Lub thawv ntim tshuab thev naus laus zis tau hloov pauv sai thiab hloov pauv, yog li tsis muaj kev ua haujlwm zoo hauv cheeb tsam no. Txawm li cas los xij, Kubernetes thiab cov thawv ntim tau raug siv ntau zuj zus, ob qho tib si rau kev hloov kho cov ntaub ntawv qub qub thiab tsim cov ntawv thov huab niaj hnub.
pab neeg
Yuav ua li cas thiaj paub yog tias koj lub tuam txhab tau npaj kom xa cov thawv rau hauv ib puag ncig kev tsim khoom
Raws li
Π
Txawm hais tias muaj kev txaus siab loj hlob thiab kev siv cov thawv ntim khoom, kom tau txais lawv mus rau hauv kev tsim khoom yuav tsum muaj kev kawm nkhaus vim kev thev naus laus zis tsis paub tab thiab tsis muaj kev paub. Cov koom haum yuav tsum muaj tseeb txog cov txheej txheem kev lag luam uas yuav tsum muaj daim ntawv thov ntim khoom. IT cov thawj coj yuav tsum ntsuas seb lawv puas muaj peev xwm npaj mus rau tom ntej nrog qhov xav tau kev kawm sai.
Feem ntau yuam kev thaum siv cov ntim hauv kev tsim khoom
Cov koom haum feem ntau underestimate lub dag zog yuav tsum tau ua hauj lwm ntim rau hauv ntau lawm.
Yuav ua li cas khaws cov ntim kom ruaj ntseg
Kev ruaj ntseg tsis tuaj yeem cuam tshuam nrog "tom qab". Nws yuav tsum tau ua rau hauv cov txheej txheem DevOps, uas yog vim li cas txawm tias muaj lub sijhawm tshwj xeeb - DevSecOps. Cov koom haum yuav tsum tau npaj
- Kev koom ua ke cov txheej txheem ntawm kev tshuaj xyuas daim ntawv thov cov duab rau qhov tsis zoo rau hauv koj qhov kev sib txuas txuas ntxiv / xa mus txuas ntxiv (CI / CD) cov kav dej. Cov ntawv thov raug txheeb xyuas ntawm cov software tsim thiab tso tawm theem. Qhia txog qhov yuav tsum tau luam theej duab thiab txheeb xyuas cov khoom siv qhib, cov tsev qiv ntawv, thiab cov txheej txheem. Cov neeg tsim khoom siv cov qub, tsis muaj zog versions yog ib qho ntawm cov laj thawj tseem ceeb ntawm cov thawv ntim khoom.
- Txhim kho koj qhov kev teeb tsa nrog Center for Internet Security tests (
CIS ), uas muaj rau Docker thiab Kubernetes. - Nco ntsoov tswj xyuas kev nkag mus, xyuas kom muaj kev sib cais ntawm lub luag haujlwm, thiab ua raws li txoj cai tswjfwm zais cia. Cov ntaub ntawv rhiab heev, xws li Secure Sockets Layer (SSL) cov yuam sij lossis cov ntaub ntawv pov thawj, yog encrypted los ntawm orchestrator lossis cov kev pabcuam thib peb thiab nthuav tawm thaum lub sijhawm ua haujlwm.
- Zam kom tsis txhob muaj cov thawv ntim siab los ntawm kev tswj xyuas cov cai tswj kev ruaj ntseg kom txo tau qhov kev pheej hmoo ua txhaum cai.
- Siv cov cuab yeej kev ruaj ntseg uas muab cov npe dawb, kev saib xyuas tus cwj pwm, thiab kev kuaj pom tsis zoo los tiv thaiv kev ua phem.
