Indlela yokufudukela kwilifu kwiiyure ezimbini enkosi kuKubernetes kunye ne-automation

Indlela yokufudukela kwilifu kwiiyure ezimbini enkosi kuKubernetes kunye ne-automation

Inkampani ye-URUS yazama i-Kubernetes ngeendlela ezahlukeneyo: ukuthunyelwa ngokuzimeleyo kwintsimbi engenanto, kwi-Google Cloud, emva koko idlulisele iqonga layo kwi-Mail.ru Cloud Solutions (MCS) cloud. U-Igor Shishkin ubalisa indlela abanyule ngayo umboneleli omtsha welifu kunye nendlela abaye bakwazi ngayo ukufudukela kuyo kwirekhodi iiyure ezimbini (t3ran), umlawuli wenkqubo ephezulu kwi-URUS.

I-URUS yenza ntoni?

Zininzi iindlela zokuphucula umgangatho wemo engqongileyo yasezidolophini, kwaye enye yazo kukuyenza ikhuseleke ngokusingqongileyo. Yile nto kanye i-URUS - Smart Digital Services inkampani isebenza kuyo. Apha baphumeza izisombululo ezinceda amashishini ukuba abeke iliso kwizalathisi ezibalulekileyo zokusingqongileyo kunye nokunciphisa ifuthe labo elibi kwindalo. Ii-Sensors ziqokelela idatha ekubunjweni komoya, inqanaba lengxolo kunye nezinye iiparamitha, kwaye emva koko uzithumele kwiqonga elidibeneyo le-URUS-Ekomon lokuhlalutya kunye nokwenza iingcebiso.

Isebenza njani i-URUS ukusuka ngaphakathi

Umxhasi oqhelekileyo we-URUS yinkampani ebekwe kwindawo okanye kufuphi nendawo yokuhlala. Oku kunokuba ngumzi-mveliso, izibuko, indawo yokugcina kaloliwe okanye nayiphi na enye indawo. Ukuba umxhasi wethu sele efumene isilumkiso, wahlawuliswa ngenxa yongcoliseko lokusingqongileyo, okanye ufuna ukwenza ingxolo encinane, ukunciphisa ukukhutshwa kwezinto eziyingozi, uza kuthi, kwaye sele simnike isisombululo esenziwe ngokulungelelaniso lokusingqongileyo.

Indlela yokufudukela kwilifu kwiiyure ezimbini enkosi kuKubernetes kunye ne-automation
Igrafu yokubeka iliso ye-H2S ibonisa ukukhutshwa rhoqo ebusuku kwisityalo esikufutshane

Izixhobo esizisebenzisayo kwi-URUS ziqulethe ii-sensor ezininzi eziqokelela ulwazi malunga nomxholo weegesi ezithile, amanqanaba engxolo kunye nezinye iinkcukacha zokuvavanya imeko yokusingqongileyo. Inani elichanekileyo labenzi boluvo lihlala ligqitywa ngumsebenzi othile.

Indlela yokufudukela kwilifu kwiiyure ezimbini enkosi kuKubernetes kunye ne-automation
Ngokuxhomekeke kwiinkcukacha zemilinganiselo, izixhobo ezinezinzwa zinokufumaneka kwiindonga zezakhiwo, izibonda kunye nezinye iindawo ezingenanto. Isixhobo ngasinye esinjalo siqokelela ulwazi, siluhlanganise kwaye luthumele kwisango lokufumana idatha. Apho sigcina idatha yokugcina ixesha elide kwaye siyiqhube phambili kuhlalutyo olulandelayo. Umzekelo olula wento esiyifumanayo ngenxa yokuhlalutya isalathisi somgangatho womoya, owaziwa ngokuba yi-AQI.

Ngokunxuseneyo, ezinye iinkonzo ezininzi zisebenza kwiqonga lethu, kodwa ubukhulu becala zezobume benkonzo. Ngokomzekelo, inkonzo yesaziso ithumela izaziso kubaxhasi ukuba nayiphi na iparameters egadiweyo (umzekelo, umxholo we-CO2) idlula ixabiso elivumelekileyo.

