Kusuma Tanzu Mission Control

Nhasi tinoda kutaura nezveVMware Tanzu, mutsara mutsva wezvigadzirwa nemasevhisi zvakaziviswa pamusangano weVMWorld wegore rapfuura. Pachirongwa ndechimwe chezvishandiso zvinonakidza: Tanzu Mission Control.

Ngwarira: kune mifananidzo yakawanda pasi pekucheka.

Chii chinonzi Mission Control

Sezvinotaura kambani pachayo mublog rayo, chinangwa chikuru cheVMware Tanzu Mission Control "kuunza kurongeka kune mhirizhonga." Mission Control ipuratifomu inofambiswa neAPI iyo inobvumira vatungamiriri kushandisa marongero kumasumbu kana mapoka emasumbu uye kuseta mitemo yekuchengetedza. SaaS-yakavakirwa maturusi anosanganisirwa akachengeteka muKubernetes masumbu kuburikidza nemumiririri uye anotsigira akasiyana-siyana akajairwa cluster mashandiro, anosanganisira lifecycle manejimendi mashandiro (kuendesa, kuyera, kudzima, nezvimwewo).

Ideology yemutsara weTanzu yakavakirwa pakushandiswa kwakanyanya kweakavhurika-sosi tekinoroji. Kugadzirisa kutenderera kwehupenyu hweTanzu Kubernetes Grid masumbu, iyo Cluster API inoshandiswa, Velero inoshandiswa kuchengetedza uye kudzoreredza, Sonobuoy inoshandiswa kutarisa kutevedza nekumisikidzwa kweKubernetes masumbu uye Contour senge ingress controller.

Rondedzero yakazara yeTanzu Mission Control mabasa inoita seizvi:

• centralized manejimendi ako ese Kubernetes masumbu;
• kuzivikanwa uye kuwana manejimendi (IAM);
• diagnostics uye kutarisisa mamiriro emasumbu;
• kugadzirisa kugadzirisa uye kuchengetedza zvigadziriso;
• kuronga nguva dzose cluster health checks;
• kugadzira backups uye kudzoreredza;
• quota management;
• chiratidzo chekushandiswa kwezviwanikwa.

Nei ichikosha

Tanzu Mission Control ichabatsira mabhizinesi kugadzirisa dambudziko rekutonga boka guru reKubernetes masumbu ari panzvimbo, mugore uye nepakati pevazhinji vechitatu-bato vanopa. Nenguva isipi, chero kambani ine zviitiko zvakasungirirwa kuIT inozviona ichimanikidzwa kutsigira akawanda heterogeneous masumbu anowanikwa kune vakasiyana vanopa. Imwe neimwe cluster inoshanduka kuita bhora rechando rinoda sangano rakakodzera, zvivakwa zvakakodzera, marongero, dziviriro, masisitimu ekutarisa uye zvimwe zvakawanda.

Mazuva ano, chero bhizinesi rinoedza kudzikisa mutengo uye otomatiki maitiro ekuita. Uye iyo yakaoma IT landscape zvakajeka haikurudzire kuchengetedza uye kuisa pfungwa pamabasa ekutanga. Tanzu Mission Control inopa masangano kugona kushanda akawanda maKubernetes masumbu akaiswa kune vakawanda vanopa vachibatanidza modhi yekushandisa.

Solution architecture

Tanzu Mission Control ipuratifomu inoroja yakawanda inopa vashandisi mukana kune seti yezvirongwa zvinogadziriswa zvakanyanya zvinogona kuiswa kumasumbu eKubernetes nemapoka emasumbu. Mushandisi wega wega akasungirirwa kuSangano, inova "mudzi" wezviwanikwa-mapoka mapoka uye Nzvimbo dzekushanda.

Izvo Tanzu Mission Control inogona kuita

Pamusoro takatonyora muchidimbu rondedzero yemabasa emhinduro. Ngationei kuti izvi zvinoitwa sei mune interface.

Kuona kumwe chete kwese Kubernetes masumbu mubhizinesi:

Kugadzira boka idzva:

Iwe unogona pakarepo kugovera boka kune rimwe boka, uye richagara nhaka yemitemo yakagoverwa kwairi.

