7 akanakisa maitiro ekushandisa midziyo zvinoenderana neGoogle

Cherechedza. transl.: Munyori wechinyorwa chekutanga ndi ThΓ©o Chamley, Google Cloud Solutions Architect. Mune ino positi yeGoogle Cloud blog, anopa pfupiso yegwaro rekambani yake, inonzi "Maitiro Akanakisa eKushandisa Containers" Mariri, nyanzvi dzeGoogle dzakaunganidza maitiro akanakisa ekushandisa midziyo mumamiriro ekushandisa Google Kubernetes Injini uye nezvimwe, zvichibata pane dzakasiyana siyana dzemisoro: kubva pakuchengetedza kusvika pakutarisa uye kutema miti. Saka ndeapi akanyanya kukosha emidziyo maitiro maererano neGoogle?

7 akanakisa maitiro ekushandisa midziyo zvinoenderana neGoogle

Kubernetes Engine (Kubernetes-yakavakirwa sevhisi yekumhanyisa zvikumbiro zvemidziyo paGoogle Cloud - approx. shanduro) ndiyo imwe yedzakanakisa nzira dzekumhanyisa mitoro yebasa inoda kuyera. Kubernetes ichave nechokwadi chekushanda kwakanaka kweakawanda maapplication kana akaiswa mumidziyo. Asi kana iwe uchida kuti application yako ive nyore kubata uye uchida kutora mukana wakazara weKubernetes, unofanirwa kutevedzera zvakanakisa maitiro. Ivo vanozorerutsa kushanda kwechishandiso, kutarisisa kwayo uye kugadzirisa, uye zvakare kuwedzera chengetedzo.

Muchinyorwa chino, isu tichaenda kuburikidza nerondedzero yezvinhu zvaunofanira kuziva uye kuita kuti umhanye midziyo zvinobudirira paKubernetes. Vanoda kupinda zvakadzama muhudzamu vanofanira kuverenga zvinyorwa Maitiro Akanakisa eKushandisa Containers, uyewo teererai zvedu positi yapfuura nezvekuunganidza midziyo.

1. Shandisa zvigadziro zvekutema matanda

Kana iyo application iri kushanda paKubernetes cluster, hapana yakawanda inodiwa pamatanda. A centralized loggging system inogona kunge yatovakwa mucluster yauri kushandisa. Panyaya yekushandisa Kubernetes Injini, izvi zvine chekuita Stackdriver Logging. (Cherechedza. transl.: Uye kana iwe ukashandisa yako Kubernetes kuisirwa, isu tinokurudzira kutarisisa yedu Open Source mhinduro - loghouse.) Chengetedza hupenyu hwako huri nyore uye shandisa masikirwo ekutema matanda emidziyo. Nyora matanda kune stdout uye stderr - ivo vanozogashirwa otomatiki, kuchengetedzwa uye indexed.

Kana uchida, iwe unogona zvakare kunyora matanda kune JSON format. Iyi nzira ichaita kuti zvive nyore kuwedzera metadata kwavari. Uye navo, Stackdriver Logging ichave nekwaniso yekutsvaga kuburikidza nematanda uchishandisa iyi metadata.

2. Iva nechokwadi chokuti midziyo haina chimiro uye haishanduki

Kuti midziyo ishande nemazvo muboka reKubernetes, inofanirwa kunge isina chimiro uye isingachinji. Kana aya mamiriro asangana, Kubernetes inogona kuita basa rayo, kugadzira nekuparadza masangano ekunyorera pazvinenge zvichidiwa.

Chisina zvinoreva kuti chero nyika (inoenderera data yechero mhando) inochengetwa kunze kwemudziyo. Kune izvi, zvichienderana nezvinodiwa, marudzi akasiyana ekuchengetedza ekunze anogona kushandiswa: Cloud Storage, Persistent Disks, Redis, Cloud SQL kana mamwe dhatabhesi anochengetedzwa. (Cherechedza. transl.: Verenga zvakawanda pamusoro peizvi munyaya yedu "Vashandi veKubernetes: maitiro ekumhanyisa maapplication".)

Asingachinjiki zvinoreva kuti mudziyo hauzogadziriswe mukati mehupenyu hwayo: hapana zvigadziriso, zvigamba, shanduko yekuchinja. Kana iwe uchida kugadzirisa kodhi yako yekushandisa kana kuisa chigamba, gadzira chifananidzo chitsva uye chitumire. Inokurudzirwa kufambisa gadziriso yemidziyo (yekuteerera chiteshi, runtime nharaunda sarudzo, nezvimwewo) kunze - kune Secrets ΠΈ ConfigMaps. Ivo vanogona kuvandudzwa pasina kugadzira mufananidzo mutsva wemudziyo. Kuti uite nyore kugadzira mapaipi ane gungano remufananidzo, unogona kushandisa Cloud Build. (Cherechedza. transl.: Isu tinoshandisa Open Source chishandiso kune izvi zvinangwa dapp.)

7 akanakisa maitiro ekushandisa midziyo zvinoenderana neGoogle
Muenzaniso wekugadzirisa Deployment kumisikidza muKubernetes uchishandisa ConfigMap yakaiswa mumapods segadziriro.

