I-Docker Swarm, i-Kubernetes, kunye ne-Mesos zezona zikhokelo ze-orchestration zesikhongozeli. Kwintetho yakhe, uArun Gupta uthelekisa le miba ilandelayo yeDocker, Swarm, kunye noKubernetes:
- Uphuhliso lwengingqi.
- Imisebenzi yokusasaza.
- Usetyenziso lwezikhongozeli ezininzi.
- Ukufunyanwa kwenkonzo.
- Ukwandisa inkonzo.
- Ukubaleka kube kanye imisebenzi.
- Ukudityaniswa neMaven.
- "Rolling" uhlaziyo.
- Ukudala iqela le-database ye-Couchbase.
Ngenxa yoko, uya kufumana ukuqonda okucacileyo kwesixhobo ngasinye seokhestra kwaye ufunde indlela yokusebenzisa la maqonga ngokufanelekileyo.
UArun Gupta yingcali yetekhnoloji eyintloko yeemveliso ezivulelekileyo kwiiNkonzo zeWebhu zeAmazon, obephuhlisa iLanga, iOracle, iRed Hat kunye nophuhliso loluntu lweCouchbase ngaphezulu kweminyaka eli-10. Unamava abanzi asebenza kumaqela aphambili asebenzayo aphuhlisa kwaye aphumeze isicwangciso samaphulo okuthengisa kunye neenkqubo. Ukhokele amaqela eenjineli ze-Sun, ungomnye wabasunguli beqela leJava EE kunye nomdali wesebe lase-US le-Devoxx4Kids. U-Arun Gupta ungumbhali wezithuba ezingaphezu kwamawaka angama-2 kwiiblogi ze-IT kwaye uye wanikela iintetho kumazwe angaphezu kwama-40.
Umgca we-55 uqulethe i-COUCHBASE_URI ekhomba kule nkonzo yesiseko sedatha, ekwaye yenziwa kusetyenziswa ifayile yoqwalaselo yeKubernetes. Ukuba ujonga kumgca 2, ungabona uhlobo: Inkonzo yinkonzo endiyenzayo ebizwa ngokuba yi-couchbase-service, kwaye kwa elo gama linye lidweliswe kumgca wesi-4. Apha ngezantsi kukho izibuko.
Imigca engundoqo ngu-6 kunye no-7. Kwinkonzo ndithi, "Heyi, ezi ziileyibhile endizifunayo!", kwaye ezi mibhalo aziyonto ngaphandle kwamagama ahlukeneyo, kunye nomgca we-7 amanqaku kwi-couchbase-rs-pod yam. isicelo. Oku kulandelayo ngamazibuko abonelela ngokufikelela kwezi mibhalo zifanayo.
Kumgca we-19 ndidala uhlobo olutsha lwe-ReplicaSet, umgca we-31 uqulethe igama lomfanekiso, kunye nemigca ye-24-27 ikhomba kwimethadatha ehambelana ne-pod yam. Yile nto kanye ijongwa yinkonzo kwaye kufuneka uqhagamshelo lwenziwe ngantoni. Ekupheleni kwefayile kukho uhlobo oluthile lonxibelelwano phakathi kwemigca 55-56 kunye ne-4, ethi: "sebenzisa le nkonzo!"
Ngoko ke, ndiqala inkonzo yam xa kukho isethi ye-replica, kwaye ekubeni isethi nganye ye-replica ine-port yayo kunye neleyibhile ehambelanayo, ifakiwe kwinkonzo. Ukusuka kwimbono yomphuhlisi, ubiza ngokulula inkonzo, ethi ke isebenzise iiseti zeekopi ozifunayo.
Ngenxa yoko, ndine-WildFly pod enxibelelana ne-backend yedatha nge-Couchbase Service. Ndingasebenzisa i-frontend kunye neepods ezininzi ze-WildFly, ezinxibelelana ne-backend ye-couchbase ngenkonzo ye-couchbase.
