"Ndeupi musiyano uripo pakati peKubernetes neOpenShift?" - mubvunzo uyu unomuka neine enviable kuenderana. Kunyangwe muchokwadi izvi zvakafanana nekubvunza kuti mota inosiyana sei nejini. Kana tikaenderera mberi nekuenzanisa, saka motokari chigadzirwa chakapedzwa, unogona kuishandisa pakarepo, chaizvoizvo: pinda uye uende. Kune rumwe rutivi, kuitira kuti injini iende newe kune imwe nzvimbo, inofanira kutanga yawedzerwa nezvimwe zvinhu zvakawanda kuitira kuti pakupedzisira uwane motokari imwe chete.
Naizvozvo, Kubernetes ndiyo injini yakatenderedza iyo OpenShift brand mota (puratifomu) yakaunganidzwa, iyo inokuendesa kune yako chinangwa.
Muchinyorwa chino tinoda kukuyeuchidza uye kuongorora anotevera mapoinzi mune zvishoma zvimwe zvakadzama:
- Kubernetes ndiwo moyo weiyo OpenShift papuratifomu uye ndeye 100% yakasimbiswa Kubernetes, yakavhurika sosi uye isina kudiki diki hunhu. Muchidimbu:
- Iyo OpenShift cluster API ndeye XNUMX% Kubernetes.
- Kana mudziyo uchimhanya pane chero imwe Kubernetes system, ipapo inomhanya paOpenShift pasina shanduko. Hapana chikonzero chekuchinja kune maapplication.
- OpenShift haingowedzeri chete anobatsira maficha uye mashandiro kuKubernetes. Semotokari, OpenShift iri kunze kwebhokisi, inogona kuiswa mukugadzirwa nekukasira, uye, sezvaticharatidza pazasi, inoita kuti hupenyu hwemugadziri huve nyore. Ndokusaka OpenShift yakabatana muvanhu vaviri. Izvo zvese zvakabudirira uye zvinozivikanwa bhizinesi-kirasi PaaS chikuva kubva pakuona kwemugadziri. Uye panguva imwecheteyo, ndeyepamusoro-yakavimbika Container-se-a-Service mhinduro kubva pakuona kwekushanda kwemaindasitiri.
OpenShift ndeye Kubernetes ine 100% CNCF certification
OpenShift yakavakirwa pa . Naizvozvo, mushure mekudzidziswa kwakakodzera, vashandisi vanoshamiswa nesimba rekubectl. Uye avo vakachinjira kuOpenShift kubva Kubernetes Cluster vanowanzo taura kuti vakadii chaizvo mushure mekutungamira kubeconfig kuOpenShift cluster, zvese zviripo zvinyorwa zvinoshanda zvisina mhosva.
Iwe wakambonzwa nezve OpenShift's command line utility inonzi OC. Iyo inoraira zvizere inoenderana ne kubectl, uye zvakare inopa akati wandei anobatsira anobatsira ayo anouya aine anobatsira pakuita akati wandei mabasa. Asi chekutanga, zvimwe zvishoma nezve kuenderana kweOC uye kubectl:
kubectl mirairo
OC Zvikwata
kubectl tora pods
oc kuwana mapodhi
kubectl kuwana mazita enzvimbo
oc kuwana mazita enzvimbo
kubectl kugadzira -f deployment.yaml
oc kugadzira -f deployment.yaml
Hezvino izvo mhedzisiro yekushandisa kubectl paOpenShift API inoita senge:
• kubectl kuwana mapodhi - inodzosera mapodhi sezvaitarisirwa.
• kubectl wana mazita - inodzorera mazita ezvinzvimbo sezvinotarisirwa.
Iwo murairo kubectl gadzira -f mydeployment.yaml inogadzira kubernetes zviwanikwa senge pane chero imwe Kubernetes chikuva, sezvakaratidzwa muvhidhiyo pazasi:
Mune mamwe mazwi, ese Kubernetes APIs anowanikwa zvizere muOpenShift uku achichengetedza 100% kuenderana. Ndosaka .
