{"id":80076,"date":"2020-05-03T01:42:34","date_gmt":"2020-05-02T23:42:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/proektirovanie-kubernetes-klasterov-skolko-ih-dolzhno-byt"},"modified":"2020-05-03T01:42:34","modified_gmt":"2020-05-02T23:42:34","slug":"proektirovanie-kubernetes-klasterov-skolko-ih-dolzhno-byt","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/proektirovanie-kubernetes-klasterov-skolko-ih-dolzhno-byt","title":{"rendered":"Projektimi i klaster\u00ebve Kubernetes: sa duhet t\u00eb jen\u00eb?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><i><b>Sh\u00ebn. p\u00ebrk.<\/b>: ky ky material nga projekti arsimor <noindex><a rel=\"nofollow\" href=\"https:\/\/learnk8s.io\/\">learnk8s<\/a><\/noindex> \u2014 p\u00ebrgjigje p\u00ebr nj\u00eb pyetje t\u00eb njohur gjat\u00eb projektimit t\u00eb infrastruktur\u00ebs mbi Kubernetes. Shpresojm\u00eb q\u00eb p\u00ebrshkrimet e detajuara t\u00eb p\u00ebrfitimeve dhe disavantazheve t\u00eb secilit opsion t\u00eb ndihmojn\u00eb n\u00eb zgjedhjen m\u00eb optimale p\u00ebr projektin tuaj.<\/i><\/p>\n<p><img decoding=\"async\" alt=\"Projektimi i klaster\u00ebve Kubernetes: sa duhet t\u00eb jen\u00eb?\" src=\"\/wp-content\/uploads\/2020\/05\/d3cc3b7e686e39032b1f02f3e8b6c46c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>TL;DR<\/b>: t\u00eb nj\u00ebjtin grup ngarkesash pun\u00eb mund t\u00eb ekzekutohen n\u00eb disa klastera t\u00eb m\u00ebdhenj (n\u00eb \u00e7do klaster do t\u00eb ket\u00eb nj\u00eb num\u00ebr t\u00eb madh ngarkesash) ose n\u00eb shum\u00eb t\u00eb vogla (me nj\u00eb num\u00ebr t\u00eb vog\u00ebl ngarkesash n\u00eb secilin klaster).<\/p>\n<p>M\u00eb posht\u00eb \u00ebsht\u00eb nj\u00eb tabel\u00eb q\u00eb vler\u00ebson p\u00ebrfitimet dhe disavantazhet e secilit qasje:<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p><img decoding=\"async\" alt=\"Projektimi i klaster\u00ebve Kubernetes: sa duhet t\u00eb jen\u00eb?\" src=\"\/wp-content\/uploads\/2020\/05\/ab5b5fefc97c3befddbaeb0791f8a90d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKur p\u00ebrdoret Kubernetes si nj\u00eb platform\u00eb p\u00ebr funksionimin e aplikacioneve, shpesh lindin disa pyetje themelore n\u00eb lidhje me nuancat e konfigurimit t\u00eb klaster\u00ebve:<\/p>\n<ul>\n<li> <i>Sa klastera t\u00eb p\u00ebrdorim?<\/i><\/li>\n<li> <i>Sa t\u00eb m\u00ebdha duhet t\u00eb jen\u00eb?<\/i><\/li>\n<li> <i>\u00c7far\u00eb duhet t\u00eb p\u00ebrmbaj\u00eb secili klaster?<\/i><\/li>\n<\/ul>\n<p>\nN\u00eb k\u00ebt\u00eb artikull do t\u00eb p\u00ebrpiqem t\u00eb p\u00ebrgjigjem n\u00eb t\u00eb gjitha k\u00ebto pyetje duke analizuar p\u00ebrfitimet dhe disavantazhet e \u00e7do qasjeje.<\/p>\n<h2>Formulimi i pyetjes<\/h2>\n<p>\nSi krijues i softuerit, ju me siguri jeni duke zhvilluar dhe funksionuar paralelisht shum\u00eb aplikacione.<\/p>\n<p>P\u00ebr m\u00eb tep\u00ebr, shum\u00eb instanca t\u00eb k\u00ebtyre aplikacioneve do t\u00eb lan\u00e7ohet me siguri n\u00eb ambiente t\u00eb ndryshme \u2014 p\u00ebr shembull, mund t\u00eb jen\u00eb <i>dev<\/i>, <i>test<\/i> dhe <i>prod<\/i>.<\/p>\n<p>Si rezultat, krijohet nj\u00eb matrice e t\u00ebr\u00eb e aplikacioneve dhe ambienteve:<\/p>\n<p><img decoding=\"async\" alt=\"Projektimi i klaster\u00ebve Kubernetes: sa duhet t\u00eb jen\u00eb?\" src=\"\/wp-content\/uploads\/2020\/05\/f2a811fa82e1e433463ba25d29f837e6.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Aplikacione dhe ambiente<\/i><\/p>\n<p>N\u00eb shembullin e m\u00ebsip\u00ebrm paraqiten 3 aplikacione dhe 3 ambiente, q\u00eb n\u00eb fund japin 9 variante t\u00eb mundshme.<\/p>\n<p>\u00c7do instanc\u00eb e aplikacionit paraqet nj\u00eb nj\u00ebsin\u00eb t\u00eb plot\u00eb t\u00eb k\u00ebrkes\u00ebs, me t\u00eb cil\u00ebn mund t\u00eb punoni e pavarur nga t\u00eb tjerat.<\/p>\n<p><i>Merrni parasysh se <b>instanc\u00eb e aplikacionit<\/b> mund t\u00eb p\u00ebrb\u00ebhet nga shum\u00eb <b>komponent\u00eb<\/b>, si frontend, backend, baza e t\u00eb dh\u00ebnave etj. N\u00eb rastin e nj\u00eb aplikacioni mikrosherivor, instanca do t\u00eb p\u00ebrfshij\u00eb t\u00eb gjitha mikrosherivoro.<\/i><\/p>\n<p>Si rezultat, p\u00ebrdoruesit e Kubernetes kan\u00eb disa pyetje:<\/p>\n<ul>\n<li> A duhet t\u00eb vendosim t\u00eb gjitha instancat e aplikacionit n\u00eb nj\u00eb klaster?<\/li>\n<li> A duhet t\u00eb krijojm\u00eb nj\u00eb klaster t\u00eb ve\u00e7ant\u00eb p\u00ebr secil\u00ebn instanc\u00eb aplikacioni?<\/li>\n<li> Ose, ndoshta, duhet t\u00eb p\u00ebrdorim nj\u00eb kombinim t\u00eb qasjeve t\u00eb lartp\u00ebrmendura?<\/li>\n<\/ul>\n<p>\nT\u00eb gjitha k\u00ebto variante jan\u00eb t\u00eb mundshme, pasi Kubernetes \u00ebsht\u00eb nj\u00eb sistem fleksib\u00ebl q\u00eb nuk e kufizon p\u00ebrdoruesin n\u00eb mund\u00ebsi.<\/p>\n<p>Ja disa nga rrug\u00ebt e mundshme:<\/p>\n<ul>\n<li> nj\u00eb klaster t\u00eb madh t\u00eb p\u00ebrbashk\u00ebt;<\/li>\n<li> mij\u00ebra klastera t\u00eb vegj\u00ebl me specializim t\u00eb ngusht\u00eb;<\/li>\n<li> nj\u00eb klaster p\u00ebr secilin aplikacion;<\/li>\n<li> nj\u00eb klaster p\u00ebr \u00e7do ambient.