Maitiro akanakisa uye akanakisa maitiro ekumhanyisa midziyo uye Kubernetes munzvimbo dzekugadzira

Iyo containerization tekinoroji ecosystem iri kukurumidza kubuda uye kuchinja, saka pane kushomeka kwemaitiro akanaka ekushanda munzvimbo ino. Nekudaro, Kubernetes nemidziyo zviri kushandiswa zvakanyanya, zvese zvekuvandudza manyorerwo enhaka uye nekugadzira zvemazuva ano maapplication egore. 

chikwata Kubernetes aaS kubva kuMail.ru yakaunganidza kufanotaura, mazano uye maitiro akanakisa evatungamiriri vemusika kubva kuGartner, 451 Research, StacxRoх nevamwe. Ivo vanogonesa uye nekumhanyisa kutumirwa kwemidziyo munzvimbo dzekugadzira.

Maziviro Ekuziva Kana Kambani Yako Yakagadzirira Kuendesa Containers munzvimbo Yekugadzira

Maererano naGartner, muna 2022, anopfuura makumi manomwe neshanu muzana emasangano achashandisa zvikumbiro zvemukati mukugadzira. Izvi zvakanyanya kupfuura ikozvino, apo isingasviki makumi matatu muzana emakambani anoshandisa zvikumbiro zvakadaro. 

Maererano ne 451 TsvagaMusika wakafungidzirwa wekushandisa tekinoroji yemidziyo muna 2022 uchave madhora mabhiriyoni mana nemazana matatu. Izvi zvinodarika zvakapetwa kaviri mari yakarongerwa muna 4,3, nekukura kwemusika kwe2019%.

В Portworx uye Aqua Security ongororo 87% yevakapindura vakati parizvino vanoshandisa matekinoroji emidziyo. Kana tichienzanisa, muna 2017 maive ne55% yevakapindura vakadaro. 

Zvisinei nekufarira kuri kukura uye kutorwa kwemidziyo, kuipinza mukugadzira kunoda curve yekudzidza nekuda kwekusakura kwetekinoroji uye kushomeka kwekuziva. Masangano anofanirwa kuve echokwadi nezve bhizinesi maitiro anoda application containerization. Vatungamiri veIT vanofanirwa kuongorora kana vaine hunyanzvi hwakaiswa kuti vaenderere mberi nechido chekudzidza nekukurumidza. 

Gartner nyanzvi Isu tinofunga kuti mibvunzo iri pamufananidzo pazasi ichakubatsira kuona kana wagadzirira kuendesa midziyo mukugadzira:

Izvo zvinowanzoitika kukanganisa kana uchishandisa midziyo mukugadzira

Masangano anowanzo tarisira pasi kuedza kunodiwa kushandisa midziyo mukugadzira. Gartner akawana Zvimwe zvikanganiso zvakajairika mumamiriro evatengi kana uchishandisa midziyo munzvimbo dzekugadzira:

Nzira yekuchengetedza midziyo yakachengeteka

Chengetedzo haigone kubatwa ne "gare gare". Inofanirwa kuvakwa mukati meiyo DevOps maitiro, ndosaka paine kana yakakosha izwi - DevSecOps. Masangano anofanira kuronga kuchengetedza nzvimbo yako yemidziyo на протяжении всего жизненного цикла разработки, который включает в себя процесс сборки и разработки, развертывание и запуск приложения.

Zvinokurudzirwa kubva kuGartner: 

1. Batanidza maitiro ekuongorora maapplication mapikicha ekusagadzikana mune yako inoenderera mberi yekubatanidza / inoenderera kuburitsa (CI/CD) pombi. Zvishandiso zvinoongororwa pakugadzira software uye matanho ekutanga. Simbisa kukosha kwekutarisa uye kuona yakavhurika sosi zvikamu, maraibhurari, uye masisitimu. Vagadziri vanoshandisa vhezheni dzekare, dzisina njodzi ndechimwe chezvikonzero zvikuru zvekusagadzikana kwemidziyo.
2. Kuvandudza gadziriro yako neCentre yeInternet Security bvunzo (URIKO HERE), anowanikwa kune ese Docker uye Kubernetes.
3. Iva nechokwadi chekusimbisa kudzora kwekupinda, kuve nechokwadi chekuparadzaniswa kwemabasa, uye kuita zvakavanzika manejimendi mutemo. Ruzivo rwunonzwa, senge Secure Sockets Layer (SSL) makiyi kana dhatabheki zvitupa, inovharirwa ne orchestrator kana yechitatu-bato manejimendi masevhisi uye inoburitswa panguva yekumhanya.
4. Dzivisa midziyo yakasimudzwa nekugadzirisa mitemo yekuchengetedza kuderedza njodzi dzinogona kuitika dzekutyora.
5. Shandisa maturusi ekuchengetedza anopa whitelist, maitiro ekutarisa, uye anomaly kuona kudzivirira kuita kwakashata.