Cluster connection:

Atovepo masumbu anogona kungobatanidzwa uchishandisa yakakosha mumiriri.

Cluster grouping:

Mumapoka eCluster, munokwanisa kuita mapoka mapoka kuti mugare nhaka mitemo yamakagoverwa pakarepo padanho reboka, pasina kupindira kwemaoko.

Nzvimbo dzekushanda:

Inopa kugona kugadzirisa nyore kuwana kune application iyo iri mukati akati wandei mazita, masumbu uye makore zvivakwa.

Ngatitarisei zvakanyanya pamaitiro ekushanda eTanzu Mission Control mubasa rerabhoritari.

Lab #1

Ehe, zvakanyanya kuoma kufungidzira zvakadzama kushanda kweMission Control uye itsva Tanzu mhinduro pasina kudzidzira. Kuti iwe uongorore iwo makuru maficha emutsara, VMware inopa mukana kune akati wandei mabhenji erabhoritari. Aya mabhenji anokubvumira kuita basa re laboratori uchishandisa nhanho-nhanho mirairo. Pamusoro peTanzu Mission Control pachayo, dzimwe mhinduro dziripo dzekuedzwa uye kudzidza. Rondedzero yakazara yemabasa emurabhoritari inogona kuwanikwa pane peji ino.

Kuti uzive zvinoshanda nemhinduro dzakasiyana (kusanganisira diki "mutambo" pavSAN) huwandu hwakasiyana hwenguva hwakapihwa. Usanetseke, idzi nhamba dzakanyanya. Semuenzaniso, lab paTanzu Mission Control inogona "kugadziriswa" kweanosvika 9 nehafu maawa kana uchipfuura kubva kumba. Mukuwedzera, kunyange kana timer ikapera, unogona kudzokera shure uye uende kuburikidza nezvose zvakare.

Kupfuura basa rerabhoritari #1
Kuti uwane maLab, iwe unozoda VMware account. Mushure memvumo, hwindo repop-up richavhurwa rine mainoutline yebasa. Mirayiridzo yakadzama ichaiswa kurudyi rwechidzitiro.

Mushure mekuverenga sumo pfupi kuTanzu, iwe unokokwa kuti udzidzire muMission Control inopindirana simulation.

A new windows muchina pop-up hwindo rinovhurika uye iwe uchakumbirwa kuita mashoma ekutanga mashandiro:

• gadzira sumbu
• gadzirisa maparameter ayo ekutanga
• zorodza peji uye ita shuwa kuti zvese zvakagadziriswa nemazvo
• isa mitemo uye tarisa cluster
• gadzira nzvimbo yekushanda
• gadzira nzvimbo yezita
• shanda nemitemo zvakare, nhanho imwe neimwe inotsanangurwa zvakadzama mubhuku rekushandisa
• demo cluster upgrade

Ehe, iyo inopindirana simulation haipe rusununguko rwakakwana rwekudzidza yakazvimirira: iwe unofamba uchitevedza njanji dzakafanogadzikwa nevagadziri.

Lab #2

Pano tave kutotarisana nechimwe chinhu chakakomba. Iri basa rerabhoritari harina kusungirirwa kune "njanji" seyapfuura uye rinoda kunyatsodzidza. Hatisi kuzozvipa pano zvizere: kuchengetedza nguva yako, isu tichaongorora chete yechipiri module, yekutanga yakazvipira kune theoretical chikamu chebasa reTanzu Mission Control. Kana uchida, iwe unogona kuzvipfuura zvachose iwe pachako. Iyi module inotipa kudzika kwakadzika mukati me cluster lifecycle manejimendi kuburikidza neTanzu Mission Control.

Ongorora: Tanzu Mission Control laboratory basa rinogara richivandudzwa nekunatswa. Kana chero zvidzitiro kana matanho akasiyana neayo ari pazasi paunenge uchipedza lab, tevera mafambiro ari kurudyi rwechidzitiro. Isu tichapfuura neiyo yazvino vhezheni yeLR panguva yekunyora uye tifunge nezvayo zvakakosha zvinhu.