Kamva siza kujonga indlela inkonzo ebekwe ngaphandle kweqela inxibelelana ngayo ngedilesi yayo ye-IP enezinto ezingaphakathi kweqela kwaye zinedilesi ye-IP yangaphakathi.
Ke, izikhongozeli ezingenammiselo zilungile, kodwa kulungile kangakanani ukusebenzisa izikhongozeli ezisemgangathweni? Makhe sijonge kwiisetingi zesixokelelwano sezinto eziphathekayo, okanye izikhongozeli ezizingisileyo. Kwi-Docker, kukho iindlela ezi-4 ezahlukeneyo zokubeka ukugcinwa kwedatha omele unikele ingqalelo kuyo. Eyokuqala yi-Implicit Per-Container, okuthetha ukuba xa usebenzisa i-couchbase, i-MySQL okanye i-MyDB izikhongozeli ezihluthayo, zonke ziqala nge-Sandbox engagqibekanga. Oko kukuthi, yonke into egcinwe kwi-database igcinwa kwi-container ngokwayo. Ukuba isikhongozeli siyanyamalala, idatha iyanyamalala kunye nayo.
Okwesibini yi-Explicic Per-Container, xa udala indawo yokugcina kunye ne-docker volume yenza umyalelo kwaye ugcine idatha kuyo. Indlela yesithathu ye-Per-Host inxulumene nemephu yokugcina, xa yonke into egcinwe kwisikhongozeli iphinda iphindwe kwi-host host. Ukuba isikhongozeli siyasilela, idatha iya kuhlala kumamkeli. Le yokugqibela kukusetyenziswa kwemikhosi emininzi ye-Multi-Host, ecetyiswayo kwinqanaba lokuvelisa izisombululo ezahlukeneyo. Masithi izikhongozeli zakho kunye nezicelo zakho ziyasebenza kumamkeli, kodwa ufuna ukugcina idatha yakho kwenye indawo kwi-Intanethi, kwaye ngenxa yoku usebenzisa imephu ezenzekelayo kwiinkqubo ezisasazwayo.
Nganye kwezi ndlela isebenzisa indawo ethile yokugcina. Okucacileyo kunye nokuCacileyo kwi-Per-Container yokugcina idatha kumamkeli kwi-/var/lib/docker/volumes. Xa usebenzisa indlela ye-Per-Host, ukugcinwa kufakwe ngaphakathi kwisitya, kwaye isitya ngokwaso sifakwe kwi-host host. Kwiihostele ezininzi, izisombululo ezifana neCeph, ClusterFS, NFS, njl.
Ukuba isikhongozeli esizingileyo asiphumeleli, ulawulo logcino luba lungenakufikeleleka kwiimeko ezimbini zokuqala, kodwa kwiimeko ezimbini zokugqibela ukufikelela kugcinwa. Nangona kunjalo, kwimeko yokuqala, unokufikelela kwindawo yokugcina ngokusebenzisa umamkeli weDocker osebenza kumatshini obonakalayo. Kwimeko yesibini, idatha ayiyi kulahleka nokuba, kuba udale ukugcinwa okucacileyo.
Ukuba umphathi uyasilela, uvimba wogcino akafumaneki kwiimeko ezintathu zokuqala, uxhulumaniso kunye nokugcinwa aluphazamiseki. Ekugqibeleni, umsebenzi okwabelwana ngawo awubandakanyi ngokupheleleyo ukugcinwa kwimeko yokuqala kwaye kunokwenzeka kwezinye. Kwimeko yesibini, unokwabelana ngokugcinwa kuxhomekeke ekubeni i-database yakho ixhasa ukugcinwa okwabiwe okanye hayi. Kwimeko ye-Per-Host, ukuhanjiswa kwedatha kunokwenzeka kuphela kwinginginya enikiweyo, kwaye i-multihost inikezelwa ngokwandiswa kweqela.
