Thaum Lub Kaum Ib Hlis 24, Slurm Mega, qhov kev kawm siab heev ntawm Kubernetes, tau xaus. yuav muaj nyob rau hauv Moscow rau lub Tsib Hlis 18-20.
Lub tswv yim ntawm Slurm Mega: peb saib nyob rau hauv lub hood ntawm pawg, soj ntsuam nyob rau hauv txoj kev xav thiab xyaum intricacies ntawm kev txhim kho thiab configuring ib tug ntau lawm-npaj pawg ("qhov-tsis-yog-yim-txoj kev"), xav txog cov mechanisms. txhawm rau ua kom muaj kev ruaj ntseg thiab ua txhaum kev zam ntawm daim ntawv thov.
Mega Bonus: Cov neeg uas dhau Slurm Basic thiab Slurm Mega tau txais tag nrho cov kev paub tsim nyog kom dhau qhov kev xeem thiab 50% luv nqi ntawm kev xeem.
Ua tsaug tshwj xeeb rau Selectel rau kev muab huab cua rau kev xyaum, ua tsaug rau txhua tus neeg koom tes ua haujlwm hauv lawv tus kheej pawg ua haujlwm puv ntoob, thiab peb tsis tas yuav ntxiv 5 txhiab ntxiv rau tus nqi pib rau qhov no.
Kuv yuav tsis qhia koj tias Bondarev thiab Selivanov yog leej twg, rau cov neeg nyiam, .
Loj Mega. Thawj hnub.
Thawj hnub ntawm Slurm Mega, peb thauj cov neeg koom nrog 4 lub ntsiab lus. Pavel Selivanov tau hais txog cov txheej txheem ntawm kev tsim ib pawg tsis ua haujlwm los ntawm sab hauv, hais txog kev ua haujlwm ntawm Kubeadm, nrog rau kev sim thiab teeb meem hauv pawg.
Thawj zaug kas fes so. Feem ntau yog "tus xib fwb tswb," tab sis ntawm Slurm, thaum cov tub ntxhais kawm haus kas fes, cov kws qhia ntawv tseem teb cov lus nug.
Thiab txawm tias qhov tseeb tias "Break II" huab yog hovering hla Pavel Selivanov lub taub hau, nws tsis yog nws txoj hmoo mus so.
Sergei Bondarev thiab Marcel Ibraev tab tom tos lawv tig mus rau lub rooj hais plaub.
Thaum lub sij hawm so, kuv mus cuag Sergey Bondarev thiab nug: "Yuav ua li cas cov lus qhia koj yuav muab rau tag nrho cov Kubernetes engineers raws li koj kev paub ua hauj lwm nrog peb cov neeg 'pub pawg?"
Sergey tau muab cov lus pom zoo yooj yim: "Thaiv kev nkag los ntawm Is Taws Nem mus rau API server. Vim tias qee lub sijhawm muaj kev hem thawj kev nyab xeeb uas tso cai rau cov neeg siv tsis tau tso cai nkag mus rau pawg.Β»
Tom qab ob peb feeb thiab ib lub raj mis dej ntxhia, Pavel Selivanov rushed mus rau hauv kev sib ntaus sib tua nrog tus duab ntxoov ntxoo ntawm lub ncauj lus "Kev tso cai nyob rau hauv ib pawg siv cov neeg muab kev pab sab nraud," uas yog LDAP (Nginx + Python) thiab ODC (Dex + Gangway).
