Ukadaulo waukadaulo wa zotengera zikuyenda mwachangu komanso ukusintha, chifukwa chake palibe njira zabwino zogwirira ntchito mderali. Komabe, Kubernetes ndi zotengera zikugwiritsidwa ntchito mochulukira, pokonzanso mapulogalamu amakono komanso kupanga mapulogalamu amakono amtambo.
timu anasonkhanitsa maulosi, malangizo ndi machitidwe abwino kwa atsogoleri amsika ochokera ku Gartner, 451 Research, StacxRoх ndi ena. Athandizira ndikufulumizitsa kutumizidwa kwa zotengera m'malo opangira.
Momwe Mungadziwire Ngati Kampani Yanu Yakonzeka Kutumiza Zotengera M'malo Opanga
, mu 2022, mabungwe opitilira 75% adzagwiritsa ntchito zida zopanga. Izi ndizochulukirapo kuposa pano, pomwe makampani ochepera 30% amagwiritsa ntchito izi.
Malingana ndi Msika woyembekezeredwa waukadaulo wamakina mu 2022 udzakhala $ 4,3 biliyoni. Izi zikupitilira kuwirikiza kawiri kuchuluka komwe kukuyembekezeka mu 2019, ndikukula kwa msika wa 30%.
В 87% ya omwe adafunsidwa adati pakadali pano amagwiritsa ntchito matekinoloje otengera zinthu. Poyerekeza, mu 2017 panali 55% ya omwe adafunsidwa.
Ngakhale chiwongola dzanja chikukulirakulira komanso kutengera zotengera, kuzifikitsa pakupanga kumafuna njira yophunzirira chifukwa chakusakhwima kwaukadaulo komanso kusowa kwa luso. Mabungwe akuyenera kukhala owona za njira zamabizinesi zomwe zimafunikira zotengera zofunsira. Atsogoleri a IT akuyenera kuwunika ngati ali ndi luso loti apite patsogolo ndikufunika kuphunzira mwachangu.
Tikuganiza kuti mafunso omwe ali pachithunzi pansipa akuthandizani kudziwa ngati mwakonzeka kutumiza zotengera zomwe zikupanga:
Zolakwitsa zofala kwambiri mukamagwiritsa ntchito zotengera popanga
Mabungwe nthawi zambiri amapeputsa kuyesetsa komwe kumafunika kugwiritsa ntchito zotengera popanga. Zolakwa zina zomwe zimachitika pakasitomala akamagwiritsa ntchito zotengera m'malo opanga:
Momwe mungasungire zotengera zotetezedwa
Chitetezo sichingathetsedwe "pambuyo pake". Iyenera kumangidwa mu ndondomeko ya DevOps, chifukwa chake pali nthawi yapadera - DevSecOps. Mabungwe ayenera kukonzekera m'moyo wonse wachitukuko, womwe umaphatikizapo ntchito yomanga ndi chitukuko, kutumiza ndi kukhazikitsidwa kwa ntchitoyo.
:
- Gwirizanitsani ntchito yosanthula zithunzi zamapulogalamu kuti zikhale zowopsa mupaipi yanu yophatikizira/kutumiza mosalekeza (CI/CD). Mapulogalamu amawunikidwa pakupanga ndi kukhazikitsa mapulogalamu. Tsindikani kufunikira kosanthula ndi kuzindikira zida zotseguka, malaibulale, ndi ma frameworks. Madivelopa omwe amagwiritsa ntchito mitundu yakale, yomwe ili pachiwopsezo ndi chimodzi mwazinthu zomwe zimayambitsa kuwonongeka kwa ziwiya.
- Sinthani masinthidwe anu ndi Center for Internet Security tests (), zomwe zilipo kwa onse a Docker ndi Kubernetes.
- Onetsetsani kuti mukukhazikitsa zowongolera zolowera, kuonetsetsa kulekanitsa ntchito, ndikukhazikitsa ndondomeko yoyendetsera zinsinsi. Zambiri, monga makiyi a Secure Sockets Layer (SSL) kapena mbiri ya database, imabisidwa ndi oimba kapena mayendedwe a chipani chachitatu ndikuwululidwa panthawi yothamanga.
