{"id":78373,"date":"2020-04-19T01:42:20","date_gmt":"2020-04-18T23:42:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/luchshie-praktiki-i-rekomendaczii-dlya-zapuska-kontejnerov-i-kubernetes-v-proizvodstvennyh-sredah"},"modified":"2020-04-19T01:42:20","modified_gmt":"2020-04-18T23:42:20","slug":"luchshie-praktiki-i-rekomendaczii-dlya-zapuska-kontejnerov-i-kubernetes-v-proizvodstvennyh-sredah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/luchshie-praktiki-i-rekomendaczii-dlya-zapuska-kontejnerov-i-kubernetes-v-proizvodstvennyh-sredah","title":{"rendered":"Cele mai bune practici \u0219i recomand\u0103ri pentru lansarea containerelor \u0219i Kubernetes \u00een medii de produc\u021bie","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Cele
\nEcosistemele tehnologiilor de containerizare se dezvolt\u0103 rapid \u0219i se schimb\u0103, de aceea exist\u0103 un deficit de bune practici \u00een acest domeniu. Totu\u0219i, Kubernetes \u0219i containerele sunt utilizate din ce \u00een ce mai mult \u2014 at\u00e2t pentru modernizarea aplica\u021biilor vechi, c\u00e2t \u0219i pentru dezvoltarea aplica\u021biilor cloud moderne.\u00a0<\/p>\n

Comanda Kubernetes aaS de la Mail.ru<\/a><\/noindex> a adunat previziuni, sfaturi \u0219i cele mai bune practici pentru liderii pie\u021bei de la Gartner, 451 Research, StacxRo\u0445 \u0219i altele. Acestea vor ajuta la asigurarea \u0219i accelerarea desf\u0103\u0219ur\u0103rii containerelor \u00een medii de produc\u021bie.
\n<\/a><\/noindex><\/p>\n

Cum s\u0103 \u00een\u021belege\u021bi dac\u0103 compania dumneavoastr\u0103 este preg\u0103tit\u0103 s\u0103 desf\u0103\u0219oare containere \u00een medii de produc\u021bie<\/h2>\n

\nConform Gartner<\/a><\/noindex>, \u00een 2022, mai mult de 75% dintre organiza\u021bii vor folosi aplica\u021bii containerizate \u00een produc\u021bie. Aceasta este o cre\u0219tere semnificativ\u0103 fa\u021b\u0103 de prezent, c\u00e2nd astfel de aplica\u021bii sunt utilizate de mai pu\u021bin de 30% dintre companii.\u00a0<\/p>\n

Conform 451 Research<\/a><\/noindex>, pia\u021ba estimat\u0103 pentru aplicarea tehnologiilor containerizate \u00een 2022 va fi de 4,3 miliarde de dolari. Aceasta dep\u0103\u0219e\u0219te de mai mult de dou\u0103 ori sumele prognozate \u00een 2019, iar ritmul de cre\u0219tere al pie\u021bei este de 30%.<\/p>\n

\u00cen \u00een sondajul realizat de Portworx \u0219i Aqua Security<\/a><\/noindex> 87% dintre responden\u021bi au declarat c\u0103 \u00een prezent utilizeaz\u0103 tehnologii de containere. Comparativ, \u00een 2017, procentajul responden\u021bilor era de 55%.\u00a0<\/p>\n

\u00cen ciuda interesului \u00een cre\u0219tere \u0219i a implement\u0103rii \u00een expansiune a containerelor, desf\u0103\u0219urarea acestora \u00een produc\u021bie necesit\u0103 instruire din cauza maturit\u0103\u021bii tehnologice \u0219i a lipsei de know-how. Organiza\u021biile trebuie s\u0103 priveasc\u0103 realist procesele de afaceri care necesit\u0103 containerizarea aplica\u021biilor. Liderii IT ar trebui s\u0103 evalueze dac\u0103 dispune de abilit\u0103\u021bile necesare pentru a avansa, av\u00e2nd \u00een vedere necesitatea unei \u00eenv\u0103\u021b\u0103ri rapide.\u00a0<\/p>\n

Exper\u021bii Gartner<\/a><\/noindex> consider\u0103 c\u0103 \u00eentreb\u0103rile din imaginea de mai jos v\u0103 vor ajuta s\u0103 \u00een\u021belege\u021bi dac\u0103 sunte\u021bi preg\u0103ti\u021bi pentru desf\u0103\u0219urarea containerelor \u00een produc\u021bie:<\/p>\n

