Ya faru ne cewa a lokacin da aka haifar da matsalar, ba ni da isasshen gogewa don haɓakawa da ƙaddamar da wannan mafita ita kaɗai. Sannan na fara Googling.
Ban san mene ne matsalar ba, amma a karo na goma sha biyu na fuskanci gaskiyar cewa ko da na yi duk abin da ke mataki-mataki kamar yadda a cikin koyawa, shirya yanayi iri ɗaya da marubucin, to, babu abin da ke aiki. Ban san abin da ke faruwa ba, amma lokacin da na sake cin karo da wannan, na yanke shawarar cewa zan rubuta koyawa ta lokacin da komai ya tafi. Wanda tabbas zai yi aiki.
Jagora akan Intanet
Hakan ya faru ne cewa Intanet ba ta fama da rashin jagora iri-iri, koyawa, mataki-mataki da makamantansu. Haka ya faru da cewa an ɗaure ni da samar da mafita don dacewa da tsari da gina gungu na PostgreSQL mai gazawa, babban buƙatun waɗanda ke gudana kwafi daga uwar garken Jagora zuwa duk kwafi da samar da atomatik ta ajiya a cikin taron uwar garken Jagora. gazawa.
A wannan mataki, an ƙayyade tarin fasahar da aka yi amfani da su:
- PostgreSQL azaman DBMS
- a matsayin maganin tari
- etcd kamar yadda aka rarraba ajiya don Patroni
- HAproxy don tsara wurin shigarwa guda ɗaya don aikace-aikace ta amfani da bayanan
saitin
Don hankalin ku - gina babban tari na PostgreSQL ta amfani da Patroni, da sauransu, HAProxy.
Dukkan ayyuka an yi su akan injunan kama-da-wane tare da shigar da Debian 10 OS.
da dai sauransu
Ban bayar da shawarar shigar da etcd akan injuna iri ɗaya inda patroni da postgresql za su kasance ba, tunda nauyin diski yana da mahimmanci ga etcd. Amma don dalilai na ilimi, za mu yi haka kawai.
Mu shigar da dai sauransu.
#!/bin/bash
apt-get update
apt-get install etcdƘara abun ciki zuwa /etc/default/etcd fayil
[memba]
ETCD_NAME=datanode1 # sunan masaukin injin ku
ETCD_DATA_DIR=”/var/lib/etcd/default.etcd”
DUK ADDININ IP YA KAMATA SU INGANTA. YA KAMATA A SABA LISSTER PEER, CLIENT da sauransu ZUWA ADDININ IP NA HOST
ETCD_LISTEN_PEER_URLS = "» # adireshin motar ku
ETCD_LISTEN_CLIENT_URLS = "» # adireshin motar ku
[gungu]
ETCD_INITIAL_ADVERTISE_PEER_URLS = "» # adireshin motar ku
ETCD_INITIAL_CLUSTER=»datanode1=» # adiresoshin duk injina a cikin gungu da sauransu
ETCD_INITIAL_CLUSTER_STATE = "sabo"
ETCD_INITIAL_CLUSTER_TOKEN = "da dai sauransu-cluster-1"
ETCD_ADVERTISE_CLIENT_URLS = "» # adireshin motar ku
Gudanar da umarnin
systemctl restart etcdPostgreSQL 9.6 + abokin ciniki
Abu na farko da kuke buƙatar yi shine saita na'urori masu kama da juna guda uku don shigar da software da suka dace akan su. Bayan shigar da injinan, idan kun bi karatuna, zaku iya gudanar da wannan rubutun mai sauƙi wanda zai yi muku (kusan) komai. Yana gudana azaman tushen.
Lura cewa rubutun yana amfani da sigar PostgreSQL 9.6, wannan ya faru ne saboda buƙatun cikin gida na kamfaninmu. Ba a gwada maganin akan wasu nau'ikan PostgreSQL ba.
#!/bin/bash
apt-get install gnupg -y
echo "deb http://apt.postgresql.org/pub/repos/apt/ buster-pgdg main" >> /etc/apt/sources.list
wget --quiet -O - https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add -
apt-get update
apt-get install postgresql-9.6 python3-pip python3-dev libpq-dev -y
systemctl stop postgresql
pip3 install --upgrade pip
pip install psycopg2
pip install patroni[etcd]
echo "
[Unit]
Description=Runners to orchestrate a high-availability PostgreSQL
After=syslog.target network.target
[Service]
Type=simple
User=postgres
Group=postgres
ExecStart=/usr/local/bin/patroni /etc/patroni.yml
KillMode=process
TimeoutSec=30
Restart=no
[Install]
WantedBy=multi-user.targ
" > /etc/systemd/system/patroni.service
mkdir -p /data/patroni
chown postgres:postgres /data/patroni
chmod 700 /data/patroniпо
touch /etc/patroni.ymlBayan haka, a cikin fayil ɗin /etc/patroni.yml da kuka ƙirƙira, kuna buƙatar sanya abubuwan da ke ciki, ba shakka canza adireshin IP a duk wuraren zuwa adiresoshin da kuke amfani da su.
Kula da comments a cikin wannan yaml. Canja adiresoshin zuwa naku akan kowace na'ura a cikin tari.