- Pewani zotengera zokwezeka poyang'anira mfundo zachitetezo kuti muchepetse ziwopsezo zosweka.
- Gwiritsani ntchito zida zachitetezo zomwe zimakupatsirani chilolezo, kuyang'anira kachitidwe, ndi kuzindikira molakwika kuti mupewe zochitika zoyipa.
:
- Limbikitsani mphamvu zomangidwa za Kubernetes. Khazikitsani mwayi wofikira ogwiritsa ntchito pogwiritsa ntchito maudindo. Onetsetsani kuti simukupereka zilolezo zosafunikira kwa mabungwe omwe ali pawokha, ngakhale zingatenge nthawi kuti muganizire za zilolezo zomwe zimafunikira. Zingakhale zokopa kupatsa woyang'anira magulu mwayi waukulu chifukwa izi zimapulumutsa nthawi poyamba. Komabe, kunyengerera kapena zolakwika zilizonse muakaunti zitha kubweretsa zotsatira zoyipa pambuyo pake.
- Pewani zilolezo zolowera. Zitha kukhala zothandiza nthawi zina kukhala ndi maudindo osiyanasiyana, koma izi zitha kuyambitsa zovuta zogwirira ntchito komanso kupanga malo osawona pochotsa zilolezo. Ndikofunikiranso kuchotsa maudindo omwe sanagwiritsidwe ntchito komanso osagwira ntchito.
- Khazikitsani ndondomeko zapaintaneti: patulani ma module kuti muchepetse kuwafikira; kulola mwachindunji mwayi wopezeka pa intaneti ku ma module omwe amafunikira pogwiritsa ntchito ma tag; Lolani kulumikizana pakati pa ma module omwe amafunikira kulumikizana wina ndi mnzake.
Momwe mungayang'anire zotengera ndi ntchito zomwe zili mmenemo
Chitetezo ndi Kuyang'anira - potumiza magulu a Kubernetes. Madivelopa nthawi zonse amayang'ana kwambiri mawonekedwe a mapulogalamu omwe amapanga osati mawonekedwe .
:
- Yesetsani kuyang'anira momwe mulili kapena ntchito zomwe zili mmenemo mogwirizana ndi machitidwe owonetsetsa.
- Yang'anani ogulitsa ndi zida zophatikizana mozama mu orchestration ya chidebe, makamaka Kubernetes.
- Sankhani zida zomwe zimapereka mitengo mwatsatanetsatane, zodziwikiratu ntchito, ndi malingaliro anthawi yeniyeni pogwiritsa ntchito analytics ndi/kapena kuphunzira pamakina.
:
- Gwiritsani ntchito zida kuti mudzipezere nokha ndikuyang'anira ma metrics, ma metric olumikizana ndi magwiridwe antchito monga CPU, kukumbukira, ndi nthawi yowonjezera.
- Onetsetsani kukonzekera bwino kwa mphamvu polosera masiku a kuchepa kwa mphamvu kutengera ma metric omwe amawunikira.
- Yang'anirani mapulogalamu omwe ali m'mitsuko kuti apezeke ndikugwira ntchito, zothandiza pokonzekera luso komanso kuthetsa mavuto.
- Sinthani mayendedwe a ntchito popereka kasamalidwe ndi makulitsidwe othandizira zotengera ndi malo omwe akusungirako.
- Sinthani mwayi wolowera kuti muwunikire ogwiritsa ntchito anu, kuletsa maakaunti akale ndi alendo, ndikuchotsa mwayi wosafunika.
- Onetsetsani kuti zida zanu zitha kuyang'anira zotengera izi ndi mapulogalamu m'malo angapo (mtambo, pamalopo, kapena wosakanizidwa) kuti muwone ndikuwonetsa momwe magwiridwe antchito amagwirira ntchito pazipangizo zonse, maukonde, makina, ndi mapulogalamu.
Momwe mungasungire deta ndikuwonetsetsa chitetezo chake
Chifukwa cha kuchuluka kwa zotengera zodziwika bwino za ogwira ntchito, makasitomala akuyenera kuganizira za kupezeka kwa data kunja kwa omwe akulandira komanso kufunikira koteteza detayo.