\"Cele<\/p>\n

Cele mai frecvente erori \u00een aplicarea containerelor \u00een produc\u021bie<\/h2>\n

\nOrganiza\u021biile adesea subestimeaz\u0103 eforturile necesare pentru operarea containerelor \u00een produc\u021bie. Gartner a descoperit<\/a><\/noindex> c\u00e2teva erori comune \u00een scenariile clien\u021bilor atunci c\u00e2nd aplic\u0103 containere \u00een medii de produc\u021bie:<\/p>\n

\"Cele<\/p>\n

Cum s\u0103 asigura\u021bi securitatea containerelor<\/h2>\n

\nSecuritatea nu poate fi tratat\u0103 \u00abdup\u0103\u00bb. Aceasta trebuie s\u0103 fie integrat\u0103 \u00een procesul DevOps, motiv pentru care a ap\u0103rut chiar un termen special \u2014 DevSecOps. Organiza\u021biile trebuie s\u0103 planifice protec\u021bia mediului containerizat<\/a><\/noindex> pe parcursul \u00eentregului ciclu de via\u021b\u0103 al dezvolt\u0103rii, care include procesul de construire \u0219i dezvoltare, desf\u0103\u0219urare \u0219i lansare a aplica\u021biei.<\/p>\n

Recomand\u0103ri de la Gartner<\/a><\/noindex>:\u00a0<\/p>\n

    \n
  1. Integra\u021bi procesul de scanare a imaginilor aplica\u021biei pentru a detecta vulnerabilit\u0103\u021bile \u00een pipeline-ul de integrare continu\u0103\/livrare continu\u0103 (CI\/CD). Aplica\u021biile sunt scanate \u00een etapele de construire \u0219i lansare a software-ului. Sublinia\u021bi necesitatea scan\u0103rii \u0219i identific\u0103rii componentelor cu surs\u0103 deschis\u0103, biblioteci \u0219i cadre. Folosirea de c\u0103tre dezvoltatori a versiunilor vechi \u0219i vulnerabile este una dintre principalele cauze ale vulnerabilit\u0103\u021bilor containerelor.<\/li>\n
  2. \u00cembun\u0103t\u0103\u021bi\u021bi configura\u021bia prin teste Center for Internet Security (CIS<\/a><\/noindex>), care sunt disponibile at\u00e2t pentru Docker, c\u00e2t \u0219i pentru Kubernetes.<\/li>\n
  3. Asigura\u021bi-v\u0103 c\u0103 aplica\u021bi controlul accesului, asigura\u021bi separarea responsabilit\u0103\u021bilor \u0219i implementa\u021bi o politic\u0103 de gestionare a secretelor. Informa\u021biile confiden\u021biale, cum ar fi cheile Secure Sockets Layer (SSL) sau acreditivele bazei de date, sunt criptate de orchestrator sau de servicii externe de gestionare \u0219i furnizate \u00een timpul execu\u021biei.<\/li>\n
  4. Evita\u021bi containerele cu privilegii ridicate prin gestionarea politicilor de securitate, acest lucru va reduce riscurile poten\u021biale de atac.<\/li>\n
  5. Utiliza\u021bi instrumente de securitate care ofer\u0103 liste albe, monitorizare comportamental\u0103 \u0219i detectare a anomaliilor pentru a preveni activit\u0103\u021bi mali\u021boase.<\/li>\n<\/ol>\n