OpenShift inowedzera anobatsira maficha kuKubernetes
Kubernetes APIs ndeye 100% inowanikwa muOpenShift, asi yakajairwa Kubernetes utility kubectl zvakajeka haina kushanda uye nyore. Ndosaka Red Hat yakawedzera anobatsira maturusi uye yekuraira-mutsara maturusi kuKubernetes, akadai seOC (pfupi yeOpenShift mutengi) uye ODO (OpenShift DO, chishandiso ichi chakanangana nevagadziri).
1. OC utility - ine simba uye iri nyore shanduro yeKubectl
Semuenzaniso, kusiyana nekubectl, inokutendera iwe kuti ugadzire nzvimbo nyowani dzemazita uye nyore nyore kushandura mamiriro, uye zvakare inopa akati wandei anobatsira emirairo yevagadziri, sekuvaka mifananidzo yemidziyo uye kutumira maapplication zvakananga kubva kunobva kodhi kana mabhinari (Mabviro-ku-mufananidzo, s2i).
Ngatitarisei mienzaniso yekuti vabatsiri vakavakirwa-mukati uye mashandiro epamusoro eOC utility anobatsira kurerutsa basa remazuva ese.
Muenzaniso wekutanga ndewe namespace management. Imwe neimwe Kubernetes cluster inogara iine akati wandei mazita. Iwo anowanzo shandiswa kugadzira budiriro uye kugadzirwa nharaunda, asi zvakare inogona kushandiswa, semuenzaniso, kupa wega wega bhokisi rejecha. Mukuita, izvi zvinoita kuti mugadziri agare achichinja pakati pemazita, sezvo kubectl inomhanya mumamiriro enzvimbo iripo. Naizvozvo, kana iri kubectl, vanhu vanoshingairira kushandisa zvinyorwa zvemubatsiri zveizvi. Asi kana uchishandisa OC, kushandura kunzvimbo yaunoda, ingoti "oc project namespace".
Usarangarira kuti nzvimbo yezita yaunoda inodaidzwa sei? Hapana dambudziko, ingonyora "oc tora mapurojekiti" kuratidza runyorwa ruzere. Kupokana uchinetseka kuti izvi zvichashanda sei kana iwe uchingokwanisa kuwana mashoma mashoma emazita enzvimbo pasumbu? Zvakanaka, nekuti kubectl inongoita izvi nemazvo kana RBAC ichikubvumidza kuti uone nzvimbo dzese pasumbu, uye mumasumbu makuru havasi vese vanopihwa mvumo dzakadaro. Saka, tinopindura: kune OC iyi haisi dambudziko zvachose uye inobudisa nyore runyoro rwakakwana mumamiriro ezvinhu akadaro. Ndizvo zvinhu zvidiki izvi zvinogadzira kutungamira kwekambani yeOpenshift uye kunaka kwakanaka kwepuratifomu iyi maererano nevashandisi nemashandisirwo.
2. ODO - yakavandudzwa vhezheni yekubectl yevagadziri
Mumwe muenzaniso weRed Hat OpenShift kuvandudzwa pamusoro peKubernetes ndiyo ODO yekuraira mutsara utility. Yakagadzirirwa vanogadzira uye inobvumidza iwe kukurumidza kuendesa kodhi yenzvimbo kune iri kure OpenShift cluster. Inogona zvakare kukwenenzvera maitirwo emukati kuti iyananise ipapo ipapo shanduko dzese dzekodhi kumidziyo pane iri kure OpenShift cluster pasina kuvakazve, registry, uye redeploy mifananidzo.
Ngatitarisei kuti OC neODO zvinoita sei kushanda nemidziyo uye Kubernetes kuve nyore.
Ingoenzanisa akati wandei mafambiro ebasa paakavakirwa pahwaro hwekubectl, uye kana OC kana ODO ichishandiswa.
• Kuiswa kwekodhi paOpenShift kune avo vasingatauri YAML:
Kubernetes/kubectl
$> git clone
1- Gadzira iyo Dockerfile inovaka mufananidzo kubva kodhi
-----
KUBVA node
WORKDIR /usr/src/app
COPY package*.json ./
COPY index.js ./
KOPI ./app ./app
Mhanya npm kuisa
EXPOSE 3000
CMD [ “npm”, “start” ] ————–
2- Isu tinovaka mufananidzo
$>podman kuvaka...