Thaum lub sij hawm so tom ntej no, Marcel Ibraev, Slurm hais lus, Certified Kubernetes Administrator, tau muab nws cov lus qhia rau Kubernetes engineers: "Kuv yuav hais ib yam dab tsi tsis tseem ceeb, tab sis xav txog ntau zaus kuv ntsib qhov no, kuv muaj kev xav tias tsis yog txhua tus yuav siv qhov no rau hauv tus account. Koj yuav tsum tsis txhob ntseeg qhov muag tsis pom kev yuav ua li cas los ntawm Is Taws Nem uas yuav qhia koj tias qhov kev daws teeb meem zoo li cas. Hauv cov ntsiab lus ntawm Kubernetes, qhov no yuav siv lub ntsiab lus tshwj xeeb. Vim Kubernetes yog ib qho nyuaj thiab ntxiv cov kev daws teeb meem rau nws uas tsis tau sim hauv koj qhov project tshwj xeeb thiab koj pawg teeb tsa tuaj yeem ua rau muaj qhov tshwm sim tsis zoo, txawm tias lawv tau sau hauv Is Taws Nem txog nws qhov txias. Txawm tias tsuas yog Kubernetes nws tus kheej tsis muaj qhov sib npaug tuaj yeem ua rau koj qhov project, "qhov zoo rau Lavxias yog kev tuag rau German." Yog li ntawd, peb sim, xyuas, thiab sim ib qho kev daws teeb meem ua ntej siv nws tus kheej. Qhov no yog tib txoj kev uas koj yuav coj mus rau hauv tus account tag nrho cov nuances uas yuav tshwm sim.".
Tom qab noj su, Sergei Bondarev nkag mus rau hauv kev sib ntaus sib tua. Nws lub ntsiab lus yog Network txoj cai, uas yog kev qhia txog CNI thiab Network Security Policy.
Hauv Is Taws Nem muaj tag nrho cov lus hais txog Network Txoj Cai. Muaj kev xav ntawm cov thawj tswj hwm tias Network Txoj Cai tuaj yeem muab faib nrog, tab sis cov kws tshaj lij kev nyab xeeb nyiam cov cuab yeej no thiab xav kom Network Txoj Cai tau qhib.
Pavel Selivanov tau tuav lub luag haujlwm ntawm Kubernetes los ntawm Sergey Bondarev nrog lub ncauj lus "Kev nyab xeeb thiab muaj peev xwm siv tau ntau hauv pawg." Nws muaj cov ncauj lus nyiam: PodSecurityPolicy, PodDisruptionBudget, LimitRange/ResourceQuota.
Mega lub ntsiab lus, uas Pavel tau hais ntawm DevOpsConf: .
Tom qab qhia yooj yim npaum li cas cov pab pawg Kubernetes tuaj yeem raug hacked, cov thawj coj tsis ntseeg hais tias: "Yog lawm, kuv tau hais rau koj, koj lub Kubernetes puv lub qhov." Pavel piav qhia tias nws muaj peev xwm los teeb tsa kev ruaj ntseg hauv pawg, thiab nws tsis yooj yim, nws tsuas yog qhov chaw ruaj ntseg raug kaw los ntawm lub neej ntawd. Cov ntsiab lus hauv cov ntawv sau tseg .
- Leej twg tsoo pawg? Nws tsoo pawg! Kuv pom tau zoo kawg nkaus los ntawm no!
Ntawm Slurms, txhua yam tsis yooj yim thiab yooj yim, yog li tsis txhob dhuav. Tab sis lub sijhawm no Telegram txiav txim siab los qhia txhua tus neeg lub ntsiab lus thib tsib:
ΠΠ°ΡΡΠ΅Π»Ρ ΠΠ±ΡΠ°Π΅Π², [22 Π½ΠΎΡΠ±. 2019 Π³., 16:52:52]:
ΠΠΎΠ»Π»Π΅Π³ΠΈ, Π² Π΄Π°Π½Π½ΡΠΉ ΠΌΠΎΠΌΠ΅Π½Ρ Π½Π°Π±Π»ΡΠ΄Π°ΡΡΡΡ ΡΠ±ΠΎΠΈ Π² ΡΠ°Π±ΠΎΡΠ΅ Π’Π΅Π»Π΅Π³ΡΠ°ΠΌ, ΠΈΠΌΠ΅ΠΉΡΠ΅ ΡΡΠΎ Π²Π²ΠΈΠ΄Ρ
Qhov no xaus thawj hnub, ci ntsa iab thiab muaj kev paub txog cov tswv yim. Hnub ob yuav muaj kev xyaum ntau dua, tso tawm pawg database siv PostgreSQL ua piv txwv, tshaj tawm RabbitMQ pawg, tswj cov lus zais hauv Kubernetes.