    \nRecomand\u0103ri de la StacxRox<\/a><\/noindex>:<\/p>\n

      \n
    1. Folosi\u021bi capacit\u0103\u021bile \u00eencorporate ale Kubernetes. Configura\u021bi accesul utilizatorilor utiliz\u00e2nd roluri. Asigura\u021bi-v\u0103 c\u0103 nu oferi\u021bi permisiuni nejustificate unor subiec\u021bi, chiar dac\u0103 poate fi necesar s\u0103 v\u0103 g\u00e2ndi\u021bi la permisiunile minime necesare. Poate p\u0103rea tentant s\u0103 oferi\u021bi administratorului cluster-ului privilegii largi, deoarece economise\u0219te timp \u00een stadiul ini\u021bial. Totu\u0219i, orice compromis sau erori \u00een cont pot duce la consecin\u021be devastatoare mai t\u00e2rziu.\u00a0<\/li>\n
    2. Evita\u021bi duplicarea permisiunilor de acces. Uneori, poate fi util ca diferite roluri s\u0103 se suprapun\u0103, dar acest lucru poate cauza probleme \u00een exploatare \u0219i poate crea \u201ezone moarte\u201d \u00een timp ce se elimin\u0103 permisiunile. \u00cen plus, este important s\u0103 elimina\u021bi rolurile nefolosite \u0219i inactive.<\/li>\n
    3. Stabili\u021bi politici de re\u021bea: izola\u021bi modulele pentru a restric\u021biona accesul la ele; permite\u021bi explicit accesul la internet pentru acele module care au nevoie, utiliz\u00e2nd etichete; permite\u021bi explicit comunicarea \u00eentre modulele care trebuie s\u0103 interac\u021bioneze \u00eentre ele.\u00a0<\/li>\n<\/ol>\n

      <\/p>\n

      Cum s\u0103 organiza\u021bi monitorizarea containerelor \u0219i a serviciilor din acestea<\/h2>\n

      \nSecuritate \u0219i monitorizare \u2014 probleme principale ale companiilor<\/a><\/noindex> la desf\u0103\u0219urarea clusterelor Kubernetes. Dezvoltatorii sunt \u00eentotdeauna mai concentra\u021bi pe func\u021bionalit\u0103\u021bile aplica\u021biilor pe care le dezvolt\u0103, mai degrab\u0103 dec\u00e2t pe aspectele monitoriz\u0103rii acestor aplica\u021bii<\/a><\/noindex>.\u00a0<\/p>\n

      Recomand\u0103ri de la Gartner<\/a><\/noindex>:<\/p>\n

        \n
      1. \u00cencerca\u021bi s\u0103 monitoriza\u021bi starea containerelor sau a serviciilor din acestea \u00eempreun\u0103 cu monitorizarea sistemelor gazd\u0103.<\/li>\n
      2. Alege\u021bi furnizori \u0219i instrumente cu integrare profund\u0103 \u00een orchestrarea containerelor, \u00een special Kubernetes.<\/li>\n
      3. Selecta\u021bi instrumente care ofer\u0103 logare detaliat\u0103, descoperire automat\u0103 a serviciilor \u0219i recomand\u0103ri \u00een timp real utiliz\u00e2nd analitica \u0219i\/sau \u00eenv\u0103\u021barea automat\u0103.<\/li>\n<\/ol>\n

        \n\u00cen blogul SolarWinds se recomand\u0103<\/a><\/noindex>:<\/p>\n

          \n
        1. Utilizarea instrumentelor pentru descoperirea automat\u0103 \u0219i urm\u0103rirea metricilor containerului, corelarea metricilor de performan\u021b\u0103, cum ar fi CPU, memorie \u0219i timp de func\u021bionare f\u0103r\u0103 \u00eentrerupere.<\/li>\n
        2. Asigura\u021bi-v\u0103 c\u0103 planificarea capacit\u0103\u021bii este optim\u0103 prin prognoza timpilor de epuizare a capacit\u0103\u021bii pe baza indicatorilor de monitorizare a containerelor.<\/li>\n
        3. Organiza\u021bi monitorizarea aplica\u021biilor gazduite \u00een containere, \u00een func\u021bie de parametrii de disponibilitate \u0219i performan\u021b\u0103, ceea ce este util at\u00e2t pentru planificarea capacit\u0103\u021bii, c\u00e2t \u0219i pentru solu\u021bionarea problemelor de performan\u021b\u0103.<\/li>\n
        4. Automatiza\u021bi fluxurile de lucru, oferind suport pentru gestionarea \u0219i scalarea containerelor \u0219i mediilor lor de g\u0103zduire.<\/li>\n
        5. Automatiza\u021bi controlul accesului, pentru a urm\u0103ri baza de utilizatori, a dezactiva conturile \u00eenvechite \u0219i cele pentru oaspe\u021bi, a elimina privilegii inutile.<\/li>\n
        6. Asigura\u021bi-v\u0103 c\u0103 setul dumneavoastr\u0103 de instrumente poate urm\u0103ri aceste containere \u0219i aplica\u021bii \u00een medii diverse (cloud, on-premises sau hibride) pentru vizualizarea \u0219i corelarea performan\u021bei \u00een infrastructur\u0103, re\u021bea, sisteme \u0219i aplica\u021bii.<\/li>\n<\/ol>\n

