Uluhlu lokulungela imveliso

Ukuguqulelwa kwenqaku kulungiselelwe ngokukodwa abafundi bekhosi "Iinkqubo zeDevOps kunye nezixhobo", eqala namhlanje!

Ngaba ukhe wakhupha inkonzo entsha kwimveliso? Okanye ngaba ubunenxaxheba ekuxhaseni iinkonzo ezinjalo? Ukuba kunjalo, yintoni ekukhuthazileyo? Yintoni elungileyo kwimveliso kwaye yintoni embi? Uwaqeqesha njani amalungu amatsha eqela ekukhutshweni okanye ekugcinweni kweenkonzo ezikhoyo.

Uninzi lweenkampani ziphela zisebenzisa iindlela ze "Wild West" xa kuziwa kwimisebenzi yokusebenza kwemizi-mveliso. Iqela ngalinye lithatha isigqibo ngezixhobo zalo kunye nezenzo ezingcono ngokuzama kunye neempazamo. Kodwa oku kuhlala kuchaphazela impumelelo yeeprojekthi kuphela, kodwa kunye neenjineli.

Uvavanyo kunye nempazamo kudala imeko apho ukukhombana ngeminwe kunye nokutyholwa kuxhaphakile. Ngale ndlela yokuziphatha, kuba nzima ngakumbi ukufunda kwiimpazamo kwaye ungaziphindi kwakhona.

Imibutho ephumeleleyo:

• ukuqonda imfuneko yezikhokelo zemveliso,
• ukufunda ezona ndlela zilungileyo,
• qala iingxoxo kwimiba yokulungela imveliso xa kusenziwa iinkqubo ezintsha okanye amacandelo,
• qinisekisa ukuthotyelwa kwemithetho yokulungiselela imveliso.

Ukulungiselela imveliso kubandakanya inkqubo "yokuhlaziya". Impinda inokuba luhlobo lokuhlola okanye uluhlu lwemibuzo. Uphononongo lunokwenziwa ngesandla, ngokuzenzekelayo, okanye zombini. Endaweni yoluhlu olumileyo lweemfuno, unokwenza iitemplates zoluhlu lokutshekisha ezinokuthi zilungelelaniswe kwiimfuno ezithile. Ngale ndlela, iinjineli zinokunikwa indlela yokuzuza ulwazi kunye nokuguquguquka okwaneleyo xa kufuneka.

Uyijonga nini inkonzo yokulungela imveliso?

Kuluncedo ukwenza uhlolo lokulungela imveliso kungekuphela nje ngaphambi kokukhululwa, kodwa naxa uyidlulisela kwelinye iqela lokusebenza okanye umqeshwa omtsha.

Jonga xa:

• Ukhupha inkonzo entsha kwimveliso.
• Udlulisela ukusebenza kwenkonzo yemveliso kwelinye iqela, njenge-SRE.
• Udlulisela ukusebenza kwenkonzo yemveliso kubasebenzi abatsha.
• Lungiselela inkxaso yobugcisa.

Uluhlu lokulungela imveliso

Ngexesha elidlulileyo, njengomzekelo, I ipapashiwe uluhlu lokujonga ukulungela ukuvavanya imveliso. Nangona olu luhlu luvela kubathengi bakaGoogle Cloud, luya kuba luncedo kwaye lusebenze ngaphandle kweLifu likaGoogle.

Uyilo kunye nophuhliso

• Ukuphuhlisa inkqubo yokwakha ephindaphindiweyo engadingi ukufikelela kwiinkonzo zangaphandle kwaye ayixhomekeke ekungaphumeleli kweenkqubo zangaphandle.
• Ngexesha loyilo kunye nophuhliso, chaza kwaye usete ii-SLO zeenkonzo zakho.
• Uxwebhu olulindelweyo malunga nokufumaneka kweenkonzo zangaphandle oxhomekeke kuzo.
• Gwema inqaku elinye lokusilela ngokususa ukuxhomekeka kumthombo omnye wehlabathi. Phinda kwakhona uvimba okanye usebenzise ukubuyisela umva xa uvimba ungafumaneki (umzekelo, ixabiso elinekhowudi elukhuni).