Loj Mega. Hnub ob.
Tus kws tshaj lij tau pib hnub thib ob nrog kev tshaj tawm zoo siab: βThaum sawv ntxov, raws li Pavel tau hais nag hmo, qhov nyuaj tiag tiag tos peb. Hauv cov lus ntawm cov kws phais, peb yuav nkag mus rau hauv lub siab ntawm Kubernetes! "
Cov neeg ua yeeb yam loj yog ib zaj dab neeg sib txawv. Ib qho teeb meem nrog Slurm yog tias tib neeg hloov tawm ntawm cov ntaub ntawv tshaj tawm thiab tsaug zog. Peb ib txwm nrhiav txoj hauv kev los ua ib yam dab tsi txog nws, thiab kev ua si me me nrog cov neeg tuaj saib ua haujlwm tau zoo ntawm Slurm kawg. Lub sijhawm no peb ntiav ib tus neeg cob qhia tshwj xeeb. Muaj ntau qhov kev tso dag hauv kev sib tham txog "kev sib tw txaus nyiam," tab sis qhov tseeb tseem yog peb tsis tau pom cov neeg koom nrog zoo siab.
Lawv tuaj cawm Marcel Ibraev - thiab nws pib kawm Stateful daim ntawv thov nyob rau hauv pawg. Namely, launching a database cluster siv PostgreSQL ua piv txwv thiab launching RabbitMQ pawg.
Tom qab noj su, Sergey Bondarev pib ua haujlwm ntawm K8S. Thiab lub ntsiab lus yog "Keeping Secrets." Mulder thiab Scully npog nws. Kawm txog kev tswj hwm zais cia hauv Kubernetes thiab Vault. Thiab tseem "Qhov tseeb yog tawm muaj".
Uas txuas ntxiv mus txog thaum yav tsaus ntuj, thaum Pavel Selivanov pib tham txog Kab rov tav Pod Autoscaler
Loj Mega. Hnub peb.
Nyuaj thiab zoo siab, txij thaum sawv ntxov, Sergei Bondarev ua rau cov neeg tuaj saib nrog thaub qab thiab rov qab los ntawm kev ua tsis tiav. Kuv tshawb xyuas cov thaub qab thiab rov qab ntawm pawg siv Heptio Velero thiab lwm yam ntawm tus kheej.
Sergey txuas ntxiv lub ntsiab lus ntawm kev hloov pauv txhua xyoo ntawm daim ntawv pov thawj hauv pawg: kev rov ua dua tshiab ntawm daim ntawv pov thawj-dav hlau siv kubeadm. Tsuas yog ua ntej noj su, txhawm rau txhawm rau ua kom cov neeg koom nrog kev noj qab haus huv lossis tua nws tag nrho, Pavel Selivanov tau tsa lub ntsiab lus ntawm kev xa daim ntawv thov.
Templating thiab deployment tools tau txiav txim siab, nrog rau cov tswv yim xa tawm.
Pavel Selivanov tau hais txog lub ntsiab lus tshiab: Kev Pabcuam Mesh, Istio installation. Lub ntsiab lus tau hloov pauv kom nplua nuj heev uas koj tuaj yeem ua ib qho kev kawm tshwj xeeb rau nws. Peb tab tom tham txog cov phiaj xwm, nyob twj ywm rau kev tshaj tawm.
Qhov loj tshaj plaws yog tias txhua yam ua haujlwm raug. Vim nws yog lub sij hawm los xyaum:
tsim CI/CD rau tib lub sijhawm tso daim ntawv thov xa tawm thiab kev hloov pauv pawg. Hauv cov phiaj xwm kev kawm txhua yam ua haujlwm zoo. Thiab lub neej qee zaum muaj kev xav tsis thoob.
Thov kom Slurm nyob nrog koj!
Tau qhov twg los: www.hab.com