          <\/p>\n

          Cum s\u0103 stoca\u021bi datele \u0219i s\u0103 le asigura\u021bi securitatea<\/h2>\n

          \nOdat\u0103 cu cre\u0219terea num\u0103rului de containere de lucru cu starea p\u0103strat\u0103, clien\u021bii trebuie s\u0103 ia \u00een considerare stocarea datelor \u00een afara gazdei, precum \u0219i necesitatea protej\u0103rii acestor date.\u00a0<\/p>\n

          Potrivit sondajul Portworx \u0219i Aqua Security<\/a><\/noindex>, securitatea datelor se afl\u0103 pe primul loc \u00een lista problemelor de securitate men\u021bionate de majoritatea responden\u021bilor (61%).\u00a0<\/p>\n

          Criptarea datelor este principala strategie de securitate (64%), cu toate acestea, responden\u021bii utilizeaz\u0103 \u0219i monitorizarea timpului de execu\u021bie<\/p>\n

          (49%), scanarea vulnerabilit\u0103\u021bilor \u00een registre (49%), scanarea vulnerabilit\u0103\u021bilor \u00een pipeline-urile CI\/CD (49%) \u0219i blocarea anomaliilor prin protec\u021bia timpului de execu\u021bie (48%).<\/p>\n

          Recomand\u0103ri de la Gartner<\/a><\/noindex>:<\/p>\n

            \n
          1. Alege\u021bi solu\u021bii de stocare a datelor bazate pe principii arhitecturii microserviciilor<\/a><\/noindex>. Este mai bine s\u0103 opta\u021bi pentru cele care respect\u0103 cerin\u021bele de stocare a datelor pentru serviciile de containere, sunt independente de hardware, sunt gestionate prin API, au o arhitectur\u0103 distribuit\u0103, sus\u021bin desf\u0103\u0219urarea local\u0103 \u0219i desf\u0103\u0219urarea \u00een cloud public.<\/li>\n
          2. Evita\u021bi pluginurile \u0219i interfe\u021bele proprietare. Alege\u021bi furnizori care asigur\u0103 integrarea cu Kubernetes \u0219i sus\u021bin interfe\u021be standard, cum ar fi CSI (Container Storage Interfaces).<\/li>\n<\/ol>\n

            <\/p>\n

            Cum s\u0103 lucra\u021bi cu re\u021belele<\/h2>\n

            \nModelul tradi\u021bional de re\u021bea corporativ\u0103, unde speciali\u0219tii IT creeaz\u0103 medii de dezvoltare, testare, asigurarea calit\u0103\u021bii \u0219i produc\u021bie pentru fiecare proiect, nu se potrive\u0219te \u00eentotdeauna bine cu fluxul de lucru al dezvolt\u0103rii continue. \u00cen plus, re\u021belele de containere acoper\u0103 mai multe niveluri.<\/p>\n

            \u00cen \u00een blogul Magalix au fost adunate<\/a><\/noindex> reguli de \u00eenalt nivel la care trebuie s\u0103 se alinieze implementarea unei solu\u021bii de re\u021bea \u00een cluster:<\/p>\n

              \n
            1. Podurile programate pe acela\u0219i nod trebuie s\u0103 aib\u0103 capacitatea de a schimba date cu alte module f\u0103r\u0103 a utiliza NAT (Network Address Translation).<\/li>\n
            2. Toate demonii sistemului (procesele de fundal, cum ar fi kubelet) care ruleaz\u0103 pe un anumit nod pot interac\u021biona cu podurile care func\u021bioneaz\u0103 pe acela\u0219i nod.<\/li>\n
            3. Podurile care utilizeaz\u0103 re\u021beaua gazdelor,<\/a><\/noindex> trebuie s\u0103 aib\u0103 capacitatea de a se conecta cu toate celelalte poduri de pe toate celelalte noduri f\u0103r\u0103 a utiliza NAT. V\u0103 rug\u0103m s\u0103 re\u021bine\u021bi c\u0103 re\u021beaua gazdelor este sus\u021binut\u0103 doar pe gazde Linux.<\/li>\n<\/ol>\n