Zvinokurudzira kubva kuStacxRox:

1. Shandisa iyo yakavakirwa-mukati kugona kweKubernetes. Gadzirisa kuwana kwevashandisi uchishandisa mabasa. Ita shuwa kuti haupe mvumo dzisina basa kumasangano ega, kunyangwe zvingatora nguva kuti ufunge kuburikidza nemvumo shoma inodiwa. Zvingave zvinoyedza kupa mubati wechikwata maropafadzo akafara sezvo izvi zvichichengetedza nguva pakutanga. Nekudaro, chero kukanganisa kana kukanganisa muakaunti kunogona kutungamirira kumigumisiro inoparadza gare gare. 
2. Dzivisa mvumo yekuwana yakapetwa. Zvinogona dzimwe nguva kubatsira kuve nemabasa akasiyana anopindirana, asi izvi zvinogona kutungamira kune nyaya dzekushanda uye zvakare kugadzira mapofu kana uchibvisa mvumo. Zvakakoshawo kubvisa mabasa asina kushandiswa uye asingashande.
3. Seta network marongero: sarudza mamodule kuti udzikise kuwana kwavari; bvumidza pachena kuwana Internet kune iwo ma module anoida uchishandisa ma tag; Bvumira kutaurirana pakati peaya mamodule anoda kutaurirana. 

Maitiro ekuronga kutariswa kwemidziyo uye masevhisi mazviri

Безопасность и мониторинг — matambudziko makuru emakambani paunenge uchiendesa Kubernetes masumbu. Vagadziri vanogara vakatarisa zvakanyanya pane maficha ezvishandiso zvavanogadzira kwete maitiro kuongorora maapplication aya. 

Zvinokurudzirwa kubva kuGartner:

1. Edza kutarisa mamiriro emidziyo kana masevhisi mazviri pamwe chete nekutarisa masystem ekugamuchira.
2. Tarisa vatengesi uye maturusi ane yakadzika mubatanidzwa mumidziyo orchestration, kunyanya Kubernetes.
3. Sarudza maturusi anopa zvakadzama matanda, otomatiki sevhisi kuwanikwa, uye chaiyo-nguva kurudziro uchishandisa analytics uye/kana muchina kudzidza.

Iyo SolarWinds blog inopa zano:

1. Shandisa maturusi kuti uzviwanire otomatiki uye kuteedzera mudziyo metrics, inoenderana nekuita metrics seCPU, ndangariro, uye nguva.
2. Ita shuwa yakakwana yekuronga kugona nekufanotaura mazuva ekuderera kwehuwandu zvichienderana nemudziyo wekutarisa metrics.
3. Monitor containerized applications yekuwanikwa uye kuita, inobatsira kune ese ari maviri kuronga kugona uye kugadzirisa matambudziko ekuita.
4. Automate workflows nekupa manejimendi uye kuyera rutsigiro rwemidziyo nenzvimbo dzadzo dzekutambira.
5. Otomatiki yekuwana kutonga kuti utarise yako mushandisi base, kudzima akasakara uye evaenzi maakaundi, uye kubvisa zvisina basa maropafadzo.
6. Ita shuwa kuti mudziyo wako wekushandisa unogona kutarisa aya midziyo uye mashandisirwo munzvimbo dzakawanda (gore, pane-nzvimbo, kana hybrid) kuona uye kuenzanisa mashandiro ezvivakwa, network, masisitimu, uye maapplication.