3. Dzivisa midziyo ine ropafadzo

Iwe haumhanye maapplication semudzi pamaseva ako, handiti? Kana munhu anorwisa akapinda mukushandisa, anowana midzi yekuwana. Mafungiro akafanana anoshanda pakusamhanyisa midziyo yakasarudzika. Kana iwe uchida kushandura marongero pane iyo saiti, unogona kupa iyo mudziyo chaiwo zvigone kushandisa sarudzo securityContext in Kubernetes. Kana uchida kuchinja sysclsKubernetes has zvakasiyana abstract nokuda kweizvi. Kazhinji, edza kushandisa zvakanyanya ini- uye midziyo yeparutivi kuti iite mabasa ane ropafadzo akafanana. Ivo havafanirwe kuwanikwa kune chero mukati kana kunze traffic.

Kana iwe ukatungamira sumbu, unogona kushandisa Pod Security Policy kune zvirambidzo pakushandiswa kwemidziyo yakasarudzika.

4. Dzivisa kumhanya semudzi

Midziyo yakasarudzika yakatokurukurwa nezvayo, asi zvichatove nani kana, pamusoro peizvi, iwe usingamhanye maapplication mukati memudziyo. Kana munhu anorwisa akawana kusazvibata kuri kure mukushandisa ine midzi kodzero inobvumira kodhi kuuraya, mushure mezvo okwanisa kusiya mudziyo kuburikidza neuipi husati hwazivikanwa, anowana midzi pane iye muridzi.

Nzira yakanakisa yekudzivisa izvi ndeyekusamhanya chero chinhu semudzi pakutanga. Kuti uite izvi, unogona kushandisa rairo USER Π² Dockerfile kana runAsUser in Kubernetes. Iyo cluster administrator inogona zvakare kugadzirisa maitiro ekumanikidza uchishandisa Pod Security Policy.

5. Ita kuti kushandiswa kuve nyore kutarisa

Kufanana nekutema matanda, kutarisa chinhu chakakosha chekutonga kwekushandisa. Yakakurumbira yekutarisa mhinduro munharaunda yeKubernetes ndeye Prometheus - sisitimu inoona otomatiki mapodhi nemasevhisi anoda kuongororwa. (Cherechedza. transl.: Onawo yedu tsanangudzo yakazara pamusoro wekutarisa uchishandisa Prometheus naKubernetes.) Stackdriver inokwanisa kutarisa Kubernetes masumbu uye inosanganisira yayo vhezheni yePrometheus yekutarisa application.

7 akanakisa maitiro ekushandisa midziyo zvinoenderana neGoogle
Kubernetes Dashboard pane Stackdriver

Prometheus anotarisira kuti application yacho itumire metrics kune HTTP endpoint. Inowanikwa kune iyi Prometheus mutengi maraibhurari. Iyo yakafanana fomati inoshandiswa nemamwe maturusi akadai OpenCensus ΠΈ Istio.

6. Ita kuti hutano hwepurogiramu huvepo

Kutungamira kwekushandisa mukugadzira kunobatsirwa nekugona kwayo kutaurirana mamiriro ayo kune yese system. Ko application iri kushanda here? Kwakanaka here? Wagadzirira kugamuchira traffic? Ari kuzvibata sei? Nzira yakajairika yekugadzirisa dambudziko iri ndeyekuita macheki ehutano (kuongororwa utano). Kubernetes ine marudzi maviri: hupenyu uye kugadzirira kuongorora.

Zvehupenyu probe (vitality checks) Chikumbiro chinofanira kunge chine HTTP endpoint inodzosa "200 OK" mhinduro kana ichishanda uye zvinoenderana nezvayo zvinogutsa. Yekugadzirira kuongorora (macheki ekugadzirira basa) chikumbiro chinofanira kunge chine imwe HTTP yekupedzisira inodzosera mhinduro ye "200 OK" kana application iri mune hutano, matanho ekutanga apera uye chero chikumbiro chakakodzera hachikonzeri kukanganisa. Kubernetes inongoendesa traffic kune mugaba kana application yakagadzirira zvinoenderana neaya macheki. Mhedziso mbiri dzinogona kubatanidzwa kana pasina mutsauko pakati pehupenyu uye kugadzirira nyika.

Unogona kuverenga zvakawanda nezve izvi mune yakabatana chinyorwa kubva kuSandeep Dinesh, Developer Advocate kubva kuGoogle: "Kubernetes maitiro akanakisa: Kumisikidza macheki ehutano nekugadzirira uye hupenyu hwekuongorora".

7. Sarudza mufananidzo wako zvakanyatsonaka

Mifananidzo yakawanda yeruzhinji neyepachivande inoshandisa tagging system yakafanana neinotsanangurwa mukati Maitiro Akanakisisa eKuvaka Makombiya. Kana mufananidzo wacho ukashandisa hurongwa huri pedyo semantic shanduro, zvinodikanwa kuti tifunge nezve chaiyo yekumaka. Somuenzaniso, tag latest inogona kufamba kazhinji kubva pamufananidzo kuenda kumufananidzo - haigone kuvimbwa nayo kana iwe uchida kufungidzira uye kudzokororwa kuvaka uye kuisirwa.

Unogona kushandisa tag X.Y.Z (iwo anenge agara asina kuchinjika), asi mune iyi kesi, chengetedza zvese zvigamba uye zvigadziriso kumufananidzo. Kana mufananidzo wauri kushandisa une tag X.Y, iyi isarudzo yakanaka kune yegoridhe zvinoreva. Nekuisarudza, iwe unogashira zvigamba uye panguva imwechete uchivimba neyakagadzika vhezheni yechishandiso.

PS kubva kumushanduri

Verenga zvakare pablog yedu:

Source: www.habr.com

Voeg