Ngobusuku bangaphambi kwe Vitaly Khabarov udliwano-ndlebe NguDmitry Stolyarov (), umlawuli wezobugcisa kunye nomseki wenkampani yeFlant. UVitaly wabuza uDmitry malunga nento eyenziwa nguFlant, malunga neKubernetes, uphuhliso lwe-ecosystem, inkxaso. Sixoxe ngokuba kutheni i-Kubernetes idingeka kwaye ingaba iyafuneka kwaphela. Kwaye malunga nee-microservices, i-Amazon AWS, indlela ethi "Ndizakuba nethamsanqa" kwi-DevOps, ikamva le-Kubernetes ngokwayo, kutheni, nini kwaye njani izakuthatha umhlaba, amathemba e-DevOps kwaye yintoni iinjineli ekufuneka zilungiselele yona eliqaqambileyo kunye nekamva elikufuphi ngokwenza lula kunye nothungelwano lwe-neural.
mamela kwifom ye-podcast kwi-DevOps Deflop - i-podcast yolwimi lwesiRashiya malunga ne-DevOps, kwaye ngezantsi inguqulelo yombhalo.
Apha nangaphantsi ubuza imibuzo injineli evela Express42.
Malunga ne "Flant"
-Molo Dima. Ungumlawuli wezobugcisa "β kunye nomseki wayo. Nceda usixelele ukuba inkampani yenza ntoni kwaye uyintoni kuyo?
Dmitry: Ukusuka ngaphandle kubonakala ngathi singabafana abahambahambayo befaka i-Kubernetes kumntu wonke kwaye senze into ngayo. Kodwa oku akuyonyani. Saqala njengenkampani ejongene neLinux, kodwa ixesha elide kakhulu umsebenzi wethu ophambili ubunikezela ngemveliso kunye neeprojekthi zomthwalo ophezulu. Ngokwesiqhelo sakha isiseko sonke ukusuka ekuqaleni kwaye ke sinoxanduva lwalo ixesha elide, elide. Ngoko ke, umsebenzi oyintloko owenziwa "Flant", apho ifumana khona imali ukuthatha uxanduva kunye nokuphumeza imveliso ye-turnkey.
Mna, njengomlawuli wezobugcisa kunye nomnye wabasunguli benkampani, ndichitha imini yonke nobusuku ndizama ukuqonda indlela yokwandisa ukufikeleleka kwemveliso, ukwenza lula ukusebenza kwayo, ukwenza ubomi babalawuli bube lula, kwaye ndenze ubomi babaphuhlisi ngakumbi. eyonwabisayo.
Malunga neKubernetes
- Kutshanje ndiye ndabona iingxelo ezininzi ezivela kwi "Flant" kunye malunga neKubernetes. Uze njani kuye?
Dmitry: Sele ndithethile ngale nto amaxesha amaninzi, kodwa andikhathali ukuyiphinda konke konke. Ndicinga ukuba kulungile ukuphinda esi sihloko kuba kukho ukudideka phakathi kwesizathu kunye nesiphumo.
Sasisidinga ngokwenene isixhobo. Sajongana neengxaki ezininzi, sazabalaza, sazoyisa ngeentonga ezahlukahlukeneyo kwaye saziva sifuna isixhobo. Siye sahamba ngeendlela ezininzi ezahlukeneyo, sakha iibhayisekile zethu, kwaye safumana amava. Ngokuthe ngcembe safika kwinqanaba apho saqala khona ukusebenzisa iDocker ngokukhawuleza nje ukuba ivele - malunga no-2013. Ngexesha lokubonakala kwayo, sasisele sinamava amaninzi malunga nezikhongozeli, sele sibhale i-analogue ye "Docker" - ezinye zeentonga zethu kwiPython. Ngokufika kukaDocker, kuye kwenzeka ukuba kuphoswe iintonga kwaye kusetyenziswe isisombululo esithembekileyo nesixhaswa ngabahlali.
NgeKubernetes ibali liyafana. Ngexesha iqalisa ukuba nomfutho - kuthi le yinguqulo 1.2 - besele sinenqwaba yeentonga kuShell nakuChef, esithe ngandlel' ithile sazama ukuyidibanisa noDocker. Besijonge nzulu kwiRancher kunye nezinye izisombululo ezahlukeneyo, kodwa emva koko uKubernetes wavela, apho yonke into iphunyezwa kanye njengoko besinokwenza, okanye ngcono. Akukho nto inokukhalaza ngayo.
Ewe, kukho uhlobo oluthile lokungafezeki apha, kukho uhlobo oluthile lokungafezeki - kukho ukungafezeki okuninzi, kwaye i-1.2 ngokuqhelekileyo iyoyikeka, kodwa ... I-Kubernetes ifana nesakhiwo esakhiwayo - ujonge iprojekthi kwaye uqonde. ukuba kuya kuba lula. Ukuba isakhiwo ngoku sinesiseko kunye nemigangatho emibini, ngoko uyaqonda ukuba kungcono ukuba ungaqhubeki okwangoku, kodwa akukho zingxaki ezinjalo kunye nesofthiwe - ungayisebenzisa kakade.
Asizange sibe namzuzu apho sicinge ngokusebenzisa iKubernetes okanye hayi. Sasiyilindile ixesha elide ngaphambi kokuba ivele, kwaye sazama ukwenza ii-analogues ngokwethu.
Malunga neKubernetes
- Ngaba ubandakanyeka ngokuthe ngqo kuphuhliso lweKubernetes ngokwayo?
Dmitry: Phakathi. Endaweni yoko, sithatha inxaxheba kuphuhliso lwe-ecosystem. Sithumela inani elithile lezicelo zokutsalwa: kwiPrometheus, kubaqhubi abahlukeneyo, kwiHelm - kwi-ecosystem. Ngelishwa, andikwazi ukugcina umkhondo wayo yonke into esiyenzayo kwaye ndingaphazama, kodwa asinalo iphuli enye engundoqo.
- Kwangaxeshanye, ngaba uyaphuhlisa uninzi lwezixhobo zakho ezijikeleze iKubernetes?
Dmitry: Iqhinga leli: siyahamba sitsale izicelo kuyo yonke into esele ikhona. Ukuba izicelo zokutsalwa azamkelwa apho, sisuka nje sizifake ngefolokhwe kwaye siphile de zamkelwe ngolwakhiwo lwethu. Emva koko, xa ifika phezulu, sibuyela kwinguqulo ephezulu.
Umzekelo, sinomqhubi we-Prometheus, apho sitshintshele emva naphambili ukuya phezulu kwindibano yethu mhlawumbi amaxesha angama-5. Sidinga uhlobo oluthile lwenqaku, sithumele isicelo sokutsalwa, kufuneka siyikhuphe ngomso, kodwa asifuni ukulinda ukuba ikhululwe phezulu. Ngokunjalo, siyazihlanganisa ngokwethu, sikhuphe indibano yethu kunye nenqaku lethu, esilidingayo ngesizathu esithile, kuwo onke amaqela ethu. Emva koko, umzekelo, ekuphakameni komlambo basiphendulela kuthi ngamagama athi: "Madoda, masenzeni ngetyala eliqhelekileyo," thina, okanye omnye umntu, sigqibe, kwaye ekuhambeni kwexesha sidibanisa kwakhona.
