{"id":80076,"date":"2020-05-03T01:42:34","date_gmt":"2020-05-02T23:42:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/proektirovanie-kubernetes-klasterov-skolko-ih-dolzhno-byt"},"modified":"2020-05-03T01:42:34","modified_gmt":"2020-05-02T23:42:34","slug":"proektirovanie-kubernetes-klasterov-skolko-ih-dolzhno-byt","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/proektirovanie-kubernetes-klasterov-skolko-ih-dolzhno-byt","title":{"rendered":"Projektimi i klastereve Kubernetes: sa duhet t\u00eb jen\u00eb ato?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><i><b>Sh\u00ebn. p\u00ebrkth.<\/b>: ky ky ky ky <noindex><a rel=\"nofollow\" href=\"https:\/\/learnk8s.io\/\">learnk8s<\/a><\/noindex> \u2014 p\u00ebrgjigje p\u00ebr nj\u00eb pyetje t\u00eb njohur n\u00eb projektimin e infrastruktur\u00ebs mbi baz\u00ebn e Kubernetes. Shpresojm\u00eb q\u00eb p\u00ebrshkrimet e detajuara t\u00eb p\u00ebrpar\u00ebsive dhe disavantazheve t\u00eb \u00e7do opsioni do t\u00eb ndihmojn\u00eb t\u00eb b\u00ebni nj\u00eb zgjedhje optimale p\u00ebr projektin tuaj.<\/i><\/p>\n<p><img decoding=\"async\" alt=\"Projektimi i klastereve Kubernetes: sa duhet t\u00eb jen\u00eb ato?\" src=\"\/wp-content\/uploads\/2020\/05\/d3cc3b7e686e39032b1f02f3e8b6c46c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>TL;DR<\/b>: nj\u00eb set i nj\u00ebjt\u00eb ngarkesash pune mund t\u00eb ekzekutohet n\u00eb disa klastra t\u00eb m\u00ebdhenj (n\u00eb \u00e7do klaster do t\u00eb ket\u00eb nj\u00eb num\u00ebr t\u00eb madh ngarkesash) ose n\u00eb shum\u00eb t\u00eb vogla (me nj\u00eb num\u00ebr t\u00eb vog\u00ebl ngarkesash n\u00eb \u00e7do klaster).<\/p>\n<p>N\u00eb vijim \u00ebsht\u00eb nj\u00eb tabel\u00eb q\u00eb vler\u00ebson p\u00ebrpar\u00ebsit\u00eb dhe disavantazhet e \u00e7do qasjeje:<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p><img decoding=\"async\" alt=\"Projektimi i klastereve Kubernetes: sa duhet t\u00eb jen\u00eb ato?\" src=\"\/wp-content\/uploads\/2020\/05\/ab5b5fefc97c3befddbaeb0791f8a90d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKur p\u00ebrdorni Kubernetes si nj\u00eb platform\u00eb p\u00ebr eksploatimin e aplikacioneve, shpesh lindin disa pyetje themelore rreth holl\u00ebsive t\u00eb konfigurimit t\u00eb klaster\u00ebve:<\/p>\n<ul>\n<li> <i>Sa klaster\u00eb duhet p\u00ebrdorur?<\/i><\/li>\n<li> <i>Sa t\u00eb m\u00ebdhenj duhet t\u00eb jen\u00eb?<\/i><\/li>\n<li> <i>\u00c7far\u00eb duhet t\u00eb p\u00ebrmbaj\u00eb \u00e7do klaster?<\/i><\/li>\n<\/ul>\n<p>\nN\u00eb k\u00ebt\u00eb artikull do t\u00eb p\u00ebrpiqem t\u00eb p\u00ebrgjigjem p\u00ebr gjith\u00eb k\u00ebto pyetje, duke analizuar p\u00ebrpar\u00ebsit\u00eb dhe disavantazhet e \u00e7do qasjeje.<\/p>\n<h2>Formulimi i pyetjes<\/h2>\n<p>\nSi krijues i softuerit, ju ndoshta jeni duke zhvilluar dhe eksploatuar shum\u00eb aplikacione n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb.<\/p>\n<p>P\u00ebr m\u00eb tep\u00ebr, shum\u00eb instance t\u00eb k\u00ebtyre aplikacioneve sigurisht q\u00eb ekzekutohen n\u00eb mjedise t\u00eb ndryshme \u2014 p\u00ebr shembull, k\u00ebto mund t\u00eb jen\u00eb <i>dev<\/i>, <i>test<\/i> dhe <i>prod<\/i>.<\/p>\n<p>Si rezultat, krijohet nj\u00eb matric\u00eb e t\u00ebr\u00eb e aplikacioneve dhe mjediseve:<\/p>\n<p><img decoding=\"async\" alt=\"Projektimi i klastereve Kubernetes: sa duhet t\u00eb jen\u00eb ato?\" src=\"\/wp-content\/uploads\/2020\/05\/f2a811fa82e1e433463ba25d29f837e6.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Aplikacione dhe mjedise<\/i><\/p>\n<p>N\u00eb shembullin e m\u00ebsip\u00ebrm jan\u00eb paraqitur 3 aplikacione dhe 3 mjedise, q\u00eb n\u00eb fund ofrojn\u00eb 9 variante t\u00eb mundshme.<\/p>\n<p>\u00c7do instance aplikacioni p\u00ebrb\u00ebn nj\u00eb nj\u00ebsi deploy-i t\u00eb vet\u00eb-mjaftueshme, me t\u00eb cil\u00ebn mund t\u00eb punoni n\u00eb m\u00ebnyr\u00eb t\u00eb pavarur nga t\u00eb tjerat.<\/p>\n<p><i>Vini re se <b>instance aplikacioni<\/b> mund t\u00eb p\u00ebrb\u00ebhet nga shum\u00eb <b>e komponent\u00ebve<\/b>, si p\u00ebr shembull frontend, backend, baza e t\u00eb dh\u00ebnave etj. N\u00eb rastin e nj\u00eb aplikacioni mikros\u00ebr\u00ebvis, instance do t\u00eb p\u00ebrfshij\u00eb t\u00eb gjitha mikros\u00ebrviset.<\/i><\/p>\n<p>Si pasoj\u00eb, p\u00ebrdoruesit e Kubernetes kan\u00eb disa pyetje:<\/p>\n<ul>\n<li> A \u00ebsht\u00eb e duhshme t\u00eb vendosen t\u00eb gjitha instance-t e aplikacionit n\u00eb nj\u00eb klaster?