              \nSolu\u021biile de re\u021bea ar trebui s\u0103 fie integrate str\u00e2ns cu primitivele \u0219i politicile Kubernetes. Liderii IT ar trebui s\u0103 urm\u0103reasc\u0103 un grad ridicat de automatizare a re\u021belei, oferind dezvoltatorilor instrumentele adecvate \u0219i flexibilitatea necesar\u0103.<\/p>\n

              Recomand\u0103ri de la Gartner<\/a><\/noindex>:<\/p>\n

                \n
              1. Verifica\u021bi dac\u0103 serviciul dumneavoastr\u0103 CaaS (container ca serviciu) sau re\u021beaua SDN (re\u021bea definit\u0103 prin software) suport\u0103 re\u021bele Kubernetes. Dac\u0103 nu sau dac\u0103 suportul este insuficient, utiliza\u021bi interfa\u021ba de re\u021bea CNI (Container Network Interface) pentru containerele dumneavoastr\u0103, care ofer\u0103 func\u021bionalit\u0103\u021bile \u0219i politicile necesare.<\/li>\n
              2. Asigura\u021bi-v\u0103 c\u0103 CaaS-ul sau PaaS-ul dumneavoastr\u0103 (platforma ca serviciu) sprijin\u0103 crearea controlerelor de intrare \u0219i\/sau a echilibratoarelor de sarcin\u0103 care distribuie traficul de intrare \u00eentre nodurile cluster-ului. Dac\u0103 aceast\u0103 op\u021biune nu este disponibil\u0103, explora\u021bi utilizarea de proxy-uri ter\u021b\u0103 parte sau mecanisme service mesh.<\/li>\n
              3. Instruirea inginerilor de re\u021bea \u00een utilizarea re\u021belelor Linux \u0219i a instrumentelor de automatizare a re\u021belelor este esen\u021bial\u0103 pentru a reduce diferen\u021bele de abilit\u0103\u021bi \u0219i a cre\u0219te flexibilitatea.<\/li>\n<\/ol>\n

                <\/p>\n

                Cum s\u0103 gestiona\u021bi ciclul de via\u021b\u0103 al aplica\u021biilor<\/h2>\n

                \nPentru livrarea automat\u0103 \u0219i continu\u0103 a aplica\u021biilor, trebuie s\u0103 ad\u0103uga\u021bi orchestr\u0103rii containerelor alte unelte de automatizare, cum ar fi produsele de infrastructur\u0103 ca cod (IaC). Acestea includ Chef, Puppet, Ansible \u0219i Terraform.\u00a0<\/p>\n

                Sunt necesare \u0219i instrumentele de automatizare a construc\u021biei \u0219i desf\u0103\u0219ur\u0103rii aplica\u021biilor (vezi \u201eCadranul magic pentru orchestrarea desf\u0103\u0219ur\u0103rii aplica\u021biilor<\/a><\/noindex>\u201e). Containerele ofer\u0103, de asemenea, oportunit\u0103\u021bi de scalare similare cu cele care existau la desf\u0103\u0219urarea ma\u0219inilor virtuale (VM). Astfel, liderii IT ar trebui s\u0103 aib\u0103 instrumentele de gestionare a ciclului de via\u021b\u0103 al containerelor<\/a><\/noindex>.<\/p>\n

                Recomand\u0103ri de la Gartner<\/a><\/noindex>:<\/p>\n

                  \n
                1. Stabili\u021bi standarde pentru imaginile de baz\u0103 ale containerelor, av\u00e2nd \u00een vedere dimensiunea, licen\u021bierea \u0219i flexibilitatea pentru ad\u0103ugarea de componente de c\u0103tre dezvoltatori.<\/li>\n
                2. Utiliza\u021bi sisteme de gestionare a configura\u021biei pentru a gestiona ciclul de via\u021b\u0103 al containerelor, care plaseaz\u0103 configura\u021bia \u00een straturi bazate pe imaginile de baz\u0103, aflate \u00een repozitorii publice sau private.<\/li>\n
                3. Integra\u021bi platforma CaaS cu instrumentele de automatizare pentru a automatiza \u00eentregul flux de lucru al aplica\u021biei.<\/li>\n<\/ol>\n