<\/li>\n<\/ul>\n<p>\nSi\u00e7 tregohet m\u00eb posht\u00eb, dy qasjet e para jan\u00eb n\u00eb poles t\u00eb kund\u00ebrta t\u00eb shkall\u00ebs s\u00eb opsioneve:<\/p>\n<p><img decoding=\"async\" alt=\"Projektimi i klaster\u00ebve Kubernetes: sa duhet t\u00eb jen\u00eb?\" src=\"\/wp-content\/uploads\/2020\/05\/99b8fd0d1e4173705e7996cf8ccb6eec.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Nga disa klastera t\u00eb m\u00ebdha (majtas) deri n\u00eb shum\u00eb t\u00eb vogla (djathtas)<\/i><\/p>\n<p><i>N\u00eb p\u00ebrgjith\u00ebsi, konsiderohet se nj\u00eb klaster \u00ebsht\u00eb \"m\u00eb i madh\" se tjetri n\u00ebse ka m\u00eb shum\u00eb som\u00eb nodash dhe pod&#8217;ash. P\u00ebr shembull, nj\u00eb klaster me 10 nod\u00eb dhe 100 pod&#8217;ash \u00ebsht\u00eb m\u00eb i madh se nj\u00eb klaster me 1 nod dhe 10 pod&#8217;ash.<\/i><\/p>\n<p>Mir\u00eb, le t\u00eb fillojm\u00eb!<\/p>\n<h2>1. Nj\u00eb klaster i madh t\u00eb p\u00ebrbashk\u00ebt<\/h2>\n<p>\nOpsioni i par\u00eb \u00ebsht\u00eb t\u00eb vendosni t\u00eb gjitha ngarkesat n\u00eb nj\u00eb klaster:<\/p>\n<p><img decoding=\"async\" alt=\"Projektimi i klaster\u00ebve Kubernetes: sa duhet t\u00eb jen\u00eb?\" src=\"\/wp-content\/uploads\/2020\/05\/283fc3c3f5ccb40a157ccff600628114.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Nj\u00eb klaster i madh<\/i><\/p>\n<p>Brenda k\u00ebtij qasje, klasteri p\u00ebrdoret si nj\u00eb platform\u00eb <b>infrastrukturore universale<\/b> \u2014 gjith\u00e7ka q\u00eb ju nevojitet \u00ebsht\u00eb thjesht t\u00eb hapni n\u00eb klasterin ekzistues Kubernetes.<\/p>\n<p><i><noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/overview\/working-with-objects\/namespaces\/\">Namespace&#8217;at<\/a><\/noindex> Kubernetes lejon q\u00eb pjes\u00ebt e klasterit t\u00eb ndahen logjikisht nga nj\u00ebra-tjetra, n\u00eb m\u00ebnyr\u00eb q\u00eb p\u00ebr \u00e7do instanc\u00eb aplikacioni mund t\u00eb p\u00ebrdoret hap\u00ebsira e saj em\u00ebrore.<\/i><\/p>\n<p><i>Le t\u00eb shqyrtojm\u00eb p\u00ebrfitimet dhe disavantazhet e k\u00ebsaj qasje.<\/i><\/p>\n<h3>+ P\u00ebrdorim efektiv t\u00eb burimeve<\/h3>\n<p>\nN\u00eb rastin e nj\u00eb klasteri t\u00eb vet\u00ebm, k\u00ebrkohet vet\u00ebm nj\u00eb kopje e t\u00eb gjitha burimeve t\u00eb nevojshme p\u00ebr t\u00eb funksionuar dhe menaxhuar klasterin Kubernetes.<\/p>\n<p>P\u00ebr shembull, kjo \u00ebsht\u00eb e v\u00ebrtet\u00eb p\u00ebr nyjat kryesore. N\u00eb p\u00ebrgjith\u00ebsi, p\u00ebr \u00e7do klaster Kubernetes ka 3 nyja kryesore, k\u00ebshtu q\u00eb p\u00ebr nj\u00eb klaster t\u00eb vet\u00ebm, numri mbetet i till\u00eb (p\u00ebr krahasim, 10 klastera do t\u00eb k\u00ebrkonin 30 nyja kryesore).<\/p>\n<p>Kjo nuanc\u00eb vlen edhe p\u00ebr sh\u00ebrbimet e tjera q\u00eb funksionojn\u00eb n\u00eb nivel klasteri, si balancuesit e ngarkes\u00ebs, kontrollor\u00ebt Ingress, sistemet e autentikimit, regjistrimit dhe monitorimit.<\/p>\n<p>N\u00eb nj\u00eb klaster t\u00eb vet\u00ebm, t\u00eb gjitha k\u00ebto sh\u00ebrbime mund t\u00eb p\u00ebrdoren t\u00eb gjitha p\u00ebr ngarkesat e pun\u00ebs (nuk \u00ebsht\u00eb e nevojshme t\u00eb krijoni kopje t\u00eb tyre, si n\u00eb rastin e disa klaster\u00ebve).<\/p>\n<h3>+ Shkalla<\/h3>\n<p>\nSi pasoj\u00eb e lartp\u00ebrmendur, numri m\u00eb i vog\u00ebl i klaster\u00ebve zakonisht kostocon m\u00eb pak, pasi shkurtimet e burimeve t\u00eb tep\u00ebrta.<\/p>\n<p>Kjo \u00ebsht\u00eb sidomos e v\u00ebrtet\u00eb p\u00ebr nyjat kryesore, t\u00eb cilat mund t\u00eb ken\u00eb kosto t\u00eb konsiderueshme pavar\u00ebsisht nga ndarja (on-premises ose n\u00eb cloud).<\/p>\n<p>Disa sh\u00ebrbime t\u00eb menaxhuara t\u00eb Kubernetes, si <noindex><a rel=\"nofollow\" href=\"https:\/\/cloud.google.com\/kubernetes-engine\">Google Kubernetes Engine (GKE)<\/a><\/noindex> ose <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/aks\/\">Azure Kubernetes Service (AKS)<\/a><\/noindex>, ofrojn\u00eb nj\u00eb shtres\u00eb menaxhuese falas. N\u00eb k\u00ebt\u00eb rast, \u00e7\u00ebshtja e kostove \u00ebsht\u00eb m\u00eb pak e r\u00ebnd\u00ebsishme.<\/p>\n<p>Ekzistojn\u00eb gjithashtu sh\u00ebrbime t\u00eb menaxhuara, t\u00eb cilat ndihmojn\u00eb me nj\u00eb tarif\u00eb fikse p\u00ebr \u00e7do klas\u00ebr Kubernetes (p.sh., <noindex><a rel=\"nofollow\" href=\"https:\/\/aws.amazon.com\/eks\/\">Amazon Elastic Kubernetes Service, EKS<\/a><\/noindex>).<\/p>\n<h3>+ Administrim efektiv<\/h3>\n<p>\nT\u00eb menaxhosh nj\u00eb klas\u00ebr \u00ebsht\u00eb m\u00eb e leht\u00eb se sa disa.<\/p>\n<p>Administrimi mund t\u00eb p\u00ebrfshij\u00eb detyra t\u00eb tilla si:<\/p>\n<ul>\n<li> p\u00ebrdit\u00ebsimi i versionit t\u00eb Kubernetes;<\/li>\n<li> konfigurimi i kanalit CI\/CD;<\/li>\n<li> instalimi i plugin-it CNI;<\/li>\n<li> konfigurimi i sistemit t\u00eb autentifikimit t\u00eb p\u00ebrdoruesve;<\/li>\n<li> instalimi i kontrolluesit t\u00eb qasjes;<\/li>\n<\/ul>\n<p>\ndhe shum\u00eb t\u00eb tjera\u2026<\/p>\n<p>N\u00eb rastin e nj\u00eb klasri, do t\u00eb duhet t\u00eb merresh me t\u00eb gjitha k\u00ebto vet\u00ebm nj\u00eb her\u00eb.