11 zvishandiso zvinoita kuti Kubernetes ive nani

11 zvishandiso zvinoita kuti Kubernetes ive nani

Haasi ese masevha mapuratifomu, kunyangwe ane simba uye ane scalable, anogutsa zvese zvinodiwa sezvazviri. Nepo Kubernetes ichishanda zvakanaka pachayo, inogona kushaya zvidimbu zvakafanira kuti ive yakakwana. Iwe unogara uchiwana yakakosha kesi inoregeredza zvaunoda, kana uko Kubernetes isingashande pane yekumisikidza yekuisa, senge dhatabhesi tsigiro kana CD kushanda.

Apa ndipo panoonekwa ma-add-on, ekuwedzera uye zvimwe zvinonaka zveiyi mudziyo orchestrator, zvichitsigirwa nenharaunda yakakura kwazvo. Muchinyorwa chino, pachave ne11 yezvakanakisa zvinhu zvatakawana. Isu pachedu mukati Southbridge iwo anonakidza kwazvo, uye isu tinoronga kubata nawo zvine hungwaru - kuaparadzanisa kuita screws uye nzungu uye kuona zviri mukati. Mamwe acho anonyatso zadzisa chero Kubernetes cluster, nepo mamwe achizobatsira kugadzirisa mamwe mabasa asina kuitwa mune yakajairwa Kubernetes kugovera.

Muchengeti wegedhi: kutonga kwemitemo

Iyo purojekiti Vhura Policy Agent (OPA) inopa kugona kugadzira marongero pamusoro pemafu application stacks muKubernetes, kubva ingress kuenda kune mesh mesh. Gatekeeper inopa Kubernetes yekuzvarwa kugona kuteedzera marongero pane sumbu otomatiki, uye zvakare inopa ongororo yechero zviitiko kana zviwanikwa zvinotyora mutemo. Zvese izvi zvinobatwa neitsva yeKubernetes mashandiro, iyo Webhooks yekugamuchira maneja, iyo inopfuta kana zviwanikwa zvachinja. NeMuchengeti weGedhi, OPA marongero anove chimwe chikamu chenyika yeKubernetes cluster pasina kudiwa kwekugara kwekutarisa.

Gravity: Inotakurika Kubernetes Clusters

Kana iwe uchida kuburitsa application kuKubernetes, akawanda maapplication ane Helm chati inotungamira uye inogadzirisa maitiro aya. Asi ko kana iwe uchida kutora yako Kubernetes cluster "sezvairi" woiburitsa kumwe kunhu?

giravhiti inotora snapshots yeKubernetes masumbu, registry yavo yemifananidzo yemidziyo, pamwe nekumhanyisa maapplication anonzi "application package". Pasuru yakadaro, iyo inogara faira .tar, inogona kudzokorora sumbu chero kupi Kubernetes inogona kumhanya.

Gravity inotarisawo kuti iyo inotarirwa zvivakwa inoita zvakafanana neiyo sosi zvivakwa, uye zvakare kuti nzvimbo yeKubernetes pane chinangwa iripo. Iyo yakabhadharwa vhezheni yeGravity inowedzerawo kuchengetedza maficha, anosanganisira RBAC uye kugona kuyananisa kuchengetedza marongero pane akasiyana masumbu ekutumirwa.

Iyo ichangoburwa huru kuburitswa, Gravity 7, inogona kusundira mufananidzo weGravity mune iripo Kubernetes cluster, pane kupepeta sumbu nyowani kubva pamufananidzo. Gravity 7 inogonawo kushanda nemasumbu akaiswa pasina kushandisa mufananidzo weGravity. Gravity inotsigirawo SELinux, uye inoshanda natively neTeleport SSH gedhi.

Kaniko: Kuvaka midziyo muKubernetes Cluster

Mazhinji emidziyo mifananidzo yakavakirwa pane masisitimu ari kunze kwemudziyo stack. Nekudaro, dzimwe nguva iwe unofanirwa kuvaka chifananidzo mukati memurwi wemidziyo, senge pane imwe nzvimbo mumudziyo unomhanya, kana muboka reKubernetes.