Oku kufuneka kuthathelwe ingqalelo xa kusenziwa izikhongozeli ezisemgangathweni. Esinye isixhobo esiluncedo seDocker yiplagi yeVolume, esebenza kumgaqo "webhetri ekhoyo, kodwa kufuneka itshintshwe." Xa uqala isikhongozeli seDocker, ithi, "Heyi, nje ukuba uqale isikhongozeli esinesiseko sedatha, ungagcina idatha yakho kwesi sikhongozeli!" Olu luphawu olungagqibekanga, kodwa ungalutshintsha. Le plugin ikuvumela ukuba usebenzise idrayivu yenethiwekhi okanye into efanayo endaweni yesiseko sedatha yesikhongozeli. Ibandakanya umqhubi ongagqibekanga wokugcinwa kwe-host-based based storage kwaye ivumela ukuhlanganiswa kwesitya kunye neenkqubo zokugcina zangaphandle ezifana ne-Amazon EBS, i-Azure Storage kunye ne-GCE Persistent disks.
Isilayidi esilandelayo sibonisa uyilo lwe-plugin ye-Docker Volume.
Umbala oluhlaza okwesibhakabhaka umele umxhasi we-Docker onxulunyaniswa ne-Docker host eluhlaza, enenjini yokugcina yaseKhaya ekubonelela ngezikhongozeli zokugcina idatha. Uhlaza lubonisa iPlugin Client kunye nePlugin Daemon, ekwadityaniswe nayo kumamkeli. Banika ithuba lokugcina idatha kwi-network yokugcinwa kohlobo lwe-Storeji Backend oyifunayo.
I-plugin ye-Docker Volume ingasetyenziswa kunye nokugcinwa kwePortworx. Imodyuli ye-PX-Dev eneneni sisikhongozeli osiqhubayo esidibanisa nomgcini wakho weDocker kwaye ikuvumela ukuba ugcine idatha ngokulula kwiAmazon EBS.
Umxhasi wePortworx ikuvumela ukuba ujonge ubume bezikhongozeli ezahlukeneyo eziqhagamshelwe kumamkeli wakho. Ukuba undwendwela ibhlog yam, unokufunda indlela yokwenza uninzi lwePortworx ngeDocker.
Ingqikelelo yogcino eKubernetes iyafana neDocker kwaye imelwe zizikhokelo ezifikelelekayo kwisikhongozeli sakho kwipod. Zizimele kubomi baso nasiphi na isikhongozeli. Ezona ntlobo zogcino zixhaphakileyo zikhoyo yihostPath, nfs, awsElasticBlockStore, kunye negsePersistentDisk. Makhe sijonge indlela ezi venkile zisebenza ngayo eKubernetes. Ngokuqhelekileyo, inkqubo yokudibanisa iquka amanyathelo ama-3.
Eyokuqala kukuba umntu okwicala lomnatha, odla ngokuba ngumlawuli, ubonelela ngokugcina ngokuqhubekayo. Kukho ifayile yoqwalaselo yePersistentVolume ehambelana nale. Emva koko, umphuhlisi wesicelo ubhala ifayile yoqwalaselo ebizwa ngokuba yiPersistentVolumeClaim, okanye isicelo sokugcinwa kwePVC, esithi: "Ndine-50GB yendawo yokugcina enikezelweyo, kodwa ukuze abanye abantu basebenzise umthamo wayo, ndixelela le PVC ukuba ngoku. kufuneka kuphela i-10 GB". Ekugqibeleni, inyathelo lesithathu kukuba isicelo sakho sixhonywe njengendawo yokugcina, kwaye isicelo esine-pod, okanye i-replica set, okanye into efanayo, iqala ukuyisebenzisa. Kubalulekile ukukhumbula ukuba le nkqubo iquka amanyathelo ama-3 akhankanywe kwaye iyancipha.
Isilayidi esilandelayo sibonisa i-Kubernetes Persistence Container yoyilo lwe-AWS.
