Pa Novembara 24, Slurm Mega, maphunziro apamwamba kwambiri pa Kubernetes, adatha.
Lingaliro la Slurm Mega: timayang'ana pansi pa gululo, kusanthula m'malingaliro ndikuchita zovuta pakukhazikitsa ndikusintha gulu lokonzekera kupanga ("njira-yomwe si-yosavuta"), lingalirani zamakina. pofuna kuonetsetsa chitetezo ndi kulolerana zolakwika kwa mapulogalamu.
Bonasi ya Mega: Iwo omwe amapambana Slurm Basic ndi Slurm Mega amalandira chidziwitso chonse chofunikira kuti adutse mayeso
Tithokoze mwapadera kwa Selectel popereka mtambo woyeserera, chifukwa chomwe aliyense adagwira ntchito mgulu lathunthu, ndipo sitinayenera kuwonjezera 5 zikwizikwi pamtengo wa tikiti pa izi.
Slurm Mega. Tsiku loyamba.
Patsiku loyamba la Slurm Mega, tidakweza omwe adatenga nawo gawo ndi mitu 4. Pavel Selivanov adalankhula za njira yopangira gulu la failover kuchokera mkati, za ntchito ya Kubeadm, komanso kuyesa ndi kuthetsa vutolo.
Kupuma koyamba kwa khofi. Kawirikawiri "belu la mphunzitsi," koma ku Slurm, pamene ophunzira amamwa khofi, aphunzitsi amapitiriza kuyankha mafunso.
Ndipo ngakhale kuti mtambo wa "Break II" ukuyenda pamwamba pa mutu wa Pavel Selivanov, si tsogolo lake kuti apite kukapuma.
Sergei Bondarev ndi Marcel Ibraev akuyembekezera nthawi yawo yopita ku guwa.
Pa nthawi yopuma, ndinapita kwa Sergey Bondarev n’kumufunsa kuti: “Kodi mungapatse malangizo otani kwa mainjiniya onse a Kubernetes potengera zimene mwakumana nazo pogwira ntchito ndi magulu a makasitomala athu?”
Sergey anapereka lingaliro losavuta: "Letsani kulowa kwa intaneti kupita ku seva ya API. Chifukwa nthawi ndi nthawi pali ziwopsezo zachitetezo zomwe zimalola ogwiritsa ntchito osaloledwa kuti azitha kulowa mgululi.»
Patapita mphindi zingapo ndi botolo la madzi amchere, Pavel Selivanov anathamangira kunkhondo ndi mutu wa mutu wakuti "Chilolezo mu gulu pogwiritsa ntchito wothandizira kunja," LDAP (Nginx + Python) ndi OIDC (Dex + Gangway).
Nthawi yopuma yotsatira, a Marcel Ibraev, wolankhula Slurm, Wovomerezeka wa Kubernetes Administrator, adapereka upangiri wake kwa mainjiniya a Kubernetes: "Ndikunena chinthu chowoneka ngati chaching'ono, koma poganizira momwe ndimakumana ndi izi nthawi zambiri, ndikukayikira kuti si aliyense amene amaganizira izi. Simuyenera kukhulupirira mwachimbulimbuli Momwe Mungachitire kuchokera pa intaneti yomwe ingakuuzeni momwe izi kapena yankho limagwirira ntchito. Pankhani ya Kubernetes, izi zimakhala ndi tanthauzo lapadera. Chifukwa Kubernetes ndi dongosolo lovuta ndikuwonjezera yankho lomwe silinayesedwe mu polojekiti yanu komanso kuyika masango anu kumatha kubweretsa zotsatira zoyipa, ngakhale adalemba pa intaneti za kuzizira kwake. Ngakhale Kubernetes yekha popanda njira yoyenera atha kuwononga polojekiti yanu, "chomwe chili chabwino kwa waku Russia ndikufera Mjeremani." Chifukwa chake, timayesa, kuyang'ana, ndikuyesa yankho lililonse tisanagwiritse ntchito tokha. Iyi ndi njira yokhayo yomwe mungaganizire ma nuances onse omwe angabuke.".
Pambuyo nkhomaliro SERGEY Bondarev analowa nkhondo. Mutu wake ndi ndondomeko ya Network, yomwe ndi chiyambi cha CNI ndi Network Security Policy.
Intaneti ili ndi zolemba zambiri zokhudza Network Policy. Pali lingaliro pakati pa ma admins kuti Network Policies ikhoza kuperekedwa, koma akatswiri achitetezo amakonda chida ichi ndipo amafuna kuti Network Policies zitheke.
Pavel Selivanov adatenga udindo wa Kubernetes kuchokera kwa Sergey Bondarev ndi mutu wakuti "Mapulogalamu otetezeka komanso opezeka kwambiri m'gulu." Ali ndi mitu yomwe amakonda: PodSecurityPolicy, PodDisruptionBudget, LimitRange/ResourceQuota.
