"Kodi pali kusiyana kotani pakati pa Kubernetes ndi OpenShift?" - funso ili limabwera mosasinthika enviable. Ngakhale kwenikweni izi zili ngati kufunsa momwe galimoto imasiyanirana ndi injini. Ngati tipitiliza fanizoli, ndiye kuti galimoto ndi chinthu chomalizidwa, mutha kuchigwiritsa ntchito nthawi yomweyo, kwenikweni: lowetsani ndikupita. Kumbali ina, kuti injini ikufikitseni kwinakwake, imayenera kuwonjezeredwa ndi zinthu zina zambiri kuti pamapeto pake mupeze galimoto yomweyi.
Chifukwa chake, Kubernetes ndiye injini yomwe galimoto yamtundu wa OpenShift (nsanja) imasonkhanitsidwa, zomwe zimakufikitsani ku cholinga chanu.
M'nkhaniyi tikufuna kukukumbutsani ndikuwunika mfundo zotsatirazi mwatsatanetsatane:
- Kubernetes ndiye mtima wa nsanja ya OpenShift ndipo ndi 100% yovomerezeka ya Kubernetes, gwero lotseguka komanso lopanda eni ake pang'ono. Mwachidule:
- OpenShift cluster API ndi XNUMX% Kubernetes.
- Ngati chidebecho chikuyenda pamakina ena aliwonse a Kubernetes, ndiye kuti chidzayenda pa OpenShift popanda kusintha kulikonse. Palibe chifukwa chosinthira mapulogalamu.
- OpenShift sikuti imangowonjezera zofunikira ndi magwiridwe antchito ku Kubernetes. Monga galimoto, OpenShift yatuluka m'bokosi, ikhoza kupangidwa nthawi yomweyo, ndipo, monga momwe tawonetsera pansipa, imapangitsa moyo wa omanga kukhala wosavuta kwambiri. Ichi ndichifukwa chake OpenShift imalumikizana mwa anthu awiri. Ndi nsanja yopambana komanso yodziwika bwino yamabizinesi a PaaS kuchokera pamalingaliro a wopanga. Ndipo panthawi imodzimodziyo, ndi njira yodalirika kwambiri ya Container-as-a-Service kuchokera kumalo ogwirira ntchito mafakitale.
OpenShift ndi Kubernetes yokhala ndi certification ya 100% CNCF
OpenShift idakhazikitsidwa ndi . Chifukwa chake, ataphunzitsidwa koyenera, ogwiritsa ntchito amadabwa ndi mphamvu ya kubectl. Ndipo iwo omwe adasinthira ku OpenShift kuchokera ku Kubernetes Cluster nthawi zambiri amanena momwe amakondera pambuyo polozera kubeconfig ku gulu la OpenShift, zolemba zonse zomwe zilipo zimagwira ntchito bwino.
Mwinamwake mudamvapo za OpenShift's command line utility yotchedwa OC. Ndilo lamulo logwirizana ndi kubectl, kuphatikizanso limapereka othandizira angapo omwe angakhale othandiza pogwira ntchito zingapo. Koma choyamba, zochulukira pang'ono zokhudzana ndi OC ndi kubectl:
kubectl malamulo
Magulu a OC
kubectl tenga matumba
oc kupeza matumba
kubectl kupeza mayina
oc kupeza mayina
kubectl create -f deployment.yaml
oc pangani -f deployment.yaml
Izi ndi zomwe zotsatira zogwiritsa ntchito kubectl pa OpenShift API zimawonekera:
• kubectl kupeza ma pod - kubweza ma pod monga momwe amayembekezera.
• kubectl pezani mayina - imabweretsanso malo monga momwe amayembekezera.
Lamulo kubectl create -f mydeployment.yaml imapanga zida za kubernetes monga papulatifomu ina iliyonse ya Kubernetes, monga zikuwonekera mu kanema pansipa:
Mwanjira ina, ma API onse a Kubernetes amapezeka kwathunthu ku OpenShift ndikusunga 100% yogwirizana. Ichi ndichifukwa chake .