<\/li>\n<li> A duhet t\u00eb krijohet nj\u00eb klaster i ve\u00e7ant\u00eb p\u00ebr \u00e7do instance aplikacioni?<\/li>\n<li> Ose, ndoshta, duhet t\u00eb p\u00ebrdoret nj\u00eb kombinim i qasjeve t\u00eb sip\u00ebrp\u00ebrmendura?<\/li>\n<\/ul>\n<p>\nT\u00eb gjitha k\u00ebto variante jan\u00eb plot\u00ebsisht t\u00eb mundshme, pasi Kubernetes \u00ebsht\u00eb nj\u00eb sistem fleksib\u00ebl q\u00eb nuk e kufizon p\u00ebrdoruesin n\u00eb mund\u00ebsi.<\/p>\n<p>Ja disa nga mund\u00ebsit\u00eb e mundshme:<\/p>\n<ul>\n<li> nj\u00eb klaster i madh i p\u00ebrbashk\u00ebt;<\/li>\n<li> nj\u00eb num\u00ebr i madh klasteresh t\u00eb specializuara;<\/li>\n<li> nj\u00eb klaster p\u00ebr \u00e7do aplikacion;<\/li>\n<li> nj\u00eb klaster p\u00ebr \u00e7do ambient.<\/li>\n<\/ul>\n<p>\nSi\u00e7 tregohet m\u00eb posht\u00eb, dy qasjet e para jan\u00eb n\u00eb pole t\u00eb kund\u00ebrta t\u00eb spektrit t\u00eb mund\u00ebsive:<\/p>\n<p><img decoding=\"async\" alt=\"Projektimi i klastereve Kubernetes: sa duhet t\u00eb jen\u00eb ato?\" src=\"\/wp-content\/uploads\/2020\/05\/99b8fd0d1e4173705e7996cf8ccb6eec.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Nga disa klastere t\u00eb m\u00ebdha (majtas) deri n\u00eb shum\u00eb t\u00eb vogla (djathtas)<\/i><\/p>\n<p><i>N\u00eb p\u00ebrgjith\u00ebsi, nj\u00eb klaster konsiderohet \"m\u00eb i madh\" se tjetri n\u00ebse ka nj\u00eb shum\u00ebl\u00ebvizje m\u00eb t\u00eb madhe t\u00eb nyjeve dhe pod\u00ebve. P\u00ebr shembull, nj\u00eb klaster me 10 nyje dhe 100 pod\u00eb \u00ebsht\u00eb m\u00eb i madh se nj\u00eb klaster me 1 nyje dhe 10 pod\u00eb.<\/i><\/p>\n<p>Mir\u00eb, le t\u00eb fillojm\u00eb!<\/p>\n<h2>1. Nj\u00eb klaster i madh i p\u00ebrbashk\u00ebt<\/h2>\n<p>\nOpsioni i par\u00eb \u00ebsht\u00eb t\u00eb vendosni t\u00eb gjitha ngarkesat e pun\u00ebs n\u00eb nj\u00eb klaster:<\/p>\n<p><img decoding=\"async\" alt=\"Projektimi i klastereve Kubernetes: sa duhet t\u00eb jen\u00eb ato?\" src=\"\/wp-content\/uploads\/2020\/05\/283fc3c3f5ccb40a157ccff600628114.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Nj\u00eb klaster i madh<\/i><\/p>\n<p>N\u00eb k\u00ebt\u00eb qasje, klasteri p\u00ebrdoret si nj\u00eb <b>platform\u00eb infrastrukturore<\/b> \u2014 gjith\u00e7ka q\u00eb ju nevojitet thjesht e zhvilloni n\u00eb klasterin ekzistues Kubernetes.<\/p>\n<p><i><noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/overview\/working-with-objects\/namespaces\/\">Namespace'\u00ebt<\/a><\/noindex> Kubernetes lejon ndarjen logjike t\u00eb pjes\u00ebve t\u00eb klasterit nga nj\u00ebra-tjetra, k\u00ebshtu q\u00eb p\u00ebr \u00e7do instanc\u00eb t\u00eb aplikacionit mund t\u00eb p\u00ebrdorni hap\u00ebsir\u00ebn tuaj t\u00eb emrave.<\/i><\/p>\n<p><i>Le t\u00eb shqyrtojm\u00eb p\u00ebrpar\u00ebsit\u00eb dhe disavantazhet e k\u00ebtij qasjes.<\/i><\/p>\n<h3>+ P\u00ebrdorimi efikas i burimeve<\/h3>\n<p>\nN\u00eb rastin e nj\u00eb klasteri t\u00eb vet\u00ebm, do t\u00eb k\u00ebrkohet vet\u00ebm nj\u00eb kopje e t\u00eb gjitha burimeve t\u00eb nevojshme p\u00ebr t\u00eb filluar dhe menaxhuar klasterin Kubernetes.<\/p>\n<p>P\u00ebr shembull, kjo \u00ebsht\u00eb e v\u00ebrtet\u00eb p\u00ebr nodet e masterit. Zakonisht, p\u00ebr \u00e7do klaster Kubernetes ka 3 nod\u00eb master, k\u00ebshtu q\u00eb p\u00ebr nj\u00eb klaster t\u00eb vet\u00ebm, numri i tyre do t\u00eb mbetet i till\u00eb (p\u00ebr krahasim, 10 klastere do t\u00eb k\u00ebrkojn\u00eb 30 nod\u00eb master).<\/p>\n<p>Kjo holl\u00ebsi e m\u00ebsip\u00ebrme i referohet edhe sh\u00ebrbimeve t\u00eb tjera q\u00eb funksionojn\u00eb n\u00eb shkall\u00ebn e klasterit t\u00eb gjith\u00ebp\u00ebrfshir\u00ebs, si\u00e7 jan\u00eb balancuesit e ngarkes\u00ebs, kontrollor\u00ebt Ingress, sistemet e autentikimit, regjistrimit dhe monitorimit.<\/p>\n<p>N\u00eb nj\u00eb klaster t\u00eb vetme, t\u00eb gjitha k\u00ebto sh\u00ebrbime mund t\u00eb p\u00ebrdoren menj\u00ebher\u00eb p\u00ebr t\u00eb gjitha ngarkesat e pun\u00ebs (nuk \u00ebsht\u00eb e nevojshme t\u00eb krijoni kopje t\u00eb tyre, si n\u00eb rastin e disa klastereve).<\/p>\n<h3>+ Kosto m\u00eb e ul\u00ebt<\/h3>\n<p>\nSi pasoj\u00eb e asaj q\u00eb u tha m\u00eb sip\u00ebr, numri m\u00eb i vog\u00ebl i klastereve zakonisht \u00ebsht\u00eb m\u00eb i lir\u00eb, pasi nuk ka shpenzime p\u00ebr burime t\u00eb panevojshme.