<\/p>\n<p>P\u00ebr shum\u00eb klastra, operacionet do t\u00eb duhet t\u00eb p\u00ebrs\u00ebriten shum\u00eb her\u00eb, gj\u00eb q\u00eb ndoshta do t\u00eb k\u00ebrkoj\u00eb nj\u00eb far\u00eb automatizimi t\u00eb proceseve dhe mjeteve p\u00ebr t\u00eb siguruar sistematik t\u00eb procesit.<\/p>\n<p><i>Tani le t\u00eb flasim p\u00ebr disa disavantazhe.<\/i><\/p>\n<h3>\u2212 Pik\u00eb e vetme d\u00ebshtimi<\/h3>\n<p>\nN\u00eb rastin e d\u00ebshtimit <i>t\u00eb vet\u00ebm<\/i> klastri, do t\u00eb ndalojn\u00eb menj\u00ebher\u00eb <i>t\u00eb gjitha<\/i> ngarkesat e pun\u00ebs!<\/p>\n<p>Ekzistojn\u00eb shum\u00eb mund\u00ebsi kur di\u00e7ka mund t\u00eb shkoj\u00eb keq:<\/p>\n<ul>\n<li> p\u00ebrdit\u00ebsimi i Kubernetes sjell efekte an\u00ebsore t\u00eb papritura;<\/li>\n<li> nj\u00eb komponent i p\u00ebrgjithsh\u00ebm (p.sh., plugin CNI) fillon t\u00eb funksionoj\u00eb ndryshe nga sa pritej;<\/li>\n<li> nj\u00eb nga komponent\u00ebt e klastrit \u00ebsht\u00eb konfiguruar gabimisht;<\/li>\n<li> d\u00ebshtimi n\u00eb infrastruktur\u00ebn e poshtme.<\/li>\n<\/ul>\n<p>\nNj\u00eb incident i till\u00eb mund t\u00eb shkaktoj\u00eb d\u00ebme serioze p\u00ebr t\u00eb gjitha ngarkesat e pun\u00ebs t\u00eb vendosura n\u00eb klastrin e p\u00ebrbashk\u00ebt.<\/p>\n<h3>\u2212 Munges\u00eb e izolimit t\u00eb fort\u00eb<\/h3>\n<p>\nT\u00eb punosh n\u00eb nj\u00eb klas\u00ebr t\u00eb p\u00ebrbashk\u00ebt do t\u00eb thot\u00eb q\u00eb aplikacionet ndajn\u00eb gjithashtu burimet e harduerit, mund\u00ebsit\u00eb n\u00eb rrjet dhe sistemin operativ n\u00eb nyjat e klasrit.<\/p>\n<p>N\u00eb nj\u00eb far\u00eb m\u00ebnyre, dy kontejner\u00eb me dy aplikacione t\u00eb ndryshme, q\u00eb funksionojn\u00eb n\u00eb t\u00eb nj\u00ebjt\u00ebn nyj\u00eb, jan\u00eb t\u00eb ngjash\u00ebm me dy procese q\u00eb funksionojn\u00eb n\u00eb t\u00eb nj\u00ebjt\u00ebn makin\u00eb n\u00ebn nj\u00eb b\u00ebrtham\u00eb t\u00eb sistemit operativ t\u00eb nj\u00ebjt\u00eb.<\/p>\n<p><i>Kontejner\u00ebt e Linux ofrojn\u00eb nj\u00eb form\u00eb izolimi, por ajo nuk \u00ebsht\u00eb ashtu si\u00e7 ofrojn\u00eb, p\u00ebr shembull, makinat virtuale. N\u00eb thelb, procesi n\u00eb nj\u00eb kontejner \u00ebsht\u00eb i nj\u00ebjti proces q\u00eb funksionon n\u00eb sistemin operativ t\u00eb hostit.<\/i><\/p>\n<p>Kjo mund t\u00eb b\u00ebhet nj\u00eb problem nga nj\u00eb perspektiv\u00eb sigurie: nj\u00eb organizim i till\u00eb teorikisht lejon aplikacione t\u00eb palidhura t\u00eb nd\u00ebrveprojn\u00eb me nj\u00ebri-tjetrin (q\u00ebllimisht ose rast\u00ebsisht).<\/p>\n<p>P\u00ebr m\u00eb tep\u00ebr, t\u00eb gjitha ngarkesat e pun\u00ebs n\u00eb klastrin Kubernetes ndajn\u00eb disa sh\u00ebrbime t\u00eb p\u00ebrbashk\u00ebta t\u00eb klastrit, t\u00eb tilla si <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/services-networking\/dns-pod-service\/\">DNS<\/a><\/noindex> \u2014 kjo do t\u00eb lejoj\u00eb aplikacionet t\u00eb gjejn\u00eb sh\u00ebrbimet e aplikacioneve t\u00eb tjera n\u00eb klaster.<\/p>\n<p><i>T\u00eb gjitha pikat e p\u00ebrmendura m\u00eb sip\u00ebr mund t\u00eb ken\u00eb nj\u00eb r\u00ebnd\u00ebsi t\u00eb ndryshme var\u00ebsisht nga k\u00ebrkesat p\u00ebr sigurin\u00eb e aplikacioneve.<\/i><\/p>\n<p>Kubernetes ofron mjete t\u00eb ndryshme p\u00ebr t\u00eb parandaluar probleme n\u00eb sistemin e siguris\u00eb, t\u00eb tilla si <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/policy\/pod-security-policy\/\">PodSecurityPolicies<\/a><\/noindex> dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/services-networking\/network-policies\/\">NetworkPolicies<\/a><\/noindex>. Megjithat\u00eb, p\u00ebr t'i konfiguruar ato si\u00e7 duhet k\u00ebrkohet nj\u00eb p\u00ebrvoj\u00eb e caktuar; p\u00ebr m\u00eb tep\u00ebr, ato nuk jan\u00eb n\u00eb gjendje t\u00eb mbyllin plot\u00ebsisht t\u00eb gjitha vrimat e siguris\u00eb.<\/p>\n<p>\u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb mbash gjithmon\u00eb mend se Kubernetes \u00ebsht\u00eb zhvilluar fillimisht p\u00ebr <i>ndarjen<\/i>, e jo p\u00ebr <i>izolimin dhe sigurin\u00eb<\/i>.<\/p>\n<h3>\u2212 Munges\u00eb e multi-tenanc\u00ebs t\u00eb fort\u00eb<\/h3>\n<p>\nDuke marr\u00eb parasysh p\u00ebrmbushjen e burimeve t\u00eb p\u00ebrbashk\u00ebta n\u00eb klastrin Kubernetes, ekzistojn\u00eb shum\u00eb m\u00ebnyra me t\u00eb cilat aplikacione t\u00eb ndryshme mund t\u00eb \"p\u00ebrdorin\" nj\u00ebra-tjetr\u00ebn.<\/p>\n<p>P\u00ebr shembull, nj\u00eb aplikacion mund t\u00eb monopolizoj\u00eb nj\u00eb burim t\u00eb p\u00ebrbashk\u00ebt (si CPU ose memorie) dhe t'i heq\u00eb qasje aplikacioneve t\u00eb tjera q\u00eb punojn\u00eb n\u00eb t\u00eb nj\u00ebjt\u00ebn nyj\u00eb.