OpenShift imawonjezera zinthu zothandiza ku Kubernetes
Kubernetes APIs ndi 100% kupezeka mu OpenShift, koma muyezo wa Kubernetes utility kubectl mwachidziwikire ilibe magwiridwe antchito komanso osavuta. Ichi ndichifukwa chake Red Hat yawonjezera zida zothandiza ndi zida zamalamulo ku Kubernetes, monga OC (yachidule kwa kasitomala wa OpenShift) ndi ODO (OpenShift DO, chida ichi chimayang'ana omanga).
1. OC zofunikira - mtundu wamphamvu komanso wosavuta wa Kubectl
Mwachitsanzo, mosiyana ndi kubectl, imakupatsani mwayi wopanga mayina atsopano ndikusintha mawonekedwe mosavuta, komanso imaperekanso malamulo angapo othandiza kwa opanga, monga zithunzi zomangira chidebe ndikutumiza mapulogalamu mwachindunji kuchokera pama code kapena ma binaries (Source-to-image, s2 ndi).
Tiyeni tiwone zitsanzo za momwe othandizira omangidwira ndi magwiridwe antchito apamwamba a OC utility amathandizira kuti ntchito za tsiku ndi tsiku zikhale zosavuta.
Chitsanzo choyamba ndi kasamalidwe ka malo. Gulu lililonse la Kubernetes nthawi zonse limakhala ndi malo angapo. Nthawi zambiri amagwiritsidwa ntchito popanga malo otukuka ndi kupanga, koma amathanso kugwiritsidwa ntchito, mwachitsanzo, kupatsa wopanga aliyense sandbox yake. M'malo mwake, izi zimapangitsa kuti wopanga azisinthana pafupipafupi pakati pa malo a mayina, popeza kubectl imayenda molingana ndi malo omwe alipo. Chifukwa chake, pankhani ya kubectl, anthu amagwiritsa ntchito mwachangu zolemba zothandizira pa izi. Koma mukamagwiritsa ntchito OC, kusintha malo omwe mukufuna, ingonenani "oc project namespace".
Simukukumbukira dzina lomwe mukufuna limatchedwa? Palibe vuto, ingolembani "oc get projects" kuti muwonetse mndandanda wonse. Okayika akudabwa kuti izi zitha bwanji ngati mutha kukhala ndi magawo ochepa a mayina pagulu? Chabwino, chifukwa kubectl imangochita izi molondola ngati RBAC ikulolani kuti muwone mipata yonse pamagulu, ndipo m'magulu akuluakulu si onse omwe amapatsidwa zilolezo. Kotero, tikuyankha: kwa OC izi siziri vuto konse ndipo zidzatulutsa mndandanda wathunthu muzochitika zotere mosavuta. Ndizinthu zazing'ono izi zomwe zimapanga mawonekedwe amakampani a Openshift ndi scalability yabwino ya nsanja iyi malinga ndi ogwiritsa ntchito ndi kugwiritsa ntchito.
2. ODO - mtundu wowongoleredwa wa kubectl kwa Madivelopa
Chitsanzo china chakusintha kwa Red Hat OpenShift pa Kubernetes ndi ntchito ya mzere wa ODO. Amapangidwira opanga ndipo amakulolani kuti mutumize msanga kachidindo kameneko ku gulu lakutali la OpenShift. Itha kusinthiranso njira zamkati kuti mulunzanitse nthawi yomweyo zosintha zonse pamakina omwe ali pagulu lakutali la OpenShift popanda kupanganso, kulembetsa, ndi kuyikanso zithunzi.
Tiyeni tiwone momwe OC ndi ODO zimapangira kugwira ntchito ndi zotengera ndi Kubernetes kukhala kosavuta.
Ingoyerekezani maulendo angapo a ntchito akamamangidwa pamaziko a kubectl, komanso OC kapena ODO ikagwiritsidwa ntchito.
• Kutumiza ma code pa OpenShift kwa omwe samalankhula YAML:
Kubernetes/kubectl
$> git chojambula
1- Pangani Dockerfile yomwe imapanga chithunzicho kuchokera pamakhodi
-----
KUCHOKERA mu mfundo
WORKDIR /usr/src/app
COPY phukusi*.json ./
COPY index.js ./
KOPI ./app ./app
RUN npm kukhazikitsa
EXPOSE 3000
CMD [ “npm”, “start”] —————–
2- Timamanga chithunzicho
$>kumanga kwa podman...
3- Lowani ku registry
podman login...