<\/p>\n<p>Kjo \u00ebsht\u00eb ve\u00e7an\u00ebrisht e v\u00ebrtet\u00eb p\u00ebr nodet e masterit, t\u00eb cilat mund t\u00eb kushtojn\u00eb shum\u00eb pavar\u00ebsisht nga m\u00ebnyra e vendosjes (on-premises ose n\u00eb cloud).<\/p>\n<p>Disa sh\u00ebrbime t\u00eb menaxhuara t\u00eb Kubernetes, si\u00e7 jan\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/cloud.google.com\/kubernetes-engine\">Google Kubernetes Engine (GKE)<\/a><\/noindex> ose <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/aks\/\">Azure Kubernetes Service (AKS)<\/a><\/noindex>, ofrojn\u00eb nj\u00eb shtres\u00eb menaxhuese falas. N\u00eb k\u00ebt\u00eb rast, \u00e7\u00ebshtja e kostove \u00ebsht\u00eb m\u00eb pak e r\u00ebnd\u00ebsishme.<\/p>\n<p>Gjithashtu ekzistojn\u00eb sh\u00ebrbime t\u00eb menaxhuara, q\u00eb ngarkojn\u00eb nj\u00eb tarif\u00eb fikse p\u00ebr funksionimin e \u00e7do klasteri Kubernetes (p\u00ebr shembull, <noindex><a rel=\"nofollow\" href=\"https:\/\/aws.amazon.com\/eks\/\">Sh\u00ebrbimi Elastic Kubernetes i Amazon, EKS<\/a><\/noindex>).<\/p>\n<h3>+ Menaxhim efikas<\/h3>\n<p>\nT\u00eb menaxhosh nj\u00eb klaster \u00ebsht\u00eb m\u00eb e leht\u00eb se t\u00eb menaxhosh disa.<\/p>\n<p>Menaxhimi mund t\u00eb p\u00ebrfshij\u00eb detyra t\u00eb tilla si:<\/p>\n<ul>\n<li> p\u00ebrdit\u00ebsimi i versionit t\u00eb Kubernetes;<\/li>\n<li> konfigurimi i pipeline-it CI\/CD;<\/li>\n<li> instalimi i plugin-it CNI;<\/li>\n<li> konfigurimi i sistemit t\u00eb autentikimit t\u00eb p\u00ebrdoruesve;<\/li>\n<li> instalimi i kontrolluesit t\u00eb aksesit;<\/li>\n<\/ul>\n<p>\ndhe shum\u00eb t\u00eb tjera\u2026<\/p>\n<p>N\u00eb rastin e nj\u00eb klasteri, do t\u00eb merret me t\u00eb gjitha k\u00ebto vet\u00ebm nj\u00eb her\u00eb.<\/p>\n<p>P\u00ebr shum\u00eb klastere, operacionet do t\u00eb duhet t\u00eb p\u00ebrs\u00ebriten shpesh, q\u00eb ndoshta do t\u00eb k\u00ebrkoj\u00eb automatizimin e proceseve dhe mjetet, p\u00ebr t\u00eb siguruar sistematik\u00ebn dhe uniformitetin e procesit.<\/p>\n<p><i>Tani disa fjal\u00eb mbi disavantazhet.<\/i><\/p>\n<h3>\u2212 Pik\u00eb e vetme d\u00ebshtimi<\/h3>\n<p>\nN\u00eb rast d\u00ebshtimi t\u00eb <i>klasterit t\u00eb vet\u00ebm<\/i> ngarkesat e pun\u00ebs do t\u00eb ndalojn\u00eb menj\u00ebher\u00eb <i>t\u00eb gjith\u00eb<\/i> t\u00eb funksionojn\u00eb!<\/p>\n<p>Ekzistojn\u00eb shum\u00eb variante kur di\u00e7ka mund t\u00eb shkoj\u00eb keq:<\/p>\n<ul>\n<li> p\u00ebrdit\u00ebsimi i Kubernetesit shkakton efekte an\u00ebsore t\u00eb papritura;<\/li>\n<li> komponenti i p\u00ebrbashk\u00ebt t\u00eb klasterit (p\u00ebr shembull, plugin-i CNI) fillon t\u00eb funksionoj\u00eb ndryshe nga sa pritej;<\/li>\n<li> nj\u00eb nga komponent\u00ebt e klasterit \u00ebsht\u00eb konfigurimi jo korrekt;<\/li>\n<li> d\u00ebshtimi n\u00eb infrastruktur\u00ebn n\u00ebntok\u00ebsore.<\/li>\n<\/ul>\n<p>\nNj\u00eb incident i till\u00eb mund t\u00eb shkaktoj\u00eb d\u00ebme serioze p\u00ebr t\u00eb gjitha ngarkesat e pun\u00ebs t\u00eb vendosura n\u00eb klasterin e p\u00ebrbashk\u00ebt.<\/p>\n<h3>\u2212 Mungesa e izolimit t\u00eb fort\u00eb<\/h3>\n<p>\nPuna n\u00eb nj\u00eb klaster t\u00eb p\u00ebrbashk\u00ebt do t\u00eb thot\u00eb se aplikacionet ndajn\u00eb burimet harduerike, mund\u00ebsit\u00eb rrjet dhe sistemin operativ n\u00eb nyjat e klasterit.<\/p>\n<p>N\u00eb nj\u00eb sens, dy kontejner\u00eb me dy aplikacione t\u00eb ndryshme q\u00eb punojn\u00eb n\u00eb t\u00eb nj\u00ebjt\u00ebn nyje jan\u00eb si dy procese q\u00eb punojn\u00eb n\u00eb t\u00eb nj\u00ebjt\u00ebn makin\u00eb n\u00ebn nj\u00eb b\u00ebrtham\u00eb t\u00eb nj\u00ebjt\u00eb t\u00eb OS-s\u00eb.<\/p>\n<p><i>Kontejner\u00ebt Linux ofrojn\u00eb nj\u00eb form\u00eb t\u00eb caktuar izolimi, por ajo nuk \u00ebsht\u00eb ashtu si ajo q\u00eb ofrojn\u00eb, p\u00ebr shembull, makinat virtuale. N\u00eb esenc\u00eb, nj\u00eb proces n\u00eb nj\u00eb kontejner \u00ebsht\u00eb i nj\u00ebjti proces i ekzekutuar n\u00eb sistemin operativ t\u00eb hostit.<\/i><\/p>\n<p>Kjo mund t\u00eb b\u00ebhet problem nga pik\u00ebpamja e siguris\u00eb: nj\u00eb organizim i till\u00eb teorikisht lejon aplikacionet e pap\u00ebrlyera t\u00eb ndjehen midis tyre (n\u00eb m\u00ebnyr\u00eb t\u00eb q\u00ebllimshme ose rast\u00ebsore).<\/p>\n<p>P\u00ebrve\u00e7 k\u00ebsaj, gjith\u00eb ngarkesat e pun\u00ebs n\u00eb klasterin Kubernetes ndajn\u00eb disa sh\u00ebrbime t\u00eb p\u00ebrbashk\u00ebta klasteri, si\u00e7 jan\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/services-networking\/dns-pod-service\/\">DNS<\/a><\/noindex> \u2014 kjo i lejon aplikacioneve t\u00eb gjejn\u00eb Sh\u00ebrbime t\u00eb aplikacioneve t\u00eb tjera n\u00eb klaster.