A ranar 24 ga Nuwamba, Slurm Mega, babban kwas mai zurfi akan Kubernetes, ya ƙare. Za a gudanar a Moscow a ranar 18-20 ga Mayu.
Ma'anar Slurm Mega: muna kallon ƙarƙashin murfin gungu, yin nazari a cikin ka'idar da aiwatar da abubuwan da ke tattare da shigarwa da daidaita tsarin samar da shirye-shirye ("hanya-ba-sauki-hanyar"), la'akari da hanyoyin. don tabbatar da tsaro da rashin haƙuri na aikace-aikace.
Mega Bonus: Wadanda suka ci Slurm Basic da Slurm Mega suna karɓar duk ilimin da ake bukata don cin jarrabawar da kuma rangwamen 50% akan jarrabawar.
Godiya ta musamman ga Selectel don samar da gajimare don yin aiki, godiya ga wanda kowane ɗan takara ya yi aiki a cikin gungu mai cikakken ƙarfi, kuma ba lallai ne mu ƙara ƙarin 5 dubu ga farashin tikiti don wannan ba.
Ba zan gaya muku wanene Bondarev da Selivanov ba, ga masu sha'awar, .
Babban mega. Ranar farko.
A ranar farko ta Slurm Mega, mun ɗora wa mahalarta da batutuwa 4. Pavel Selivanov ya yi magana game da tsarin samar da gungu na kasawa daga ciki, game da aikin Kubeadm, da kuma game da gwaji da kuma magance matsalar tari.
Hutun kofi na farko. Yawancin lokaci "ƙararar malami," amma a Slurm, yayin da dalibai suka sha kofi, malamai suna ci gaba da amsa tambayoyi.
Kuma duk da cewa girgijen "Break II" yana shawagi a kan Pavel Selivanov, ba makomarsa ba ce don tafiya hutu.
Sergei Bondarev da Marcel Ibraev suna jiran lokacin su don zuwa kan mimbari.
A lokacin hutu, na tuntuɓi Sergey Bondarev kuma na tambayi: “Wace shawara za ku ba duk injiniyoyin Kubernetes dangane da ƙwarewar ku tare da ƙungiyoyin abokan cinikinmu?”
Sergey ya ba da shawara mai sauƙi: "Toshe shiga daga Intanet zuwa uwar garken API. Domin daga lokaci zuwa lokaci akwai barazanar tsaro da ke ba masu amfani da izini damar samun damar shiga rukunin.»
Bayan 'yan mintoci kaɗan da kwalban ruwan ma'adinai, Pavel Selivanov ya garzaya cikin yaƙi tare da inuwar taken "Izinin a cikin gungu ta amfani da mai ba da sabis na waje," wato LDAP (Nginx + Python) da OIDC (Dex + Gangway).
A lokacin hutu na gaba, Marcel Ibraev, Slurm speaker, Certified Kubernetes Administrator, ya ba da shawararsa ga injiniyoyin Kubernetes: "Zan faɗi wani abu mai kama da ƙaranci, amma idan aka yi la'akari da sau nawa na ci karo da wannan, ina da tsammanin cewa ba kowa ba ne ya yi la'akari da wannan. Bai kamata ku yi imani da duk wani Yadda-To daga Intanet ba wanda zai gaya muku girman girman wannan ko waccan maganin yana aiki. A cikin mahallin Kubernetes, wannan yana ɗaukar ma'ana ta musamman. Domin Kubernetes wani tsari ne mai rikitarwa kuma yana ƙara ƙarin bayani game da shi wanda ba a gwada shi ba a cikin aikinku na musamman da kuma shigar da gunkin ku zai iya haifar da mummunan sakamako, duk da cewa sun rubuta a kan Intanet game da sanyinsa. Ko da kawai Kubernetes kanta ba tare da daidaito ba zai iya cutar da aikin ku, "abin da ke da kyau ga Rasha shine mutuwa ga Jamus." Don haka, muna gwadawa, bincika, da gwada kowace mafita kafin aiwatar da kanmu. Wannan ita ce kawai hanyar da za ku yi la'akari da duk nuances da za su iya tasowa.".
Bayan abincin rana, Sergei Bondarev shiga yakin. Maudu'insa shine manufofin hanyar sadarwa, wato gabatarwa ga CNI da Manufar Tsaro ta hanyar sadarwa.
Intanet cike take da labarai game da Manufar hanyar sadarwa. Akwai ra'ayi tsakanin admins cewa za a iya ba da Manufofin Sadarwar Sadarwa da su, amma ƙwararrun tsaro suna son wannan kayan aikin da gaske kuma suna buƙatar a kunna Manufofin Sadarwar.