Sizama ukuphuhlisa yonke into ekhoyo.. Izinto ezininzi ezingekabikho, ezingekayilwa, okanye ezingekayilwa, kodwa ezingekabinalo ixesha lokuziphumeza - siyayenza. Kwaye hayi ngenxa yokuba sithanda inkqubo okanye ukwakhiwa kwebhayisekile njengeshishini, kodwa ngenxa yokuba sifuna esi sixhobo. Umbuzo uhlala ubuzwa, kutheni senze le nto okanye leya nto? Impendulo ilula - ewe, kuba kwafuneka siqhubele phambili, sisombulule ingxaki ethile, kwaye siyisombulule ngale tula.
Umendo uhlala unje: sikhangela ngenyameko kwaye ukuba asifumani sisombululo malunga nendlela yokwenza i-trolleybus kwisonka sesonka, ngoko sizenzele isonka kunye ne-trolleybus yethu.
Izixhobo zeFlanta
- Ndiyazi ukuba iFlant ngoku inabasebenzisi be-addon, abaqhubi beqokobhe, kunye nezixhobo ze-dapp/werf. Njengoko ndiqonda, esi sisixhobo esifanayo kwiincarnations ezahlukeneyo. Ndikwayaqonda ukuba kukho izixhobo ezininzi ezahlukeneyo ngaphakathi kweFlaunt. Lena Yinyaniso?
Dmitry: Sinezinto ezininzi kwi-GitHub. Ngokusuka kwinto endiyikhumbulayo ngoku, sinemephu yesimo-iphaneli yaseGrafana athe wonke umntu wadibana nayo. Ikhankanywe phantse kwinqaku ngalinye lesibini malunga nokubeka iliso kwe-Kubernetes kwi-Medium. Akunakwenzeka ukucacisa ngokufutshane ukuba yintoni imephu yesimo-idinga inqaku elahlukileyo, kodwa yinto eluncedo kakhulu ekubekeni iliso ixesha elide, kuba kwi-Kubernetes sihlala sifuna ukubonisa isimo ngokuhamba kwexesha. Sikwanayo neLogHouse, into esekwe kwiClickHouse kunye nomlingo omnyama wokuqokelela izingodo kwiKubernetes.
Zininzi izinto eziluncedo! Kwaye kuya kubakho ngakumbi, kuba inani lezisombululo zangaphakathi liya kukhutshwa kulo nyaka. Kwaba bakhulu kakhulu ngokusekelwe kumqhubi we-addon, kukho iqela le-addons ye-Kubernetes, ala indlela yokufaka ngokufanelekileyo umphathi we-sert - isixhobo sokulawula izatifikethi, indlela yokufaka ngokuchanekileyo i-Prometheus kunye neqela lezesekeli - ezi zimalunga namashumi amabini ahlukeneyo. iibhinari ezithumela ngaphandle idatha kwaye ziqokelele into yale Prometheus ineyona mizobo imangalisayo kunye nezilumkiso. Konke oku liqela nje lee-addons kwi-Kubernetes, ezibekwe kwiqela, kwaye lijika lisuka kwizinto ezilula ukuya kupholile, eziphucukileyo, ezizenzekelayo, apho imiba emininzi sele isonjululwe. Ewe, kuninzi esikwenzayo.
Uphuhliso lwe-ecosystem
- Kum kubonakala ngathi eli ligalelo elikhulu kakhulu ekuphuhlisweni kwesi sixhobo kunye neendlela zokusetyenziswa. Ngaba ungaqikelela ukuba ngubani omnye oza kwenza igalelo elifanayo kuphuhliso lwe-ecosystem?
Dmitry: ERashiya, kwiinkampani ezisebenza kwimarike yethu, akukho mntu usondeleyo. Ngokuqinisekileyo, le yintetho evakalayo, kuba kukho abadlali abakhulu abafana ne-Mail kunye ne-Yandex - nabo benza into kunye ne-Kubernetes, kodwa nabo abasondeli kwigalelo leenkampani zehlabathi ezenza ngaphezu kwethu. Kunzima ukuthelekisa i-Flant kunye nabasebenzi be-80 kunye ne-Red Hat, eneenjineli ze-300 nge-Kubernetes yodwa, ukuba andiyiphutha. Kunzima ukuthelekisa. Sinabantu aba-6 kwisebe leRnD, kuquka nam, abasike zonke izixhobo zethu. Abantu abayi-6 ngokuchasene neenjineli ezingama-300 ze-Red Hat-kunzima ukuthelekisa.
- Nangona kunjalo, xa naba bantu ba-6 banokwenza into eluncedo ngokwenene kwaye bahlukane, xa bejongene nengxaki ebonakalayo kwaye banike isisombululo kuluntu - ityala elinomdla. Ndiyaqonda ukuba kwiinkampani ezinkulu zeteknoloji, apho banophuhliso lwabo kunye neqela lenkxaso ye-Kubernetes, ngokomgaqo, izixhobo ezifanayo zinokuphuhliswa. Lo ngumzekelo kubo wento enokuthi iphuhliswe kwaye inikwe uluntu, inike amandla kuluntu lonke olusebenzisa i-Kubernetes.
Dmitry: Oku mhlawumbi luphawu lomhlanganisi, ubugqwirha bayo. Sineeprojekthi ezininzi kwaye sibona iimeko ezininzi ezahlukeneyo. Kithina, indlela ephambili yokudala ixabiso elongezelelweyo kukuhlalutya la matyala, ukufumana izinto eziqhelekileyo kwaye uzenze zibe zincinci kangangoko kunokwenzeka kuthi. Le yinto esiyisukela ngenkuthalo. Kunzima kum ukuthetha ngeRussia kunye nehlabathi, kodwa malunga neenjineli ze-DevOps ezimalunga nama-40 kwinkampani ezisebenza eKubernetes. Andicingi ukuba kukho iinkampani ezininzi eRashiya ezinenani elilinganayo leengcali eziqonda i-Kubernetes, ukuba zikhona.
Ndiyayiqonda yonke into malunga nesihloko somsebenzi injineli ye-DevOps, wonke umntu uyayiqonda yonke into kwaye usetyenziselwa ukubiza iinjineli ze-DevOps iinjineli ze-DevOps, asiyi kuxoxa ngale nto. Zonke ezi njineli ezingama-40 zeDevOps zijongene neengxaki kwaye zizisombulule yonke imihla, sihlalutya nje la mava kwaye sizame ukuwenza ngokubanzi. Siyaqonda ukuba ukuba ihlala ngaphakathi kwethu, ngoko ngonyaka okanye ezimbini isixhobo siya kuba singenamsebenzi, kuba kwindawo ethile kuluntu kuya kuvela iTula esele ilungile. Akukho sizathu sokuqokelela la mava ngaphakathi - kukukhupha amandla kunye nexesha kwi-dev/null. Kwaye asinasizi konke konke. Sipapasha yonke into ngovuyo olukhulu kwaye siyaqonda ukuba kufuneka ipapashwe, iphuhliswe, ikhuthazwe, ikhuthazwe, ukuze abantu bayisebenzise kwaye bongeze amava abo - ke yonke into ikhula kwaye iphile. Emva koko, emva kweminyaka emibini, isixhobo asiyi kwimfumba yenkunkuma. Akusiyo imfesane ukuqhubeka nokuthulula ngamandla, kuba kuyacaca ukuba umntu usebenzisa isixhobo sakho, kwaye emva kweminyaka emibini wonke umntu uyayisebenzisa.