Sigcina njani idatha. Ibali likaKubernetes kwintsimbi engenanto

Iprojekthi yeURUS yokubeka iliso kokusingqongileyo ineendawo ezininzi zokugcina idatha. Kwenye sigcina idatha "eluhlaza" - into esiyifumene ngokuthe ngqo kwizixhobo ngokwazo. Olu gcino luyi-tape "magnetic", njengakwiikhasethi ezindala, kunye nembali yazo zonke izikhombisi. Uhlobo lwesibini logcino lusetyenziselwa idatha ecwangcisiweyo - idatha esuka kwizixhobo, ephuculwe ngemetadata malunga noqhagamshelwano phakathi kwabenzi boluvo kunye nokufundwa kwezixhobo ngokwazo, ukudibanisa nemibutho, iindawo, njl njl. Olu lwazi lukuvumela ukuba uhlole ngokuguquguqukayo ukuba isalathisi yatshintsha ngexesha elithile . Sisebenzisa ugcino lwedatha "eluhlaza", phakathi kwezinye izinto, njenge-backup kunye nokubuyisela idatha esele yenziwe ngaphambili, ukuba kukho imfuneko enjalo.

Xa sasijonge ukusombulula ingxaki yethu yokugcina iminyaka eliqela eyadlulayo, sasinokhetho lweqonga ezimbini: Kubernetes kunye ne-OpenStack. Kodwa ekubeni le yokugqibela ibonakala imbi kakhulu (jonga nje uyilo lwayo ukuze uqiniseke koku), sahlala eKubernetes. Enye ingxabano eyayikukuthanda kwayo yayilulawulo olulula lwesoftware, ukukwazi ukusika ngokulula iinodi zehardware ngokwezixhobo.

Ngokunxuseneyo nokuqonda i-Kubernetes ngokwayo, sikwafunde iindlela zokugcina idatha, ngelixa sigcina lonke ugcino lwethu kwi-Kubernetes kwi-hardware yethu, safumana ubuchule obubalaseleyo. Yonke into ebesihlala kuyo ngelo xesha kwi-Kubernetes: ukugcinwa okusemgangathweni, inkqubo yokubeka iliso, i-CI/CD. I-Kubernetes iye yaba liqonga lethu sonke.

Kodwa sasifuna ukusebenza noKubernetes njengenkonzo, kwaye singabandakanyeki kwinkxaso kunye nophuhliso. Ngaphezu koko, asizange siyithande indlela exabisa ngayo ukuyigcina kwintsimbi engenanto, kwaye sifuna uphuhliso rhoqo! Ngokomzekelo, omnye wemisebenzi yokuqala yayikukudibanisa abalawuli be-Kubernetes Ingress kwiziseko zenethiwekhi zombutho wethu. Lo ngumsebenzi onzima, ngokukodwa ngokuqwalasela ukuba ngelo xesha akukho nto yayilungele ukulawulwa kwezixhobo zokusebenza ezifana neerekhodi ze-DNS okanye ukunikezelwa kweedilesi ze-IP. Kamva saqalisa ukuzama ukugcina idatha yangaphandle. Asizange sijikeleze ekuphumezeni isilawuli sePVC, kodwa nalapho kwacaca ukuba le yayiyindawo enkulu yomsebenzi efuna iingcali ezizinikeleyo.

Ukutshintshela kwi-Google Cloud Platform sisisombululo sexeshana

Siye saqaphela ukuba oku akunako ukuqhubeka, kwaye sasusa idatha yethu kwintsimbi engenanto ukuya kwiPlatform yeLifu likaGoogle. Ngapha koko, ngelo xesha kwakungekho zikhetho ezininzi ezinomdla kwinkampani yaseRussia: ngaphandle kwePlatform yeLifu likaGoogle, yiAmazon kuphela ebonelela ngenkonzo efanayo, kodwa sisahleli kwisisombululo esivela kuGoogle. Emva koko kwabonakala ngathi kunenzuzo ngakumbi kwezoqoqosho, kufutshane ne-Upstream, singasathethi into yokuba iGoogle ngokwayo luhlobo lwePoC Kubernetes kwiMveliso.