<\/p>\n<p>Kubernetes ofron mekanizma t\u00eb ndrysh\u00ebm p\u00ebr t\u00eb kontrolluar k\u00ebt\u00eb tip t\u00eb sjelljeje, t\u00eb tilla si <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/configuration\/manage-compute-resources-container\/\">k\u00ebrkesat p\u00ebr burime dhe kufizimet<\/a><\/noindex> <i>(shih gjithashtu artikullin \"<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/489668\/\"> Kufijt\u00eb e CPU dhe ngadal\u00ebsimi agresiv n\u00eb Kubernetes <\/a><\/noindex>\" \u2013 sh\u00ebnim i p\u00ebrkthyesit)<\/i>, <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/policy\/resource-quotas\/\">ResourceQuotas<\/a><\/noindex> dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/policy\/limit-range\/\">LimitRanges<\/a><\/noindex>. Megjithat\u00eb, ashtu si n\u00eb rastin e siguris\u00eb, konfiguroja e tyre \u00ebsht\u00eb mjaft e nd\u00ebrlikuar dhe ato nuk jan\u00eb n\u00eb gjendje t\u00eb parandalojn\u00eb plot\u00ebsisht t\u00eb gjitha efekte an\u00ebsore t\u00eb papritura.<\/p>\n<h3>\u2212 Num\u00ebr i madh p\u00ebrdoruesish<\/h3>\n<p>\nN\u00eb rastin e nj\u00eb klastri t\u00eb vet\u00ebm, duhet t\u00eb hap\u00ebsh qasje p\u00ebr shum\u00eb njer\u00ebz. Dhe sa m\u00eb i madh t\u00eb jet\u00eb numri i tyre, aq m\u00eb i lart\u00eb \u00ebsht\u00eb rreziku q\u00eb ata mund t\u00eb \"thyhen\" di\u00e7ka.<\/p>\n<p>Brenda klasrit mund t\u00eb kontrollosh se kush dhe \u00e7far\u00eb mund t\u00eb b\u00ebj\u00eb p\u00ebrmes <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/reference\/access-authn-authz\/rbac\/\">menaxhimit t\u00eb qasjes bazuar n\u00eb role (RBAC)<\/a><\/noindex> <i>(shih artikullin \"<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/470503\/\"> P\u00ebrdoruesit dhe autorizimi RBAC n\u00eb Kubernetes <\/a><\/noindex>\" \u2013 sh\u00ebnim i p\u00ebrkthyesit)<\/i>. Megjithat\u00eb, kjo nuk do t'i pengoj\u00eb p\u00ebrdoruesit t\u00eb \"thyejn\u00eb\" di\u00e7ka brenda zon\u00ebs s\u00eb tyre t\u00eb p\u00ebrgjegj\u00ebsis\u00eb.<\/p>\n<h3>\u2212 Klastrat nuk mund t\u00eb rriten pafund\u00ebsisht<\/h3>\n<p>\nNj\u00eb klaster q\u00eb p\u00ebrdoret p\u00ebr t\u00eb gjitha ngarkesat pun\u00eb, do t\u00eb jet\u00eb, ndoshta, shum\u00eb i madh (sa i p\u00ebrket numrit t\u00eb nodave dhe pod&#8217;ave).<\/p>\n<p>Por k\u00ebtu lind nj\u00eb tjet\u00ebr problem: klasrat n\u00eb Kubernetes nuk mund t\u00eb rriten pafund\u00ebsisht.<\/p>\n<p>Ekziston nj\u00eb kufi teorik p\u00ebr madh\u00ebsin\u00eb e klasrit. N\u00eb Kubernetes, ai \u00ebsht\u00eb k\u00ebshtu rreth <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/setup\/best-practices\/cluster-large\/\">5000 nod\u00eb, 150 mij\u00eb pod&#8217;ash dhe 300 mij\u00eb kontejner\u00eb<\/a><\/noindex>.<\/p>\n<p>Megjithat\u00eb, n\u00eb jet\u00ebn e p\u00ebrditshme, problemet mund t\u00eb fillojn\u00eb shum\u00eb m\u00eb her\u00ebt \u2014 p\u00ebr shembull, vet\u00ebm n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/events19.lfasiallc.com\/wp-content\/uploads\/2017\/11\/BoF_-Not-One-Size-Fits-All-How-to-Size-Kubernetes-Clusters_Guang-Ya-Liu-_-Sahdev-Zala.pdf\">500 node<\/a><\/noindex>.<\/p>\n<p>Fakti \u00ebsht\u00eb se klasterat e m\u00ebdhenj shkaktojn\u00eb nj\u00eb ngarkes\u00eb t\u00eb lart\u00eb n\u00eb nivelin e menaxhimit t\u00eb Kubernetes. Me fjal\u00eb t\u00eb tjera, p\u00ebr t\u00eb mbajtur nj\u00eb klaster n\u00eb gjendje funksionale dhe p\u00ebr t\u00eb p\u00ebrdorur n\u00eb m\u00ebnyr\u00eb efektive burimet, k\u00ebrkohet nj\u00eb konfigurim i kujdessh\u00ebm.<\/p>\n<p><i>Ky problem shqyrtohet n\u00eb artikullin p\u00ebrkat\u00ebs n\u00eb blogun origjinal t\u00eb titulluar \"<noindex><a rel=\"nofollow\" href=\"https:\/\/learnk8s.io\/kubernetes-node-size\">Architecting Kubernetes clusters \u2014 choosing a worker node size<\/a><\/noindex>\u00bb.<\/i><\/p>\n<p><i>Por le t\u00eb shqyrtojm\u00eb qasjen e kund\u00ebrt: shum\u00eb klastera t\u00eb vegj\u00ebl.<\/i><\/p>\n<h2>2. Shum\u00eb klastera t\u00eb vegj\u00ebl dhe t\u00eb specializuar<\/h2>\n<p>\nMe k\u00ebt\u00eb qasje, ju p\u00ebrdorni nj\u00eb klaster t\u00eb ve\u00e7ant\u00eb p\u00ebr \u00e7do element q\u00eb vendosni:<\/p>\n<p><img decoding=\"async\" alt=\"Projektimi i klaster\u00ebve Kubernetes: sa duhet t\u00eb jen\u00eb?\" src=\"\/wp-content\/uploads\/2020\/05\/2320f62d945944f2e26f07252e9b8440.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Shum\u00eb klastera t\u00eb vegj\u00ebl<\/i><\/p>\n<p>P\u00ebr q\u00ebllimet e k\u00ebtij artikulli, <i>elementi i vendosjes<\/i> referohet n\u00eb nj\u00eb ekzemplar aplikacioni - p\u00ebr shembull, versioni dev i nj\u00eb aplikacioni t\u00eb ve\u00e7ant\u00eb.<\/p>\n<p>Me k\u00ebt\u00eb strategji, Kubernetes p\u00ebrdoret si nj\u00eb mjedis i specializuar <b>p\u00ebr ekzemplar\u00ebt e ve\u00e7ant\u00eb t\u00eb aplikacioneve.<\/b> + Rreziku i kufizuar i \"shembjes\"<\/p>\n<p><i>Le t\u00eb shqyrtojm\u00eb p\u00ebrfitimet dhe disavantazhet e k\u00ebsaj qasje.