Malingana ndi , chitetezo cha deta chimaposa mndandanda wazinthu zokhudzana ndi chitetezo zomwe zatchulidwa ndi ambiri omwe anafunsidwa (61%).
Kubisa kwa data ndiye njira yayikulu yotetezera (64%), koma oyankha amagwiritsanso ntchito kuyang'anira nthawi
(49%), kuyang'ana zolembera zazovuta (49%), kusanthula zowopsa mu mapaipi a CI/CD (49%), ndi kutsekereza zosokoneza kudzera pachitetezo cha nthawi yothamanga (48%).
:
- Sankhani njira zosungira zomangidwa pa mfundo . Ndikwabwino kuyang'ana pa zomwe zimakwaniritsa zofunikira zosungirako zosungirako zosungiramo zinthu, ndizodziyimira pawokha, zoyendetsedwa ndi API, zokhala ndi zomanga zogawidwa, kuthandizira kutumizidwa kwanuko komanso kutumizidwa mumtambo wapagulu.
- Pewani mapulagini eni ake ndi zolumikizirana. Sankhani mavenda omwe amapereka Kubernetes kuphatikiza ndikuthandizira mawonekedwe ofananirako monga CSI (Constorage Interfaces).
Momwe mungagwiritsire ntchito ma network
Mitundu yachikhalidwe yamabizinesi apakompyuta, pomwe magulu a IT amapanga chitukuko cha maukonde, kuyesa, kutsimikizika kwamtundu, komanso malo opangira projekiti iliyonse, sizimayenderana bwino ndi mayendedwe opitilira chitukuko. Kuphatikiza apo, ma netiweki otengera amakhala ndi magawo angapo.
В malamulo apamwamba omwe kukhazikitsidwa kwa cluster-network solution kuyenera kutsatira:
- Ma Pods omwe amakonzedwa pamfundo yomweyo ayenera kulumikizana ndi ma pod ena osagwiritsa ntchito NAT (Network Address Translation).
- Ma daemoni onse (machitidwe akumbuyo monga kubelet) omwe akuyenda pa node inayake amatha kulumikizana ndi ma pods omwe akuyenda panjira yomweyo.
- Zogwiritsa ntchito ayenera kukhala okhoza kulankhulana ndi ma pod ena onse pa ma node ena onse popanda kugwiritsa ntchito NAT. Dziwani kuti ma network a host amathandizidwa pa ma host okha. Linux.
Mayankho a intaneti akuyenera kuphatikizidwa mwamphamvu ndi zoyambira za Kubernetes ndi mfundo. Atsogoleri a IT akuyenera kuyesetsa kuti pakhale makina apamwamba kwambiri a netiweki ndikupatsa opanga zida zoyenera komanso kusinthasintha kokwanira.
:
- Dziwani ngati CaaS yanu (chotengera ngati ntchito) kapena SDN yanu (Software Defined Network) imathandizira maukonde a Kubernetes. Ngati sichoncho kapena kuthandizira sikukwanira, gwiritsani ntchito mawonekedwe a netiweki a CNI (Container Network Interface) pazotengera zanu, zomwe zimathandizira magwiridwe antchito ndi mfundo zofunika.
- Onetsetsani kuti CaaS kapena PaaS yanu (nsanja ngati ntchito) imathandizira kupanga olamulira a ingress ndi / kapena oyendetsa katundu omwe amagawa magalimoto omwe akubwera pakati pa magulu a magulu. Ngati izi sizingachitike, fufuzani pogwiritsa ntchito ma proxies a chipani chachitatu kapena ma meshes.
- Phunzitsani mainjiniya anu a network pa intaneti Linux ndi zida zodzichitira zokha pa intaneti kuti muchepetse kusiyana kwa luso ndikuwonjezera kusinthasintha.
Momwe mungayendetsere moyo wa pulogalamuyo
Kuti mutumize makina ogwiritsira ntchito okha komanso opanda msoko, muyenera kuthandizira kuyimba kwa chidebe ndi zida zina zongopanga zokha, monga zomangamanga monga ma code (IaC). Izi zikuphatikizapo Chef, Chidole, Ansible ndi Terraform.
