Musi waNovember 24, Slurm Mega, kosi yepamberi paKubernetes, yakapera. ichaitwa muMoscow musi waMay 18-20.
Pfungwa yeSlurm Mega: isu tinotarisa pasi pehodhi yesumbu, ongorora mune dzidziso uye kudzidzira kuomesesa kwekuisa nekugadzirisa dhizaini-yakagadzirira cluster ("iyo-kwete-so-nyore-nzira"), funga maitiro. kuitira kuchengetedza kuchengetedzwa uye kukanganisa kushivirira kwezvikumbiro.
Mega Bhonasi: Avo vanopasa Slurm Basic uye Slurm Mega vanogashira ruzivo rwese rwunodiwa kuti vapase bvunzo uye 50% kuderedzwa pabvunzo.
Kutenda kwakakosha kuna Selectel nekupa gore rekudzidzira, nekuda kwekuti mutori wechikamu wega wega akashanda muchikwata chavo chakazara, uye isu hatina kufanira kuwedzera imwe zviuru zvishanu pamutengo wetikiti weizvi.
Ini handisi kukuudza kuti Bondarev naSelivanov ndivanaani, kune avo vanofarira, .
Slurm Mega. Zuva rekutanga.
Pazuva rekutanga reSlurm Mega, takatakura vatori vechikamu nemisoro mina. Pavel Selivanov akataura nezve maitiro ekugadzira failover cluster kubva mukati, nezvebasa reKubeadm, pamwe nekuyedza uye kugadzirisa sumbu.
Kutanga kuputsa kofi. Kazhinji "bhero romudzidzisi," asi paSlurm, apo vadzidzi vanonwa kofi, vadzidzisi vanoramba vachipindura mibvunzo.
Uye pasinei nokuti gore re "Break II" riri kufamba pamusoro pemusoro waPavel Selivanov, haisi magumo ake kuenda kune imwe nguva.
Sergei Bondarev naMarcel Ibraev vakamirira nguva yavo yekuenda kupurupiti.
Panguva yekuzorora, ndakaenda kuna Sergey Bondarev ndokumubvunza kuti: βIzano ripi raungapa kune mainjiniya ese eKubernetes zvichienderana neruzivo rwako rwekushanda nemapoka evatengi vedu?β
Sergey akapa kurudziro iri nyore: "Vhara kupinda kubva paInternet kuenda kune API server. Nekuti nguva nenguva kune zvityisidziro zvekuchengetedza izvo zvinobvumira vashandisi vasina mvumo kuti vawane mukana kune cluster.Β»
Mushure memaminitsi mashoma uye bhodhoro remvura yemaminerari, Pavel Selivanov akamhanyira muhondo nemumvuri wemusoro wenyaya "Mvumo muchikwata uchishandisa wekunze mupi," iyo LDAP (Nginx + Python) uye OIDC (Dex + Gangway).
Munguva yekuzorora kwakatevera, Marcel Ibraev, Slurm speaker, Certified Kubernetes Administrator, akapa zano rake kune mainjiniya eKubernetes: "Ndichataura chinhu chinoita sechekuita, asi tichifunga kuti kakawanda sei ndinosangana neizvi, ndine fungidziro yekuti havasi vese vanorangarira izvi. Iwe haufanirwe kutenda neupofu chero Maitiro-Kubva paInternet ayo anokuudza kuti yakakura sei iyi kana iyo mhinduro inoshanda. Muchirevo cheKubernetes, izvi zvinotora chirevo chakakosha. Nekuti Kubernetes yakaoma sisitimu uye nekuwedzera mhinduro kwairi iyo isati yaedzwa mune yako chaiyo purojekiti uye kuisirwa kwako sumbu kunogona kutungamira kumhedzisiro yakaipa, kunyangwe ivo vakanyora paInternet nezve kutonhora kwayo. Kunyangwe Kubernetes chete pasina nzira yakadzikama inogona kukuvadza chirongwa chako, "chakanakira muRussia kufa kwemuGerman." Naizvozvo, isu tinoedza, tarisa, uye kuyedza chero mhinduro tisati tazviita isu pachedu. Iyi ndiyo chete nzira yauchazofunga nezve ese nuances angamuka.".
Mushure mekudya kwemasikati, Sergei Bondarev akapinda muhondo. Musoro wake ndewe Network policy, inova sumo yeCNI uye Network Security Policy.
IInternet yakazara nezvinyorwa nezve Network Policy. Pane maonero pakati pemaadmins ekuti Network Policies inogona kupihwa, asi nyanzvi dzekuchengetedza dzinonyatsoda chishandiso ichi uye inoda kuti Network Policies igoneswe.
Pavel Selivanov akatora chigaro cheKubernetes kubva kuna Sergey Bondarev aine musoro unoti "Chengetedza uye inowanikwa zvakanyanya muchikwata." Ane misoro yaanofarira: PodSecurityPolicy, PodDisruptionBudget, LimitRange/ResourceQuota.
Musoro weMega, wakataurwa naPavel paDevOpsConf: .