<\/i><\/p>\n<h3>N\u00eb rast \"shembjeje\" t\u00eb klasterit, pasojat negative kufizohen vet\u00ebm n\u00eb ato ngarkesa q\u00eb ishin vendosur n\u00eb k\u00ebt\u00eb klaster. T\u00eb gjith\u00eb workload-t e tjera mbeten t\u00eb paprekura.<\/h3>\n<p>\nN\u00eb rastin e nj\u00eb \"prishjeje\" t\u00eb klasterit, pasojat negative kufizohen vet\u00ebm n\u00eb ato ngarkesa pune q\u00eb ishin zbatuar n\u00eb k\u00ebt\u00eb klaster. T\u00eb gjitha ngarkesat e tjera mbeten t\u00eb paprekura.<\/p>\n<h3>Ngarkesat q\u00eb vendosen n\u00eb klastera individual\u00eb nuk ndajn\u00eb burime t\u00eb p\u00ebrbashk\u00ebta, si CPU, memorie, sistem operativ, rrjet ose sh\u00ebrbime t\u00eb tjera.<\/h3>\n<p>\nSi rezultat, arrijm\u00eb nj\u00eb izolim t\u00eb fort\u00eb midis aplikacioneve t\u00eb pa lidhura, gj\u00eb q\u00eb mund t\u00eb ket\u00eb nj\u00eb ndikim pozitiv n\u00eb sigurin\u00eb e tyre.<\/p>\n<p>+ Num\u00ebr i vog\u00ebl p\u00ebrdoruesish<\/p>\n<h3>Duke pasur parasysh se \u00e7do klaster p\u00ebrmban vet\u00ebm nj\u00eb grup t\u00eb kufizuar ngarkesash, reduktohet numri i p\u00ebrdoruesve me qasje n\u00eb t\u00eb.<\/h3>\n<p>\nSa m\u00eb pak njer\u00ebz t\u00eb ken\u00eb qasje n\u00eb klaster, aq m\u00eb i ul\u00ebt \u00ebsht\u00eb rreziku q\u00eb di\u00e7ka t\u00eb \"shembet\".<\/p>\n<p>Le t\u00eb shikojm\u00eb disavantazhet.<\/p>\n<p><i>- P\u00ebrdorim jo eficient t\u00eb burimeve<\/i><\/p>\n<h3>Si\u00e7 u p\u00ebrmend m\u00eb par\u00eb, \u00e7do klaster Kubernetes ka nevoj\u00eb p\u00ebr nj\u00eb set t\u00eb caktuar burimesh menaxhuese: nodet master, komponent\u00ebt e nivelit t\u00eb kontrollit, zgjidhje p\u00ebr monitorim dhe regjistrim.<\/h3>\n<p>\nN\u00eb rastin e nj\u00eb numri t\u00eb madh klasterash t\u00eb vegj\u00ebl, duhet t\u00eb alokohesh nj\u00eb pjes\u00eb m\u00eb e madhe e burimeve p\u00ebr menaxhim.<\/p>\n<p>- Kosto e lart\u00eb<\/p>\n<h3>P\u00ebrdorimi jo eficient i burimeve automatikisht sjell kosto t\u00eb larta.<\/h3>\n<p>\nP\u00ebr shembull, mbajtja e 30 nodave master n\u00eb vend t\u00eb tre n\u00eb t\u00eb nj\u00ebjt\u00ebn fuqi p\u00ebrpunuese do t\u00eb ndikonte pasi n\u00eb shpenzime.<\/p>\n<p>- V\u00ebshtir\u00ebsi n\u00eb administrim<\/p>\n<h3>T\u00eb menaxhosh shum\u00eb klastera Kubernetes \u00ebsht\u00eb shum\u00eb m\u00eb e komplikuar se sa t\u00eb punosh me nj\u00eb.<\/h3>\n<p>\nP\u00ebr shembull, do t\u00eb duhet t\u00eb konfiguroni autentifikimin dhe autorizimin p\u00ebr \u00e7do klaster. Po ashtu, p\u00ebrdit\u00ebsimi i versionit t\u00eb Kubernetes do t\u00eb duhet t\u00eb b\u00ebhet disa her\u00eb.<\/p>\n<p>Me siguri do t\u00eb duhet t\u00eb aplikoni automatizimin p\u00ebr t\u00eb rritur efikasitetin e t\u00eb gjitha k\u00ebtyre detyrave.<\/p>\n<p>Tani le t\u00eb shqyrtojm\u00eb skenar\u00eb m\u00eb pak ekstreme.<\/p>\n<p><i>3. Nj\u00eb klaster p\u00ebr \u00e7do aplikacion<\/i><\/p>\n<h2>N\u00eb kuad\u00ebr t\u00eb k\u00ebsaj qasje, krijoni nj\u00eb klaster t\u00eb ve\u00e7ant\u00eb p\u00ebr t\u00eb gjith\u00eb ekzemplar\u00ebt e nj\u00eb aplikacioni t\u00eb caktuar:<\/h2>\n<p>\nKlaster p\u00ebr aplikacion<\/p>\n<p><img decoding=\"async\" alt=\"Projektimi i klaster\u00ebve Kubernetes: sa duhet t\u00eb jen\u00eb?\" src=\"\/wp-content\/uploads\/2020\/05\/238ee74d4e4dc42b7daeadc1ce484905.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Ky rrug\u00eb mund t\u00eb shqyrtohet si nj\u00eb p\u00ebrgjith\u00ebsim i parimit \"<\/i><\/p>\n<p>nj\u00eb klaster p\u00ebr ekipin<b>\", pasi zakonisht nj\u00eb ekip inxhinier\u00ebsh merret me zhvillimin e nj\u00eb ose disa aplikacioneve.<\/b>+ Klasteri mund t\u00eb p\u00ebrshtatet p\u00ebr aplikacionin<\/p>\n<p><i>Le t\u00eb shqyrtojm\u00eb p\u00ebrfitimet dhe disavantazhet e k\u00ebsaj qasje.<\/i><\/p>\n<h3>N\u00ebse aplikacioni ka nevoja t\u00eb ve\u00e7anta, ato mund t\u00eb realizohen n\u00eb klaster, pa prekur klasterat e tjer\u00eb.<\/h3>\n<p>\nK\u00ebto nevoja mund t\u00eb p\u00ebrfshijn\u00eb worker me GPU, komponent t\u00eb caktuar CNI, service mesh ose ndonj\u00eb sh\u00ebrbim tjet\u00ebr.<\/p>\n<p>K\u00ebto nevoja mund t\u00eb p\u00ebrfshijn\u00eb worker&#8217;\u00eb me GPU, disa plugina CNI, sh\u00ebrbimin mesh ose ndonj\u00eb sh\u00ebrbim tjet\u00ebr.<\/p>\n<p>- Mjedise t\u00eb ndryshme n\u00eb nj\u00eb klaster<\/p>\n<h3>Disavantazhi i k\u00ebsaj qasje \u00ebsht\u00eb se ekzemplar\u00ebt e aplikacioneve nga mjedise t\u00eb ndryshme koegzistojn\u00eb brenda nj\u00eb klasteri.<\/h3>\n<p>\nP\u00ebr shembull, versioni prodhues i nj\u00eb aplikacioni punon n\u00eb t\u00eb nj\u00ebjtin klaster si versioni dev. Kjo gjithashtu do t\u00eb thot\u00eb se zhvilluesit kryejn\u00eb aktivitetet e tyre n\u00eb t\u00eb nj\u00ebjtin klaster ku operohet versioni prodhues i aplikacionit.<\/p>\n<p>N\u00ebse shkaktohet nj\u00eb d\u00ebshtim nga veprimet e zhvilluesve ose nga nj\u00eb gabim i versionit dev n\u00eb klaster, potencialisht mund t\u00eb d\u00ebmtohet edhe versioni prodhues - nj\u00eb disavantazh i madh i k\u00ebtyre qasjeve.