Le yinxalenye yesicwangciso sethu esikhulu nge-dapp/werf. Andikhumbuli xa saqala ukuyenza, kubonakala ngathi iminyaka eyi-3 edlulileyo. Ekuqaleni, yayihlala kwiqokobhe. Yayibubungqina obubalaseleyo bengcinga, sazisombulula ezinye zeengxaki zethu zabucala - isebenzile! Kodwa kukho iingxaki kunye negobolondo, akunakwenzeka ukwandisa ngakumbi, ukucwangcisa kwiqokobhe ngomnye umsebenzi. Sasinomkhwa wokubhala eRuby, ngokufanelekileyo, kwiRuby sakha kwakhona into, siphuhlisiwe, siphuhlisiwe, saphuhliswa, kwaye sabalekela kwinto yokuba uluntu, isihlwele esingathethi "nokuba siyafuna okanye asifuni," siyajika. Impumlo yayo kuRuby nokuba ihlekisa kangakanani na. Siye sabona ukuba kufuneka sibhale zonke ezi zinto ku-Go ukuze sihlangabezane nenqaku lokuqala kuluhlu lokukhangela: Isixhobo se-DevOps kufuneka sibe yibhinari engatshintshiyo. Ukusebenzisa iGo okanye ukungasebenzisi iGo akubalulekanga kangako, kodwa ibhinary engatshintshiyo ebhalwe kwiGo ingcono.
Sachitha amandla ethu, sabhala kwakhona i-dapp kwi-Go sayibiza ngokuba yi-werf. I-Dapp ayisaxhaswa, ayiphuhliswanga, isebenza kuguqulelo lwamva nje, kodwa kukho indlela yokuphucula ngokupheleleyo ukuya phezulu, kwaye ungayilandela.
Kwakutheni ukuze idapp idalwe?
β Ngaba ungasixelela ngokufutshane ukuba kutheni i-dapp yadalwa, zeziphi iingxaki ezisombululayo?
Dmitry: Isizathu sokuqala yindibano. Ekuqaleni, sasineengxaki ezinzulu ngokwakha xa i-Docker ingenawo amandla amanqanaba amaninzi, kwaye senze izigaba ezininzi ngokwethu. Emva koko saba nemiba emininzi ngokucoca imifanekiso. Wonke umntu owenza i-CI / CD, ngokukhawuleza kunokuba kamva, ujongene nengxaki yokuba kukho inqwaba yemifanekiso eqokelelweyo, kuyimfuneko ngandlela-thile ukucoca into engadingekiyo kwaye ushiye into efunekayo.
Isizathu sesibini kukusasazwa. Ewe, kukho iHelm, kodwa isombulula ezinye zeengxaki kuphela. Nokuba ihlekisa kangakanani, kubhaliwe kwathiwa "uHelm nguMphathi wePackage yeKubernetes." Kanye yintoni "i". Kukwakho amagama athi "Umphathi wepakethi" - yintoni into eqhelekileyo elindelekileyo kuMphathi wePakeji? Sithi, "Umphathi wePackage - zisa ipakethe!" kwaye silindele ukuba asixelele: βIpasile ipasile.β
Kuyathakazelisa ukuba sithi: "Helm, faka iphakheji," kwaye xa ephendula ukuba uyifakile, kwavela ukuba uqalise ukufakela - wabonisa uKubernetes: "Qalisa le nto!", nokuba iqalile okanye ayiqali. , nokuba iyasebenza okanye hayi , iHelm ayiwusombululi lo mba kwaphela.
Kuyavela ukuba iHelm yiprosesa yangaphambi kokubhaliweyo elayisha idatha kwiKubernetes.
Kodwa njengenxalenye yalo naluphi na ukuthunyelwa, sifuna ukwazi ukuba ngaba isicelo sikhutshwe kwimveliso okanye hayi? Ukukhutshwa kwi-prod kuthetha ukuba isicelo sifudukele apho, inguqulelo entsha isetyenzisiwe, kwaye ubuncinci ayingqubani apho kwaye iphendule ngokuchanekileyo. IHelm ayisombululi le ngxaki nangayiphi na indlela. Ukuyicombulula, kufuneka uchithe umzamo omkhulu, kuba kufuneka unike i-Kubernetes umyalelo wokukhupha kunye nokubeka iliso okwenzekayo apho - nokuba isetyenziswe okanye ikhutshwe. Kwaye kukho neqela lemisebenzi enxulumene nokuthunyelwa, ukucoca, kunye nokuhlanganisa.
Izicwangciso
Kulo nyaka siza kungena nakuphuhliso lwasekhaya. Sifuna ukufezekisa into ebikade ikwiVagrant - sichwetheze "vagrant up" kwaye sahambisa oomatshini ababonakalayo. Sifuna ukufikelela kwindawo apho kukho iprojekthi kwi-Git, sibhala "i-werf up" apho, kwaye ithatha ikopi yendawo yale projekthi, isetyenziswe kwi-mini-Kub yendawo, kunye nazo zonke izikhokelo ezilungele uphuhliso ezixhunyiwe. Ngokuxhomekeke kulwimi lophuhliso, oku kwenziwa ngokuhlukileyo, kodwa nangona kunjalo, ukuze ukwazi ukuqhuba ngokufanelekileyo uphuhliso lwendawo phantsi kweefayile eziphakanyisiweyo.
Inyathelo elilandelayo kuthi ku tyala imali kumphuhlisi wobuhlobo. Ukuhambisa ngokukhawuleza iprojekthi kwindawo ngesixhobo esinye, ukuyiphuhlisa, ukuyityhalela kwi-Git, kwaye iya kuphuma kwinqanaba okanye kwiimvavanyo, ngokuxhomekeke kwimibhobho, kwaye emva koko usebenzise isixhobo esifanayo ukuya kwimveliso. Olu bumbano, umanyano, ukuveliswa kwakhona kweziseko ezingundoqo ukusuka kwindawo yendawo ukuya kwiintengiso yinto ebaluleke kakhulu kuthi. Kodwa oku akukafumaneki kwi-werf - sicwangcisa ukwenza njalo.
Kodwa indlela eya kwi-dapp/werf ibisoloko ifana ne-Kubernetes ekuqaleni. Siye sadibana neengxaki, sazisombulula sisebenzisa iindlela zokusebenza - size nezisombululo zethu sisebenzisa iqokobhe, sisebenzisa nantoni na. Emva koko bazama ngandlela ithile ukulungisa, ukwenza ngokubanzi kunye nokudibanisa ezi ndlela zokusebenza zibe ngamabini kule meko, esabelana ngayo ngokulula.
Kukho enye indlela yokujonga eli bali lonke, kunye nezifaniso.