Ngaphakathi koxande olumdaka olumele i-Kubernetes cluster, kukho i-master node enye kunye neenodi zabasebenzi ezimbini, eziboniswe ngomthubi. Enye yeendawo zabasebenzi iqulethe i-pod ye-orange, isitoreji, isilawuli se-replica, kunye nesitya esiluhlaza se-Docker Couchbase. Ngaphakathi kweqela, ngaphezu kweendawo, uxande olumfusa lubonisa iNkonzo efumanekayo ngaphandle. Olu lwakhiwo luyacetyiswa ukugcina idatha kwisixhobo ngokwaso. Ukuba kuyimfuneko, ndinokugcina idatha yam kwi-EBS ngaphandle kweqela, njengoko kubonisiwe kwisilayidi esilandelayo. Lo ngumzekelo oqhelekileyo wokulinganisa, kodwa kukho inkalo yezemali ekufuneka iqwalaselwe xa uyisebenzisa - ukugcina idatha kwindawo ethile kwinethiwekhi kunokubiza kakhulu kunomkhosi. Xa ukhetha izisombululo zekhonteyina, le yenye yeengxoxo ezinobunzima.
Kanye njengeDocker, ungasebenzisa izikhongozeli eziqhubekayo zeKubernetes ngePortworx.
Oku koko kwisigama sangoku se-Kubernetes 1.6 kubizwa ngokuba yi-βStatefulSetβ-indlela yokusebenza ne-Stateful applications eqhuba iziganeko malunga nokumisa iPod kunye nokwenza iGraceful Shutdown. Kwimeko yethu, ezo zicelo zizigcinalwazi. Kwibhlog yam unokufunda indlela yokwenza iStatefulSet kwiKubernetes usebenzisa iPortworx.
Makhe sithethe ngenkalo yophuhliso. Njengoko benditshilo, i-Docker ineenguqulelo ze-2 - i-CE kunye ne-EE, kwimeko yokuqala sithetha ngoguqulelo oluzinzile loHlelo loLuntu, oluhlaziywa kanye kwiinyanga ezi-3, ngokungafaniyo nenguqu yenyanga ehlaziyiweyo ye-EE. Unokukhuphela iDocker yeMac, Linux okanye Windows. Nje ukuba ifakiwe, iDocker iya kuzihlaziya ngokuzenzekelayo kwaye kulula kakhulu ukuqalisa.
Kwi-Kubernetes, ndikhetha inguqulo ye-Minikube-yeyona ndlela ilungileyo yokuqalisa ngeqonga ngokwenza iqoqo kwindawo enye. Ukwenza iingqokelela zamaqela amaninzi, ukhetho lweenguqulelo lubanzi: ezi ziikops, kube-aws (CoreOS+AWS), kube-up (iphelelwe lixesha). Ukuba ujonge ukusebenzisa i-AWS-based Kubernetes, ndincoma ukujoyina i-AWS SIG, edibana ne-intanethi rhoqo ngoLwesihlanu kwaye ipapashe izinto ezahlukeneyo ezinomdla ekusebenzeni ne-AWS Kubernetes.
Makhe sijonge ukuba kwenziwa njani uHlaziyo lweRolling kula maqonga. Ukuba kukho iqoqo lamaqela amaninzi, ngoko isebenzisa inguqu ethile yomfanekiso, umzekelo, i-WildFly:1. Uhlaziyo oluqengqelekayo luthetha ukuba uguqulelo lomfanekiso lutshintshwa ngokulandelelanayo kunye nentsha kwindawo nganye, enye emva kwenye.