<\/p>\n<p>Dhe s\u00eb fundmi, skenari i fundit n\u00eb list\u00ebn ton\u00eb.<\/p>\n<p><i>4. Nj\u00eb klaster p\u00ebr \u00e7do mjedis<\/i><\/p>\n<h2>Ky skenar p\u00ebrfshin alokimin e nj\u00eb klasteri t\u00eb ve\u00e7ant\u00eb p\u00ebr \u00e7do mjedis:<\/h2>\n<p>\nNj\u00eb klaster p\u00ebr mjedisin<\/p>\n<p><img decoding=\"async\" alt=\"Projektimi i klaster\u00ebve Kubernetes: sa duhet t\u00eb jen\u00eb?\" src=\"\/wp-content\/uploads\/2020\/05\/157da599edf178832b1b15459786fbc8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>P\u00ebr shembull, mund t\u00eb keni klastera<\/i><\/p>\n<p>, ku do t\u00eb aktivizoni t\u00eb gjith\u00eb ekzemplar\u00ebt e aplikacioneve t\u00eb destinuara p\u00ebr nj\u00eb mjedis t\u00eb caktuar. <i>dev<\/i>, <i>test<\/i> dhe <i>prod<\/i>Ja p\u00ebrfitimet dhe disavantazhet e k\u00ebsaj qasje.<\/p>\n<p><i>+ Izolimi i mjedisit prodhues<\/i><\/p>\n<h3>N\u00eb k\u00ebt\u00eb qasje, t\u00eb gjitha mjediset jan\u00eb t\u00eb izoluar nga nj\u00ebra-tjetra. Megjithat\u00eb, n\u00eb praktik\u00eb, kjo \u00ebsht\u00eb ve\u00e7an\u00ebrisht e r\u00ebnd\u00ebsishme p\u00ebr mjedisin prodhues.<\/h3>\n<p>\nN\u00eb kuad\u00ebr t\u00eb k\u00ebtij qasje, t\u00eb gjitha ambientet jan\u00eb t\u00eb izoluar nga nj\u00ebra-tjetra. Megjithat\u00eb, n\u00eb praktik\u00eb, kjo \u00ebsht\u00eb ve\u00e7an\u00ebrisht e r\u00ebnd\u00ebsishme p\u00ebr mjedisin prodhues.<\/p>\n<p>Versionet e prodhimit t\u00eb aplikacionit tani nuk varen nga ajo q\u00eb ndodh n\u00eb klaster\u00ebt dhe mjediset e tjera.<\/p>\n<p>Prandaj, n\u00ebse ndodhin probleme papritur n\u00eb klasterin dev, versionet prodhuese t\u00eb aplikacioneve do t\u00eb vazhdojn\u00eb t\u00eb funksionojn\u00eb si\u00e7 ishte parashikuar.<\/p>\n<h3>+ Klasteri mund t\u00eb rregullohet p\u00ebr mjedisin<\/h3>\n<p>\n\u00c7do klaster mund t\u00eb p\u00ebrshtatet sipas mjedisit t\u00eb tij. P\u00ebr shembull, mund t\u00eb:<\/p>\n<ul>\n<li> instaloni mjete p\u00ebr zhvillim dhe debug n\u00eb klasterin dev;<\/li>\n<li> instaloni korniza dhe mjete testimi n\u00eb klaster <i>test<\/i>;<\/li>\n<li> p\u00ebrdorni pajisje m\u00eb t\u00eb fuqishme dhe kanale rrjeti n\u00eb klaster <i>prod<\/i>.<\/li>\n<\/ul>\n<p>\nKjo lejon t\u00eb rritet efikasiteti si n\u00eb zhvillim ashtu edhe n\u00eb operimin e aplikacioneve.<\/p>\n<h3>+ Kufizimi i aksesit n\u00eb klasterin prodhues<\/h3>\n<p>\nNevoja p\u00ebr t\u00eb punuar me klasterin prodhues ndodh rrall\u00eb, k\u00ebshtu q\u00eb mund t\u00eb kufizoni ndjesh\u00ebm numrin e njer\u00ebzve q\u00eb kan\u00eb akses atje.<\/p>\n<p>Mund t\u00eb shkoni edhe m\u00eb tej dhe t\u00eb privoni plot\u00ebsisht njer\u00ebzit nga ky klaster, duke kryer t\u00eb gjitha shp\u00ebrndarjet p\u00ebrmes nj\u00eb mjeti automatizimi CI\/CD. Ky qasje do t\u00eb minimizoj\u00eb rrezikun e gabimeve njer\u00ebzore, ve\u00e7an\u00ebrisht aty ku \u00ebsht\u00eb m\u00eb kritik.<\/p>\n<p><i>Tani le t\u00eb flasim p\u00ebr disa disavantazhe.<\/i><\/p>\n<h3>- Mungesa e izolimit midis aplikacioneve<\/h3>\n<p>\nDisavantazhi kryesor i k\u00ebtij qasje \u00ebsht\u00eb mungesa e izolimit harduerik dhe burimor midis aplikacioneve.<\/p>\n<p>Aplikacionet e pak\u00ebnaqura ndajn\u00eb burimet e klasterit: b\u00ebrtham\u00ebn sistemore, procesorin, memorien dhe disa sh\u00ebrbime t\u00eb tjera.<\/p>\n<p>Si\u00e7 \u00ebsht\u00eb p\u00ebrmendur tashm\u00eb, kjo mund t\u00eb jet\u00eb potencialisht e rrezikshme.<\/p>\n<h3>- Pamund\u00ebsia p\u00ebr t\u00eb lokalizuar var\u00ebsit\u00eb e aplikacioneve<\/h3>\n<p>\nN\u00ebse nj\u00eb aplikacion ka k\u00ebrkesa t\u00eb ve\u00e7anta, duhet t'i p\u00ebrmbahen n\u00eb t\u00eb gjith\u00eb klaster\u00ebt.<\/p>\n<p>P\u00ebr shembull, n\u00ebse aplikacionit i nevojitet GPU, at\u00ebher\u00eb \u00e7do klaster duhet t\u00eb ket\u00eb t\u00eb pakt\u00ebn nj\u00eb pun\u00ebtor me GPU (edhe n\u00ebse p\u00ebrdoret vet\u00ebm nga ky aplikacion).<\/p>\n<p>Si rezultat, rrezikojm\u00eb t\u00eb kemi kosto m\u00eb t\u00eb larta dhe p\u00ebrdorim joefikas t\u00eb burimeve.<\/p>\n<h2>P\u00ebrfundimi<\/h2>\n<p>\nN\u00ebse ka nj\u00eb grup t\u00eb caktuar aplikacionesh, ato mund t\u00eb vendosen n\u00eb disa klaster\u00eb t\u00eb m\u00ebdhenj ose n\u00eb shum\u00eb t\u00eb vegj\u00ebl.<\/p>\n<p>Ky artikull shqyrton p\u00ebrpar\u00ebsit\u00eb dhe disavantazhet e qasjeve t\u00eb ndryshme, duke filluar nga nj\u00eb klaster global deri te disa t\u00eb vegj\u00ebl dhe t\u00eb specializuar:<\/p>\n<ul>\n<li> nj\u00eb klaster t\u00eb madh t\u00eb p\u00ebrbashk\u00ebt;<\/li>\n<li> mij\u00ebra klastera t\u00eb vegj\u00ebl me specializim t\u00eb ngusht\u00eb;<\/li>\n<li> nj\u00eb klaster p\u00ebr secilin aplikacion;<\/li>\n<li> nj\u00eb klaster p\u00ebr \u00e7do ambient.<\/li>\n<\/ul>\n<p>\n<i>Pra, cili \u00ebsht\u00eb qasja e duhur p\u00ebr t'u zgjedhur?