IKubernetes sisikhokelo semoto esinenjini. Akukho zingcango, akukho glasi, akukho radio, akukho mthi weKrismesiβakukho nto kwaphela. Kuphela isakhelo kunye nenjini. Kwaye kukho iHelm-livili lokuqhuba. Kupholile - kukho ivili lokuqhuba, kodwa kufuneka kwakhona iphini lokuqhuba, i-rack, i-gearbox kunye namavili, kwaye awukwazi ukwenza ngaphandle kwabo.
Kwimeko ye-werf, eli lelinye icandelo kwi-Kubernetes. Kuphela ngoku kuguqulelo lwethu lwe-alpha ye-werf, umzekelo, iHelm iqulunqwe ngaphakathi kwi-werf, kuba sidiniwe kukwenza ngokwethu. Zininzi izizathu zokwenza oku, ndiza kukuxelela ngokweenkcukacha malunga nokuba kutheni sihlanganise yonke ihelm kunye ne-tiller yangaphakathi ye-werf. .
Ngoku i-werf licandelo elidityanisiweyo ngakumbi. Sifumana ivili lokuqhuba eligqityiweyo, ipini yokuqhuba - andikho kakuhle kwiimoto, kodwa le yibhloko enkulu esele isombulula uluhlu olubanzi lweengxaki. Akuyomfuneko ukuba sinyuke kwikhathalogu ngokwethu, sikhethe inxalenye enye kwenye, sicinge ngendlela yokuyijija omnye komnye. Sifumana umdibaniso osele ulungile osombulula inani elikhulu leengxaki kanye. Kodwa ngaphakathi yenziwe ngezinto ezifanayo zomthombo ovulekileyo, isasebenzisa iDocker yokuhlanganisa, iHelm kwezinye izinto zokusebenza, kwaye kukho nezinye iilayibrari ezininzi. Esi sixhobo esidibeneyo sokufumana i-CI / CD epholileyo ngaphandle kwebhokisi ngokukhawuleza nangokufanelekileyo.
Ngaba kunzima ukugcina i-Kubernetes?
-Uthetha ngamava akho oqale ukusebenzisa i-Kubernetes, esi sisikhokelo sakho, i-injini, kwaye unokuncamathisela izinto ezininzi ezahlukeneyo kuyo: umzimba, ivili lokuqhuba, isijiva kwiipedali, izihlalo. Umbuzo ngulo, inzima kangakanani inkxaso kaKubernetes kuwe? Unamava amaninzi, lingakanani ixesha kunye nezixhobo ozichithayo ekuxhaseni uKubernetes eyedwa kuyo yonke enye into?
Dmitry: Lo ngumbuzo onzima kakhulu kwaye ukuphendula kufuneka siqonde ukuba yintoni inkxaso kunye nento esiyifunayo kuKubernetes. Mhlawumbi uyakuyityhila?
-Ngokokwazi kwam nanjengoko ndibonayo, ngoku amaqela amaninzi afuna ukuzama iKubernetes. Wonke umntu uyazibophelela kuyo, ayibeke emadolweni. Ndivakalelwa kukuba abantu abasoloko bekuqonda ukuntsonkotha kwale nkqubo.
Dmitry: Injalo.
- Kunzima kangakanani ukuthatha kunye nokufaka i-Kubernetes kwinto engekhoyo ukwenzela ukuba imveliso ilungile?
Dmitry: Ucinga ukuba kunzima kangakanani ukufakela intliziyo? Ndiyaqonda ukuba lo ngumbuzo olalanisayo. Ukusebenzisa i-scalpel kwaye ungenzi mpazamo akunzima kangako. Ukuba bakuxelela ukuba unqumle phi kwaye uthunge phi, ke inkqubo ngokwayo ayinzima. Kunzima ukuqinisekisa ixesha emva kwexesha ukuba yonke into iya kulunga.
Ukufakela i-Kubernetes kwaye isebenze kulula: chik! β Ifakelwe, zininzi iindlela zokufakela. Kodwa kwenzeka ntoni xa kuvela iingxaki?
Imibuzo ihlala iphakama: yintoni esingakhange siyithathele ingqalelo okwangoku? Yintoni esingekayenzi? Yeyiphi i-Linux kernel parameters echazwe ngokungachanekanga? Nkosi, ngaba siwakhombile na?! Ngawaphi amacandelo e-Kubernetes esiwahambisileyo kwaye leliphi esingakhange silizise? Amawaka emibuzo avela, kwaye ukuyiphendula, kufuneka uchithe iminyaka eyi-15-20 kule shishini.
Ndinomzekelo wamva nje kwesi sihloko onokutyhila intsingiselo yengxaki "Ngaba kunzima ukugcina i-Kubernetes?" Ngexesha elidlulileyo sacinga nzulu ukuzama ukuphumeza iCilium njengenethiwekhi eKubernetes.
Makhe ndichaze ukuba yintoni na iKiliyom. Kukho ukuphunyezwa okuninzi okwahlukeneyo kwenkqubo engaphantsi yothungelwano eKubernetes, kwaye enye epholileyo kakhulu yiCilium. Iyintoni intsingiselo yawo? Kwi-kernel, kwixesha elidlulileyo liye lakwazi ukubhala amagwegwe e-kernel, ethi ngandlel 'ithile ihlasele i-subsystem yothungelwano kunye nezinye iindlela ezisezantsi ezisezantsi, kwaye ikuvumela ukuba ugqithe iinqununu ezinkulu kwi-kernel.
I-Linux kernel ngokwembali inendlela ye-ip, isihluzi esingaphezulu, iibhulorho kunye nezinto ezininzi ezahlukeneyo ezindala ezineminyaka eyi-15, engama-20, engama-30 ubudala. Ngokubanzi, basebenza, yonke into ilungile, kodwa ngoku baqokelele izitya, kwaye kubonakala ngathi inqaba yezitena ezili-15 phezu komnye, kwaye ume phezu kwayo emlenzeni omnye - imvakalelo engaqhelekanga. Le nkqubo iye yavela ngokwembali ngama-nuances amaninzi, njenge-appendix emzimbeni. Kwezinye iimeko kukho iingxaki ngokusebenza, umzekelo.
Kukho i-BPF emangalisayo kunye nokukwazi ukubhala iigwegwe ze-kernel - abafana babhala amakhonkco abo kwi-kernel. Iphakheji ingena kwi-Linux kernel, bayikhupha ngqo kwigalelo, bayiqhube ngokwabo njengoko bekufanele ngaphandle kweebhulorho, ngaphandle kwe-TCP, ngaphandle kwe-IP stack - ngokufutshane, ukudlula yonke into ebhaliweyo kwi-Linux kernel, kwaye emva koko batshice. ngaphandle kwisitya.
Kweneke ntoni? Ukusebenza okuhle kakhulu, iimpawu ezipholileyo-zipholile nje! Kodwa sijonga oku kwaye sibone ukuba kumatshini ngamnye kukho inkqubo edibanisa kwi-Kubernetes API kwaye, ngokusekelwe kwidatha eyifumanayo kule API, ivelisa ikhowudi yeC kwaye iqulunqa iibhinari ezilayisha kwi-kernel ukuze ezi zikhonkco zisebenze. kwindawo yekernel.