<\/p>\n<p><i>T\u00eb gjitha pik\u00ebt e lartp\u00ebrmendura mund t\u00eb ken\u00eb kuptime t\u00eb ndryshme n\u00eb var\u00ebsi t\u00eb k\u00ebrkesave q\u00eb i n\u00ebnshtrohen siguris\u00eb s\u00eb aplikacioneve.<\/i><\/p>\n<p>Kubernetes ofron mjete t\u00eb ndryshme p\u00ebr t\u00eb parandaluar problemet n\u00eb sistemin e siguris\u00eb, si\u00e7 jan\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/policy\/pod-security-policy\/\">Politikat e Siguris\u00eb s\u00eb Pod-it<\/a><\/noindex> dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/services-networking\/network-policies\/\">Politikat e Rrjetit<\/a><\/noindex>. Megjithat\u00eb, p\u00ebr t'i konfiguruar ato si\u00e7 duhet k\u00ebrkohet nj\u00eb p\u00ebrvoj\u00eb e caktuar, p\u00ebrve\u00e7 k\u00ebsaj, ato nuk jan\u00eb n\u00eb gjendje t\u00eb mbyllin t\u00eb gjitha dob\u00ebsit\u00eb n\u00eb siguri.<\/p>\n<p>\u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb kujtojm\u00eb gjithmon\u00eb se Kubernetes fillimisht \u00ebsht\u00eb dizajnuar p\u00ebr <i>ndarjen<\/i>, dhe jo p\u00ebr <i>izolimin dhe sigurin\u00eb<\/i>.<\/p>\n<h3>\u2212 Mungesa e multi-tenancy t\u00eb ashp\u00ebr<\/h3>\n<p>\nDuke marr\u00eb parasysh shumic\u00ebn e burimeve t\u00eb p\u00ebrbashk\u00ebta n\u00eb klasterin Kubernetes, ekzistojn\u00eb shum\u00eb m\u00ebnyra n\u00eb t\u00eb cilat aplikacionet e ndryshme mund t\u00eb \"ngacmojn\u00eb\" nj\u00ebra-tjetr\u00ebn.<\/p>\n<p>P\u00ebr shembull, nj\u00eb aplikacion mund t\u00eb monopolizoj\u00eb nj\u00eb burim t\u00eb p\u00ebrbashk\u00ebt (si\u00e7 \u00ebsht\u00eb procesori ose memoria) dhe t'i heq\u00eb qasje burimeve t\u00eb tjera q\u00eb punojn\u00eb n\u00eb t\u00eb nj\u00ebjtin nod.<\/p>\n<p>Kubernetes siguron mekanizma t\u00eb ndrysh\u00ebm t\u00eb kontrollit p\u00ebr k\u00ebt\u00eb lloj sjelljeje, si\u00e7 jan\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/configuration\/manage-compute-resources-container\/\">k\u00ebrkesat p\u00ebr burime dhe kufizimet<\/a><\/noindex> <i>(shih gjithashtu artikullin \u201c<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/489668\/\"> Limitet e CPU dhe throttling agresiv n\u00eb Kubernetes <\/a><\/noindex>\u201d \u2014 sh\u00ebn. p\u00ebrkth.)<\/i>, <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/policy\/resource-quotas\/\">Kufijt\u00eb e Burimeve<\/a><\/noindex> dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/policy\/limit-range\/\">LimitRanges<\/a><\/noindex>. Megjithat\u00eb, ashtu si n\u00eb rastin e siguris\u00eb, konfigurimi i tyre \u00ebsht\u00eb n\u00eb t\u00eb v\u00ebrtet\u00eb kompleks dhe ato nuk jan\u00eb n\u00eb gjendje t\u00eb parandalojn\u00eb t\u00eb gjitha efektet an\u00ebsore t\u00eb papritura.<\/p>\n<h3>\u2212 Numri i madh i p\u00ebrdoruesve<\/h3>\n<p>\nN\u00eb rastin e nj\u00eb klasteri t\u00eb vet\u00ebm, duhet t\u00eb hapet akses p\u00ebr shum\u00eb njer\u00ebz. Dhe sa m\u00eb i madh t\u00eb jet\u00eb numri i tyre, aq m\u00eb i lart\u00eb \u00ebsht\u00eb rreziku q\u00eb ata t\u00eb \"thyejn\u00eb\" di\u00e7ka.<\/p>\n<p>Brenda klasterit mund t\u00eb kontrolloni se kush dhe \u00e7far\u00eb mund t\u00eb b\u00ebj\u00eb p\u00ebrmes <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/reference\/access-authn-authz\/rbac\/\">menaxhimit t\u00eb aksesit t\u00eb bazuar n\u00eb role (RBAC)<\/a><\/noindex> <i>(shih artikullin \u201c<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/470503\/\"> P\u00ebrdoruesit dhe autorizimi RBAC n\u00eb Kubernetes <\/a><\/noindex>\u201d \u2014 sh\u00ebn. p\u00ebrkth.)<\/i>. Megjithat\u00eb, kjo nuk do ta parandaloj\u00eb p\u00ebrdoruesit t\u00eb \"thyejn\u00eb\" di\u00e7ka brenda zon\u00ebs s\u00eb tyre t\u00eb p\u00ebrgjegj\u00ebsis\u00eb.<\/p>\n<h3>\u2212 Klasteret nuk mund t\u00eb rriten deri n\u00eb pafund\u00ebsi<\/h3>\n<p>\nNj\u00eb klaster q\u00eb p\u00ebrdoret p\u00ebr gjith\u00eb ngarkesat e pun\u00ebs, do t\u00eb jet\u00eb ndoshta mjaft i madh (p\u00ebr numrin e nyjeve dhe pod\u00ebve).<\/p>\n<p>Por k\u00ebtu lind nj\u00eb problem tjet\u00ebr: klasteret n\u00eb Kubernetes nuk mund t\u00eb rriten deri n\u00eb pafund\u00ebsi.<\/p>\n<p>Ka nj\u00eb kufi teorik mbi madh\u00ebsin\u00eb e klasterit. N\u00eb Kubernetes, ai \u00ebsht\u00eb rreth <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/setup\/best-practices\/cluster-large\/\">5000 nyje, 150 mij\u00eb pod\u00eb dhe 300 mij\u00eb kontejner\u00eb<\/a><\/noindex>.