Kupfuura basa rerabhoritari #2
Mushure mekuita mvumo muVMware Cloud Services, tinotangisa Tanzu Mission Control.

Nhanho yekutanga iyo lab inoratidza kuendesa Kubernetes cluster. Kutanga isu tinoda kuwana iyo Ubuntu VM tichishandisa PuTTY. Tangisa zvinoshandiswa uye sarudza chikamu neUbuntu.

Isu tinoita mirairo mitatu mukutevera:

• kugadzira cluster: kind create cluster --config 3node.yaml --name=hol
• kurodha KUBECONFIG faira: export KUBECONFIG="$(kind get kubeconfig-path --name="hol")"
• node output: kubectl get nodes

Ikozvino cluster yatakagadzira inoda kuwedzerwa kuTanzu Mission Control. Kubva kuPuTTY tinodzokera kuChrome, enda kuClusters uye tinya BANDISA CLUSTER.
Sarudza boka kubva pane yekudonhedza-pasi menyu - Default, isa zita rataurwa nelab wobva wadzvanya nyoresa.

Kopa murairo wakagamuchirwa uye enda kuPuTTY.

Tinoita murairo wakagamuchirwa.

Kuti uone kufambira mberi, mhanya mumwe murairo: watch kubectl get pods -n vmware-system-tmc. Tinomirira kusvikira midziyo yose ine chimiro kumhanya kana Inopera.

Dzokera kuTanzu Mission Control uye tinya VERIFY CONNECTION. Kana zvinhu zvose zvikafamba zvakanaka, zviratidzo zvecheki zvose zvinofanira kuva zvakasvibirira.

Zvino ngatigadzirei boka idzva remasumbu uye titumire sumbu idzva ipapo. Enda kumapoka eCluster wobva wadzvanya NEW CLUSTER GROUP. Isa zita uye tinya Create.

Boka idzva rinofanirwa kuoneka murunyorwa.

Ngatiisei chikwata chitsva: enda ku Masango, Press CLUSTER ITSVA uye sarudza sarudzo yakabatana nebasa re laboratori.

Ngatiwedzerei zita rechikwata, sarudza boka rakapiwa kwairi - mune yedu, maoko-pa-labs - uye nzvimbo yekuendesa.

Pane dzimwe sarudzo dziripo kana uchigadzira sumbu, asi hapana chikonzero chekuchishandura panguva yerabhu. Sarudza configuration yaunoda wobva wadzvanya Next.

Mamwe ma parameter anoda kugadziridzwa, kuti uite izvi, tinya pepeta.

Ngatiwedzerei nhamba yekushanda nodes kusvika maviri, chengetedza ma parameters uye tinya Create.
Mukati mekuita uchaona bhora rekufambira mberi seizvi.

Mushure mekubudirira kutumirwa, iwe uchaona mufananidzo uyu. Marisiti ese anofanira kunge ari green.

Zvino isu tinoda kudhawunirodha iyo KUBECONFIG faira kubata sumbu uchishandisa yakajairwa kubectl mirairo. Izvi zvinogona kuitwa zvakananga kuburikidza neTanzu Mission Control mushandisi interface. Dhawunirodha faira uye enderera kurodha Tanzu Mission Control CLI nekudzvanya tinya pano.

Sarudza iyo yaunoda vhezheni uye dhawunirodha iyo CLI.

Iye zvino tinoda kuwana API Token. Kuti uite izvi, enda ku Account My uye gadzira chiratidzo chitsva.

Zadza minda wodzvanya GENERATE.

Kopa chiratidzo chabuda uye tinya Ramba uchienderera mberi. Vhura Power Shell uye pinda iyo tmc-login command, ipapo chiratidzo icho chatakagamuchira uye nekukopa munhanho yapfuura, uye ipapo Login Context Name. Sarudza Info matanda kubva kune zvakarongwa, dunhu uye olympus-default sekiyi ye ssh.

Tinowana mazita enzvimbo:kubectl --kubeconfig=C:UsersAdministratorDownloadskubeconfig-aws-cluster.yml get namespaces.

Introduce kubectl --kubeconfig=C:UsersAdministratorDownloadskubeconfig-aws-cluster.yml get nodeskuve nechokwadi chekuti node dzese dziri muchimiro gadzirira.