3- Pinda kune registry
podman login...
4- Isa mufananidzo wacho mune registry
podman push
5- Gadzira yaml mafaera ekutumira application (deployment.yaml, service.yaml, ingress.yaml) - iyi ndiyo yakakwana.
6- Shandisa manifest mafaira:
Kubectl shandisa -f .
OpenShift/oc
$> oc itsva-app – yedu_application_zita
OpenShift/odo
$> git clone
$> odo gadzira chikamu nodejs myapp
$>odo kusunda
• Context switch: shandura zita rebasa kana sumbu rebasa.
Kubernetes/kubectl
1- Gadzira mamiriro mukubeconfig yepurojekiti "myproject"
2- kubectl set-context…
OpenShift/oc
oc chirongwa "myproject"
Kudzora kwehunhu: "Chimwe chinhu chinonakidza chaonekwa pano, chichiri mualpha vhezheni. Pamwe tinogona kuzviisa mukugadzira? "
Fungidzira wakagara mumotokari yemijaho uye uchiudzwa kuti: “Takaisa rudzi rutsva rwemabhureki uye, kutaura chokwadi, kuvimbika kwawo hakusati kwakwana... Asi usanetseka, tichashingaira kuavandudza panguva yefundo cheChampionship.” Unoda sei tarisiro iyi? Isu paRed Hat hatina kufara zvakanyanya. 🙂
Naizvozvo, tinoedza kusamira pashanduro dzealpha kusvika dzakura zvakakwana uye taita ongororo yehondo uye tinonzwa dzakachengeteka kushandisa. Kazhinji, zvese zvinoenda kuburikidza neDev Preview nhanho kutanga, uye kuburikidza uye chete ipapo inobuda sekuburitswa pachena (GA), iyo yatove yakagadzikana zvekuti yakakodzera kugadzirwa.
Nei zvakadaro? Nekuti, sekuvandudzwa kweimwe software, haasi ese ekutanga mazano muKubernetes anosvika pakuburitswa kwekupedzisira. Kana kuti vanosvika pairi uye vanotochengeta mashandiro avakada, asi kuita kwavo kwakasiyana zvakanyanya neiyo mushanduro yealpha. Nezviuru nezviuru zvevatengi veRed Hat vanoshandisa OpenShift kutsigira basa rakakosha basa, tinoisa simbiso yakakosha pakugadzikana kwepuratifomu yedu nerutsigiro rwenguva refu.
Red Hat yakazvipira kuburitsa OpenShift nguva zhinji uye kugadzirisa vhezheni yeKubernetes inouya nayo. Semuenzaniso, yazvino GA kuburitswa kweOpenShift 4.3 panguva yekunyora uku kunosanganisira Kubernetes 1.16, inova chikamu chimwe chete kuseri kweiyo Kubernetes yakakwira vhezheni yakaverengerwa 1.17. Nekudaro, tiri kuyedza kupa mutengi bhizinesi-kirasi Kubernetes uye nekupa humwe hutongi hwemhando apo isu tinoburitsa shanduro itsva dzeOpenShift.
Kugadziriswa kweSoftware: "Paive negomba mushanduro yeKubernetes yatinayo mukugadzira. Uye iwe unogona kuivhara chete nekuvandudza matatu mavhezheni kumusoro. Kana kuti pane zvingasarudzwa here?
MuKubernetes yakavhurika sosi purojekiti, zvigadziriso zvesoftware zvinowanzoburitswa sechikamu chekuburitswa kunotevera, dzimwe nguva kufukidza imwe kana mbiri dzakapfuura kuburitswa, zvichipa kuvharwa kumashure senge mwedzi mitanhatu.
Red Hat inozvitutumadza nekuburitsa zvakakomba zvigadziriso pamberi pevamwe uye nekupa rutsigiro kwenguva refu. Tora semuenzaniso Kubernetes rombo rekuwedzera njodzi (): yakawanikwa muKubernetes 1.11, uye zvigadziriso zvezvakaburitswa zvakaburitswa chete kusvika kushanduro 1.10.11, zvichisiya iyi iri mugomba mune zvese zvakapfuura Kubernetes kuburitswa, kubva 1.x kusvika 1.9.