- Leverage lub peev xwm built-in ntawm Kubernetes. Teeb tsa kev nkag mus rau cov neeg siv uas siv lub luag haujlwm. Nco ntsoov tias koj tsis tso cai tsis tsim nyog rau cov koom haum ib leeg, txawm tias nws yuav siv sij hawm qee lub sij hawm los xav txog qhov tsawg kawg nkaus tso cai. Tej zaum nws yuav ntxias kom muab cov cai rau pawg tswj hwm dav dav vim qhov no txuag lub sijhawm pib. Txawm li cas los xij, txhua qhov kev cuam tshuam lossis kev ua yuam kev hauv tus as khauj tuaj yeem ua rau muaj kev puas tsuaj loj tom qab.
- Tsis txhob muab luam tawm tso cai nkag. Qee zaum nws tuaj yeem pab tau kom muaj lub luag haujlwm sib txawv, tab sis qhov no tuaj yeem ua rau muaj teeb meem kev ua haujlwm thiab tseem tsim qhov muag tsis pom kev thaum tshem tawm kev tso cai. Nws tseem yog ib qho tseem ceeb kom tshem tawm cov luag haujlwm tsis siv thiab tsis ua haujlwm.
- Teem lub network txoj cai: cais cov modules kom txwv tsis pub nkag mus rau lawv; meej meej tso cai rau Internet nkag mus rau cov modules uas xav tau nws siv cov cim npe; Qhia meej meej cia kev sib txuas lus ntawm cov modules uas xav tau kev sib txuas lus nrog ib leeg.
Yuav ua li cas los tswj xyuas cov ntim thiab cov kev pabcuam hauv lawv
Kev ruaj ntseg thiab saib xyuas -
- Sim saib xyuas lub xeev ntawm cov thawv lossis cov kev pabcuam hauv lawv ua ke nrog kev saib xyuas cov tswv tsev.
- Nrhiav cov neeg muag khoom thiab cov cuab yeej nrog kev sib sib zog nqus rau hauv lub thawv orchestration, tshwj xeeb tshaj yog Kubernetes.
- Xaiv cov cuab yeej uas muab cov ncauj lus kom ntxaws, nrhiav kev pabcuam tsis siv neeg, thiab cov lus pom zoo hauv lub sijhawm siv kev tshuaj xyuas thiab / lossis kev kawm tshuab.
- Siv cov cuab yeej tuaj yeem nrhiav pom thiab taug qab cov ntsuas ntim khoom, sib txuas cov ntsuas kev ua tau zoo xws li CPU, nco, thiab sijhawm ua haujlwm.
- Ua kom muaj peev xwm ua tau zoo tshaj plaws los ntawm kev kwv yees hnub muaj peev xwm depletion raws li kev ntsuas ntsuas lub thawv.
- Saib xyuas cov ntawv thov ntim rau kev muaj thiab kev ua tau zoo, muaj txiaj ntsig rau ob qho tib si kev npaj muaj peev xwm thiab kev daws teeb meem kev ua haujlwm.
- Automate workflows los ntawm kev muab kev tswj hwm thiab kev txhawb nqa rau cov ntim khoom thiab lawv qhov chaw hosting.
- Automate tswj kev nkag mus saib xyuas koj cov neeg siv hauv paus, lov tes taw tsis siv neeg thiab cov qhua tuaj noj mov, thiab tshem tawm cov cai tsis tsim nyog.
- Xyuas kom koj lub cuab yeej tuaj yeem saib xyuas cov thawv ntim khoom no thiab cov ntawv thov thoob plaws ntau qhov chaw (huab, hauv tsev, lossis hybrid) kom pom thiab ntsuas kev ua tau zoo thoob plaws infrastructure, network, systems, thiab kev siv.
Yuav khaws cov ntaub ntawv li cas thiab xyuas kom nws ruaj ntseg
Nrog kev nce ntawm cov neeg ua haujlwm hauv lub xeev cov thawv ntim khoom, cov neeg siv khoom yuav tsum xav txog qhov muaj cov ntaub ntawv sab nraud ntawm tus tswv tsev thiab qhov xav tau los tiv thaiv cov ntaub ntawv.