Ukwenza oku, ndisebenzisa uhlaziyo lwenkonzo ye-docker (igama lenkonzo) umyalelo, apho ndichaza inguqu entsha ye-WildFly: umfanekiso we-2 kunye nendlela yokuhlaziya uhlaziyo-i-parallelism 2. Inombolo ye-2 ithetha ukuba inkqubo iya kuhlaziya imifanekiso ye-2 yesicelo. ngexesha elifanayo, emva koko i-10-yesibini yokuhlaziya ukulibaziseka kwe-10s, emva koko imifanekiso emi-2 elandelayo iya kuhlaziywa kwii-nodes ezi-2, njl. Le ndlela ilula yokuhlaziya inikezelwa kuwe njengenxalenye yeDocker.
Kwi-Kubernetes, uhlaziyo oluqengqelekayo lusebenza ngolu hlobo. Isilawuli sokuphindaphinda i-rc yenza isethi yeekopi zoguqulelo olufanayo, kwaye ipod nganye kule webapp-rc inikwe ileyibhile ebekwe kwi etcd. Xa ndifuna i-pod, ndisebenzisa iNkonzo yeSicelo ukufikelela kwindawo yokugcina njll, endinika i-pod usebenzisa ileyibhile ekhankanyiweyo.
Kule meko, sinee-pods ezi-3 kwi-Replication controller eqhuba i-WildFly version ye-1 yesicelo Xa uhlaziywa ngasemva, omnye umlawuli wokuphindaphinda wenziwa kunye negama elifanayo kunye nesalathisi ekupheleni - xxxxx, apho x iinombolo ezingahleliweyo, kwaye. ezineeleyibhile ezifanayo. Ngoku iNkonzo yeSicelo inee-pods ezintathu kunye noguqulelo oludala lwesicelo kunye neepod ezintathu ezinenguqulelo entsha kwisilawuli esitsha sokuPhinda. Emva koko, iipods ezindala ziyacinywa, isilawuli sokuphindaphinda kunye neepods ezintsha zibizwa ngokutsha kwaye zisetyenziswe.
Masiqhubele phambili ekubekeni iliso. IDocker inemiyalelo emininzi eyakhelweyo yokubeka iliso. Umzekelo, i-docker container stats command line interface ikuvumela ukuba ubonise ulwazi malunga nemeko yezikhongozeli kwiconsole yonke isekhondi - usebenziso lomqhubekekisi, usebenziso lwediski, umthwalo womnatha. Isixhobo se-Docker Remote API sibonelela ngedatha malunga nendlela umxhasi anxibelelana ngayo nomncedisi. Isebenzisa imiyalelo elula, kodwa isekelwe kwi-Docker REST API. Kulo mzekelo, amagama athi REST, Flash, Remote athetha into enye. Xa unxibelelana nomamkeli, yi-REST API. I-Docker Remote API ikuvumela ukuba ufumane ulwazi oluninzi malunga nokuqhuba izikhongozeli. Ibhlog yam ichaza iinkcukacha zokusebenzisa olu hlolo ngeWindows Server.
Ukubeka iliso kwiziganeko zenkqubo yedocker xa uqhuba iqela lenginginya ezininzi kwenza kube lula ukufumana idata malunga nentlitheko yenginginya okanye ukuphahlazeka kwesikhongozeli kumamkeli othile, iinkonzo zokukala, nokunye okunjalo. Ukuqala nge-Docker 1.20, iquka i-Prometheus, edibanisa i-endpoints kwizicelo ezikhoyo. Oku kukuvumela ukuba ufumane i-metrics nge-HTTP kwaye ubonise kwiideshibhodi.
Olunye uphawu lokubeka iliso yi-cAdvisor (ifutshane kumcebisi wezikhongozeli). Ihlalutya kwaye ibonelela ngokusetyenziswa kwezixhobo kunye neenkcukacha zokusebenza ezivela kwizikhongozeli eziqhubayo, ukubonelela ngeemetriki zePrometheus ngaphandle kwebhokisi. Into ekhethekileyo malunga nesi sixhobo kukuba inika kuphela idatha kwimizuzwana engama-60 yokugqibela. Ngoko ke, kufuneka ukwazi ukuqokelela le datha kwaye uyibeke kwisiseko sedatha ukuze ukwazi ukubeka iliso kwinkqubo yexesha elide. Isenokusetyenziswa ukubonisa iimetriki zedeshibhodi ngomzobo usebenzisa iGrafana okanye iKibana. Ibhlog yam inenkcazo ecacileyo yendlela yokusebenzisa i-cAdvisor ukujonga izikhongozeli usebenzisa ideshibhodi yaseKibana.