Kwenzeka ntoni xa kukho into engahambi kakuhle? Asazi. Ukuze uqonde oku, kufuneka ufunde yonke le khowudi, uqonde yonke ingqiqo, kwaye kuyamangalisa ukuba kunzima kangakanani. Kodwa, kwelinye icala, kukho ezi bhulorho, izihluzi zenetha, iindlela ze-ip - andifundanga iikhowudi zabo zomthombo, kunye neenjineli ezingama-40 ezisebenza kwinkampani yethu nazo. Mhlawumbi bambalwa abaziqondayo iindawo ezithile.
Kwaye yintoni umahluko? Kuyavela ukuba kukho indlela ye-ip, i-Linux kernel, kwaye kukho isixhobo esitsha - yintoni umahluko oyenzayo, asiyiqondi enye okanye enye. Kodwa siyoyika ukusebenzisa into entsha - ngoba? Ngenxa yokuba ukuba isixhobo sineminyaka engama-30 ubudala, emva kweminyaka engama-30 zonke iibhugi zifunyenwe, zonke iimpazamo ziye zanyathelwa kwaye awudingi ukwazi malunga nayo yonke into - isebenza njengebhokisi elimnyama kwaye ihlala isebenza. Wonke umntu uyazi ukuba yeyiphi i-screwdriver yokuxilonga ekufuneka inamathele kuyo, yeyiphi i-tcpdump enokuqhutywa ngowuphi umzuzu. Wonke umntu uyazi kakuhle izixhobo zokuxilonga kwaye uyayiqonda indlela le seti yamacandelo esebenza ngayo kwi-Linux kernel - hayi indlela esebenza ngayo, kodwa indlela yokuyisebenzisa.
Kwaye i-Cilium epholileyo emangalisayo ayikho iminyaka engama-30 ubudala, ayikavuthwa okwangoku. U-Kubernetes unengxaki efanayo, ikopi. Leyo Cilium isebenza kakuhle, ukuba i-Kubernetes isebenza kakuhle, kodwa xa kukho into engalunganga kwimveliso, ngaba unako ukuqonda ngokukhawuleza kwimeko enzima ukuba yintoni ephosakeleyo?
Xa sisithi kunzima ukugcina uKubernetes - hayi, kulula kakhulu, kwaye ewe, kunzima kakhulu. I-Kubernetes isebenza kakuhle iyodwa, kodwa ngeebhiliyoni zeenuances.
Malunga nendlela ethi "Ndizakuba nethamsanqa".
- Ngaba kukho iinkampani apho la ma-nuances aphantse aqinisekiswe ukuba avele? Masithi i-Yandex itshintshe ngokukhawuleza zonke iinkonzo kwi-Kubernetes, kuya kubakho umthwalo omkhulu apho.
Dmitry: Hayi, le ncoko malunga nomthwalo, kodwa malunga nezinto ezilula. Umzekelo, sinoKubernetes, sithumele isicelo apho. Wazi njani ukuba iyasebenza? Akukho sixhobo esenziweyo ukuba siqonde ukuba usetyenziso aluphanzi. Akukho sixokelelwano esenziweyo esithumela izilumkiso; kufuneka uqwalasele ezi zilumkiso kunye neshedyuli nganye. Kwaye sihlaziya iKubernetes.
NdinoBuntu 16.04. Unokuthi le yinguqulelo yakudala, kodwa sisekuyo kuba yi-LTS. Kukho i-systemd, i-caveat yokuba ayicoci amaqela e-C. I-Kubernetes isungula ii-pods, yenza amaqela e-C, emva koko icime ii-pods, kwaye ngandlela-thile ivele-andikhumbuli iinkcukacha, uxolo-ukuba izilayi ze-systemd zihlala. Oku kukhokelela ekubeni ekuhambeni kwexesha nayiphi na imoto iqala ukucotha ngamandla. Lo ayingombuzo malunga nokulayisha okuphezulu. Ukuba iipods eziqhubekayo ziqaliswa, umzekelo, ukuba kukho i-Cron Job ehlala ivelisa iipods, ngoko umatshini kunye no-Ubuntu 16.04 uya kuqala ukucotha emva kweveki. Kuya kubakho umndilili othe gqolo ophezulu ngenxa yokuba iqela lamaqela e-C enziwe. Le yingxaki ukuba nabani na ofaka nje Ubuntu 16 kunye neKubernetes phezulu aya kujongana nayo.
Masithi ngandlela thile uhlaziya inkqubo okanye enye into, kodwa kwi-Linux kernel ukuya kuthi ga kwi-4.16 imnandi ngakumbi-xa ucima amaqela e-C, ayavuza kwi-kernel kwaye ayicinywa. Ngoko ke, emva kwenyanga yokusebenza kulo matshini, akuyi kukwazi ukujonga izibalo kwimemori ngumncedisi. Sithatha ifayile, siyiqengqe kwiprogram, kwaye ifayile enye iqengqeleka imizuzwana eli-15, kuba i-kernel ithatha ixesha elide ukubala isigidi samaqela e-C ngaphakathi kwayo, abonakala ngathi ayacinywa, kodwa hayi - ayavuza. .
Ziseninzi izinto ezincinci apha naphaya. Lo ayingomba iinkampani ezinkulu ngamanye amaxesha zinokujongana nazo phantsi kwemithwalo enzima kakhulu - hayi, ngumcimbi wemihla ngemihla. Abantu banokuphila ngolu hlobo iinyanga - bafake i-Kubernetes, bafake isicelo - kubonakala ngathi kusebenza. Kubantu abaninzi oku kuqhelekile. Abazukwazi nokuba ngenye imini esi sicelo siya kuntlitheka ngenxa yesizathu esithile, abasayi kufumana silumkiso, kodwa kubo oku kuqhelekile. Ngaphambili besihlala koomatshini benyani ngaphandle kokubeka iliso, ngoku sifudukele eKubernetes, ngaphandle kokubeka iliso-yintoni umahluko?
Umbuzo ngowokuba xa sihamba phezu komkhenkce, asibazi ubungqingqwa bawo ngaphandle kokuba siwulinganise kwangaphambili. Abantu abaninzi bahamba kwaye bangakhathazeki, kuba bahamba ngaphambili.
Ngokombono wam, i-nuance kunye nobunzima bokusebenza nayiphi na inkqubo kukuqinisekisa ukuba ubukhulu beqhwa bunele ngokwaneleyo ukusombulula iingxaki zethu. Imalunga nale.
Kwi-IT, kubonakala kum, zininzi kakhulu iindlela "Ndiya kuba nethamsanqa". Abantu abaninzi bafaka isoftware kwaye basebenzise iilayibrari zesoftware ngethemba lokuba baya kuba nethamsanqa. Ngokubanzi, abantu abaninzi banethamsanqa. Yiyo loo nto mhlawumbi isebenza.
- Ukusuka kuvavanyo lwam olungenathemba, kubonakala ngathi: xa iingozi ziphezulu, kwaye isicelo kufuneka sisebenze, ke inkxaso iyafuneka kwiFlant, mhlawumbi ukusuka kwi-Red Hat, okanye ufuna iqela lakho langaphakathi elizinikele ngokukodwa kwi-Kubernetes, ekulungeleyo. ukuyikhupha.
Dmitry: Ngokwenjongo, oku kunjalo. Ukungena kwibali leKubernetes kwiqela elincinci ngokwakho kubandakanya inani lemingcipheko.