Raws li
Cov ntaub ntawv encryption yog lub tswv yim kev ruaj ntseg tseem ceeb (64%), tab sis cov neeg teb kuj siv lub sijhawm saib xyuas
(49%), tshuaj xyuas cov npe rau qhov tsis zoo (49%), tshuaj xyuas qhov tsis zoo hauv CI / CD cov kav dej (49%), thiab thaiv qhov tsis txaus ntseeg los ntawm kev tiv thaiv lub sijhawm (48%).
- Xaiv cov kev daws teeb meem khaws cia los ntawm cov hauv paus ntsiab lus
microservice architecture . Nws yog qhov zoo dua los tsom rau cov uas ua tau raws li cov ntaub ntawv khaws cia rau cov kev pabcuam ntim khoom, yog cov khoom siv ywj pheej, API tsav, muaj cov qauv sib faib, txhawb nqa kev xa tawm hauv zos thiab kev xa tawm hauv huab huab. - Tsis txhob muaj cov tswv cuab plugins thiab interfaces. Xaiv cov neeg muag khoom uas muab Kubernetes kev koom ua ke thiab txhawb nqa cov qauv sib txuas xws li CSI (Container Storage Interfaces).
Yuav ua li cas ua hauj lwm nrog networks
Cov qauv kev lag luam niaj hnub network, qhov twg IT pab pawg tsim kev sib koom tes sib koom tes, kev sim, kev ruaj ntseg zoo, thiab qhov chaw tsim khoom rau txhua qhov project, tsis tas yuav haum zoo nrog kev txhim kho txuas ntxiv mus. Tsis tas li ntawd, cov thawv ntim khoom siv sib txuas ntau txheej.
Π
- Pods teem rau tib lub node yuav tsum muaj peev xwm sib txuas lus nrog lwm cov pods tsis siv NAT (Network Address Translation).
- Tag nrho cov txheej txheem daemons (cov txheej txheem tom qab xws li kubelet) khiav ntawm ib qho kev sib txuas lus nrog cov pods khiav ntawm tib lub node.
- Pods siv
host network, yuav tsum muaj peev xwm sib txuas lus nrog tag nrho lwm cov pods ntawm tag nrho lwm cov nodes yam tsis siv NAT. Thov nco ntsoov tias kev sib tham hosting tsuas yog txhawb nqa ntawm Linux hosts.
Kev daws teeb meem kev sib tham yuav tsum nruj nruj nrog Kubernetes cov txheej txheem thiab cov cai. IT cov thawj coj yuav tsum sib zog ua kom muaj qib siab ntawm kev siv network automation thiab muab cov neeg tsim khoom nrog cov cuab yeej tsim nyog thiab ua kom yooj yim txaus.
- Tshawb nrhiav seb koj li CaaS (khoom ua ib qho kev pabcuam) lossis koj SDN (Software Defined Network) txhawb Kubernetes tes hauj lwm. Yog tias tsis yog lossis qhov kev txhawb nqa tsis txaus, siv CNI (Container Network Interface) network interface rau koj lub thawv, uas txhawb nqa cov haujlwm tsim nyog thiab cov cai.
- Nco ntsoov tias koj CaaS lossis PaaS (platform raws li kev pabcuam) txhawb kev tsim cov ingress controllers thiab / lossis load balancers uas faib cov tsheb thauj mus los ntawm pawg pawg. Yog tias qhov no tsis yog qhov kev xaiv, tshawb xyuas siv tus neeg thib peb tus neeg sawv cev lossis cov kev pabcuam meshes.
- Qhia koj lub network engineers ntawm Linux tes hauj lwm thiab network automation cov cuab yeej los txo cov kev txawj ntse sib txawv thiab nce agility.
Yuav ua li cas tswj daim ntawv thov lifecycle
Rau kev xa cov ntawv thov tsis siv neeg thiab seamless, koj yuav tsum tau ntxiv cov thawv orchestration nrog lwm cov cuab yeej automation, xws li infrastructure li code (IaC) cov khoom. Cov no suav nrog kws ua zaub mov, Puppet, Ansible thiab Terraform.