Isilayidi esilandelayo sibonisa ukuba isiphumo se-Prometheus sijongeka njani kunye neemetrics ezikhoyo zokubonisa.
Emazantsi ekhohlo ubona iimetrics zezicelo zeHTTP, iimpendulo, njalo njalo., ekunene luboniso lwazo lomzobo.
I-Kubernetes ikwabandakanya izixhobo zokubeka iliso ezakhelwe ngaphakathi. Esi silayidi sibonisa iqela eliqhelekileyo elinenkosi enye kunye neendawo ezintathu zabasebenzi.
Indawo nganye esebenzayo iqulethe i-cAdvisor esungulwe ngokuzenzekelayo. Ukongeza, kukho i-Heapster, inkqubo yokubeka iliso yokusebenza kunye nenkqubo yokuqokelela i-metrics ehambelana ne-Kubernetes version 1.0.6 nangaphezulu. I-Heapster ikuvumela ukuba uqokelele kungekuphela nje iimethrikhi zokusebenza komthwalo wokusebenza, iipod kunye nezikhongozeli, kodwa kunye neziganeko kunye nezinye izibonakaliso eziveliswa yiqela lonke. Ukuqokelela idatha, ithetha kwi-pod's Kubelet nganye, igcina ngokuzenzekelayo ulwazi kwi-database ye-InfluxDB, kwaye ikhuphe njengeemethrikhi kwideshibhodi yaseGrafana. Nangona kunjalo, khumbula ukuba usebenzisa i-miniKube, eli nqaku alifumaneki ngokungagqibekanga, ke kuya kufuneka usebenzise i-addons ukubeka iliso. Ke yonke into ixhomekeke apho uqhuba khona izikhongozeli kwaye zeziphi izixhobo zokubeka iliso onokuzisebenzisa ngokuzenzekelayo kwaye kufuneka uzifake njengezongezo ezahlukeneyo.
Isilayidi esilandelayo sibonisa iideshibhodi zaseGrafana ezibonisa ubume bokuqhuba kwezikhongozeli zam. Kukho idatha eninzi enomdla apha. Ewe kunjalo, zininzi izixhobo zokujonga inkqubo ye-Docker kunye ne-Kubernetes, njengeSysDig, iDataDog, iNewRelic. Abanye babo banexesha leminyaka engama-30 yesilingo sasimahla, ke unokuzama ukufumana eyona ikufaneleyo. Ngokomntu, ndikhetha ukusebenzisa iSysDig kunye neNewRelic, edibanisa kakuhle neKubernetes. Kukho izixhobo ezidibanisa ngokulinganayo kuwo omabini amaqonga eDocker kunye neKubernetes.
Ezinye iintengiso π
Enkosi ngokuhlala nathi. Ngaba uyawathanda amanqaku ethu? Ngaba ufuna ukubona umxholo onomdla ngakumbi? Sixhase ngokufaka iodolo okanye ngokucebisa abahlobo, , i-analogue eyodwa yeeseva zomgangatho wokungena, eyenzelwe wena: (ifumaneka nge-RAID1 kunye ne-RAID10, ukuya kuthi ga kwi-24 cores kunye ne-40GB DDR4).
Dell R730xd 2x ngexabiso eliphantsi kwiziko ledatha le-Equinix Tier IV eAmsterdam? Kuphela apha eNetherlands! Dell R420 - 2x E5-2430 2.2Ghz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB - ukusuka $99! Funda malunga
umthombo: www.habr.com