Ngaba siyazifuna izitya?
β Ngaba ungasixelela ukuba ixhaphake kangakanani i-Kubernetes eRashiya?
Dmitry: Andinayo le datha, kwaye andiqinisekanga ukuba nabani na ongomnye unayo. Sithi: "Kubernetes, Kubernetes," kodwa kukho enye indlela yokujonga lo mbandela. Andazi ukuba zixhaphake kangakanani izikhongozeli, kodwa ndiyalazi inani elivela kwiingxelo ezikwi-Intanethi ukuba iipesenti ezingama-70 zezikhongozeli zicwangciswe nguKubernetes. Yayingumthombo othembekileyo wesampulu enkulu emhlabeni jikelele.
Emva koko omnye umbuzo - ngaba sifuna izikhongozeli? Imvakalelo yam yobuqu kunye nesikhundla esipheleleyo senkampani yeFlant kukuba iKubernetes ngumgangatho we-de facto.
Akusayi kubakho nto ngaphandle kweKubernetes.
Olu lutshintsho olupheleleyo kulawulo lweziseko ezingundoqo. Ngokuqinisekileyo-yiyo loo nto, akusekho Ansible, Chef, oomatshini ababonakalayo, iTerraform. Andithethi ngeendlela zakudala ezidityanisiweyo zefama. UKubernetes lolona tshintsho lugqibeleleyo, kwaye ngoku kuya kuba nje kuphela.
Kucacile ukuba kwabanye kuthatha iminyaka embalwa, kwaye kwabanye amashumi amabini eminyaka, ukuqonda oku. Andithandabuzi ukuba akuyi kubakho nto ngaphandle kweKubernetes kunye nale mbonakalo entsha: asisabonakalisi inkqubo yokusebenza, kodwa sebenzisa. iziseko zophuhliso njengekhowudi, kuphela kungekhona ngekhowudi, kodwa nge-yml - isiseko esichazwe ngokubhengeza. Ndinoluvo lokuba kuya kuhlala kunje.
- Oko kukuthi, ezo nkampani zingekatshintsheli kwi-Kubernetes ngokuqinisekileyo ziya kutshintshela kuyo okanye zihlale zilityalwa. Ndikuqonde kakuhle?
Dmitry: Oku kwakhona akuyonyani ngokupheleleyo. Umzekelo, ukuba umsebenzi wethu kukuqhuba iseva ye-DNS, ngoko inokuqhutywa kwi-FreeBSD 4.10 kwaye inokusebenza ngokugqibeleleyo iminyaka engama-20. Sebenza nje kwaye yiloo nto. Mhlawumbi kwiminyaka engama-20 kukho into eza kufuneka ihlaziywe kube kanye. Ukuba sithetha ngesoftware kwifomathi esiyiqalileyo kwaye eneneni isebenza iminyaka emininzi ngaphandle kohlaziyo, ngaphandle kokwenza utshintsho, ke, ngokuqinisekileyo, akuyi kubakho Kubernetes apho. Akafunwa apho.
Yonke into enxulumene neCI / CD - naphi na apho ukuhanjiswa ngokuqhubekayo kuyadingeka, apho kufuneka uhlaziye iinguqulelo, wenze utshintsho olusebenzayo, naphi na apho ufuna ukwakha ukunyamezela kwephutha - kuphela i-Kubernetes.
Malunga neenkonzo ezincinci
β Apha ndine dissonance kancinane. Ukusebenza noKubernetes, udinga inkxaso yangaphandle okanye yangaphakathi - le ngongoma yokuqala. Okwesibini, xa siqala uphuhliso, siyisiqalo esincinci, asikabi nayo nantoni na, uphuhliso lwe-Kubernetes okanye i-microservice architecture ngokubanzi lunokuba nzima, kwaye aluhlali lufanelekile ngokwezoqoqosho. Ndinomdla kuluvo lwakho- ngaba abaqalisi kufuneka baqale kwangoko ukubhalela i-Kubernetes ukusuka ekuqaleni, okanye banokubhala i-monolith emva koko beze eKubernetes kuphela?
Dmitry: Umbuzo opholileyo. Ndinengxelo malunga nee-microservices Ndikhe ndadibana namaxesha amaninzi okuba abantu bazama ukubethelela izikhonkwane ngemakroskopu. Indlela ngokwayo ichanekile; siyila isoftware yethu yangaphakathi ngale ndlela. Kodwa xa usenza oku, kufuneka uyiqonde ngokucacileyo into oyenzayo. Eyona nto ndiyithiyileyo malunga nee-microservices ligama elithi "micro." Ngokwembali, kulapho igama lavela khona, kwaye ngesizathu esithile abantu bacinga ukuba i-micro incinci kakhulu, ingaphantsi kwe-millimeter, njenge-micrometer. Oku akulunganga.
Ngokomzekelo, kukho i-monolith ebhalwe ngabantu abangama-300, kwaye wonke umntu othathe inxaxheba ekuphuhlisweni uyaqonda ukuba kukho iingxaki apho, kwaye kufuneka iqhekezwe ibe ngamaqhekeza amancinci - malunga neziqwenga ezili-10, nganye ebhalwe ngabantu abangama-30. kuguqulelo oluncinci. Oku kubalulekile, kuyimfuneko kwaye kupholile. Kodwa xa isiqalo siza kuthi, apho i-3 abafana abapholileyo nabanobuchule babhala ii-microservices ze-60 emadolweni abo, rhoqo ndikhangela i-Corvalol.
Kubonakala kum ukuba oku sele kuthethwe ngamawaka amaxesha - bafumana i-monolith esasazwa ngendlela enye okanye enye. Oku akuthetheleleki ngokoqoqosho; kunzima kakhulu ngokubanzi. Kuphela nje ukuba ndiyibonile le nto kaninzi ukuba ibuhlungu kum, ngoko ndiqhubeka ndithetha ngayo.
Kumbuzo wokuqala, kukho ukungqubuzana phakathi kwento yokuba, ngakwesinye icala, uKubernetes uyesaba ukuyisebenzisa, kuba akucaci ukuba yintoni enokuthi iphule apho okanye ingasebenzi, ngakolunye uhlangothi, kuyacaca ukuba yonke into iya apho kwaye. akukho nto iya kwenzeka ngaphandle kweKubernetes. Phendula - yenza umlinganiselo wenzuzo ezayo, isixa semisebenzi onokuthi uyisombulule. Oku kukwicala elinye lesikali. Ngakolunye uhlangothi, kukho imingcipheko ehambelana nexesha lokunciphisa okanye ukunciphisa ixesha lokuphendula, izinga lokufumaneka, okanye ukuncipha kwezikhombisi zokusebenza.
Nantsi ke - mhlawumbi sihamba ngokukhawuleza, kwaye i-Kubernetes ivumela ukuba senze izinto ezininzi ngokukhawuleza nangcono, okanye sisebenzisa izisombululo ezithembekileyo, ezivavanywe ixesha, kodwa zihamba kancinci. Olu lukhetho ekufuneka yenziwe yinkampani nganye. Unokucinga ngayo njengendlela ehlathini - xa uhamba okokuqala, unokudibana nenyoka, ingwe okanye i-mad badger, kwaye xa uhambe izihlandlo ezili-10, unyathele indlela, wayisusa. amasebe kwaye uhambe lula. Ngalo lonke ixesha indlela iya iba banzi. Emva koko yindlela ye-asphalt, kwaye kamva i-boulevard enhle.