Kaniko inovaka midziyo mukati memudziyo wemidziyo, asi pasina zvichienderana nebasa rekutakura, senge Docker. Pane kudaro, Kaniko anobvisa iyo faira system kubva pachigadziko chifananidzo, anoita ese mushandisi-nzvimbo yekuvaka mirairo pamusoro peiyo yakabviswa faira system, ichitora mufananidzo weiyo faira system mushure mekuraira kwega kwega.

Ongorora: Kaniko parizvino (Chivabvu 2020, approx. mushanduri) haigone kuvaka Windows midziyo.

Kubecost: Kubernetes yekutanga mutengo sarudzo

Mazhinji Kubernetes maturusi ekutonga anotarisa nyore kushandisa, kutarisa, kunzwisisa maitiro mukati mepodhi, zvichingodaro. Asi zvakadini nekutarisa mutengo - muRubles uye kopecks - yakabatana nekutanga kweKubernetes?

Kubecost inogadzirisa Kubernetes parameters munguva chaiyo, zvichikonzera ruzivo rwekukwira-kusvika-zuva kubva kumakwikwi ekumhanya kune makuru makuru ekupa makore, anoratidzwa mupaneru ine mutengo wepamwedzi pa cluster. Mitengo ye RAM, CPU nguva, GPU uye disk subsystem yakaputswa neKubernetes zvikamu (mudziyo, pod, sevhisi, nezvimwewo)

Kubecost zvakare inoteedzera mutengo wezvisiri-masumbu zviwanikwa zvakaita seAmazon S3 mabhaketi, kunyangwe izvi zvakaganhurwa neAWS. Iyo data yemutengo inogona kutumirwa kuPrometheus kuitira kuti iwe ugone kuishandisa kushandura maitiro eboka rehurongwa.

Kubecost yakasununguka kushandisa kana uine akakwana mazuva gumi nemashanu edata regi. Kuti uwane mamwe maficha, mitengo inotangira pamadhora zana nemakumi mapfumbamwe pamwedzi yekutarisa makumi mashanu node.

KubeDB: Kumhanya Hondo Dhatabhesi muKubernetes

Databases zvakare yakaoma kumhanya zvinoshamisa muKubernetes. Iwe uchawana Kubernetes vashandisi veMySQL, PostgreSQL, MongoDB, uye Redis, asi vese vane zvinokanganisa. Zvakare, iyo yakajairwa Kubernetes ficha seti haigadzirise zvakananga akawanda eakatsanangurwa dhatabhesi matambudziko.

KubeDB inokubatsira iwe kugadzira yako Kubernetes zvirevo zve database manejimendi. Running backups, cloning, monitoring, snapshots, uye declarative dhatabhesi kugadzirwa ndizvo zvikamu zvaro. Ziva kuti kutsigira kwechimiro kunoenderana nedatabase. Semuenzaniso, kugadzira cluster kunoshanda kuPostgreSQL, asi kwete yeMySQL (kare pane, sezvakatsanangurwa zvakarurama dnbstd, approx. mushanduri).

Kube-monkey: Chaos Tsoko yeKubernetes

Iyo yakanyanya kukanganisa-isina nzira yekuyedza kushushikana inoonekwa seyangoitika kuputsika. Dzidziso iyi iri pamwoyo weNetflix's Chaos Monkey, chaotic engineering chishandiso chinovhara zvisina tsarukano machina chaiwo uye midziyo yekugadzira nharaunda "kukurudzira" vanogadzira kuvaka mamwe masisitimu anosimba. kube-monkey -kuitwa kweiyo imwechete yekutanga dzidziso yekunetseka kuyedzwa kweKubernetes masumbu. Inoshanda nekuuraya zvisina tsarukano mamodule musumbu raunosarudza, uye inogona zvakare kusetwa kuti imhanye panguva yakatarwa.