4- Ikani chithunzicho mu registry
kukankha podman
5- Pangani mafayilo aml kuti atumizidwe (deployment.yaml, service.yaml, ingress.yaml) - ichi ndiye chocheperako.
6- Tumizani mafayilo owonetsera:
Kubectl apply -f .
OpenShift/oc
$> oc pulogalamu yatsopano -dzina_lathu_ntchito
OpenShift/odo
$> git chojambula
$> odo pangani ma nodejs myapp
$>do kukankha
• Kusintha mawu: sinthani malo ogwirira ntchito kapena gulu lantchito.
Kubernetes/kubectl
1- Pangani nkhani mu kubeconfig ya projekiti "myproject"
2- kubectl set-context…
OpenShift/oc
oc polojekiti "myproject"
Kuwongolera khalidwe: "Chinthu chimodzi chosangalatsa chawonekera pano, chidakali mu mtundu wa alpha. Mwina titha kuziyika pakupanga?"
Tangoganizani kukhala m’galimoto yothamanga n’kuuzidwa kuti: “Taika mabuleki amtundu watsopano, ndipo kunena zoona, kudalirika kwawo sikunayende bwino... wa Championship.” Kodi mwaikonda bwanji chiyembekezo chimenechi? Ife ku Red Hat mwanjira inayake sitikusangalala kwambiri. 🙂
Chifukwa chake, timayesa kusiya matembenuzidwe a alpha mpaka atakhwima mokwanira ndipo tayesa bwino zankhondo ndikuwona kuti ndi otetezeka kugwiritsa ntchito. Nthawi zambiri, chilichonse chimadutsa gawo la Dev Preview poyamba, kenako ndipo pokhapo amatuluka ngati kumasulidwa kwa anthu (GA), yomwe ili yokhazikika kale kotero kuti ndiyoyenera kupanga.
Ndichoncho chifukwa chiyani? Chifukwa, monga ndi chitukuko cha mapulogalamu ena aliwonse, si malingaliro onse oyambirira ku Kubernetes amafika kumasulidwa komaliza. Kapena amafika ndikusunga zomwe akufuna, koma kukhazikitsa kwawo ndikosiyana kwambiri ndi komwe kuli mu mtundu wa alpha. Ndi zikwi zikwi za makasitomala a Red Hat omwe amagwiritsa ntchito OpenShift kuti athandizire ntchito zofunikira kwambiri, timatsindika kwambiri kukhazikika kwa nsanja yathu ndi chithandizo cha nthawi yaitali.
Red Hat yadzipereka kumasula OpenShift pafupipafupi ndikusintha mtundu wa Kubernetes womwe umabwera nawo. Mwachitsanzo, kutulutsidwa kwaposachedwa kwa GA kwa OpenShift 4.3 panthawi yolembaku kumaphatikizapo Kubernetes 1.16, yomwe ndi gawo limodzi lokha kumbuyo kwa mtundu wakumtunda wa Kubernetes wokhala ndi 1.17. Chifukwa chake, tikuyesera kupatsa makasitomala Kubernetes yamakampani ndikupereka kuwongolera kowonjezera pamene tikutulutsa mitundu yatsopano ya OpenShift.
Kukonza mapulogalamu: "Panali bowo mu mtundu wa Kubernetes womwe timapanga. Ndipo mutha kutseka pokhapokha posintha mitundu itatu. Kapena pali njira iliyonse?
Mu pulojekiti yotseguka ya Kubernetes, zosintha zamapulogalamu nthawi zambiri zimatulutsidwa ngati gawo la kutulutsidwa kotsatira, nthawi zina kumaphimba gawo limodzi kapena ziwiri zomwe zachitika m'mbuyomu, ndikuwunikiranso miyezi isanu ndi umodzi.
Red Hat imanyadira kumasula zosintha zovuta kale kuposa ena ndikupereka chithandizo kwa nthawi yayitali. Tengani mwachitsanzo Kubernetes mwayi wokwera pachiwopsezo (): idapezeka ku Kubernetes 1.11, ndipo zokonza zotulutsa zam'mbuyomu zidatulutsidwa mpaka mtundu wa 1.10.11, ndikusiya iyi mu dzenje pazotulutsa zonse za Kubernetes, kuyambira 1.x mpaka 1.9.