Mutu wa Mega, womwe Pavel adalankhula ku DevOpsConf:
Atanena momwe gulu la Kubernetes lingaberedwe mosavuta, oyang'anira okayika amati: "Inde, ndakuuzani, Kubernetes yanu ili ndi mabowo." Pavel akufotokoza kuti n'zotheka kukonza chitetezo mumagulu, ndipo sizovuta, kungoti zoikamo zachitetezo zimayimitsidwa mwachisawawa. Tsatanetsatane mu zolembedwa
- Ndani anathyola tsango? Anathyola tsango! Ndikuwona bwino kuchokera apa!
Ku Slurms, chilichonse sichapafupi komanso chosavuta, kuti musatope. Koma nthawi ino Telegalamu idaganiza zowonetsa aliyense mfundo yachisanu:
Марсель Ибраев, [22 нояб. 2019 г., 16:52:52]:
Коллеги, в данный момент наблюдаются сбои в работе Телеграм, имейте это ввиду
Izi zinamaliza tsiku loyamba, lowala komanso lodzaza ndi chidziwitso chothandiza. Patsiku lachiwiri padzakhala chizolowezi chochulukirapo, kuyambitsa gulu la database pogwiritsa ntchito PostgreSQL mwachitsanzo, kuyambitsa gulu la RabbitMQ, kuyang'anira zinsinsi ku Kubernetes.
Slurm Mega. Tsiku lachiwiri.
Wowonetsayo adayamba tsiku lachiwiri ndi chilengezo chachimwemwe: "M'mawa, monga Pavel adanenera dzulo, tikuyembekezera zovuta zenizeni. M'chinenero cha madokotala ochita opaleshoni, tidzalowa m'matumbo a Kubernetes! "
Osangalatsa ambiri ndi nkhani yosiyana. Limodzi mwamavuto omwe ali ndi Slurm ndikuti anthu amasiya kudziwa zambiri ndikugona. Nthawi zonse tinkafuna njira yochitirapo kanthu, ndipo masewera ang'onoang'ono okhala ndi omvera ankagwira ntchito bwino pa Slurm yotsiriza. Ulendo uno tinalemba ganyu munthu wophunzitsidwa mwapadera. Panali nthabwala zambiri pamacheza okhudza "mipikisano yosangalatsa," koma chowonadi ndichakuti sitinawonepo otenga nawo mbali achimwemwe chotere.
Iwo anabwera kudzapulumutsa Marcel Ibraev - ndipo anayamba kuphunzira Stateful ntchito m'gulu. Mwakutero, kuyambitsa gulu la database pogwiritsa ntchito PostgreSQL monga chitsanzo ndikuyambitsa gulu la RabbitMQ.
Pambuyo nkhomaliro SERGEY Bondarev anayamba ntchito pa K8S. Ndipo mutuwo unali wakuti “Kusunga Zinsinsi.” Mulder ndi Scully anamuphimba. Anaphunzira kasamalidwe kachinsinsi ku Kubernetes ndi Vault. Komanso "Chowonadi chiri kunja uko".
Zomwe zidapitilira mpaka madzulo, pomwe Pavel Selivanov adayamba kuyankhula za Horizontal Pod Autoscaler.
Slurm Mega. Tsiku lachitatu.
Mwachangu komanso mwansangala, kuyambira m'mawa womwewo, Sergei Bondarev adalimbikitsa omvera ndi zosunga zobwezeretsera ndikuchira ku zolephera. Ndinayang'ana zosunga zobwezeretsera ndikubwezeretsanso gululo pogwiritsa ntchito Heptio Velero ndi etcd ndekha.
Sergey adapitiliza mutu wa kusinthasintha kwapachaka kwa ziphaso mgulu: kukonzanso ziphaso zowongolera ndege pogwiritsa ntchito kubeadm. Chakudya chamasana chitangotsala pang'ono, kuti apangitse chidwi cha omwe atenga nawo mbali kapena kupha kwathunthu, Pavel Selivanov adakweza mutu wogwiritsa ntchito pulogalamuyi.
Zida zowonetsera ndi zotumizira zidaganiziridwa, komanso njira zotumizira.
Pavel Selivanov adalankhula za mutu watsopano: Service Mesh, kukhazikitsa kwa Istio. Mutuwu udakhala wolemera kwambiri kotero kuti mutha kuchita nawo maphunziro apadera. Tikukambirana za mapulani, khalani tcheru kuti mumve zolengeza.
Chinthu chachikulu ndi chakuti zonse zimagwira ntchito bwino. Chifukwa ndi nthawi yokonzekera:
kumanga CI/CD kuti ikhazikitse nthawi imodzi yotumiza ndikusintha magulu. M'mapulojekiti a maphunziro zonse zimayenda bwino. Ndipo moyo nthawi zina umakhala wodzaza ndi zodabwitsa.
Mulole Slurm akhale nanu!
Source: www.habr.com