Uyezve, (Kubernetes 1.2 iripo), inotora zvipfumbamwe OpenShift kuburitswa uye kuratidza zvakajeka kutarisira vatengi (mamwe ruzivo ).
OpenShift uye Red Hat zviri kufambisa sei Kubernetes kumberi
Red Hat ndiyo yechipiri yakakura kwazvo software inopa kune yakavhurika sosi Kubernetes purojekiti, kuseri kweGoogle chete, ine vatatu vevashanu vanogadzira zvakanyanya vanobva kuRed Hat. Chimwe chinhu chidiki chinozivikanwa: mabasa mazhinji akakosha akaonekwa muKubernetes chaizvo panguva yekutanga yeRed Hat, kunyanya, senge:
- RBAC. Kubernetes anga asina RBAC mabasa (ClusterRole, ClusterRoleBinding) kudzamara Red Hat mainjiniya afunga kuashandisa sechikamu chepuratifomu pachayo, uye kwete sekuwedzera kweOpenShift mashandiro. Red Hat inotya kuvandudza Kubernetes? Ehe kwete, nekuti Red Hat inoteedzera yakavhurika sosi misimboti uye haitambi Open Core mitambo. Kuvandudzwa uye hutsva hunotungamirwa nenharaunda dzebudiriro, kwete dzevaridzi, dzinoshanda uye dzinogamuchirwa zvakanyanya, izvo zvinonyatsoenderana nechinangwa chedu chekugadzira yakavhurika sosi software inobatsira vatengi vedu.
- Chengetedzo Mitemo yepods (Pod Security Policies). Iyi pfungwa yekumhanyisa maapplication zvakachengeteka mukati mepods yakatanga kushandiswa muOpenShift pasi pezita SCC (Security Context Constraints). Uye sepamuenzaniso wapfuura, Red Hat yakafunga kuunza izvi zviitiko muchirongwa chakavhurika cheKubernetes kuitira kuti munhu wese azvishandise.
Iyi nhevedzano yemienzaniso inogona kuenderera mberi, asi isu taingoda kuratidza kuti Red Hat yakazvipira kusimudzira Kubernetes uye kuita kuti ive nani kune wese munhu.
Zviri pachena kuti OpenShift ndeye Kubernetes. Ndeipi misiyano? 🙂
Isu tinovimba kuti nekuverenga izvi kure waona kuti Kubernetes ndiyo yakakosha chikamu cheOpenShift. Iyo huru, asi kure kubva kune imwe chete. Mune mamwe mazwi, kungoisa Kubernetes hakukupe iwe bhizinesi-kirasi chikuva. Iwe unozofanirwa kuwedzera huchokwadi, networking, chengetedzo, kutarisa, log management, nezvimwe. Uyezve, iwe uchafanirwa kuita sarudzo dzakaoma kubva kunhamba huru yezvishandiso zviripo (kuti utende kusiyana kweiyo ecosystem, ingo tarisa. ) uye neimwe nzira ive nechokwadi chekuenderana uye kubatana kuitira kuti vashande sechinhu chimwe. Uye zvakare, iwe unozogara uchifanirwa kuita zvigadziriso uye kudzoreredza bvunzo pese painoburitswa vhezheni itsva yechero yezvikamu zvaunoshandisa. Ndokunge, pamusoro pekugadzira nekuchengetedza chikuva pachacho, iwe unozofanirwawo kubata nese software iyi. Hazvigoneki kuti kuchave nenguva yakawanda yasara yekugadzirisa matambudziko ebhizinesi uye kuwana mabhenefiti emakwikwi.
Asi kana iri iyo OpenShift, Red Hat inotora zvese izvi zvakaomarara uye inokupa iwe inoshanda yakakwana chikuva, iyo inosanganisira kwete Kubernetes pachayo, asiwo yese seti yezvinodiwa yakavhurika sosi maturusi anoshandura Kubernetes kuita chaiyo bhizinesi-kirasi. mhinduro iyo iwe yaunogona nekukurumidza uye yakadzikama kuvhura mukugadzira. Uye zvechokwadi, kana iwe uine yako wega tekinoroji stacks, saka unogona kubatanidza OpenShift mumhinduro dziripo.