Zida zodzipangira zokha zomanga ndi kutulutsa mapulogalamu ndizofunikiranso (onani ""). Zotengera zimaperekanso kuthekera kokulirapo kofanana ndi komwe kumapezeka potumiza makina owoneka bwino (VMs). Chifukwa chake, atsogoleri a IT ayenera kukhala nawo .
:
- Khazikitsani miyezo ya zithunzi zotengera zotengera kutengera kukula, layisensi, ndi kusinthasintha kuti opanga awonjezere zigawo.
- Gwiritsani ntchito masinthidwe kasamalidwe kuti muzitha kuyang'anira moyo wa zotengera zomwe zimakhala zosanjikiza kutengera zithunzi zoyambira zomwe zili m'malo osungira anthu kapena achinsinsi.
- Gwirizanitsani nsanja yanu ya CaaS ndi zida zodzipangira zokha kuti mugwiritse ntchito ntchito yanu yonse.
Momwe mungasamalire zotengera ndi oyimba
Ntchito yayikulu pakuyika makontena imaperekedwa pamagawo a orchestration ndikukonzekera. Pakukonzekera, zotengera zimayikidwa pa makamu omwe ali abwino kwambiri pagulu, monga momwe zimakhalira ndi zofunikira za gulu la orchestration.
Kubernetes wakhala mulingo wa orchestration wa de facto wokhala ndi gulu logwira ntchito ndipo amathandizidwa ndi ogulitsa ambiri otsogola.
:
- Kufotokozera zofunikira pakuwongolera chitetezo, kuyang'anira, kasamalidwe ka mfundo, kusasunthika kwa data, ma network ndi kasamalidwe ka moyo wa chidebe.
- Kutengera zofunikira izi, sankhani chida chomwe chikugwirizana ndi zomwe mukufuna komanso momwe mungagwiritsire ntchito.
- Gwiritsani ntchito kafukufuku wa Gartner (onani "") kuti mumvetsetse zabwino ndi zoyipa zamitundu yosiyanasiyana ya Kubernetes ndikusankha yabwino kwambiri pakugwiritsa ntchito.
- Sankhani wothandizira yemwe angapereke nyimbo zosakanizidwa za zotengera zogwirira ntchito m'malo osiyanasiyana okhala ndi kuphatikizika kolimba, mapulani a kasamalidwe wamba, ndi mitundu yofananira yamitengo.
Momwe mungagwiritsire ntchito kuthekera kwa opereka mtambo
kuti chidwi chotumizira zotengera pamtambo wapagulu IaaS chikukulirakulira chifukwa cha kupezeka kwa zopereka za CaaS zokonzeka, komanso kuphatikiza kolimba kwa zoperekazi ndi zinthu zina zoperekedwa ndi opereka mtambo.
Mitambo ya IaaS imapereka kugwiritsa ntchito kwazinthu zomwe mukufuna, scalability mwachangu komanso , zomwe zingathandize kupewa kufunikira kwa chidziwitso chozama cha zomangamanga ndi kukonza kwake. Opereka mitambo ambiri amapereka chithandizo chowongolera ziwiya, ndipo ena amapereka njira zingapo zoyimba.
Othandizira makiyi oyendetsedwa ndi mtambo akuwonetsedwa patebulo:
Wopereka mitambo
Mtundu wautumiki
Zogulitsa/ntchito
Alibaba
Native Cloud Service
Alibaba Cloud Container Service, Alibaba Cloud Container Service ya Kubernetes
Mapulogalamu a Webusaiti a Amazon (AWS)
Native Cloud Service
Amazon Elastic Container Services (ECS), Amazon ECS ya Kubernetes (EKS), AWS Fargate
Giant Swarm
MSP
Giant Swarm Yoyang'anira Kubernetes Infrastructure
Google
Native Cloud Service
Google Container Engine (GKE)
IBM
Native Cloud Service
IBM Cloud Kubernetes Service
Microsoft
Native Cloud Service
Azure Kubernetes Service, Azure Service Fabric
Oracle
Native Cloud Service
OCI Container Injini ya Kubernetes
Platform9
MSP
Managed Kubernetes
Red Hat
Service host
OpenShift Yodzipereka & Pa intaneti
VMware
Service host
Cloud PKS (Beta)
Mail.ru Cloud Solutions*
Native Cloud Service
Mail.ru Cloud Containers
* Sitidzabisala, tidadziwonjezera pano pakumasulira :)
Othandizira pamtambo wapagulu akuwonjezeranso maluso atsopano ndikutulutsa zinthu zapamalo. Posachedwapa, opereka mtambo apanga chithandizo cha mitambo yosakanizidwa ndi malo okhala ndi mitambo yambiri.