Automation cov cuab yeej rau kev tsim thiab dov tawm daim ntawv thov kuj yuav tsum tau (saib "
- Teem cov qauv rau lub hauv paus ntim cov duab raws li qhov loj me, daim ntawv tso cai, thiab hloov tau yooj yim rau cov neeg tsim khoom ntxiv cov khoom.
- Siv cov txheej txheem tswj kev teeb tsa los tswj lub neej voj voog ntawm cov ntim uas txheej txheej txheej raws li cov duab hauv paus nyob hauv cov chaw khaws ntaub ntawv pej xeem lossis ntiag tug.
- Kev koom ua ke koj lub platform CaaS nrog cov cuab yeej automation los ua kom koj cov haujlwm ua haujlwm tag nrho.
Yuav ua li cas tswj cov thawv nrog orchestrators
Lub luag haujlwm tseem ceeb rau kev xa cov ntim khoom yog muab rau ntawm qhov chaw orchestration thiab npaj txheej txheem. Thaum lub sijhawm teem sijhawm, cov thawv ntim tau muab tso rau ntawm cov tswv tsev zoo tshaj plaws hauv pawg, raws li tau hais los ntawm cov txheej txheem orchestration.
Kubernetes tau dhau los ua tus qauv de facto thawv orchestration nrog lub zej zog nquag thiab tau txais kev txhawb nqa los ntawm cov neeg muag khoom lag luam feem ntau.
- Txhais cov kev cai yooj yim rau kev tswj hwm kev nyab xeeb, kev saib xyuas, kev tswj hwm txoj cai, cov ntaub ntawv tsis tu ncua, kev sib txuas lus thiab kev tswj lub thawv ntim khoom.
- Raws li cov kev xav tau no, xaiv cov cuab yeej uas zoo tshaj plaws rau koj cov kev xav tau thiab siv rooj plaub.
- Siv Gartner tshawb fawb (saib "
Yuav xaiv tus qauv siv Kubernetes li cas ") kom nkag siab qhov zoo thiab qhov tsis zoo ntawm cov qauv Kubernetes sib txawv thiab xaiv qhov zoo tshaj plaws rau koj daim ntawv thov. - Xaiv ib tus kws kho mob uas tuaj yeem muab kev sib koom ua ke rau cov thawv ua haujlwm thoob plaws ntau qhov chaw nrog kev sib koom ua ke nruj, cov phiaj xwm kev tswj hwm, thiab cov qauv nqi sib xws.
Yuav siv cov peev txheej ntawm cov chaw muab huab cua li cas
IaaS huab muab kev pabcuam raws li qhov xav tau, kev ua kom nrawm nrawm thiab
Cov chaw muab kev pabcuam huab tau tswj hwm tseem ceeb tau nthuav tawm hauv lub rooj:
Huab muab kev pabcuam
Hom kev pabcuam
Khoom / kev pabcuam
Alibaba
Native Cloud Service
Alibaba Cloud Container Service, Alibaba Cloud Container Service rau Kubernetes
Amazon Web Services (AWS)
Native Cloud Service
Amazon Elastic Container Services (ECS), Amazon ECS for Kubernetes (EKS), AWS Fargate
Giant Swarm
MSP
Giant Swarm Tswj Kubernetes Infrastructure
Google
Native Cloud Service
Google Container Engine (GKE)
IBM
Native Cloud Service
IBM Cloud Kubernetes Service
Microsoft
Native Cloud Service
Azure Kubernetes Service, Azure Service Fabric
Oracle
Native Cloud Service
OCI Thawv Cav rau Kubernetes
Platform9
MSP
Tswj Kubernetes
liab cov kaus mom
Hosted Service
OpenShift Dedicated & Online
VMware
Hosted Service
Huab PKS (Beta)
Mail.ru Huab Solutions*
Native Cloud Service
Mail.ru Cloud Containers
* Peb yuav tsis zais nws, peb ntxiv peb tus kheej ntawm no thaum txhais lus :)
Cov chaw muab kev pabcuam huab cua pej xeem tseem tau ntxiv cov peev txheej tshiab thiab tso tawm cov khoom lag luam hauv tsev. Nyob rau yav tom ntej, cov chaw muab huab yuav tsim kev txhawb nqa rau huab huab hybrid thiab ntau qhov chaw huab cua.