Tarisa pamufananidzo uri pamusoro: zvese zviri kunze kweKubernetes rectangle ndipo apo Red Hat inowedzera mashandiro ayo Kubernetes haana, sezvavanotaura, ne-dhizaini. Uye zvino tichatarisa chikuru cheidzi nzvimbo.
1. Robust OS sehwaro: RHEL CoreOS kana RHEL
Red Hat yanga iri inotungamira mupi weLinux kugovera kune bhizinesi-yakakosha kunyorera kweanopfuura makore makumi maviri. Yedu yakaunganidzwa uye inogara yakagadziridzwa chiitiko munzvimbo ino inotibvumira kupa yakavimbika uye yakavimbika hwaro hwekushanda kwemaindasitiri kwemidziyo. RHEL CoreOS inoshandisa kernel yakafanana neRHEL, asi yakagadziridzwa zvakanyanya kumabasa akadai sekumhanya midziyo uye kumhanya Kubernetes masumbu: kukura kwayo kwakaderedzwa uye kusachinjika kunoita kuti zvive nyore kumisikidza masumbu, autoscaling, kuendesa zvigamba, nezvimwewo. hwaro hwakanakira kuendesa iyo yakafanana mushandisi ruzivo neOpenShift munzvimbo dzakasiyana siyana dzemakomputa, kubva kusimbi isina chinhu kusvika kune yakavanzika uye yeruzhinji gore.
2. Automation yeIT maitiro
Otomatiki yekuisa maitiro uye mashandiro ezuva-4 (kureva, mashandiro ezuva nezuva) inzvimbo yakasimba yeOpenShift, zvichiita kuti zvive nyore kubata, kugadzirisa, uye kuchengetedza mashandiro eplatform yemidziyo padanho repamusoro. Izvi zvinowanikwa kuburikidza nerutsigiro rweKubernetes vanoshanda paOpenShift XNUMX kernel level.
OpenShift 4 zvakare izere ecosystem yemhinduro yakavakirwa paKubernetes vanoshanda, yakagadziridzwa neRed Hat pachayo uye nevechitatu-bato vadyidzani (ona. Red Hat, kana opareta chitoro , yakagadzirwa neRed Hat yevagadziri vechitatu).
Iyo yakabatanidzwa OpenShift 4 katalog inosanganisira anopfuura zana Kubernetes vanoshanda
3. Developer Tools
Kubva 2011, OpenShift yave iripo sePaaS (Platform-as-a-Service) chikuva chinoita kuti hupenyu huve nyore kune vanogadzira, inovabatsira kuti vatarise kukodha, uye inopa rutsigiro rwemunharaunda yemitauro yehurongwa seJava, Node.js. , PHP, Ruby, Python, Go, pamwe neCI/CD inoenderera mberi yekubatanidza uye kuendesa masevhisi, dhatabhesi, nezvimwe. OpenShift 4 inopa , iyo inosanganisira anopfuura zana masevhisi akavakirwa paKubernetes anoshanda akagadzirwa neRed Hat nevamwe vedu.
Kusiyana neKubernetes, OpenShift 4 ine yakatsaurirwa GUI (), iyo inobatsira vanogadzira kuendesa zvikumbiro kubva kwakasiyana siyana (git, registries ekunze, Dockerfile, nezvimwewo) munzvimbo dzavo dzemazita uye nekuona zvakajeka hukama pakati pezvikamu zvekushandisa.
Mukuwedzera, OpenShift inopa seti yeCodeready yekuvandudza maturusi, ayo, kunyanya, anosanganisira , IDE yakazara yakazara ine web interface iyo inomhanya yakananga pamusoro peOpenShift uye inoshandisa IDE-se-a-sevhisi maitiro. Kune rumwe rutivi, kune avo vanoda kushanda zvakasimba mumamiriro emunharaunda, kune Codeready Containers, shanduro inoshanda zvakakwana yeOpenShift 4 inogona kuiswa pane laptop.