U-Kubernetes akemi ngxi. Umbuzo kwakhona: I-Kubernetes, kwelinye icala, yi-4-5 binaries, kwelinye icala, yi-ecosystem yonke. Le yinkqubo yokusebenza esinayo koomatshini bethu. Yintoni lento? Ubuntu okanye Curios? Le yiLinux kernel, iqela lamalungu awongezelelweyo. Zonke ezi zinto zilapha, inyoka enye enetyhefu yalahlelwa ngaphandle kwendlela, kwabiyelwa apho. I-Kubernetes iphuhlisa ngokukhawuleza kwaye iguquguqukayo, kwaye umthamo wemingcipheko, umthamo wezinto ezingaziwayo uyancipha rhoqo ngenyanga kwaye, ngokufanelekileyo, ezi zikali zilungelelaniswa.
Ukuphendula umbuzo wento yokuqala ekufuneka yenziwe, ndiza kuthi - yiza kwiFlaunt, uhlawule i-ruble eyi-150 lamawaka kwaye ufumane i-turnkey DevOps inkonzo elula. Ukuba usisiqalo esincinci kunye nabaphuhlisi abambalwa, oku kuyasebenza. Esikhundleni sokuqesha i-DevOps yakho, oya kufuna ukufunda ukucombulula iingxaki zakho kwaye uhlawule umvuzo ngeli xesha, uya kufumana isisombululo se-turnkey kuyo yonke imiba. Ewe, kukho izinto ezingeloncedo. Thina, njengomsebenzi wangaphandle, asinakubandakanyeka kwaye siphendule ngokukhawuleza kwiinguqu. Kodwa sinobugcisa obuninzi kunye nezenzo ezisele zenziwe. Siyaqinisekisa ukuba kuyo nayiphi na imeko siya kuyifumana ngokukhawuleza kwaye siphakamise nayiphi na i-Kubernetes kwabafileyo.
Ndincoma kakhulu ukukhutshwa kwezinto eziqalayo kunye nokusekwa kwamashishini ukuya kubukhulu apho unokunikezela iqela labantu be-10 ekusebenzeni, kuba ngaphandle koko akukho nto. Ngokuqinisekileyo kuyavakala ukukhupha oku.
Malunga neAmazon kunye neGoogle
- Ngaba umninimzi ovela kwisisombululo esivela kwi-Amazon okanye kuGoogle unokuqwalaselwa njengomthombo wangaphandle?
Dmitry: Ewe, kunjalo, oku kusombulula imiba emininzi. Kodwa kwakhona kukho ama-nuances. Kusafuneka uqonde indlela yokuyisebenzisa. Ngokomzekelo, kukho izinto ezincinci eziliwaka kumsebenzi we-Amazon AWS: i-Balancer yoMlayisho kufuneka ifudunyezwe okanye isicelo kufuneka sibhalwe kwangaphambili ukuba "bafana, sifumana i-traffic, fudumeza iBalancer yoMlayisho kuthi! β Kuya kufuneka wazi la ma-nuances.
Xa ujikela kubantu abazingcaphephe koku, ufumana phantse zonke izinto eziqhelekileyo ezivaliweyo. Sithetha nje sineenjineli ezingama-40, ekupheleni konyaka ngokuqinisekileyo ziya kube sezingama-60 - ngokuqinisekileyo sidibene nazo zonke ezi zinto. Nokuba sidibana nale ngxaki kwakhona kwiprojekthi ethile, sibuzana ngokukhawuleza kwaye siyazi indlela yokusombulula.
Mhlawumbi impendulo kukuba, kunjalo, ibali elibanjwe lenza ezinye iindawo zibe lula. Umbuzo ngowokuba ingaba ukulungele na ukubathemba aba bamkeli-zindwendwe nokuba baya kuzicombulula na iingxaki zakho. IAmazon kunye neGoogle ziqhube kakuhle. Kuzo zonke iimeko zethu - ngokuchanekileyo. Asisenawo amanye amava akhuthazayo. Zonke ezinye iifu esizama ukusebenzisana nazo zidala iingxaki ezininzi - i-Ager, kunye nayo yonke into eRashiya, kunye nazo zonke iintlobo ze-OpenStack ekuphunyezweni okuhlukeneyo: I-Headster, i-Overage - nantoni na oyifunayo. Zonke zidala iingxaki ongafuni ukuzicombulula.
Ke ngoko, impendulo nguewe, kodwa eneneni, azikho izisombululo ezininzi eziqolileyo ezisindlekwe.
Ngubani ofuna iKubernetes?
- Kwaye ngubani ofuna uKubernetes? Ngubani omele ukuba sele etshintshela ku-Kubernetes, ngubani umxhasi oqhelekileyo weFlaunt oza ngokukodwa uKubernetes?
Dmitry: Lo ngumbuzo onomdla, kuba ngoku, kwi-wave ye-Kubernetes, abantu abaninzi beza kuthi: "Bafo, siyazi ukuba nenza i-Kubernetes, siyenzele!" Siyabaphendula: βMadoda, asenzi iKubernetes, senza imveliso nayo yonke into enxulumene nayo.β Kuba akunakwenzeka ukwenza imveliso ngaphandle kokwenza yonke i-CI / CD kunye neli bali lonke. Wonke umntu ulisusile icandelo esinalo lophuhliso ngophuhliso, aze ke axhaphazwe ngokuxhaphaza.
Abathengi bethu balindele izinto ezahlukeneyo, kodwa wonke umntu ulindele ummangaliso othile oneengxaki ezithile, kwaye ngoku - hop! β UKubernetes uya kuzisombulula. Abantu bayakholelwa kwimimangaliso. Ezingqondweni zabo bayaqonda ukuba akuyi kuba nommangaliso, kodwa emiphefumlweni yabo banethemba lokuba le Kubernetes iya kusombulula yonke into kuthi ngoku, bathetha kakhulu ngayo! Ngequbuliso uyathimla! - kunye nembumbulu yesilivere, ithimla! - kwaye sine-100% yexesha lokuphumla, bonke abaphuhlisi banokukhulula nantoni na abayifumanayo kwimveliso ngamaxesha angama-50, kwaye ayiphazamisi. Ngokubanzi, ummangaliso!
Xa abantu abanjalo besiza kuthi, sithi: βUxolo, kodwa imimangaliso ayenzeki.β Ukuze ube sempilweni, kufuneka utye kakuhle kwaye uzilolonge. Ukuze ube nemveliso ethembekileyo, kufuneka yenziwe ngokuthembekileyo. Ukuze ube ne-CI/CD efanelekileyo, kufuneka uyenze ngolu hlobo. Mninzi umsebenzi ekufuneka wenziwe.
Ukuphendula umbuzo wokuba ngubani ofuna i-Kubernetes, akukho mntu ufuna i-Kubernetes.