<\/p>\n<p>Megjithat\u00eb, n\u00eb jet\u00eb reale problemet mund t\u00eb fillojn\u00eb shum\u00eb m\u00eb her\u00ebt \u2014 p\u00ebr shembull, vet\u00ebm me <noindex><a rel=\"nofollow\" href=\"https:\/\/events19.lfasiallc.com\/wp-content\/uploads\/2017\/11\/BoF_-Not-One-Size-Fits-All-How-to-Size-Kubernetes-Clusters_Guang-Ya-Liu-_-Sahdev-Zala.pdf\">500 node<\/a><\/noindex>.<\/p>\n<p>\u00c7\u00ebshtja \u00ebsht\u00eb se klasterat e m\u00ebdhenj ushtrojn\u00eb nj\u00eb ngarkes\u00eb t\u00eb lart\u00eb n\u00eb shtres\u00ebn menaxhuese t\u00eb Kubernetes. Me fjal\u00eb t\u00eb tjera, p\u00ebr t\u00eb mbajtur klasterin n\u00eb gjendje pune dhe p\u00ebr t\u00eb p\u00ebrdorur burimet efektivisht, nevojitet konfigurim i kujdessh\u00ebm.<\/p>\n<p><i>Kjo \u00e7\u00ebshtje shqyrtohet n\u00eb artikullin p\u00ebrkat\u00ebs n\u00eb blogun origjinal me titullin \"<noindex><a rel=\"nofollow\" href=\"https:\/\/learnk8s.io\/kubernetes-node-size\">Architecting Kubernetes clusters \u2014 choosing a worker node size<\/a><\/noindex>\u00bb.<\/i><\/p>\n<p><i>Por le t\u00eb shqyrtojm\u00eb qasjen e kund\u00ebrt: shum\u00eb klastera t\u00eb vegj\u00ebl.<\/i><\/p>\n<h2>2. Shum\u00eb klastera t\u00eb vegj\u00ebl dhe t\u00eb specializuar<\/h2>\n<p>\nMe k\u00ebt\u00eb qasje, p\u00ebrdorni nj\u00eb klaster t\u00eb ve\u00e7ant\u00eb p\u00ebr \u00e7do element q\u00eb \u00ebsht\u00eb n\u00eb zhvillim:<\/p>\n<p><img decoding=\"async\" alt=\"Projektimi i klastereve Kubernetes: sa duhet t\u00eb jen\u00eb ato?\" src=\"\/wp-content\/uploads\/2020\/05\/2320f62d945944f2e26f07252e9b8440.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Shum\u00eb klastera t\u00eb vegj\u00ebl<\/i><\/p>\n<p>P\u00ebr q\u00ebllimet e k\u00ebtij artikulli, elementin q\u00eb \u00ebsht\u00eb n\u00eb zhvillim <i>e kuptojm\u00eb si nj\u00eb instanc\u00eb aplikacioni \u2014 p\u00ebr shembull, versionin dev t\u00eb nj\u00eb aplikacioni t\u00eb ve\u00e7ant\u00eb.<\/i> N\u00eb k\u00ebt\u00eb strategji, Kubernetes p\u00ebrdoret si nj\u00eb<\/p>\n<p>mjedis ekzekutimi <b>p\u00ebr instancat e ve\u00e7anta t\u00eb aplikacionit.<\/b> + Rreziku i kufizuar<\/p>\n<p><i>Le t\u00eb shqyrtojm\u00eb p\u00ebrpar\u00ebsit\u00eb dhe disavantazhet e k\u00ebtij qasjes.<\/i><\/p>\n<h3>Kur ndodh nj\u00eb \"defekt\" n\u00eb klaster, pasojat negative kufizohen vet\u00ebm n\u00eb ato ngarkesa pune q\u00eb ishin t\u00eb zhvilluara n\u00eb k\u00ebt\u00eb klaster. T\u00eb gjitha ngarkesat e tjera mbeten t\u00eb paprekura.<\/h3>\n<p>\nN\u00eb rast t\u00eb \"prishjes\" s\u00eb klasterit, pasoja negative kufizohen vet\u00ebm n\u00eb ato ngarkesa pune q\u00eb ishin vendosur n\u00eb k\u00ebt\u00eb klaster. T\u00eb gjitha ngarkesat e tjera mbeten t\u00eb paprekura.<\/p>\n<h3>Ngarkesat e pun\u00ebs t\u00eb vendosura n\u00eb klastera individuale nuk ndajn\u00eb burime t\u00eb p\u00ebrbashk\u00ebta, si\u00e7 jan\u00eb procesori, memoria, sistemi operativ, rrjeti ose sh\u00ebrbime t\u00eb tjera.<\/h3>\n<p>\nSi rezultat, ne marrim nj\u00eb izolim t\u00eb fort\u00eb midis aplikacioneve t\u00eb pa lidhura, q\u00eb mund t\u00eb ket\u00eb nj\u00eb ndikim pozitiv n\u00eb sigurin\u00eb e tyre.<\/p>\n<p>+ Numri i vog\u00ebl i p\u00ebrdoruesve<\/p>\n<h3>Duke marr\u00eb parasysh se n\u00eb \u00e7do klaster ka vet\u00ebm nj\u00eb grup t\u00eb kufizuar ngarkesash pune, numri i p\u00ebrdoruesve me qasje n\u00eb t\u00eb reduktohet.<\/h3>\n<p>\nSa m\u00eb pak njer\u00ebz t\u00eb ken\u00eb qasje n\u00eb klaster, aq m\u00eb i ul\u00ebt \u00ebsht\u00eb rreziku q\u00eb di\u00e7ka t\u00eb \"prishet\".<\/p>\n<p>Tani le t\u00eb shohim disavantazhet.<\/p>\n<p><i>\u2212 P\u00ebrdorimi jo efikas i burimeve<\/i><\/p>\n<h3>Si\u00e7 u p\u00ebrmend m\u00eb par\u00eb, \u00e7do klaster Kubernetes k\u00ebrkon nj\u00eb grup t\u00eb caktuar burimesh menaxhimi: node master, komponent\u00eb t\u00eb shtres\u00ebs kontrolluese, zgjidhje p\u00ebr monitorim dhe regjistrim.<\/h3>\n<p>\nN\u00eb rastin e nj\u00eb numri t\u00eb madh klasterash t\u00eb vegj\u00ebl, duhet t\u00eb alokoni nj\u00eb p\u00ebrqindje m\u00eb t\u00eb madhe t\u00eb burimeve p\u00ebr menaxhim.<\/p>\n<p>\u2212 Kostoja<\/p>\n<h3>P\u00ebrdorimi jo efikas i burimeve automatikisht sjell kosto t\u00eb larta.<\/h3>\n<p>\nP\u00ebrdorimi joefektiv i burimeve automatikisht sjell kostot t\u00eb larta.