Komanso, (Kubernetes 1.2 ilipo), ikugwira zotulutsa zisanu ndi zinayi za OpenShift ndikuwonetsa bwino chisamaliro kwa makasitomala (zambiri ).
Momwe OpenShift ndi Red Hat akusunthira Kubernetes patsogolo
Red Hat ndi pulogalamu yachiwiri yayikulu kwambiri yomwe ikuthandizira pulojekiti yotseguka ya Kubernetes, kumbuyo kwa Google yokha, yokhala ndi 3 mwa opanga 5 otsogola kwambiri akuchokera ku Red Hat. Mfundo inanso yodziwika bwino: ntchito zambiri zovuta zidawonekera ku Kubernetes ndendende poyambitsa Red Hat, makamaka, monga:
- Mtengo wa RBAC. Kubernetes analibe ntchito za RBAC (ClusterRole, ClusterRoleBinding) mpaka akatswiri a Red Hat adaganiza zowagwiritsa ntchito ngati gawo la nsanja yokha, osati ngati ntchito yowonjezera ya OpenShift. Kodi Red Hat ikuopa kukonza Kubernetes? Ayi, chifukwa Red Hat imatsatira mosamalitsa mfundo zotseguka ndipo simasewera masewera a Open Core. Kupititsa patsogolo ndi zatsopano zomwe zimayendetsedwa ndi midzi yachitukuko, osati eni eni, zimakhala zogwira mtima komanso zovomerezeka kwambiri, zomwe zimagwirizana bwino ndi cholinga chathu chachikulu chopanga mapulogalamu otseguka kukhala othandiza kwa makasitomala athu.
- Ndondomeko Zachitetezo cha ma pod (Policy Security Policy). Lingaliro la kugwiritsa ntchito mapulogalamu mosatekeseka mkati mwa ma pod lidakhazikitsidwa ku OpenShift pansi pa dzina la SCC (Security Context Constraints). Ndipo monga m'chitsanzo cham'mbuyomo, Red Hat adaganiza zoyambitsa zochitikazi mu polojekiti yotseguka ya Kubernetes kuti aliyense azigwiritsa ntchito.
Mndandanda wa zitsanzozi ukhoza kupitilizidwa, koma tinkangofuna kusonyeza kuti Red Hat ikudziperekadi kupanga Kubernetes ndikupangitsa kuti ikhale yabwino kwa aliyense.
Zikuwonekeratu kuti OpenShift ndi Kubernetes. Kodi pali kusiyana kotani? 🙂
Tikukhulupirira kuti powerenga mpaka pano mwazindikira kuti Kubernetes ndiye gawo lalikulu la OpenShift. Chachikulu, koma kutali ndi chokhacho. Mwanjira ina, kungoyika Kubernetes sikungakupatseni nsanja yamabizinesi. Mufunika kuwonjezera chitsimikiziro, maukonde, chitetezo, kuyang'anira, kasamalidwe ka log, ndi zina zambiri. Kuphatikiza apo, muyenera kupanga zisankho zovuta pazida zambiri zomwe zilipo (kuti muthokoze kusiyanasiyana kwachilengedwe, ingoyang'anani. ) ndipo penapake awonetsetse kuti amagwirizana ndi mgwirizano kuti agwire ntchito imodzi. Kuphatikiza apo, mufunika kukonzanso ndikuyesa kuyambiranso nthawi zonse mukatulutsa mtundu watsopano wazinthu zomwe mumagwiritsa ntchito. Ndiko kuti, kuwonjezera pa kupanga ndi kusunga nsanja yokha, mudzafunikanso kuthana ndi mapulogalamu onsewa. Ndizokayikitsa kuti padzakhala nthawi yochuluka yoti athetse mavuto abizinesi ndikupeza mwayi wampikisano.
Koma pankhani ya OpenShift, Red Hat imadzitengera zovuta zonsezi ndikungokupatsani nsanja yogwira ntchito, yomwe imaphatikizapo osati Kubernetes yokha, komanso zida zonse zofunika zotsegula zomwe zimatembenuza Kubernetes kukhala gulu lenileni labizinesi. yankho lomwe mutha kuyambitsa mwachangu komanso modekha mukupanga. Ndipo zowonadi, ngati muli ndi zida zanu zaukadaulo, ndiye kuti mutha kuphatikiza OpenShift mumayankho omwe alipo.