<\/i><\/p>\n<p>Si zakonisht, p\u00ebrgjigjja varet nga skenari i p\u00ebrdorimit: \u00ebsht\u00eb e nevojshme t\u00eb vler\u00ebsohen p\u00ebrpar\u00ebsit\u00eb dhe disavantazhet e qasjeve t\u00eb ndryshme dhe t\u00eb zgjidhet opsioni m\u00eb optimal.<\/p>\n<p>Megjithat\u00eb, zgjedhja nuk \u00ebsht\u00eb e kufizuar vet\u00ebm n\u00eb shembujt e p\u00ebrmendur m\u00eb lart \u2014 mund t\u00eb angazhohen \u00e7do kombinim t\u00eb tyre!<\/p>\n<p>P\u00ebr shembull, mund t\u00eb organizoni nga nj\u00eb \u00e7ift klaster\u00ebsh p\u00ebr \u00e7do ekip: nj\u00eb klaster p\u00ebr zhvillimin (ku do t\u00eb jen\u00eb mjediset <i>dev<\/i> dhe <i>test<\/i>) dhe nj\u00eb klaster p\u00ebr <i>production<\/i> (ku do t\u00eb jet\u00eb mjedisi prodhues).<\/p>\n<p>Duke u mb\u00ebshtetur n\u00eb informacionin nga ky artikull, ju mund t\u00eb optimizoni p\u00ebrpar\u00ebsit\u00eb dhe disavantazhet sipas skenarit konkret. Fat t\u00eb mbar\u00eb!<\/p>\n<h2>P.S.<\/h2>\n<p>\nLexoni gjithashtu n\u00eb blogun ton\u00eb:<\/p>\n<ul>\n<li> \u00ab<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/484954\/\">Udh\u00ebzues vizual p\u00ebr diagnostikimin e problemeve n\u00eb Kubernetes<\/a><\/noindex>\u00bb;<\/li>\n<li> \u00ab<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/480946\/\">D\u00ebshmi n\u00eb Kubernetes (dhe jo vet\u00ebm) sot: pritshm\u00ebrit\u00eb dhe realiteti<\/a><\/noindex>\u00bb;<\/li>\n<li> \u00ab<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/478306\/\">Service Mesh: \u00e7far\u00eb duhet t\u00eb dij\u00eb \u00e7do Inxhinier Softe p\u00ebr teknologjin\u00eb m\u00eb t\u00eb p\u00ebrfolur<\/a><\/noindex>\u00bb;<\/li>\n<li> \u00ab<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/468679\/\">ABC e siguris\u00eb n\u00eb Kubernetes: autentikimi, autorizimi, auditimi<\/a><\/noindex>\u00bb.<\/li>\n<\/ul>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/498100\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u043c. \u043f\u0435\u0440\u0435\u0432.: \u044d\u0442\u043e\u0442 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b \u043e\u0442 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 learnk8s \u2014 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0432\u043e\u043f\u0440\u043e\u0441 \u043f\u0440\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 Kubernetes. \u041d\u0430\u0434\u0435\u0435\u043c\u0441\u044f, \u0447\u0442\u043e \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0430\u0437\u0432\u0451\u0440\u043d\u0443\u0442\u044b\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043f\u043b\u044e\u0441\u043e\u0432 \u0438 \u043c\u0438\u043d\u0443\u0441\u043e\u0432 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0438\u0437 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u043f\u043e\u043c\u043e\u0433\u0443\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043e\u043f\u0442\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u0431\u043e\u0440 \u0438 \u0434\u043b\u044f \u0432\u0430\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430. TL;DR: \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u043d\u0430\u0431\u043e\u0440 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430\u0445 (\u043d\u0430 \u043a\u0430\u0436\u0434\u044b\u0439 \u043a\u043b\u0430\u0441\u0442\u0435\u0440 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":80077,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-80076","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438\u043c. \u043f\u0435\u0440\u0435\u0432.: \u044d\u0442\u043e\u0442 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b \u043e\u0442 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 learnk8s \u2014 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0432\u043e\u043f\u0440\u043e\u0441 \u043f\u0440\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 Kubernetes. \u041d\u0430\u0434\u0435\u0435\u043c\u0441\u044f, \u0447\u0442\u043e \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0430\u0437\u0432\u0451\u0440\u043d\u0443\u0442\u044b\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043f\u043b\u044e\u0441\u043e\u0432 \u0438 \u043c\u0438\u043d\u0443\u0441\u043e\u0432 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0438\u0437 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u043f\u043e\u043c\u043e\u0433\u0443\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043e\u043f\u0442\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u0431\u043e\u0440 \u0438 \u0434\u043b\u044f \u0432\u0430\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430. TL;DR: \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u043d\u0430\u0431\u043e\u0440 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430\u0445 (\u043d\u0430 \u043a\u0430\u0436\u0434\u044b\u0439 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/proektirovanie-kubernetes-klasterov-skolko-ih-dolzhno-byt\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 Kubernetes-\u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u0432: \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0445 