                  <\/p>\n

                  Cum s\u0103 gestiona\u021bi containerele cu ajutorul orchestratorilor<\/h2>\n

                  \nFunc\u021bionalit\u0103\u021bile de baz\u0103 pentru desf\u0103\u0219urarea containerelor sunt oferite la nivelurile de orchestrare \u0219i planificare. \u00cen timpul planific\u0103rii, containerele sunt plasate pe gazdele cele mai optime din cluster, a\u0219a cum impun cerin\u021bele nivelului de orchestrare.\u00a0<\/p>\n

                  Kubernetes a devenit de facto standardul pentru orchestrarea containerelor, av\u00e2nd o comunitate activ\u0103, fiind sus\u021binut de majoritatea furnizorilor comerciali de frunte.\u00a0<\/p>\n

                  Recomand\u0103ri de la Gartner<\/a><\/noindex>:<\/p>\n

                    \n
                  1. Defini\u021bi cerin\u021bele de baz\u0103 pentru controalele de securitate, monitorizare, gestionarea politicilor, p\u0103strarea datelor, gestionarea re\u021belelor \u0219i ciclul de via\u021b\u0103 al containerelor.<\/li>\n
                  2. Pe baza acestor cerin\u021be, alege\u021bi instrumentul care se potrive\u0219te cel mai bine nevoilor \u0219i scenariilor dumneavoastr\u0103 de utilizare.<\/li>\n
                  3. Utiliza\u021bi cercet\u0103rile Gartner (vezi \u201eCum s\u0103 alege\u021bi modelul de desf\u0103\u0219urare Kubernetes<\/a><\/noindex>\u201d), pentru a \u00een\u021belege avantajele \u0219i dezavantajele diferitelor modele de desf\u0103\u0219urare Kubernetes \u0219i pentru a alege cel mai potrivit pentru sarcina dumneavoastr\u0103.<\/li>\n
                  4. Alege\u021bi un furnizor care poate oferi orchestrare hibrid\u0103 pentru containerele de lucru \u00een medii multiple, cu o integrare str\u00e2ns\u0103 cu backend-urile, planuri de gestionare comune \u0219i modele de pre\u021buri consistente.<\/li>\n<\/ol>\n

                    <\/p>\n

                    Cum s\u0103 utiliza\u021bi capabilit\u0103\u021bile furnizorilor de cloud<\/h2>\n

                    \nGartner consider\u0103<\/a><\/noindex>, c\u0103 interesul pentru desf\u0103\u0219urarea containerelor \u00een IaaS-ul public cre\u0219te datorit\u0103 disponibilit\u0103\u021bii ofertelor CaaS gata de utilizare, precum \u0219i a integr\u0103rii str\u00e2nse a acestor oferte cu alte produse oferite de furnizorii de cloud.<\/p>\n

                    IaaS-urile ofer\u0103 consum de resurse la cerere, scalabilitate rapid\u0103 \u0219i managementul serviciilor<\/a><\/noindex>, care ajut\u0103 la evitarea necesit\u0103\u021bii de cuno\u0219tin\u021be profunde despre infrastructur\u0103 \u0219i \u00eentre\u021binerea acesteia. Cei mai mul\u021bi furnizori de cloud ofer\u0103 un serviciu de gestionare a containerelor, iar unii ofer\u0103 mai multe op\u021biuni de orchestrare.\u00a0<\/p>\n

                    Principalele servicii de cloud gestionate sunt listate \u00een tabel:\u00a0<\/p>\n

                    Furnizor de cloud<\/strong>
                    \nTip de serviciu<\/strong>
                    \nProdus\/serviciu<\/strong><\/p>\n

                    Alibaba
                    \nServiciu Cloud Nativ
                    \nAlibaba Cloud Container Service, Alibaba Cloud Container Service for Kubernetes<\/p>\n

                    Amazon Web Services (AWS)
                    \nServiciu Cloud Nativ
                    \nAmazon Elastic Container Services (ECS), Amazon ECS for Kubernetes (EKS), AWS Fargate<\/p>\n

                    Giant Swarm
                    \nMSP
                    \nGiant Swarm Managed Kubernetes Infrastructure<\/p>\n

                    Google
                    \nServiciu Cloud Nativ
                    \nGoogle Container Engine (GKE)<\/p>\n

                    IBM
                    \nServiciu Cloud Nativ
                    \nIBM Cloud Kubernetes Service<\/p>\n

                    de Microsoft
                    \nServiciu Cloud Nativ
                    \nAzure Kubernetes Service, Azure Service Fabric<\/p>\n