Yang'anani pa chithunzi pamwambapa: chirichonse chomwe chiri kunja kwa rectangle ya Kubernetes ndi pamene Red Hat imawonjezera ntchito zomwe Kubernetes alibe, monga akunena, mwa kupanga. Ndipo tsopano tiwona zazikulu za maderawa.
1. Robust OS monga maziko: RHEL CoreOS kapena RHEL
Red Hat yakhala ikutsogolera kugawa kwa Linux pamabizinesi ofunikira kwazaka zopitilira 20. Zomwe tapeza komanso zosinthidwa nthawi zonse m'derali zimatipatsa mwayi wopereka maziko odalirika komanso odalirika ogwirira ntchito zamafakitale. RHEL CoreOS imagwiritsa ntchito kernel yofanana ndi RHEL, koma imakongoletsedwa makamaka pa ntchito monga kuyendetsa zitsulo ndikuyendetsa magulu a Kubernetes: kukula kwake kochepa ndi kusasunthika kumapangitsa kuti zikhale zosavuta kukhazikitsa masango, autoscaling, kutumiza zigamba, ndi zina zotero. maziko abwino operekera ogwiritsa ntchito omwewo ndi OpenShift kudutsa malo osiyanasiyana apakompyuta, kuyambira chitsulo chopanda kanthu kupita kumtambo wachinsinsi komanso wapagulu.
2. Kukonzekera kwa ntchito za IT
Kukonzekera kwa njira zoikira ndi ntchito za tsiku la 4 (ndiko kuti, ntchito za tsiku ndi tsiku) ndi mfundo yamphamvu ya OpenShift, zomwe zimapangitsa kuti zikhale zosavuta kuyang'anira, kukonzanso, ndi kusunga machitidwe a nsanja yapamwamba kwambiri. Izi zimatheka chifukwa chothandizira ogwiritsa ntchito Kubernetes pa OpenShift XNUMX kernel level.
OpenShift 4 ilinso ndi chilengedwe chonse chayankho kutengera ogwiritsa ntchito a Kubernetes, opangidwa ndi Red Hat yokha komanso ndi anzawo a chipani chachitatu (onani. Red Hat, kapena sitolo yogwiritsira ntchito , yopangidwa ndi Red Hat kwa opanga gulu lachitatu).
Katundu wophatikizidwa wa OpenShift 4 akuphatikiza opitilira 180 Kubernetes
3. Zida Zopangira
Kuyambira 2011, OpenShift yakhala ikupezeka ngati nsanja ya PaaS (Platform-as-a-Service) yomwe imapangitsa moyo kukhala wosavuta kwa omanga, imawathandiza kuyang'ana kwambiri zolemba, komanso imapereka chithandizo chachilengedwe cha zilankhulo zamapulogalamu monga Java, Node.js. , PHP, Ruby, Python, Go, komanso CI/CD mosalekeza kuphatikiza ndi kutumiza ntchito, nkhokwe, etc. OpenShift 4 amapereka , yomwe imaphatikizapo ntchito zoposa 100 zochokera kwa ogwira ntchito a Kubernetes opangidwa ndi Red Hat ndi anzathu.
Mosiyana ndi Kubernetes, OpenShift 4 ili ndi GUI yodzipereka (), yomwe imathandiza omanga kuti agwiritse ntchito mosavuta mapulogalamu kuchokera kumalo osiyanasiyana (git, registries akunja, Dockerfile, ndi zina zotero) m'malo awo a mayina ndikuwonetseratu bwino mgwirizano pakati pa zigawo zogwiritsira ntchito.
Kuphatikiza apo, OpenShift imapereka zida zachitukuko za Codeready, zomwe, makamaka, zimaphatikizapo , IDE yokhala ndi zida zonse yokhala ndi mawonekedwe apaintaneti omwe amayenda molunjika pamwamba pa OpenShift ndikugwiritsa ntchito njira ya IDE-as-a-service. Kumbali ina, kwa iwo omwe akufuna kugwira ntchito mosamalitsa m'malo akumaloko, pali Codeready Containers, mtundu wa OpenShift 4 womwe ungagwiritsidwe ntchito pa laputopu.