Ulawulo loqwalaselo

• Uqwalaselo olungatshintshiyo, oluncinci, olungelulo oluyimfihlo lunokugqithiswa ngeeparamitha zomgca womyalelo. Kuyo yonke enye into, sebenzisa iinkonzo zokugcina uqwalaselo.
• Ubumbeko oluguqukayo kufuneka lube noseto lokubuyela umva kwimeko apho inkonzo yoqwalaselo ayifumaneki.
• Ubume bemeko yophuhliso akufuneki buhambelane noqwalaselo lwemveliso. Kungenjalo, oku kunokukhokelela ekufikeleleni kwindawo yophuhliso ukuya kwiinkonzo zemveliso, ezinokubangela imiba yabucala kunye nokuvuza kwedatha.
• Bhala into enokuthi iqwalaselwe ngamandla kwaye uchaze indlela yokuziphatha ebuyela umva ukuba inkqubo yonikezelo yoqwalaselo ayifumaneki.

Ulawulo lokukhutshwa

• Bhala inkqubo yokukhupha ngokweenkcukacha. Chaza ukuba ukukhutshwa kuzichaphazela njani ii-SLOs (umzekelo, ukonyuka kwexesha lokulinda ngenxa yokuphoswa kwecache).
• Uxwebhu olukhutshwayo lwecanary.
• Phuhlisa isicwangciso sokuphononongwa kwecanary kwaye, ukuba kunokwenzeka, iindlela zokuzibuyisela umva.
• Qinisekisa ukuba ii-rollbacks zingasebenzisa iinkqubo ezifanayo njengokuthunyelwa.

Ukuqwalaselwa

• Qinisekisa ukuba isethi yeemetriki ezifunekayo kwi-SLO iyaqokelelwa.
• Qinisekisa ukuba unokwahlula phakathi komxhasi kunye nedatha yeseva. Oku kubalulekile ekufumaneni oonobangela bokungasebenzi kakuhle.
• Misela izilumkiso zokunciphisa iindleko zabasebenzi. Umzekelo, susa izilumkiso ezibangelwa yimisebenzi yesiqhelo.
• Ukuba usebenzisa i-Stackdriver, emva koko uquke iimetriki zeqonga le-GCP kwiideshibhodi zakho. Cwangcisa izilumkiso zabaxhomekeke kwi-GCP.
• Soloko usasaza umkhondo ongenayo. Nokuba awubandakanyekanga ekulandeleni, oku kuya kuvumela iinkonzo zenqanaba elisezantsi ukulungisa imiba kwimveliso.

Ukhuseleko kunye nokhuseleko

• Qinisekisa ukuba lonke uqhagamshelwano lwangaphandle lunoguqulelo oluntsonkothileyo.
• Qinisekisa ukuba iiprojekthi zakho zemveliso zinolungiselelo oluchanekileyo lwe-IAM.
• Sebenzisa uthungelwano ukwahlula amaqela emizekelo yomatshini wenyani.
• Sebenzisa iVPN ukuqhagamshela ngokukhuselekileyo kwiinethiwekhi ezikude.
• Uxwebhu kwaye ujonge ukufikelela komsebenzisi kwidatha. Qinisekisa ukuba lonke ufikelelo lomsebenzisi kwidatha luphicothwe kwaye lufakwe.
• Qinisekisa ukuba debugging endpoints zithintelwe yi ACLs.
• Coca igalelo lomsebenzisi. Qwalasela imida yobungakanani bomthwalo womvuzo wegalelo lomsebenzisi.
• Qinisekisa ukuba inkonzo yakho inokuthintela ngokukhethayo itrafikhi engenayo kubasebenzisi ngabanye. Oku kuya kuvala ulwaphulo-mthetho ngaphandle kokuchaphazela abanye abasebenzisi.
• Gwema iziphelo zangaphandle eziqalisa imisebenzi emininzi yangaphakathi.

Ukucwangcisa amandla

• Bhala ubungakanani benkonzo yakho. Umzekelo: inani labasebenzisi, ubungakanani bomthwalo ongenayo, inani lemiyalezo engenayo.
• Bhala iimfuno zezibonelelo zenkonzo yakho. Umzekelo: inani leezehlo zoomatshini abazinikeleyo, inani lezehlo zeSpanner, iihardware ezikhethekileyo ezifana neGPU okanye iTPU.
• Unyino lwemithombo yoxwebhu: uhlobo lomthombo, ummandla, njl.
• Izithintelo zekowuta kuxwebhu lokudala izixhobo ezitsha. Umzekelo, ukunciphisa inani lezicelo ze-GCE API ukuba usebenzisa i-API ukwenza iimeko ezintsha.
• Cinga ngokuqhuba iimvavanyo zomthwalo ukuhlalutya ukuthotywa kokusebenza.

Kuko konke. Sibonane eklasini!

umthombo: www.habr.com