Pavel Selivanov ya karbi ragamar Kubernetes daga Sergey Bondarev tare da taken "Tsarin aikace-aikace masu aminci a cikin tari." Yana da batutuwan da suka fi so: PodSecurityPolicy, PodDisruptionBudget, LimitRange/ResourceQuota.
Batun Mega, wanda Pavel yayi magana a DevOpsConf: .
Bayan sun faɗi yadda za a iya yin kutse cikin sauƙi na gungu na Kubernetes, masu gudanar da shakku sun ce: "Ee, na faɗa muku, Kubernetes ɗinku yana cike da ramuka." Pavel ya bayyana cewa yana yiwuwa a daidaita tsaro a cikin tari, kuma ba shi da wahala, kawai sai an kashe saitunan tsaro ta hanyar tsoho. Cikakkun bayanai a cikin rubutun .
- Wanene ya karya gungu? Ya karya gungu! Ina iya gani sosai daga nan!
A Slurms, komai bai zama mai sauƙi ba kuma mai sauƙi, don kada ya gaji. Amma wannan lokacin Telegram ya yanke shawarar nunawa kowa da kowa maki na biyar:
Марсель Ибраев, [22 нояб. 2019 г., 16:52:52]:
Коллеги, в данный момент наблюдаются сбои в работе Телеграм, имейте это ввиду
Wannan ya ƙare ranar farko, mai haske kuma cike da ilimi mai amfani. A rana ta biyu za a sami ƙarin aiki, ƙaddamar da tarin bayanai ta amfani da PostgreSQL a matsayin misali, ƙaddamar da gungun RabbitMQ, sarrafa asirin a Kubernetes.
Babban mega. Rana ta biyu.
Mai gabatarwa ya fara rana ta biyu tare da sanarwar farin ciki: "Da safe, kamar yadda Pavel ya sanya shi jiya, ainihin hardcore yana jiran mu. A cikin harshen likitocin tiyata, za mu shiga cikin Kubernetes!
Mai yawan nishadantarwa wani labari ne daban. Ɗaya daga cikin matsalolin Slurm shine cewa mutane suna kashewa daga yawan bayanai kuma suyi barci. Kullum muna neman hanyar yin wani abu game da shi, kuma ƙananan wasanni tare da masu sauraro sunyi aiki da kyau a Slurm na ƙarshe. A wannan karon mun dauki hayar mutum mai horo na musamman. Akwai ba'a da yawa a cikin taɗi game da "gasa mai ban sha'awa," amma gaskiyar ita ce ba mu taɓa ganin mahalarta masu farin ciki irin wannan ba.
Sun zo ne don ceton Marcel Ibraev - kuma ya fara nazarin aikace-aikace na jihar a cikin gungu. Wato ƙaddamar da tarin bayanai ta amfani da PostgreSQL a matsayin misali da ƙaddamar da gungun RabbitMQ.
Bayan abincin rana Sergey Bondarev fara aiki a kan K8S. Kuma jigon shine "Kiyaye Sirri." Mulder da Scully sun rufe shi. Ya yi karatun sarrafa sirrin a Kubernetes and Vault. Da kuma "Gaskiya tana nan".
Wanda ya ci gaba har zuwa maraice, lokacin da Pavel Selivanov ya fara magana game da Horizontal Pod Autoscaler.
Babban mega. Rana ta uku.
Da sauri da fara'a, tun da safe, Sergei Bondarev ya zuga masu sauraro tare da adanawa da dawowa daga gazawar. Na duba wariyar ajiya da dawo da tarin ta amfani da Heptio Velero da sauransu da kaina.
Sergey ya ci gaba da batun jujjuyawar shekara-shekara na takaddun shaida a cikin gungu: sabunta takaddun shaida na jirgin sama ta amfani da kubeadm. Kafin abincin rana, don jin daɗin sha'awar mahalarta ko kuma kashe shi gaba ɗaya, Pavel Selivanov ya tabo batun ƙaddamar da aikace-aikacen.
An yi la'akari da ƙirar ƙira da tura kayan aikin, da kuma dabarun turawa.
Pavel Selivanov yayi magana game da sabon batu: Sabis Mesh, shigarwa na Istio. Maudu'in ya zama mai wadatuwa da za ku iya yin kwas na musamman akansa. Muna tattaunawa akan tsare-tsare, ku kasance da mu don sanarwa.
Babban abu shine cewa komai yana aiki daidai. Domin lokaci yayi da za a yi aiki:
gina CI/CD don ƙaddamar da tura aikace-aikacen lokaci guda da sabunta tari. A cikin ayyukan ilimi komai yana aiki da kyau. Kuma rayuwa wani lokaci tana cike da abubuwan mamaki.
Bari Slurm ya kasance tare da ku!
source: www.habr.com