                    Oracle
                    \nServiciu Cloud Nativ
                    \nOCI Container Engine for Kubernetes<\/p>\n

                    Platform9
                    \nMSP
                    \nKubernetes Gestionat<\/p>\n

                    Red Hat
                    \nServiciu G\u0103zduit
                    \nOpenShift Dedicat & Online<\/p>\n

                    VMware
                    \nServiciu G\u0103zduit
                    \nCloud PKS (Beta)<\/p>\n

                    Solu\u021bii Cloud Mail.ru*
                    \nServiciu Cloud Nativ
                    \nContainere Cloud Mail.ru<\/p>\n

                    \n* Nu ne vom ascunde, ne-am ad\u0103ugat singuri aici la traducere \ud83d\ude42<\/p>\n

                    Furnizorii de clouduri publice adaug\u0103, de asemenea, noi func\u021bionalit\u0103\u021bi \u0219i lanseaz\u0103 produse locale. \u00cen viitorul apropiat, furnizorii de clouduri vor dezvolta suport pentru clouduri hibride \u0219i medii multi-cloud.\u00a0<\/p>\n

                    Recomand\u0103rile Gartner<\/a><\/noindex>:<\/strong><\/p>\n

                      \n
                    1. Evalua\u021bi obiectiv capacit\u0103\u021bile organiza\u021biei dumneavoastr\u0103 de a desf\u0103\u0219ura \u0219i gestiona instrumentele corespunz\u0103toare \u0219i lua\u021bi \u00een considerare servicii alternative de gestionare a containerelor cloud.<\/li>\n
                    2. Alege\u021bi cu aten\u021bie software-ul, utiliza\u021bi open source acolo unde este posibil.<\/li>\n
                    3. Alege\u021bi furnizori cu modele opera\u021bionale unificate \u00een medii hibride, care ofer\u0103 gestionarea clusterelor integrate dintr-un singur panou, precum \u0219i furnizori care faciliteaz\u0103 utilizarea autonom\u0103 a IaaS.<\/li>\n<\/ol>\n

                      \nC\u00e2teva sfaturi pentru alegerea unui furnizor Kubernetes aaS din blogul Replex<\/a><\/noindex>:<\/p>\n

                        \n
                      1. Este indicat s\u0103 c\u0103uta\u021bi distribu\u021bii care ofer\u0103 disponibilitate ridicat\u0103 din cutie. Aceasta include suport pentru mai multe arhitecturi principale, componente etcd cu \u00eenalt\u0103 disponibilitate, precum \u0219i backup \u0219i restaurare.<\/li>\n
                      2. Pentru a asigura mobilitatea mediilor Kubernetes, este mai bine s\u0103 alege\u021bi furnizori cloud care suport\u0103 o gam\u0103 larg\u0103 de modele de desf\u0103\u0219urare: de la locale la hibride \u0219i multi-cloud.\u00a0<\/li>\n
                      3. Oferta furnizorilor ar trebui evaluat\u0103 \u0219i \u00een func\u021bie de u\u0219urin\u021ba de configurare, instalare \u0219i creare a clusterului, dar \u0219i de actualiz\u0103ri, monitorizare \u0219i depanare. Cerin\u021ba de baz\u0103 este suportul pentru actualiz\u0103ri complet automatizate ale clusterului f\u0103r\u0103 timp de nefunc\u021bionare. Solu\u021bia aleas\u0103 ar trebui s\u0103 permit\u0103, de asemenea, ini\u021bierea manual\u0103 a actualiz\u0103rilor.\u00a0<\/li>\n
                      4. Gestionarea identit\u0103\u021bii \u0219i accesului este important\u0103 at\u00e2t din punct de vedere al securit\u0103\u021bii, c\u00e2t \u0219i din perspectiva gestion\u0103rii. Asigura\u021bi-v\u0103 c\u0103 distribu\u021bia aleas\u0103 Kubernetes suport\u0103 integrarea cu instrumentele de autentificare \u0219i autorizare utilizate \u00een cadrul companiei. RBAC \u0219i controlul detaliat al accesului sunt, de asemenea, seturi func\u021bionale importante.<\/li>\n
                      5. Distribu\u021bia aleas\u0103 trebuie s\u0103 aib\u0103 fie o solu\u021bie de re\u021bea proprie, definit\u0103 de software \u0219i care s\u0103 acopere o gam\u0103 larg\u0103 de cerin\u021be impuse de diverse aplica\u021bii sau infrastructur\u0103, fie s\u0103 sprijine una dintre implement\u0103rile populare ale re\u021belelor bazate pe CNI, inclusiv Flannel, Calico, kube-router sau OVN.<\/li>\n<\/ol>\n