:
- Yang'anirani bwino momwe gulu lanu lingagwiritsire ntchito ndikuwongolera zida zoyenera, ndikuganiziranso ntchito zina zowongolera zotengera zamtambo.
- Sankhani mapulogalamu mosamala, gwiritsani ntchito gwero lotseguka ngati kuli kotheka.
- Sankhani opereka omwe ali ndi machitidwe omwe amagwiritsidwa ntchito m'malo osakanizidwa omwe amapereka kasamalidwe ka galasi kamodzi kamagulu ogwirizana, komanso opereka omwe amapangitsa kuti zikhale zosavuta kudzipangira nokha IaaS.
:
- Ndikoyenera kuyang'ana magawo omwe amathandizira kupezeka kwakukulu kunja kwa bokosi. Izi zikuphatikiza chithandizo cha zomangamanga zazikulu zingapo, zida zomwe zimapezeka kwambiri etcd, ndikusunga zosunga zobwezeretsera ndikuchira.
- Kuti muwonetsetse kuyenda m'malo anu a Kubernetes, ndibwino kusankha opereka mtambo omwe amathandizira mitundu yosiyanasiyana yotumizira, kuyambira pamalopo mpaka osakanizidwa mpaka mitambo yambiri.
- Zopereka zoperekedwa ziyenera kuyesedwanso kutengera kumasuka kwa kukhazikitsa, kukhazikitsa, ndi kupanga magulu, komanso zosintha, kuyang'anira, ndi kuthetsa mavuto. Chofunikira chachikulu ndikuthandizira zosintha zamagulu zongochitika zokha ndi zero kutsika. Yankho limene mwasankha liyenera kukulolani kuti muzitha kuyendetsa zosintha pamanja.
- Chidziwitso ndi kasamalidwe ka mwayi ndizofunikira kuchokera kuchitetezo komanso kawonedwe kaulamuliro. Onetsetsani kuti kugawa kwa Kubernetes komwe mumasankha kumathandizira kuphatikiza ndi zida zotsimikizira ndi zololeza zomwe mumagwiritsa ntchito mkati. RBAC ndi kuwongolera kofikira bwino ndizinthu zofunikiranso.
- Kugawa komwe mumasankha kuyenera kukhala ndi njira yolumikizira intaneti yomwe imatanthawuza zofunikira zosiyanasiyana kuchokera kuzinthu zosiyanasiyana, kapena kuthandizira kukhazikitsidwa kwapaintaneti kwa CNI, kuphatikiza Flannel, Calico, kube-router, kapena OVN. .
Kukhazikitsidwa kwa zotengera pakupanga ndikukhala njira yayikulu, monga zikuwonekera ndi zotsatira za kafukufuku yemwe adachitika pa zomangamanga, ntchito ndi njira zamtambo (IOCS) mu Disembala 2018:
Monga mukuwonera, 27% ya omwe adafunsidwa amagwiritsa ntchito kale zotengera pantchito yawo, ndipo 63% akukonzekera kutero.
В 24% ya omwe adafunsidwa adanenanso kuti amagulitsa ndalama zoposa theka la miliyoni pachaka paukadaulo wamakina, ndipo 17% ya omwe adafunsidwa amawononga ndalama zoposa miliyoni miliyoni pachaka paiwo.
Nkhani yokonzedwa ndi gulu la nsanja yamtambo .
Chinanso choti muwerenge pamutuwu:
- .
- .
- .
Source: www.habr.com