Yakabatanidzwa IDE sevhisi yekuvandudza kwakanaka paKubernetes/OpenShift chikuva
OpenShift inopa yakazara CI/CD sisitimu kunze kwebhokisi, ingave yakavakirwa pamudziyo weJenkins uye plugin. yekushanda nemapaipi, kana Kubernetes-yakatarisana neCI/CD system (ikozvino muTech preview version). Zvose izvi zvigadziriso zvinosanganiswa zvizere neOpenShift console, zvichikutendera kuti umhanye zvinokonzeresa pombi, kuona kutumirwa, matanda, nezvimwe.
4. Zvishandiso zvekushandisa
OpenShift inokutendera kuti utumire ese ari maviri echinyakare mashandisirwo echinyakare uye gore-yakavakirwa mhinduro zvichibva pazvivakwa zvitsva, senge microservices kana serverless. Iyo OpenShift Service Mesh mhinduro inouya kunze kwebhokisi ine maturusi akakosha ekuchengetedza mamicroservices, akadai seIstio, Kiali naJaeger. Nekudaro, iyo OpenShift Serverless mhinduro inosanganisira kwete Knative chete, asiwo maturusi akaita seKeda akagadzirwa sechikamu chemubatanidzwa neMicrosoft kupa mabasa eAzure papuratifomu yeOpenShift.
Iyo yakabatanidzwa mhinduro OpenShift ServiceMesh (Istio, Kiali, Jaeger) ichave inobatsira pakugadzira mamicroservices.
Kuvhara mukaha uripo pakati pemashandisirwo enhaka uye midziyo, OpenShift ikozvino inobvumira chaiwo muchina kutama kuenda kuOpenShift chikuva uchishandisa Container Native Virtualization (ikozvino muTechPreview), ichiita mahybrid application kuve chokwadi uye kufambisa kutama kwavo pakati pemakore akasiyana, ese ari ega uye eruzhinji.
Windows 2019 Virtual virtual muchina unomhanya paOpenShift kuburikidza neContainer Native Virtualization (ikozvino muTech preview version)
5. Zvishandiso zvemasumbu
Chero bhizinesi-kirasi chikuva chinofanirwa kuve nekutarisa uye nechepakati matanda masevhisi, nzira dzekuchengetedza, humbowo uye mvumo, uye network manejimendi maturusi. Uye OpenShift inopa zvese izvi kunze kwebhokisi, uye zvese 100% yakavhurika sosi, kusanganisira mhinduro dzakadai seElasticSearch, Prometheus, Grafana. Ese aya mhinduro anouya nemadhibhodhi, metrics, uye zviziviso zvakatovakwa uye zvakagadziridzwa uchishandisa Red Hat yakakura cluster yekutarisa hunyanzvi, ichikubvumidza iwe kunyatso kudzora uye kutarisa nharaunda yako yekugadzira kubva pakutanga.
OpenShift inouyawo yakajairwa nezvinhu zvakakosha zvakadaro kune vatengi vemakambani sehuchokwadi neakavakirwa-mukati-mhiko mupi, kubatanidzwa nevanovapa vanopa, kusanganisira LDAP, ActiveDirectory, OpenID Connect, nezvimwe zvakawanda.
Pre-yakagadzirirwa Grafana dashboard yeOpenShift cluster yekutarisa
Pamusoro pe150 pre-yakagadzirirwa Prometheus metrics uye yambiro yeOpenShift cluster yekutarisa.
Zvichaenderera mberi
Kushanda kwakapfuma kwemhinduro uye ruzivo rweRed Hat rwakakura mumunda weKubernetes ndizvo zvikonzero nei OpenShift yawana chinzvimbo chepamusoro mumusika, sezvakaratidzwa mumufananidzo uri pazasi (verenga zvimwe. ).
“Red Hat parizvino iri kutungamira musika nechikamu che44%.
Kambani iri kukohwa mabhenefiti ehurongwa hwekutengesa mutengi, apo inotanga yabvunza uye kudzidzisa vanogadzira mabhizinesi yobva yaenda mukuita mari sezvo bhizinesi rinotanga kuendesa midziyo mukugadzira. "
(Kunobva: )
Tinovimba wakanakidzwa nechinyorwa ichi. Mune zvinyorwa zvinotevera mune ino nhevedzano, isu tichanyatso tarisisa mabhenefiti eOpenShift pamusoro peKubernetes mune imwe neimwe yezvikamu zvinokurukurwa pano.
Source: www.habr.com