<\/p>\n<p>P\u00ebr shembull, prania e 30 master node-\u00ebve n\u00eb vend t\u00eb tre p\u00ebr t\u00eb nj\u00ebjt\u00ebn kapaciteti p\u00ebrpunimi do t\u00eb ndikoj\u00eb patjet\u00ebr n\u00eb shpenzime.<\/p>\n<h3>\u2212 V\u00ebshtir\u00ebsit\u00eb e administrat\u00ebs<\/h3>\n<p>\nT\u00eb menaxhosh shum\u00eb klaster\u00eb Kubernetes \u00ebsht\u00eb shum\u00eb m\u00eb e v\u00ebshtir\u00eb se sa t\u00eb punosh me nj\u00eb t\u00eb vet\u00ebm.<\/p>\n<p>P\u00ebr shembull, do t\u00eb duhet t\u00eb konfigurosh autentikimin dhe autorizimin p\u00ebr secilin klaster. P\u00ebrdit\u00ebsimi i versionit t\u00eb Kubernetes gjithashtu do t\u00eb duhet t\u00eb kryhet disa her\u00eb.<\/p>\n<p>Ndoshta do t\u00eb duhet t\u00eb aplikosh automatizimin p\u00ebr t\u00eb rritur efikasitetin e t\u00eb gjitha k\u00ebtyre detyrave.<\/p>\n<p><i>Tani le t\u00eb shqyrtojm\u00eb skenar\u00ebt m\u00eb pak ekstrem\u00eb.<\/i><\/p>\n<h2>3. Nj\u00eb klaster p\u00ebr secil\u00ebn aplikacion<\/h2>\n<p>\nBrenda k\u00ebtij qasjeje, krijoni nj\u00eb klaster t\u00eb ve\u00e7ant\u00eb p\u00ebr t\u00eb gjitha instancat e aplikacionit konkret:<\/p>\n<p><img decoding=\"async\" alt=\"Projektimi i klastereve Kubernetes: sa duhet t\u00eb jen\u00eb ato?\" src=\"\/wp-content\/uploads\/2020\/05\/238ee74d4e4dc42b7daeadc1ce484905.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Klaster p\u00ebr aplikacion<\/i><\/p>\n<p>Ky rrug\u00eb mund t\u00eb merret si nj\u00eb p\u00ebrmbledhje e parimit \"<b>klaster i ve\u00e7ant\u00eb p\u00ebr ekipin<\/b>\", pasi zakonisht nj\u00eb ekip inxhinier\u00ebsh merret me zhvillimin e nj\u00eb ose m\u00eb shum\u00eb aplikacioneve.<\/p>\n<p><i>Le t\u00eb shqyrtojm\u00eb p\u00ebrpar\u00ebsit\u00eb dhe disavantazhet e k\u00ebtij qasjes.<\/i><\/p>\n<h3>+ Klasteri mund t\u00eb p\u00ebrshtatet p\u00ebr aplikacionin<\/h3>\n<p>\nN\u00ebse aplikacioni ka nevoja t\u00eb ve\u00e7anta, ato mund t\u00eb realizohen n\u00eb klaster, pa prekur klaster\u00ebt e tjer\u00eb.<\/p>\n<p>K\u00ebto nevoja mund t\u00eb p\u00ebrfshijn\u00eb punonj\u00ebs me GPU, disa plugin-e CNI, mesh sh\u00ebrbimi ose ndonj\u00eb sh\u00ebrbim tjet\u00ebr.<\/p>\n<p>\u00c7do klaster mund t\u00eb p\u00ebrshtatet p\u00ebr aplikacionin q\u00eb punon n\u00eb t\u00eb, n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb p\u00ebrmbaj\u00eb vet\u00ebm at\u00eb q\u00eb \u00ebsht\u00eb e nevojshme.<\/p>\n<h3>\u2212 Mjedise t\u00eb ndryshme n\u00eb nj\u00eb klaster<\/h3>\n<p>\nNj\u00eb disavantazh i k\u00ebtij qasjeje \u00ebsht\u00eb se instancat e aplikacioneve nga mjedise t\u00eb ndryshme bashk\u00ebjetojn\u00eb n\u00eb nj\u00eb klaster.<\/p>\n<p>P\u00ebr shembull, versioni prodhues i aplikacionit funksionon n\u00eb t\u00eb nj\u00ebjtin klaster si versioni dev. Kjo do t\u00eb thot\u00eb gjithashtu se zhvilluesit kryejn\u00eb aktivitetin e tyre n\u00eb t\u00eb nj\u00ebjtin klaster ku eksploatohet versioni prodhues i aplikacionit.<\/p>\n<p>N\u00ebse p\u00ebr shkak t\u00eb veprimeve t\u00eb zhvilluesve ose gabimeve t\u00eb versionit dev ndodh nj\u00eb \u00e7rregullim n\u00eb klaster, potencialisht mund t\u00eb d\u00ebmtosh edhe versionin prodhues \u2014 nj\u00eb disavantazh t\u00eb madh t\u00eb k\u00ebtij qasjeje.<\/p>\n<p><i>Dhe, p\u00ebrfundimisht, skenari i fundit n\u00eb list\u00ebn ton\u00eb.<\/i><\/p>\n<h2>4. Nj\u00eb klaster p\u00ebr \u00e7do mjedis<\/h2>\n<p>\nKy skenar parashikon ndarjen e nj\u00eb klasteri t\u00eb ve\u00e7ant\u00eb p\u00ebr \u00e7do mjedis:<\/p>\n<p><img decoding=\"async\" alt=\"Projektimi i klastereve Kubernetes: sa duhet t\u00eb jen\u00eb ato?\" src=\"\/wp-content\/uploads\/2020\/05\/157da599edf178832b1b15459786fbc8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Nj\u00eb klaster p\u00ebr mjedis<\/i><\/p>\n<p>P\u00ebr shembull, mund t\u00eb keni klaster\u00eb <i>dev<\/i>, <i>test<\/i> dhe <i>prod<\/i>, ku do t\u00eb \u0437\u0430\u043f\u0443\u0441\u043aohet t\u00eb gjitha instancat e aplikacionit t\u00eb destinuara p\u00ebr nj\u00eb mjedis t\u00eb caktuar.<\/p>\n<p><i>Ja p\u00ebrfitimet dhe disavantazhet e k\u00ebtij qasjeje.<\/i><\/p>\n<h3>+ Izolimi i mjedisit prodhues<\/h3>\n<p>\nN\u00eb kuad\u00ebr t\u00eb k\u00ebtij qasje, t\u00eb gjitha mjediset jan\u00eb t\u00eb izoluar nga nj\u00ebra-tjetra. Megjithat\u00eb, n\u00eb praktik\u00eb kjo \u00ebsht\u00eb ve\u00e7an\u00ebrisht e r\u00ebnd\u00ebsishme p\u00ebr ambientin prodhues.<\/p>\n<p>Versionet e prodhimit t\u00eb aplikacionit tani nuk varen nga ajo q\u00eb ndodh n\u00eb grupe dhe mjedise t\u00eb tjera.