShift, yana ba ku damar kunna bututun mai, duba turawa, rajistan ayyukan, da ƙari.
4. Kayan Aiki
OpenShift yana ba ku damar ƙaddamar da aikace-aikace na al'ada na al'ada da mafita na tushen gajimare bisa sabbin gine-ginen gine-gine, kamar microservices ko mara sabar sabar. Maganin Mesh na OpenShift Service Mesh yana fitowa kai tsaye daga cikin akwatin tare da kayan aiki masu mahimmanci don kiyaye microservices, kamar Istio, Kiali da Jaeger. Bi da bi, da OpenShift Serverless bayani ya hada da ba kawai Knative, amma kuma kayayyakin aiki kamar Keda halitta a matsayin wani ɓangare na hadin gwiwa yunƙurin da Microsoft don samar da Azure ayyuka a kan OpenShift dandamali.
Haɗaɗɗen Maganin OpenShift ServiceMesh (Istio, Kiali, Jaeger) zai zama da amfani yayin haɓaka microservices
Don cike gibin da ke tsakanin aikace-aikacen gado da kwantena, OpenShift yanzu yana ba da izinin ƙaura na'ura zuwa dandamali na OpenShift ta amfani da Container Native Virtualization (a halin yanzu a cikin TechPreview), yin aikace-aikacen matasan gaskiya da sauƙaƙe ƙaura tsakanin gajimare daban-daban, na masu zaman kansu da na jama'a.
Windows 2019 Injin kama-da-wane da ke gudana akan OpenShift ta hanyar Hannun Hannun Halitta (a halin yanzu a cikin sigar preview Tech)
5. Kayan aiki don gungu
Duk wani dandali na kamfani dole ne ya kasance yana da sa ido da sabis na shiga tsakani, hanyoyin tsaro, tantancewa da izini, da kayan aikin sarrafa cibiyar sadarwa. Kuma OpenShift yana ba da duk waɗannan daga cikin akwatin, kuma duka 100% buɗe tushen, gami da mafita kamar ElasticSearch, Prometheus, Grafana. Duk waɗannan mafita sun zo tare da dashboards, awo, da faɗakarwa waɗanda an riga an gina su kuma an daidaita su ta amfani da ƙwarewar sa ido na gungu na Red Hat, yana ba ku damar sarrafawa da lura da yanayin samar da ku tun daga farko.
OpenShift kuma ya zo daidai da abubuwa masu mahimmanci ga abokan ciniki na kamfani kamar ingantaccen aiki tare da ginanniyar bayar da rantsuwa, haɗin kai tare da masu samar da takaddun shaida, gami da LDAP, ActiveDirectory, OpenID Connect, da ƙari mai yawa.
Dashboard ɗin Grafana wanda aka riga aka tsara don sa ido kan gungu na OpenShift
Sama da ma'auni na Prometheus da aka riga aka tsara 150 da faɗakarwa don sa ido kan gungu na OpenShift
Don ci gaba
Ayyukan wadataccen bayani da ƙwarewar Red Hat a fagen Kubernetes sune dalilan da yasa OpenShift ya sami babban matsayi a kasuwa, kamar yadda aka nuna a cikin hoton da ke ƙasa (karanta ƙari). ).
“Red Hat a halin yanzu tana jagorantar kasuwa da kashi 44%.
Kamfanin yana cin gajiyar dabarunsa na tallace-tallace na abokin ciniki, inda ya fara tuntuba tare da horar da masu haɓaka masana'antu sannan kuma ya matsa zuwa samun kuɗi yayin da kasuwancin ya fara tura kwantena don samarwa."
(Madogararsa: )
Muna fatan kun ji daɗin wannan labarin. A cikin abubuwan da ke gaba a cikin wannan jerin, za mu dubi fa'idodin OpenShift akan Kubernetes a cikin kowane nau'ikan da aka tattauna anan.
source: www.habr.com