- Lub hom phiaj ntsuas koj lub koom haum lub peev xwm los siv thiab tswj cov cuab yeej tsim nyog, thiab xav txog lwm txoj kev tswj hwm huab cua.
- Xaiv software kom zoo, siv qhov chaw qhib qhov twg ua tau.
- Xaiv cov chaw zov me nyuam nrog cov qauv kev khiav hauj lwm hauv hybrid ib puag ncig uas muaj ib lub pane ntawm iav kev tswj hwm ntawm pawg tswj hwm, nrog rau cov neeg muab kev pabcuam uas ua rau nws yooj yim rau tus tswv tsev IaaS.
- Nws yog ib qho tsim nyog nrhiav kev faib khoom uas txhawb nqa siab muaj tawm ntawm lub thawv. Qhov no suav nrog kev txhawb nqa rau ntau lub tuam tsev loj, muaj ntau yam khoom siv thiab lwm yam, thiab thaub qab thiab rov qab.
- Txhawm rau kom muaj kev txav mus los hauv koj thaj chaw Kubernetes, nws yog qhov zoo tshaj plaws los xaiv cov chaw muab kev pabcuam huab uas txhawb nqa ntau yam ntawm cov qauv xa mus, los ntawm qhov chaw nyob mus rau hybrid mus rau ntau huab.
- Cov chaw muab kev pabcuam kuj tseem yuav raug ntsuas raws li qhov yooj yim ntawm kev teeb tsa, kev teeb tsa, thiab kev tsim cov pawg, nrog rau kev hloov tshiab, kev saib xyuas, thiab kev daws teeb meem. Qhov kev xav tau yooj yim yog los txhawb cov kev hloov kho tshiab uas tsis siv neeg ua haujlwm nrog xoom downtime. Txoj kev daws teeb meem koj xaiv yuav tsum tso cai rau koj los khiav cov hloov tshiab manually.
- Kev tswj tus kheej thiab kev nkag mus yog qhov tseem ceeb ntawm ob qho tib si kev nyab xeeb thiab kev tswj hwm kev xav. Xyuas kom tseeb tias Kubernetes faib koj xaiv txhawb kev koom ua ke nrog kev lees paub thiab tso cai cov cuab yeej koj siv sab hauv. RBAC thiab nplua-grained nkag mus tswj kuj tseem ceeb feature teev.
- Qhov kev faib tawm uas koj xaiv yuav tsum muaj ib qho kev daws teeb meem hauv zej zog uas suav nrog ntau yam ntawm cov ntawv thov sib txawv lossis cov kev xav tau hauv vaj tse, lossis txhawb nqa ib qho ntawm CNI-based networking siv, suav nrog Flannel, Calico, kube-router, lossis OVN.
Kev taw qhia ntawm cov thawv ntim rau hauv kev tsim khoom yog dhau los ua cov kev taw qhia tseem ceeb, raws li pom los ntawm cov txiaj ntsig ntawm kev tshawb fawb los ntawm
Raws li koj tuaj yeem pom, 27% ntawm cov neeg teb tau siv cov ntim hauv lawv txoj haujlwm, thiab 63% tab tom npaj ua li ntawd.
Π
Kab lus npaj los ntawm pab pawg huab platform
Dab tsi ntxiv los nyeem ntawm lub ncauj lus:
DevOps Cov Kev Cai Zoo Tshaj Plaws: DORA Daim Ntawv Qhia .Kubernetes nyob rau hauv lub siab ntawm piracy nrog ib tug qauv rau kev siv .25 Cov cuab yeej siv tau zoo rau Kubernetes Kev xa tawm thiab txais yuav .
Tau qhov twg los: www.hab.com