Nzira yekuchengetedza sei data uye chengetedza kuchengeteka kwayo

С увеличением числа рабочих контейнеров с сохранением состояния клиентам нужно учитывать нахождение данных за пределами хоста, а также необходимость защиты этих данных. 

Maererano ne Portworx uye Aqua Security ongororo, kuchengetedzwa kwedata kunowedzera runyorwa rwezvinetso zvekuchengetedza zvakataurwa nevazhinji vakapindura (61%). 

Dhata encryption ndiyo huru yekuchengetedza nzira (64%), asi vanopindura vanoshandisawo runtime yekutarisa

(49%), kuongorora maregistries ekusagadzikana (49%), kutarisisa kune njodzi muCI/CD mapaipi (49%), uye kuvharira anomalies kuburikidza neruntime dziviriro (48%).

Zvinokurudzirwa kubva kuGartner:

1. Sarudza zvigadziriso zvekuchengetedza zvakavakirwa pamisimboti microservice architecture. Zviri nani kutarisa kune izvo zvinosangana nezvinodiwa zvekuchengetera data zvemasevhisi emidziyo, zvakazvimiririra zvehardware, API inotyairwa, ine dhizaini yakagoverwa, inotsigira kuendesa kwenzvimbo uye kutumirwa mugore reruzhinji.
2. Dzivisa proprietary plugins uye interfaces. Sarudza vatengesi vanopa Kubernetes kubatanidzwa uye kutsigira kwakajairwa nzvimbo dzakadai seCSI (Container Storage Interfaces).

Maitiro ekushanda nemanetwork

Iyo yechinyakare bhizinesi network modhi, uko zvikwata zveIT zvinogadzira kusimudzira network, kuyedzwa, kuvimbiswa kwemhando, uye nharaunda dzekugadzira purojekiti yega yega, haigari ichinyatsoenderana nekuenderera mberi kwekusimudzira mafambiro. Mukuwedzera, midziyo yemidziyo inotambanudzira zvidimbu zvakawanda.

В blog Magalix yakaunganidzwa mitemo yepamusoro-soro iyo kushandiswa kwe-cluster-network solution inofanira kutevedzera:

1. Mapodhi akarongwa panzvimbo imwecheteyo anofanira kukwanisa kutaurirana nemamwe mapodhi pasina kushandisa NAT (Network Kero Dudziro).
2. Ese madhimoni ehurongwa (kumashure maitiro senge kubelet) anomhanya pane imwe node anogona kutaurirana nemapods anomhanya pane imwechete node.
3. Поды, использующие host network, inofanirwa kukwanisa kutaurirana nemamwe mapodhi ese pane mamwe ma node pasina kushandisa NAT. Ndokumbira utarise kuti host networking inotsigirwa chete paLinux host.

Networking mhinduro dzinofanirwa kubatanidzwa zvakasimba neKubernetes primitives uye marongero. Vatungamiriri veIT vanofanirwa kurwira yakakwira dhigirii yetiweki otomatiki uye nekupa vanogadzira maturusi akakodzera uye kuchinjika kwakakwana.

Zvinokurudzirwa kubva kuGartner:

1. Ziva kana CaaS yako (mudziyo sevhisi) kana SDN yako (Software Defined Network) inotsigira Kubernetes network. Kana zvisiri kana rutsigiro rusina kukwana, shandisa iyo CNI (Container Network Interface) network interface yemidziyo yako, iyo inotsigira inodiwa mashandiro uye marongero.
2. Ita shuwa CaaS yako kana PaaS (platform sevhisi) inotsigira kusikwa kwevanodzora ingress uye / kana mitoro mitoro inogovera traffic inouya pakati pemasumbu node. Kana iyi isiri sarudzo, ongorora uchishandisa wechitatu-bato proxies kana masevhisi meshes.
3. Rovedza mainjiniya ako etiweki paLinux network uye netiweki otomatiki maturusi ekudzikisa hunyanzvi gaka uye kuwedzera agility.

Maitiro ekugadzirisa iyo application lifecycle

Для автоматизированной и бесперебойной доставки приложений нужно дополнить оркестровку контейнеров другими инструментами автоматизации, такими как продукты инфраструктуры как код (IaC). К ним относят Chef, Puppet, Ansible и Terraform. 