Zvino isu tinofanirwa kuendesa diki application mune ino cluster. Ngatiitei kutumirwa kuviri - kofi uye tii - nenzira yebasa kofi-svc uye tii-svc, imwe neimwe inotangisa mifananidzo yakasiyana - nginxdemos/hello uye nginxdemos/hello:plain-text. Izvi zvinoitwa sezvinotevera.

Through the PowerShell enda kunorodha uye tsvaga faira cafe-services.yaml.

Nekuda kwedzimwe shanduko muAPI, isu tichafanirwa kuigadzirisa.

Pod Security Policies inogoneswa nekusarudzika. Kuti umhanye maapplication neropafadzo, unofanirwa kubatanidza account yako.

Gadzira chinosunga: kubectl --kubeconfig=kubeconfig-aws-cluster.yml create clusterrolebinding privileged-cluster-role-binding --clusterrole=vmware-system-tmc-psp-privileged --group=system:authenticated
Ngatitumire application: kubectl --kubeconfig=kubeconfig-aws-cluster.yml apply -f cafe-services.yaml
Tinotarisa: kubectl --kubeconfig=kubeconfig-aws-cluster.yml get pods

Module 2 yapera, iwe wakanaka uye unoshamisa! Isu tinokurudzira kupedzisa mamodule asara, kusanganisira manejimendi manejimendi uye macheki ekuteerera, uri wega.

Kana iwe uchida kupedzisa lab iyi yakazara, unogona kuiwana pano mubhuku. Uye isu tichaenda kuchikamu chekupedzisira chechinyorwa. Ngatitaurei pamusoro pezvatakakwanisa kuona, tora mhedziso dzekutanga dzakakwana uye titaure zvakadzama kuti Tanzu Mission Control chii maererano nemafambiro chaiwo ebhizinesi.

Maonero nemhedziso

Ehe, kuchiri kumberi kutaura nezvezvinhu zvinoshanda zvekushanda naTanzu. Iko hakuna zvakawanda zvekushandisa zvekuzvidzidzira wega, uye nhasi hazvigoneke kuendesa bhenji rekuyedza "poke" chigadzirwa chitsva kubva kumativi ese. Nekudaro, kunyangwe kubva kune iripo data, dzimwe mhedziso dzinogona kutorwa.

Mabhenefiti eTanzu Mission Control

Sistimu yacho yakazova inonakidza chaizvo. Ndinoda kukurumidza kuratidza zvishoma zviri nyore uye zvinobatsira zvinonaka:

• Iwe unogona kugadzira masumbu kuburikidza newebhu pani uye kuburikidza nekoni, iyo vanogadzira vanozoda chaizvo.
• RBAC manejimendi kuburikidza nenzvimbo dzebasa inoitwa mushandisi interface. Izvo hazvishande murabhoritari zvakadaro, asi muchirevo chinhu chikuru.
• Template-based centralized privilege management
• Kusvika kwakazara kunzvimbo dzemazita.
• YAML mupepeti.
• Kugadzira network policy.
• Cluster health monitoring.
• Kugona kuchengetedza uye kudzoreredza kuburikidza neiyo console.
• Tonga quotas uye zviwanikwa nekuona kwekushandiswa chaiko.
• Kuvhura otomatiki kwecluster inspection.

Zvekare, zvinhu zvakawanda zviri kugadzirwa parizvino, saka kwave kutanga kutaura zvizere nezve zvakanakira nekuipira zvemamwe maturusi. Nenzira, Tanzu MC, zvichienderana nekuratidzwa, inogona kusimudzira chikwata pane nhunzi uye, kazhinji, inopa hupenyu hwose hwechikwata kune vakawanda vanopa kamwechete.

Heano mimwe mienzaniso "yepamusoro-soro".