Ingxaki yokuqala enkulu yavela elundini njengoko isiseko sabathengi bethu sikhula. Xa sinesidingo sokugcina idatha yobuqu, sasijongene nokukhetha: nokuba sisebenza neGoogle kwaye saphule imithetho yaseRussia, okanye sijonge enye indlela kwiRussian Federation. Ukhetho, xa lulonke, lwaluqikelelwa kwangaphambili. πŸ™‚

Sabona njani inkonzo yefu efanelekileyo

Ekuqaleni kokukhangela, sele sisazi ukuba sifuna ukufumana ntoni kumnikezeli wefu wexesha elizayo. Besijonge eyiphi inkonzo:

  • Ukukhawuleza kunye nokuguquguquka. Ukuze sikwazi ukongeza ngokukhawuleza i-node entsha okanye sisebenzise into ethile nangaliphi na ixesha.
  • Ayibizi. Sasiwuxhalabele kakhulu umbandela wemali, ekubeni sasinqongophele ubuncwane. Sasisele sisazi ukuba sifuna ukusebenzisana noKubernetes, kwaye ngoku umsebenzi wawukukunciphisa iindleko zayo ukwenzela ukwandisa okanye ubuncinane ukugcina ukusebenza kakuhle kokusebenzisa esi sisombululo.
  • izenzekelayo. Sicebe ukusebenza kunye nenkonzo nge-API, ngaphandle kwabaphathi kunye neefowuni zeefowuni okanye iimeko apho kufuneka siphakamise ngesandla iinodi ezininzi kwimo engxamisekileyo. Kuba uninzi lweenkqubo zethu zizenzekela, besilindele okufanayo kwinkonzo yelifu.
  • Ngeeseva kwiRussian Federation. Kakade ke, saceba ukuthobela umthetho waseRashiya kunye naloo 152-FZ.

Ngelo xesha, kwakukho abambalwa ababoneleli be-Kubernetes aaS eRashiya, kwaye xa ukhetha umnikezeli, kwakubalulekile ukuba singathobeli izinto zethu eziphambili. Iqela le-Mail.ru Cloud Solutions, esaqala ukusebenza kunye nayo kwaye sisasebenzisana, isinike inkonzo ezenzekelayo ngokupheleleyo, kunye nenkxaso ye-API kunye nephaneli yokulawula efanelekileyo ebandakanya i-Horizon - kunye nayo sinokunyusa ngokukhawuleza inani elingenasizathu le-nodes.

Sakwazi njani ukufudukela kwi-MCS kwiiyure ezimbini

Kwiintshukumo ezinjalo, iinkampani ezininzi zijongene nobunzima kunye nezithintelo, kodwa kwimeko yethu bekungekho. Sasinethamsanqa: ekubeni sasisele sisebenza kwi-Kubernetes ngaphambi kokuba kuqale ukufuduka, silungise nje iifayile ezintathu kwaye siqalise iinkonzo zethu kwi-platform entsha yefu, i-MCS. Makhe ndikukhumbuze ukuba ngelo xesha sasisele siyishiyile intsimbi engenanto kwaye sihlala kwiPlatform yeLifu likaGoogle. Ke ngoko, intshukumo ngokwayo ayithathi ngaphezulu kweeyure ezimbini, kunye nexesha elingaphezulu kancinci (malunga neyure) lichithwe ukukopa idatha kwizixhobo zethu. Emva koko sasisele sisebenzisa i-Spinnaker (inkonzo ye-CD ye-multi-cloud ukubonelela ngokuThunyelelwa ngokuQoncekileyo). Siphinde sayidibanisa ngokukhawuleza kwiqela elitsha kwaye saqhubeka sisebenza njengesiqhelo.

Ndiyabulela kwi-automation yeenkqubo zophuhliso kunye ne-CI / CD, i-Kubernetes e-URUS iphathwa yingcali enye (kwaye ndim). Ngexesha elithile, omnye umlawuli wenkqubo wasebenza nam, kodwa ke kwavela ukuba sele sizenzele ngokuzenzekelayo yonke inkqubo ephambili kwaye kukho imisebenzi emininzi nangaphezulu kwinxalenye yemveliso yethu ephambili kwaye kunengqiqo ukuqondisa izixhobo kule nto.

Sifumene into ebesiyilindele kumnikezeli welifu, kuba saqala ukusebenzisana ngaphandle kokukhohlisa. Ukuba bekukho naziphi na iziganeko, ubukhulu becala bezinobugcisa kwaye ezo zinokucaciswa ngokulula bubutsha benkonzo. Into ephambili kukuba iqela le-MCS lisusa ngokukhawuleza iintsilelo kwaye liphendule ngokukhawuleza imibuzo kubathunywa.