Otomatiki maturusi ekuvaka uye kuburitsa maapplication anodiwa zvakare (ona "Mashiripiti Quadrant Yechikumbiro Release Orchestration"). Containers inopawo kugona kwekuwedzera kwakafanana neaya aripo paunenge uchiendesa chaiwo michina (VMs). Naizvozvo, vatungamiriri veIT vanofanirwa kuve nazvo container lifecycle management maturusi.

Zvinokurudzirwa kubva kuGartner:

1. Seta zviyero zvemifananidzo yemidziyo yepasi zvichienderana nehukuru, rezinesi, uye kuchinjika kune vanogadzira kuwedzera zvikamu.
2. Shandisa masisitimu ekugadzirisa manejimendi kugadzirisa hupenyu hwemidziyo inoturika gadziriso zvichibva pamifananidzo yepasi inowanikwa munzvimbo dzeveruzhinji kana dzakavanzika.
3. Batanidza yako CaaS chikuva ne otomatiki maturusi otomatiki yako yese application mafambiro.

Maitiro ekugadzirisa midziyo ine orchestrators

Iko kushanda kwepakati pekuisa midziyo inopihwa kune orchestration uye kuronga layer. Panguva yekuronga, midziyo inoiswa pane yakanyanya kunaka mauto musumbu, sekurairwa neiyo orchestration layer zvinodiwa. 

Kubernetes yave iyo de facto mudziyo orchestration standard ine nharaunda inoshanda uye inotsigirwa nevakawanda vanotungamira vatengesi vekutengesa. 

Zvinokurudzirwa kubva kuGartner:

1. Tsanangura zvakakosha zvinodikanwa zvekuchengetedza zvidzoreso, kutarisa, kutonga kwepolicy, kushingirira kwedata, networking uye mudziyo wehupenyu cycle management.
2. Zvichienderana nezvinodiwa izvi, sarudza chishandiso chinonyatsokodzera zvaunoda uye makesi ekushandisa.
3. Shandisa Gartner tsvagiridzo (ona "Maitiro ekusarudza Kubernetes deployment modhi»), чтобы понять достоинства и недостатки различных моделей развертывания Kubernetes и выбрать наиболее подходящую для вашей задачи.
4. Sarudza mupi anogona kupa hybrid orchestration yemidziyo yebasa munzvimbo dzakawanda dzakasimba kuseri kwekubatanidza, zvirongwa zvakajairika zvekutonga, uye mhando dzemitengo dzinoenderana.

Как использовать возможности облачных провайдеров

Gartner anotendaiyo kufarira kuendesa midziyo paruzhinji gore IaaS iri kukura nekuda kwekuvapo kwezvakagadzirirwa-zvakagadzirwa CaaS zvinopihwa, pamwe nekubatanidzwa kwakasimba kwezvipo izvi nezvimwe zvigadzirwa zvinopihwa nevanopa makore.

IaaS makore anopa pane-inoda zviwanikwa zvekushandisa, nekukurumidza scalability uye service management, iyo ichabatsira kudzivisa kudiwa kweruzivo rwakadzama rwezvivakwa uye kuchengetedza kwayo. Vazhinji vanopa gore vanopa sevhisi yekutarisira mudziyo, uye vamwe vanopa akawanda orchestration sarudzo. 

Ключевые облачные поставщики управляемых услуг представлены в таблице: 

Cloud provider
Mhando yebasa
Chigadzirwa/sevhisi

Alibaba
Native Cloud Service
Alibaba Cloud Container Service, Alibaba Cloud Container Service yeKubernetes

Amazon Web Services (AWS)
Native Cloud Service
Amazon Elastic Container Services (ECS), Amazon ECS yeKubernetes (EKS), AWS Fargate

Giant Swarm
MSP
Giant Swarm Yakagadziriswa Kubernetes Infrastructure

Google
Native Cloud Service
Google Container Engine (GKE)

IBM
Native Cloud Service
IBM Cloud Kubernetes Service

Microsoft
Native Cloud Service
Azure Kubernetes Service, Azure Service Fabric

pangataura
Native Cloud Service
OCI Container Injini yeKubernetes

Platform9
MSP
Managed Kubernetes

Red Hat
Yakaitirwa Service
OpenShift Yakatsaurirwa & Pamhepo

VMWare
Yakaitirwa Service
Cloud PKS (Beta)

Mail.ru Cloud Solutions*
Native Cloud Service
Mail.ru Cloud Containers

* Hatizvivanze, takazviwedzera pano panguva yekushandura :)

Veruzhinji gore vanopa vari kuwedzera hunyanzvi hutsva uye kuburitsa pane-zvivakwa zvigadzirwa. Munguva pfupi iri kutevera, vanopa makore vanogadzira rutsigiro rwemakore akasanganiswa uye akawanda-makore nharaunda. 