Integrated IDE ngati ntchito yopititsa patsogolo chitukuko cha Kubernetes/OpenShift
OpenShift imapereka dongosolo lathunthu la CI/CD kunja kwa bokosilo, mwina kutengera Jenkins wokhala ndi zida ndi pulogalamu yowonjezera. pogwira ntchito ndi mapaipi, kapena dongosolo la Kubernetes CI/CD (pakali pano mu Tech preview version). Mayankho onsewa amaphatikizana kwathunthu ndi kontrakitala ya OpenShift, kukulolani kuti muthamangitse zoyambitsa mapaipi, kuwona kutumizidwa, mitengo, ndi zina zambiri.
4. Zida Zogwiritsira Ntchito
OpenShift imakulolani kuti mugwiritse ntchito mapulogalamu achikhalidwe komanso mayankho ozikidwa pamtambo potengera mamangidwe atsopano, monga ma microservices kapena opanda ma seva. Yankho la OpenShift Service Mesh limachokera m'bokosilo ndi zida zazikulu zosungira ma microservices, monga Istio, Kiali ndi Jaeger. Momwemonso, yankho la OpenShift Serverless limaphatikizapo osati Knative, komanso zida monga Keda zomwe zinapangidwa monga gawo la mgwirizano ndi Microsoft kuti apereke ntchito za Azure pa nsanja ya OpenShift.
Njira yophatikizira OpenShift ServiceMesh (Istio, Kiali, Jaeger) ikhala yothandiza popanga ma microservices.
Kuti atseke kusiyana pakati pa mapulogalamu amtundu ndi zotengera, OpenShift tsopano imalola makina osamuka kupita ku nsanja ya OpenShift pogwiritsa ntchito Container Native Virtualization (pakali pano ili mu TechPreview), kupangitsa kuti mapulogalamu osakanizidwa akhale enieni ndikuwongolera kusamuka kwawo pakati pa mitambo yosiyanasiyana, yachinsinsi komanso yapagulu.
Windows 2019 Makina owoneka bwino omwe akuyenda pa OpenShift kudzera pa Container Native Virtualization (pakali pano mu mtundu waukadaulo wa Tech)
5. Zida zamagulu
Pulatifomu iliyonse yamabizinesi iyenera kukhala ndi ntchito zowunikira ndikudula mitengo pakati, njira zotetezera, kutsimikizira ndi kuvomereza, ndi zida zowongolera maukonde. Ndipo OpenShift imapereka zonsezi m'bokosi, ndipo zonse ndi 100% gwero lotseguka, kuphatikiza mayankho monga ElasticSearch, Prometheus, Grafana. Mayankho onsewa amabwera ndi ma dashboards, ma metrics, ndi zidziwitso zomwe zidamangidwa kale ndikukonzedwa pogwiritsa ntchito ukatswiri wowunika wamagulu a Red Hat, kukulolani kuti muzitha kuyang'anira bwino ndikuwunika malo anu opanga kuyambira pachiyambi.
OpenShift imabweranso ndi zinthu zofunika kwambiri kwa makasitomala amakampani monga kutsimikizika ndi wolumbirira womangidwa, kuphatikiza ndi opereka zidziwitso, kuphatikiza LDAP, ActiveDirectory, OpenID Connect, ndi zina zambiri.
Dashboard yokonzedweratu ya Grafana yowunikira magulu a OpenShift
Kupitilira ma metric 150 okonzedweratu a Prometheus ndi zidziwitso za OpenShift cluster monitoring
Kuti apitirize
Kugwira ntchito bwino kwa yankho komanso chidziwitso chambiri cha Red Hat pantchito ya Kubernetes ndichifukwa chake OpenShift yapeza malo apamwamba pamsika, monga zikuwonekera pachithunzichi pansipa (werengani zambiri ).
"Red Hat pakadali pano imatsogolera msika ndi gawo la 44%.
Kampaniyo ikupeza phindu la njira yake yogulitsira makasitomala, pomwe imayamba kufunsira ndi kuphunzitsa opanga mabizinesi kenako ndikuyamba kupanga ndalama pomwe bizinesiyo ikuyamba kuyika zotengera kuti zipangidwe. ”
(Source: )
Tikukhulupirira kuti mwasangalala ndi nkhaniyi. M'nkhani zam'tsogolomu mndandandawu, tiwona zabwino za OpenShift pa Kubernetes m'magulu onse omwe takambirana pano.
Source: www.habr.com