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c? | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438\u043c. \u043f\u0435\u0440\u0435\u0432.: \u044d\u0442\u043e\u0442 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b \u043e\u0442 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 learnk8s \u2014 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0432\u043e\u043f\u0440\u043e\u0441 \u043f\u0440\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 Kubernetes. \u041d\u0430\u0434\u0435\u0435\u043c\u0441\u044f, \u0447\u0442\u043e \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0430\u0437\u0432\u0451\u0440\u043d\u0443\u0442\u044b\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043f\u043b\u044e\u0441\u043e\u0432 \u0438 \u043c\u0438\u043d\u0443\u0441\u043e\u0432 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0438\u0437 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u043f\u043e\u043c\u043e\u0433\u0443\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043e\u043f\u0442\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u0431\u043e\u0440 \u0438 \u0434\u043b\u044f \u0432\u0430\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430. TL;DR: \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u043d\u0430\u0431\u043e\u0440 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430\u0445 (\u043d\u0430 \u043a\u0430\u0436\u0434\u044b\u0439 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/proektirovanie-kubernetes-klasterov-skolko-ih-dolzhno-byt\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-05-02T23:42:34+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-05-02T23:42:34+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Projektimi i klaster\u00ebve Kubernetes: sa duhet t\u00eb jen\u00eb ata? | ProHoster","description":"Shenim: ky material \u00ebsht\u00eb nga projekti edukativ learnk8s \u2014 nj\u00eb p\u00ebrgjigje p\u00ebr pyetjen popullore gjat\u00eb projektimit t\u00eb infrastruktur\u00ebs mbi Kubernetes. Shpresojm\u00eb se p\u00ebrshkrimet e mjaftueshme t\u00eb p\u00ebrpar\u00ebsive dhe disavantazheve t\u00eb \u00e7do varianti do t'ju ndihmojn\u00eb t\u00eb b\u00ebni zgjedhjen optimale edhe p\u00ebr projektin tuaj. TL;DR: e nj\u00ebjta grup ngarkesash mund t\u00eb ekzekutohet n\u00eb disa klaster\u00eb t\u00eb m\u00ebdhenj (p\u00ebr \u00e7do klaster","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/proektirovanie-kubernetes-klasterov-skolko-ih-dolzhno-byt","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 Kubernetes-\u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u0432: \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0445 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c? | ProHoster","og:description":"\u041f\u0440\u0438\u043c. \u043f\u0435\u0440\u0435\u0432.: \u044d\u0442\u043e\u0442 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b \u043e\u0442 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 learnk8s \u2014 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0432\u043e\u043f\u0440\u043e\u0441 \u043f\u0440\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 Kubernetes. \u041d\u0430\u0434\u0435\u0435\u043c\u0441\u044f, \u0447\u0442\u043e \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0430\u0437\u0432\u0451\u0440\u043d\u0443\u0442\u044b\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043f\u043b\u044e\u0441\u043e\u0432 \u0438 \u043c\u0438\u043d\u0443\u0441\u043e\u0432 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0438\u0437 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u043f\u043e\u043c\u043e\u0433\u0443\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043e\u043f\u0442\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u0431\u043e\u0440 \u0438 \u0434\u043b\u044f \u0432\u0430\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430. TL;DR: \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u043d\u0430\u0431\u043e\u0440 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430\u0445 (\u043d\u0430 \u043a\u0430\u0436\u0434\u044b\u0439 \u043a\u043b\u0430\u0441\u0442\u0435\u0440","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/proektirovanie-kubernetes-klasterov-skolko-ih-dolzhno-byt","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-02T23:42:34+00:00","article:modified_time":"2020-05-02T23:42:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"80076","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:24:58","updated":"2022-10-02 20:23:35"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/80076","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=80076"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/80076\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/80077"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=80076"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=80076"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=80076"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}