Gartner Recommendations:

1. Nechinangwa ongorora kugona kwesangano rako kuendesa nekugadzirisa maturusi akakodzera, uye funga mamwe masevhisi ekutonga kwegore.
2. Sarudza software nekuchenjera, shandisa yakavhurika sosi pazvinogoneka.
3. Sarudza vanopa vane vakajairwa mamodhi ekushandisa munzvimbo dzakasanganiswa dzinopa imwechete pane yegirazi manejimendi emasumbu akabatanidzwa, pamwe nevapeji vanoita kuti zvive nyore kuzvitambira IaaS.

Mamwe matipi ekusarudza Kubernetes aaS mupi kubva kuReplex blog:

1. Zvakakodzera kutsvaga kugovera kunotsigira kuwanikwa kwepamusoro kunze kwebhokisi. Izvi zvinosanganisira rutsigiro rweakawanda makuru ekuvaka, anowanikwa zvakanyanya etcd zvikamu, uye backup uye kudzoreredza.
2. Kuti uve nechokwadi chekufamba munzvimbo dzako dzeKubernetes, zviri nani kuti usarudze vanopa makore vanotsigira akasiyana-siyana emhando dzekutumira, kubva pane-nzvimbo kusvika kune yakasanganiswa kusvika kune akawanda-makore. 
3. Vanopa zvinopihwa zvinofanirwawo kuongororwa zvichienderana nekureruka kwekuseta, kuisirwa, uye kugadzira masumbu, pamwe nekuvandudza, kutarisa, uye kugadzirisa matambudziko. Chinodiwa chakakosha kutsigira zvizere otomatiki cluster zvigadziriso ne zero downtime. Mhinduro yaunosarudza inofanirawo kukubvumidza kuti uite zvigadziriso nemaoko. 
4. Identity uye kuwana manejimendi kwakakosha kubva kune zvese chengetedzo uye kutonga maonero. Ita shuwa kuti Kubernetes kugovera kwaunosarudza kunotsigira kubatanidzwa nehuchokwadi uye maturusi emvumo aunoshandisa mukati. RBAC uye yakanaka-grained yekuwana kutonga zvakare akakosha maficha seti.
5. Kugovera kwaunosarudza kunofanirwa kuve neyakagadzirirwa software-inotsanangurwa networking mhinduro inovhara akasiyana akasiyana ekushandisa kana zvivakwa zvinodiwa, kana kutsigira imwe yeanozivikanwa CNI-based networking kuita, kusanganisira Flannel, Calico, kube-router, kana OVN.

Kuunzwa kwemidziyo mukugadzira ndiko kuri kuita gwara guru, sezvinoratidzwa nemhedzisiro yeongororo yakaitwa pa Gartner zvikamu pazvivakwa, mashandiro uye hurongwa hwemakore (IOCS) muna Zvita 2018:

Sezvauri kuona, 27% yevakapindura vatoshandisa midziyo mubasa ravo, uye 63% vari kuronga kuzviita.

В Portworx uye Aqua Security ongororo 24% yevakabvunzwa vakataura kuisa mari inodarika hafu yemiriyoni yemadhora pagore pamatekinoroji emidziyo, uye 17% yevakapindura vakashandisa mari inodarika miriyoni yemadhora pagore pavari. 

Chinyorwa chakagadzirirwa nechikwata chepuratifomu chegore Mail.ru Cloud Solutions.

Chii chimwe chekuverenga pamusoro penyaya:

1. DevOps Maitiro Akanakisisa: DORA Chirevo.
2. Kubernetes mumweya wepiracy ane template yekushandisa.
3. 25 Zvishandiso Zvinobatsira zveKubernetes Deployment uye Adoption.

Source: www.habr.com