Ukuba ndithelekisa amava am kunye nePlatform yeLifu likaGoogle, kwimeko yabo andazi nokuba liphi iqhosha lempendulo, kuba bekungekho mfuneko yalo. Kwaye ukuba kukho iingxaki eziye zenzeka, uGoogle ngokwakhe wathumela izaziso ngokuzimeleyo. Kodwa kwimeko ye-MCS, ndicinga ukuba inzuzo enkulu kukuba basondele kangangoko kunokwenzeka kubathengi baseRashiya - zombini ngokwejografi nangokwengqondo.

Sibona njani ukusebenza ngamafu kwixesha elizayo

Ngoku umsebenzi wethu unamathele ngokusondeleyo kwi-Kubernetes, kwaye iyasifanela ngokupheleleyo ukusuka kwindawo yokujonga imisebenzi yeziseko. Ngoko ke, asicebi ukufuduka kuyo naphi na, nangona sihlala sizisa izenzo ezintsha kunye neenkonzo ukwenza lula imisebenzi yesiqhelo kunye nokuzenzekelayo ezintsha, ukwandisa ukuzinza nokuthembeka kweenkonzo ... Ngoku siqalisa inkonzo ye-Chaos Monkey (ngokukodwa , sisebenzisa i-chaoskube, kodwa oku akutshintshi ingcamango : ), eyadalwa ekuqaleni yiNetflix. I-Chaos Monkey yenza into enye elula: isusa i-Kubernetes pod engahleliwe ngexesha elithile. Oku kuyimfuneko ukuze inkonzo yethu iphile ngokwesiqhelo ngenani leemeko ku-n-1, ngoko ke siyaziqeqesha ukuba silungele naziphi na iingxaki.

Ngoku ndibona ukusetyenziswa kwezisombululo zomntu wesithathu - iiplatifomu zamafu ezifanayo - njengeyona nto ifanelekileyo kwiinkampani ezincinci. Ngokuqhelekileyo, ekuqaleni kohambo lwabo, banqongophele kwizibonelelo, zombini abantu kunye nemali, kwaye ukwakha kunye nokugcina ifu labo okanye iziko ledatha kubiza kakhulu kwaye kufuna umsebenzi. Ababoneleli bamafu bayakuvumela ukuba unciphise ezi ndleko; unokufumana ngokukhawuleza kubo izixhobo eziyimfuneko ekusebenzeni kweenkonzo apha kwaye ngoku, kwaye uhlawule ezi zibonelelo emva kwenyani. Ngokuphathelele inkampani ye-URUS, siya kuhlala sithembekile ku-Kubernetes efini okwangoku. Kodwa ngubani owaziyo, kusenokufuneka ukuba sandise ngokwejografi, okanye siphumeze izisombululo ezisekelwe kwizixhobo ezithile. Okanye mhlawumbi isixa sezixhobo ezisetyenzisiweyo siyakuthethelela i-Kubernetes ngentsimbi engenanto, njengakwimihla yakudala. πŸ™‚

Yintoni esiyifundileyo ekusebenzeni kunye neenkonzo zefu

Saqala ukusebenzisa i-Kubernetes kwintsimbi engenanto, kwaye nalapho yayilungile ngendlela yayo. Kodwa amandla ayo atyhilwa ngokuchanekileyo njengenxalenye ye-aaS efini. Ukuba ubeka usukelo kwaye uzenzele yonke into ngokusemandleni, uya kuba nakho ukunqanda ukutshixwa kwabathengisi kwaye ukuhamba phakathi kwababoneleli ngamafu kuya kuthatha iiyure ezimbalwa, kwaye iiseli zemithambo-luvo ziya kuhlala nathi. Sinokucebisa ezinye iinkampani: ukuba ufuna ukuqalisa inkonzo yakho (yelifu), ukuba nezixhobo ezilinganiselweyo kunye nesantya esiphezulu sophuhliso, qala ngoku ngokuqesha izixhobo zamafu, kwaye wakhe iziko lakho ledatha emva kokuba uForbes ebhala ngawe.

umthombo: www.habr.com

Yongeza izimvo