Mushure mekutaura kuti boka reKubernetes rinogona kubiwa zviri nyore sei, vanokahadzika admins vanoti: "Ehe, ndakuudza, Kubernetes yako izere nemakomba." Pavel anotsanangura kuti zvinogoneka kugadzirisa chengetedzo musumbu, uye hazvina kuoma, kungoti zvigadziriso zvekuchengetedza zvakavharwa nekukasira. Details in transcript .
β Ndiani akaputsa sumbu? Akaputsa sumbu! Ndiri kuona zvakakwana kubva pano!
PaSlurms, zvese hazvina kumbobvira zvakapusa uye zviri nyore, kuti urege kufinhwa. Asi panguva ino Telegraph yakafunga kuratidza munhu wese pfungwa yechishanu:
ΠΠ°ΡΡΠ΅Π»Ρ ΠΠ±ΡΠ°Π΅Π², [22 Π½ΠΎΡΠ±. 2019 Π³., 16:52:52]:
ΠΠΎΠ»Π»Π΅Π³ΠΈ, Π² Π΄Π°Π½Π½ΡΠΉ ΠΌΠΎΠΌΠ΅Π½Ρ Π½Π°Π±Π»ΡΠ΄Π°ΡΡΡΡ ΡΠ±ΠΎΠΈ Π² ΡΠ°Π±ΠΎΡΠ΅ Π’Π΅Π»Π΅Π³ΡΠ°ΠΌ, ΠΈΠΌΠ΅ΠΉΡΠ΅ ΡΡΠΎ Π²Π²ΠΈΠ΄Ρ
Izvi zvakagumisa zuva rokutanga, rakajeka uye rakazara nezivo inoshanda. Pazuva rechipiri pachave nekunyanya kudzidzira, kutanga dhatabhesi cluster uchishandisa PostgreSQL semuenzaniso, kutanga RabbitMQ cluster, kutonga zvakavanzika muKubernetes.
Slurm Mega. Zuva rechipiri.
Muratidziri akatanga zuva rechipiri nechiziviso chinofadza: βMangwanani, sekutaura kwakaita Pavel nezuro, takamirira zvakasimba. Mumutauro wevanovhiya, tichapinda mukati meKubernetes! "
Muvaraidzi mukuru inyaya yakasiyana. Rimwe rematambudziko neSlurm nderekuti vanhu vanodzima ruzivo rwakawandisa vorara. Taigara tichitsvaga nzira yekuita chimwe chinhu nezvazvo, uye mitambo midiki ine vateereri yakashanda zvakanaka paSlurm yekupedzisira. Panguva ino takapinza basa munhu akanyatsodzidziswa. Paive nemajee akawanda mukutaura nezve "makwikwi anonakidza," asi chokwadi chinoramba chiripo chekuti hatisati tamboona vatori vechikamu vaifara kudaro.
Vakauya kuzonunura Marcel Ibraev - uye akatanga kudzidza Stateful zvikumbiro musumbu. Sezvineiwo, kuvhura dhatabhesi cluster uchishandisa PostgreSQL semuenzaniso uye kuvhura RabbitMQ cluster.
Mushure mekudya kwemasikati, Sergey Bondarev akatanga kushanda paK8S. Uye dingindira rakanga riri βKuchengeta Zvakavanzika.β Mulder na Scully vakamufukidza. Akadzidza zvakavanzika manejimendi muKubernetes uye Vault. Uye zvakare "Chokwadi chiri kunze uko".
Izvo zvakaenderera kusvika manheru, apo Pavel Selivanov akatanga kutaura nezve Horizontal Pod Autoscaler.
Slurm Mega. Zuva rechitatu.
Nokukurumidza uye nemufaro, kubva mangwanani chaiwo, Sergei Bondarev akakurudzira vateereri nekuchengetedza uye kupora kubva mukukundikana. Ndakatarisa kuchengetedza uye kudzoreredza kwesumbu ndichishandisa Heptio Velero uye etcd pachangu.
Sergey akaenderera mberi nemusoro wekutenderera kwegore kwezvitupa musumbu: kuvandudzwa kwezvitupa-ndege zvitupa uchishandisa kubeadm. Nguva yekudya kwemasikati isati yasvika, kuitira kuti vatori vechikamu vade kudya kana kuti vauraye zvachose, Pavel Selivanov akasimudza musoro wekutumira chikumbiro.
Matemu uye maturusi ekushandisa akatariswa, pamwe nemaitiro ekuisa.
Pavel Selivanov akataura nezvenyaya nyowani: Service Mesh, kuiswa kweIstio. Musoro wacho wakave wakapfuma zvekuti unogona kuita kosi yakadzama pairi. Tirikukurukura nezvehurongwa, garai makamirira zviziviso.
Chinhu chikuru ndechokuti zvinhu zvose zvinoshanda nemazvo. Nekuti inguva yekudzidzira:
kuvaka CI/CD kuti itange panguva imwe chete kutumira application uye cluster update. Mumapurojekiti edzidzo zvese zvinoshanda nemazvo. Uye upenyu dzimwe nguva huzere nezvinhu zvinoshamisa.
Dai iyo Slurm inewe!
Source: www.habr.com