Kubernetes Ingress Controller yeAWS

Kubernetes inopa yekunze mitoro yekuenzanisa uye cluster networking masevhisi kuburikidza nesevhisi inonzi Ingress AWS inopa mitoro yekuyera maficha asi haingozvisungirira pamwe chete neayo Kubernetes maficha. Kubernetes Ingress Controller yeAWS inovhara gap iri.

Iyo inongogadzirisa zviwanikwa zveAWS kune yega yega ingress musumbu, ichigadzira mitoro yezviyero zvezviwanikwa zvitsva, uye kudzima mitoro inorema kana zviwanikwa zvabviswa. Inoshandisa CloudFormation kuve nechokwadi chekuti cluster state inoramba ichienderana. Iyo zvakare inotsigira CloudWatch Alarm marongero uye inogadzirisa otomatiki zvimwe zvinhu zvinoshandiswa musumbu, senge SSL zvitupa uye EC2 Auto Scaling Mapoka.

Kubespray: Kuiswa otomatiki kweKubernetes

Kubespray inogadzirisa kuisirwa kwekugadzira-yakagadzirira Kubernetes cluster, kubva pakugadzika pamaseva ehardware kusvika kumakore makuru eruzhinji. Inoshandisa Ansible (Vagrant optional) kutangisa kutumirwa uye kugadzira sumbu rinowanikwa zvakanyanya kubva kutanga nesarudzo yako yekuwedzera-netiweki (seFlannel, Calico, nezvimwewo) pane yako sarudzo yekuparadzira Linux yakakurumbira kana yaiswa pamaseva ehardware.

Skaffold: Iterative Development yeKubernetes

Skaffold - chimwe chezvishandiso zveGoogle zvinoshandiswa kuronga maCD ekushandisa muKubernetes. Paunenge uchinge waita shanduko kune sosi kodhi, skaffold inoona ichi otomatiki, inotanga kuvaka uye kutumira, uye inokuyambira iwe kana paine zvikanganiso. Skaffold inomhanya zvakakwana padivi revatengi, saka panogona kunge paine madiki nuances nekuisa kana kugadzirisa. Inogona kushandiswa nemapaipi eCICD aripo pamwe nekudyidzana nemamwe maturusi ekuvaka ekunze, kunyanya Bazel yeGoogle.

Teresa: Iyo yakapfava PaaS paKubernetes

Teresa is an application deployment system inomhanya iri nyore PaaS pamusoro peKubernetes. Vashandisi vechikwata vanogona kutumira uye kutonga maapplication avo. Izvi zvinoita kuti zvinhu zvive nyore kune vanhu vanovimba iyi application uye vasingade kubata neKubernetes uye nekuoma kwayo kwese.

Tilt: Teerera zvigadziriso zvemudziyo kune Kubernetes masumbu

kurereka, yakagadziridzwa neWindmill Engineering, inotarisisa shanduko kune akasiyana maDockerfiles uyezve zvishoma nezvishoma inoendesa midziyo yakakodzera kune Kubernetes cluster. Mukukosha, zvinokutendera kuti uvandudze dhizaini yekugadzira munguva chaiyo nekugadzirisa iyo Dockerfiles. Tilt inovaka mukati mesumbu, iyo kodhi kodhi ndiyo chete inoda kuchinjwa. Iwe unogona zvakare kutora mufananidzo weiyo cluster state uye kutora mamiriro ekukanganisa zvakananga kubva kuTilt kuti ugovane nenhengo dzechikwata kugadzirisa.

PS Zvishandiso izvi zvese zvatinazvo kakawanda mukati Southbridge kuongorora nemaoko edu anoda kuziva. Kuratidza maitiro chaiwo atove (netariro!) Pamhepo intensives muna Kukadzi. Kubernetes Base Kukadzi 8–10, 2021. Uye Kubernetes Mega Kukadzi 12–14. Chokwadi, takapotsa zvakare mamiriro ekunze anodziya uye ane simba ekudzidza pasina Indaneti. Hazvina mhosva kuti matekinoroji akakwira zvakadii, haazotsiva kutaurirana kwevanhu mhenyu uye mhepo yakakosha kana vanhu vane pfungwa dzakafanana vakaungana.

Source: www.habr.com

Voeg