                        \nImplementarea containerelor \u00een produc\u021bie devine o direc\u021bie principal\u0103, a\u0219a cum arat\u0103 rezultatele unui sondaj realizat la sesiunea Gartner<\/a><\/noindex> privind infrastructura, opera\u021biunile \u0219i strategiile cloud (IOCS) \u00een decembrie 2018:<\/p>\n

                        \"Cele
                        \nDup\u0103 cum observ\u0103m, 27% dintre responden\u021bi folosesc deja containere \u00een activitatea lor, iar 63% inten\u021bioneaz\u0103 s\u0103 fac\u0103 acest lucru.<\/p>\n

                        \u00cen \u00een sondajul realizat de Portworx \u0219i Aqua Security<\/a><\/noindex> 24% dintre responden\u021bi au raportat c\u0103 investesc mai mult de jum\u0103tate de milion de dolari pe an \u00een tehnologii de containere, iar 17% dintre responden\u021bi cheltuiesc mai mult de un milion de dolari pe an pentru acestea.\u00a0<\/p>\n

                        Articolul a fost preg\u0103tit de echipa platformei cloud <\/i>Solu\u021bii Cloud Mail.ru<\/i><\/a><\/noindex>.<\/i><\/p>\n

                        What else to read on the topic<\/strong>:<\/p>\n

                          \n
                        1. Cele mai bune practici DevOps: raport DORA<\/a><\/noindex>.<\/li>\n
                        2. Kubernetes in the spirit of piracy with an implementation template<\/a><\/noindex>.<\/li>\n
                        3. 25 de instrumente utile pentru desf\u0103\u0219urarea \u0219i implementarea Kubernetes<\/a><\/noindex>.<\/li>\n<\/ol>\n

                          Sursa: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

                          \u042d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u044b\u0441\u0442\u0440\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0438 \u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432 \u044d\u0442\u043e\u0439 \u0441\u0444\u0435\u0440\u0435 \u043d\u0435 \u0445\u0432\u0430\u0442\u0430\u0435\u0442 \u0445\u043e\u0440\u043e\u0448\u0438\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u0440\u0430\u043a\u0442\u0438\u043a. \u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 Kubernetes \u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432\u0441\u0435 \u0447\u0430\u0449\u0435 \u2014 \u043a\u0430\u043a \u0434\u043b\u044f \u043c\u043e\u0434\u0435\u0440\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0442\u0430\u0440\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\u00a0 \u041a\u043e\u043c\u0430\u043d\u0434\u0430 Kubernetes aaS \u043e\u0442 Mail.ru \u0441\u043e\u0431\u0440\u0430\u043b\u0430 \u043f\u0440\u043e\u0433\u043d\u043e\u0437\u044b, \u0441\u043e\u0432\u0435\u0442\u044b \u0438 \u043b\u0443\u0447\u0448\u0438\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0438 \u0434\u043b\u044f \u043b\u0438\u0434\u0435\u0440\u043e\u0432 \u0440\u044b\u043d\u043a\u0430 \u043e\u0442 Gartner, 451 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":78374,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-78373","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cele mai bune practici \u0219i recomand\u0103ri pentru lansarea containerelor \u0219i Kubernetes \u00een medii de produc\u021bie | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/luchshie-praktiki-i-rekomendaczii-dlya-zapuska-kontejnerov-i-kubernetes-v-proizvodstvennyh-sredah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041b\u0443\u0447\u0448\u0438\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0438 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 Kubernetes \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 | ProHoster","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/luchshie-praktiki-i-rekomendaczii-dlya-zapuska-kontejnerov-i-kubernetes-v-proizvodstvennyh-sredah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-18T23:42:20+00:00","article:modified_time":"2020-04-18T23:42:20+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"78373","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:59:34","updated":"2022-10-07 00:18:57","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/78373","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=78373"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/78373\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/78374"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=78373"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=78373"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=78373"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}