<\/p>\n<p>K\u00ebshtu, n\u00ebse ndonj\u00ebher\u00eb ndodhin probleme n\u00eb grupin e zhvillimit, versionet e prodhimit t\u00eb aplikacioneve do t\u00eb vazhdojn\u00eb t\u00eb funksionojn\u00eb si\u00e7 duhet.<\/p>\n<h3>+ Grupi mund t\u00eb p\u00ebrshtatet sipas mjedisit<\/h3>\n<p>\n\u00c7do grup mund t\u00eb p\u00ebrshtatet sipas mjedisit t\u00eb tij. P\u00ebr shembull, mund t\u00eb:<\/p>\n<ul>\n<li> instaloni n\u00eb grupin e zhvillimit mjete p\u00ebr zhvillim dhe debug;<\/li>\n<li> instaloni kornizat dhe mjetet testuese n\u00eb grupin <i>test<\/i>;<\/li>\n<li> p\u00ebrdorni pajisje dhe kanale rrjeti m\u00eb t\u00eb fuqishme n\u00eb grupin <i>prod<\/i>.<\/li>\n<\/ul>\n<p>\nKjo lejon rritjen e efikasitetit si n\u00eb zhvillimin ashtu edhe n\u00eb operimin e aplikacioneve.<\/p>\n<h3>+ Kufizimi i aksesit n\u00eb grupin e prodhimit<\/h3>\n<p>\nNevoja p\u00ebr t\u00eb punuar drejtp\u00ebrdrejt me grupin e prodhimit ndodh rrall\u00eb, k\u00ebshtu q\u00eb mund t\u00eb kufizoni ndjesh\u00ebm grupin e personave q\u00eb kan\u00eb akses n\u00eb t\u00eb.<\/p>\n<p>Mund t\u00eb shkojm\u00eb edhe m\u00eb tej dhe t\u2019i heqim njer\u00ebzit aksesin n\u00eb k\u00ebt\u00eb grup, dhe t\u00eb gjitha shp\u00ebrndarjet t\u00eb realizohen p\u00ebrmes nj\u00eb strumenti automatizimi CI\/CD. Ky qasje do t\u00eb ndihmoj\u00eb n\u00eb minimizimin e rrezikut t\u00eb gabimeve njer\u00ebzore pik\u00ebrisht aty ku \u00ebsht\u00eb m\u00eb e r\u00ebnd\u00ebsishme.<\/p>\n<p><i>Tani disa fjal\u00eb mbi disavantazhet.<\/i><\/p>\n<h3>\u2212 Mungesa e izolimit mes aplikacioneve<\/h3>\n<p>\nDob\u00ebsia kryesore e qasjes \u00ebsht\u00eb mungesa e izolimit harduerik dhe t\u00eb burimeve mes aplikacioneve.<\/p>\n<p>Aplikacionet e pa lidhura ndajn\u00eb burimet e grupit: b\u00ebrtham\u00ebn sistemore, procesorin, kujtes\u00ebn dhe disa sh\u00ebrbime t\u00eb tjera.<\/p>\n<p>Si\u00e7 \u00ebsht\u00eb p\u00ebrmendur m\u00eb par\u00eb, kjo mund t\u00eb jet\u00eb potencialisht e rrezikshme.<\/p>\n<h3>\u2212 Pamund\u00ebsia p\u00ebr t\u00eb lokalizuar var\u00ebsit\u00eb e aplikacioneve<\/h3>\n<p>\nN\u00ebse nj\u00eb aplikacion ka k\u00ebrkesa t\u00eb ve\u00e7anta, ato duhet t\u00eb p\u00ebrmbushen n\u00eb t\u00eb gjitha grupet.<\/p>\n<p>P\u00ebr shembull, n\u00ebse nj\u00eb aplikacion k\u00ebrkon GPU, at\u00ebher\u00eb \u00e7do grup duhet t\u00eb ket\u00eb t\u00eb pakt\u00ebn nj\u00eb pun\u00ebtor me GPU (edhe n\u00ebse ai p\u00ebrdoret vet\u00ebm nga ky aplikacion).<\/p>\n<p>Si rezultat, rrezikojm\u00eb t\u00eb kemi kostot m\u00eb t\u00eb larta dhe p\u00ebrdorim jo efikas t\u00eb burimeve.<\/p>\n<h2>P\u00ebrfundim<\/h2>\n<p>\nMe nj\u00eb grup t\u00eb caktuar aplikacionesh, ato mund t\u00eb vendosen n\u00eb disa grupe t\u00eb m\u00ebdha ose n\u00eb shum\u00eb t\u00eb vogla.<\/p>\n<p>N\u00eb k\u00ebt\u00eb artikull shqyrtohen p\u00ebrfitimet dhe disavantazhet e qasjeve t\u00eb ndryshme, duke filluar nga nj\u00eb grup global dhe duke p\u00ebrfunduar me disa grupe t\u00eb vogla dhe t\u00eb specializuara:<\/p>\n<ul>\n<li> nj\u00eb grumbull i madh dhe i p\u00ebrbashk\u00ebt;<\/li>\n<li> nj\u00eb num\u00ebr i madh klasteresh t\u00eb specializuara;<\/li>\n<li> nj\u00eb klaster p\u00ebr \u00e7do aplikacion;<\/li>\n<li> nj\u00eb klaster p\u00ebr \u00e7do ambient.<\/li>\n<\/ul>\n<p>\n<i>Pra, cili qasje t\u00eb zgjidhni?<\/i><\/p>\n<p>Si zakonisht, p\u00ebrgjigjja varet nga skenari i p\u00ebrdorimit: duhet t\u00eb vler\u00ebsoni p\u00ebrfitimet dhe disavantazhet e qasjeve t\u00eb ndryshme dhe t\u00eb zgjidhni opsionin m\u00eb optimal.<\/p>\n<p>Megjithat\u00eb, zgjedhja nuk kufizohet n\u00eb shembujt e p\u00ebrmendur m\u00eb sip\u00ebr \u2014 mund t\u00eb p\u00ebrdoren \u00e7do kombinim i tyre!<\/p>\n<p>P\u00ebr shembull, mund t\u00eb organizoni dy grumbuj p\u00ebr \u00e7do ekip: nj\u00eb grumbull p\u00ebr zhvillimin (ku do t\u00eb jen\u00eb mjediset <i>dev<\/i> dhe <i>test<\/i>) dhe nj\u00eb grumbull p\u00ebr <i>production<\/i> (ku do t\u00eb ndodhet mjedisi production).<\/p>\n<p>Duke mb\u00ebshtetur informacionin nga ky artikull, do t\u00eb jeni n\u00eb gjendje t\u00eb optimizoni p\u00ebrfitimet dhe disavantazhet n\u00eb p\u00ebrputhje me skenarin specifik. Fat t\u00eb mir\u00eb!<\/p>\n<h2>P.S.