/etc/patron.yml
scope: pgsql # должно быть одинаковым на всех нодах
namespace: /cluster/ # должно быть одинаковым на всех нодах
name: postgres1 # должно быть разным на всех нодах
restapi:
listen: 192.168.0.143:8008 # адрес той ноды, в которой находится этот файл
connect_address: 192.168.0.143:8008 # адрес той ноды, в которой находится этот файл
etcd:
hosts: 192.168.0.143:2379,192.168.0.144:2379,192.168.0.145:2379 # перечислите здесь все ваши ноды, в случае если вы устанавливаете etcd на них же
# this section (bootstrap) will be written into Etcd:/<namespace>/<scope>/config after initializing new cluster
# and all other cluster members will use it as a `global configuration`
bootstrap:
dcs:
ttl: 100
loop_wait: 10
retry_timeout: 10
maximum_lag_on_failover: 1048576
postgresql:
use_pg_rewind: true
use_slots: true
parameters:
wal_level: replica
hot_standby: "on"
wal_keep_segments: 5120
max_wal_senders: 5
max_replication_slots: 5
checkpoint_timeout: 30
initdb:
- encoding: UTF8
- data-checksums
- locale: en_US.UTF8
# init pg_hba.conf должен содержать адреса ВСЕХ машин, используемых в кластере
pg_hba:
- host replication postgres ::1/128 md5
- host replication postgres 127.0.0.1/8 md5
- host replication postgres 192.168.0.143/24 md5
- host replication postgres 192.168.0.144/24 md5
- host replication postgres 192.168.0.145/24 md5
- host all all 0.0.0.0/0 md5
users:
admin:
password: admin
options:
- createrole
- createdb
postgresql:
listen: 192.168.0.143:5432 # адрес той ноды, в которой находится этот файл
connect_address: 192.168.0.143:5432 # адрес той ноды, в которой находится этот файл
data_dir: /data/patroni # эту директорию создаст скрипт, описанный выше и установит нужные права
bin_dir: /usr/lib/postgresql/9.6/bin # укажите путь до вашей директории с postgresql
pgpass: /tmp/pgpass
authentication:
replication:
username: postgres
password: postgres
superuser:
username: postgres
password: postgres
create_replica_methods:
basebackup:
checkpoint: 'fast'
parameters:
unix_socket_directories: '.'
tags:
nofailover: false
noloadbalance: false
clonefrom: false
nosync: falseDole ne a gudanar da rubutun akan dukkan injuna guda uku na gungu, kuma dole ne a sanya tsarin da ke sama a cikin fayil /etc/patroni.yml akan duk injina.
Da zarar kun gama waɗannan ayyukan akan duk injunan da ke cikin gungu, gudanar da umarni mai zuwa akan kowane ɗayansu
systemctl start patroni
systemctl start postgresqlJira kusan daƙiƙa 30, sannan gudanar da wannan umarni akan sauran injinan da ke cikin gungu.
HAproxy
Muna amfani da HAproxy mai ban mamaki don samar da wuri guda na shigarwa. Maigidan uwar garken koyaushe zai kasance yana kasancewa a adireshin injin da aka tura HAproxy akansa.
Don kar a sanya na'ura tare da HAproxy maki guda na gazawa, za mu ƙaddamar da shi a cikin akwati Docker; a nan gaba za a iya ƙaddamar da shi a cikin gungu na K8 kuma ya sa gunkin gazawar mu ya zama abin dogaro.
Ƙirƙiri adireshi inda zaku iya adana fayiloli biyu - Dockerfile da haproxy.cfg. Jeka zuwa gare shi.
Dockerfile
FROM ubuntu:latest
RUN apt-get update
&& apt-get install -y haproxy rsyslog
&& rm -rf /var/lib/apt/lists/*
RUN mkdir /run/haproxy
COPY haproxy.cfg /etc/haproxy/haproxy.cfg
CMD haproxy -f /etc/haproxy/haproxy.cfg && tail -F /var/log/haproxy.logYi hankali, layuka uku na ƙarshe na fayil ɗin haproxy.cfg yakamata su jera adiresoshin injin ku. HAproxy zai tuntuɓi Patroni, a cikin shugabannin HTTP babban uwar garken koyaushe zai dawo 200, kuma kwafin zai dawo koyaushe 503.
haproxy.cfg
global
maxconn 100
defaults
log global
mode tcp
retries 2
timeout client 30m
timeout connect 4s
timeout server 30m
timeout check 5s
listen stats
mode http
bind *:7000
stats enable
stats uri /
listen postgres
bind *:5000
option httpchk
http-check expect status 200
default-server inter 3s fall 3 rise 2 on-marked-down shutdown-sessions
server postgresql1 192.168.0.143:5432 maxconn 100 check port 8008
server postgresql2 192.168.0.144:5432 maxconn 100 check port 8008
server postgresql3 192.168.0.145:5432 maxconn 100 check port 8008
Kasancewa a cikin kundin adireshi wanda fayilolin mu biyu suka "kwanta," bari mu aiwatar da umarni a jere don tattara akwati, da kuma ƙaddamar da shi tare da tura tashar jiragen ruwa masu dacewa:
docker build -t my-haproxy .
docker run -d -p5000:5000 -p7000:7000 my-haproxy Yanzu, ta hanyar buɗe adireshin injin ku tare da HAproxy a cikin mai bincike da ƙayyade tashar jiragen ruwa 7000, zaku ga ƙididdiga akan tarin ku.
Sabar wanda shine maigidan zai kasance a cikin jihar UP, kuma kwafi zai kasance a cikin jihar DOWN. Wannan al'ada ce, a gaskiya suna aiki, amma suna bayyana ta wannan hanyar saboda sun dawo 503 don buƙatun HAproxy. Wannan yana ba mu damar sanin ainihin wanne ne daga cikin sabobin uku shine maigidan na yanzu.
ƙarshe
Kuna da kyau! A cikin mintuna 30 kacal kun ƙaddamar da ingantacciyar tari mai jurewa da kuskure da babban aiki tare da kwafin yawo da koma baya ta atomatik. Idan kuna shirin amfani da wannan maganin, duba , kuma musamman tare da ɓangaren sa game da util ɗin util, wanda ke ba da dama mai dacewa don sarrafa tarin ku.
Taya murna!
source: www.habr.com