Kuboka remumwe munhu rine charter yaro

Ngatitii une timu yebudiriro ine mabasa akajeka uye mabasa. Wese munhu akabatikana nebhizinesi rake uye haafanire kupindira netsaona basa revamwe vake. Kana kuti timu ine nyanzvi imwe kana vanopfuura vane ruzivo vausingade kupa kodzero nerusununguko rusina basa. Ngatifungeiwo kuti une Kubernetes kubva kune vatatu vanopa kamwechete. Saizvozvo, kuti udzikise kodzero uye uuye nadzo kune imwechete denominator, iwe uchafanirwa kuenda kune yega yega control panel one by one uye kunyoresa zvese nemaoko. Bvumiranai, kwete mutambo unobudirira zvikuru. Uye iyo yakawanda zviwanikwa zvauinazvo, zvinotonyanya kunetesa maitiro. Tanzu Mission Control ichakubvumidza kuti utore kutsanangurwa kwemabasa kubva pa "hwindo rimwe". Semaonero edu, iri ibasa rakanakira: hapana anotyora chero chinhu kana ukakanganwa kutsanangura kodzero dzinodiwa pane imwe nzvimbo.

Nenzira, vatinoshanda navo kubva kuMTS mune yavo blog enzanisa Kubernetes kubva kumutengesi uye yakavhurika sosi. Kana iwe wagara uchida kuziva kuti misiyano ndeipi uye chii chekutarisa pakusarudza, kugamuchirwa.

Compact work nematanda

Mumwe muenzaniso kubva muupenyu chaihwo kushanda nematanda. Ngatitorei kuti timu inewo anoedza. Rimwe zuva rakanaka anouya kune vanogadzira uye anozivisa kuti: "bug rawanikwa muchikumbiro, tichaigadzirisa nekukasira." Zviri muropa kuti chinhu chekutanga mugadziri achada kujairana nacho matanda. Kuvatumira semafaira kuburikidza neemail kana Telegraph itsika dzakaipa uye zana rapfuura. Mission Control inopa imwe nzira: iwe unogona kuseta akakosha kodzero kumugadziri kuti vagone kuverenga matanda mune yakatarwa zita nzvimbo. Muchiitiko ichi, muongorori anongoda kuti: "kune zvipembenene mune zvakati uye zvekushandisa, munzvimbo yakadai uye yakadai, mune yakadaro uye nzvimbo yezita," uye mugadziri anogona kuvhura matanda nyore nyore uye okwanisa kugarisa. dambudziko. Uye nekuda kwekodzero dzakaganhurirwa, haugone kuzvigadzirisa ipapo kana kugona kwako kusingazvibvumire.

Cluster ine hutano ine hutano application.

Chimwe chinhu chikuru cheTanzu MC ndeye cluster health tracking. Tichitarisa nekutanga zvinhu, iyo sisitimu inobvumidza iwe kuti uone mamwe manhamba. Parizvino, zvakaoma kutaura kuti ruzivo urwu ruchave rwakadzama sei: kusvika zvino zvese zvinotaridzika zvine mwero uye zviri nyore. Iko kutariswa kweCPU uye RAM mutoro, mamiriro ezvese zvikamu anoratidzwa. Asi kunyangwe mune yakadaro spartan fomu ine ruzivo rwakanyanya uye runoshanda.

Migumisiro

Ehe, murabhoritari ratidziro yeMission Control, mumamiriro anoita seasina kuchena, kune mamwe madhiri. Iwe pachako uchazviona kana ukafunga kuenda nebasa. Zvimwe zvinhu hazvina kuitwa intuitively zvakakwana - kunyangwe maneja ane ruzivo anozofanira kuverenga bhuku rekushandisa kuti anzwisise interface uye kugona kwayo.

Zvisinei, nekupa kuoma kwechigadzirwa, kukosha kwayo uye basa rachichaita mumusika, zvakava zvakanaka. Zvinonzwa sekunge vagadziri vakaedza kuvandudza mafambiro emushandisi. Ita kuti chinhu chega chega chekutonga chishande uye chinonzwisisika sezvinobvira.

Chasara kuyedza Tanzu pabhenji rekuyedza kunyatsonzwisisa zvese zvayakanakira, zvakaipa uye zvitsva. Kana mukana wakadaro uchinge wauya, isu tichagovana nevaverengi veHabr rondedzero yakadzama yekushanda nechigadzirwa.

Source: www.habr.com