<\/h2>\n<p>\nLexoni gjithashtu n\u00eb blogun ton\u00eb:<\/p>\n<ul>\n<li> \u00ab<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/484954\/\">Udh\u00ebzues vizual p\u00ebr diagnostikimin e defekteve n\u00eb Kubernetes<\/a><\/noindex>\u00bb;<\/li>\n<li> \u00ab<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/480946\/\">Dhekujt n\u00eb Kubernetes (dhe jo vet\u00ebm) sot: pritshm\u00ebrit\u00eb dhe realiteti<\/a><\/noindex>\u00bb;<\/li>\n<li> \u00ab<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/478306\/\">Mesh-i Sh\u00ebrbimeve: \u00e7far\u00eb duhet t\u00eb dij\u00eb \u00e7do Inxhinier Software rreth teknologjis\u00eb m\u00eb p\u00ebrmendore<\/a><\/noindex>\u00bb;<\/li>\n<li> \u00ab<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/468679\/\">ABC e siguris\u00eb n\u00eb Kubernetes: autentifikimi, autorizimi, auditimi<\/a><\/noindex>\u00bb.<\/li>\n<\/ul>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/498100\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u043c. \u043f\u0435\u0440\u0435\u0432.: \u044d\u0442\u043e\u0442 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b \u043e\u0442 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 learnk8s \u2014 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0432\u043e\u043f\u0440\u043e\u0441 \u043f\u0440\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 Kubernetes. \u041d\u0430\u0434\u0435\u0435\u043c\u0441\u044f, \u0447\u0442\u043e \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0430\u0437\u0432\u0451\u0440\u043d\u0443\u0442\u044b\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043f\u043b\u044e\u0441\u043e\u0432 \u0438 \u043c\u0438\u043d\u0443\u0441\u043e\u0432 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0438\u0437 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u043f\u043e\u043c\u043e\u0433\u0443\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043e\u043f\u0442\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u0431\u043e\u0440 \u0438 \u0434\u043b\u044f \u0432\u0430\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430. TL;DR: \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u043d\u0430\u0431\u043e\u0440 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430\u0445 (\u043d\u0430 \u043a\u0430\u0436\u0434\u044b\u0439 \u043a\u043b\u0430\u0441\u0442\u0435\u0440 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":80077,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-80076","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438\u043c.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/proektirovanie-kubernetes-klasterov-skolko-ih-dolzhno-byt\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 Kubernetes-\u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u0432: \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0445 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c? | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438\u043c.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/proektirovanie-kubernetes-klasterov-skolko-ih-dolzhno-byt\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-05-02T23:42:34+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-05-02T23:42:34+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Projektimi i grumbujve Kubernetes: sa duhet t\u00eb jen\u00eb? | ProHoster","description":"Sh\u00ebn.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/proektirovanie-kubernetes-klasterov-skolko-ih-dolzhno-byt","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 Kubernetes-\u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u0432: \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0445 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c? | ProHoster","og:description":"\u041f\u0440\u0438\u043c.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/proektirovanie-kubernetes-klasterov-skolko-ih-dolzhno-byt","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-02T23:42:34+00:00","article:modified_time":"2020-05-02T23:42:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"80076","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:24:58","updated":"2022-10-02 20:23:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/80076","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=80076"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/80076\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/80077"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=80076"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=80076"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=80076"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}