Abanye abantu banembono ephosakeleyo yokuba bafuna i-Kubernetes. Abantu badinga, banesidingo esinzulu sokuyeka ukucinga, ukufunda, ukuba nomdla kuzo zonke iingxaki zeziseko ezingundoqo kunye neengxaki zokuqhuba izicelo zabo. Bafuna ukuba izicelo zisebenze kwaye zisetyenziswe ngokulula. Kubo, uKubernetes lithemba lokuba baya kuyeka ukuva ibali elithi "silele apho," okanye "asinakuphuma," okanye nantoni na.
Umlawuli wezobugcisa udla ngokuza kuthi. Bambuza izinto ezimbini: kwelinye icala, basinike iimpawu, kwelinye icala, uzinzo. Sicebisa ukuba uzithathele kuwe kwaye uyenze. I-bullet yesilivere, okanye kunokuba i-silver-plated, kukuba uyeka ukucinga ngezi ngxaki kunye nokuchitha ixesha. Uya kuba nabantu abakhethekileyo abaza kuwuvala lo mbandela.
Igama elithi thina okanye nabani na elifuna uKubernetes alilunganga.
Ii-admins ziyifuna ngokwenene i-Kubernetes, kuba yinto yokudlala enomdla kakhulu onokuthi udlale ngayo kwaye ucinge ngayo. Masinyaniseke β wonke umntu uyazithanda izinto zokudlala. Sonke singabantwana kwindawo ethile, kwaye xa sibona entsha, sifuna ukudlala ngayo. Abanye abantu bakugatyile oku, umzekelo, kulawulo, kuba sele bedlale ngokwaneleyo kwaye sele bediniwe kangangokuba abafuni nje. Kodwa oku akulahlekanga ngokupheleleyo nakubani na. Ngokomzekelo, ukuba ndidiniwe ngamathoyizi kwintsimi yolawulo lwenkqubo kunye ne-DevOps ixesha elide, ngoko ndisawathanda amathoyizi kwaye ndisazithenga ezintsha. Bonke abantu, ngenye indlela okanye enye, basafuna uhlobo oluthile lwezinto zokudlala.
Akukho mfuneko yokudlala ngemveliso. Into endingayikhuthaziyo ukuyenza kunye nento endiyibonayo ngoku ngokubanzi: "Owu, into yokudlala entsha!" - babaleka ukuya kuyithenga, bayithenga kwaye: "Masiyise esikolweni ngoku kwaye siyibonise kubo bonke abahlobo bethu." Sukwenza oku. Uxolo, abantwana bam bayakhula, ndihlala ndiyibona into ebantwaneni, ndiyiphawule kum, kwaye ndiyijikelezise kwabanye.
Impendulo yokugqibela yile: awudingi Kubernetes. Kufuneka uzisombulule iingxaki zakho.
Into onokuthi uyiphumeze kukuba:
- iprod ayiwi;
- nokuba uzama ukuwa, siyazi ngayo kwangaphambili kwaye sinokubeka into;
- Sinokuyitshintsha ngesantya elifunwa ngaso ishishini lethu, kwaye sinokuyenza ngokulula; ayisibangeli naziphi na iingxaki.
Kukho iimfuno ezimbini zokwenyani: ukuthembeka kunye nokukhutshwa okuguquguqukayo / okuguquguqukayo. Wonke umntu okwangoku wenza uhlobo oluthile lweeprojekthi ze-IT, kungakhathaliseki ukuba kweliphi ishishini - elithambileyo lokuphucula ihlabathi, kwaye ngubani oqondayo oku, kufuneka asombulule ezi mfuno. I-Kubernetes ngendlela efanelekileyo, ngokuqonda okufanelekileyo kunye namava okwaneleyo ivumela ukuba isonjululwe.
Malunga nomncedisi
- Ukuba ukhangele phambili kancinci kwixesha elizayo, ngoko uzama ukuxazulula ingxaki yokungabikho kwentloko kunye neziseko zophuhliso, kunye nesantya sokukhutshwa kunye nesantya sokutshintshwa kwesicelo, izisombululo ezintsha zivela, umzekelo, i-serverless. Ngaba uziva naziphi na izinto ezinokwenzeka kweli cala kwaye, masithi, ingozi yeKubernetes kunye nezisombululo ezifanayo?
Dmitry: Apha kufuneka siphinde siphawule ukuba andiyomboni ejonge phambili ize ithi, βKuya kuba ngolu hlobo!β Nangona ndenze into efanayo. Ndijonge ezinyaweni zam kwaye ndibone iingxaki ezininzi apho, umzekelo, indlela i-transistors esebenza ngayo kwikhompyutheni. Kuyahlekisa, akunjalo? Sidibana nezinye iimpazamo kwi-CPU.
Yenza umncedisi uthembeke kakhulu, ungabizi, uyasebenza kwaye ulungele, ukusombulula yonke imiba ye-ecosystem. Apha ndiyavumelana no-Elon Musk ukuba iplanethi yesibini iyadingeka ukudala ukuqina koluntu. Nangona andiyazi into ayithethayo, ndiyaqonda ukuba andikulungele ukundiza kuMars ngokwam kwaye akuyi kwenzeka ngomso.
Ngokungenasiphakeli kucacile ukuba le yinto echanekileyo ngokwembono, njengokunyamezela iimpazamo kuluntu - ukuba neeplanethi ezimbini kungcono kunenye. Kodwa sinokukwenza njani oku ngoku? Ukuthumela uhambo olunye akuyongxaki ukuba ugxininisa kwimizamo yakho kuyo. Ukuthumela amaphulo amaninzi kunye nokuhlalisa amawaka aliqela abantu apho, ndiyacinga, kukwayinyani. Kodwa ukwenza impazamo-ukunyamezela ngokupheleleyo ukuze isiqingatha soluntu siphile apho, kubonakala kum ngoku akunakwenzeka, kungaqwalaselwa.
Ngomncedisi omnye komnye: into ipholile, kodwa ikude kwiingxaki zika-2019. Kusondele ku-2030- masiphile ukuze siyibone. Andiqinisekanga ukuba siya kuphila, ngokuqinisekileyo siya kuphila (siphindaphinda ngaphambi kokulala), kodwa ngoku kufuneka sicombulule ezinye iingxaki. Kufana nokukholelwa kwiponi yasentsomini ethi Rainbow. Ewe, iipesenti ezimbalwa zamatyala zisonjululwe, kwaye zisonjululwe ngokugqibeleleyo, kodwa ngokuzimeleyo, i-serverless is a rainbow... Kum, esi sihloko sikude kakhulu kwaye asiqondakali. andikakulungeli ukuthetha. Ngo-2019, awukwazi ukubhala isicelo esinye esingenamncedisi.
IKubernetes iya kuvela njani
- Njengoko sisiya kweli likamva likude limangalisayo, ucinga ukuba i-Kubernetes kunye ne-ecosystem eyijikelezileyo izakukhula njani?
Dmitry: Ndikhe ndayicinga le nto kakhulu kwaye ndinempendulo ecacileyo. Eyokuqala i-statefull - emva kwayo yonke loo nto, i-stateless kulula ukuyenza. UKubernetes ekuqaleni watyala imali eninzi kule nto, yonke yaqala ngayo. I-stateless isebenza ngokugqibeleleyo eKubernetes, akukho nto unokukhalaza ngayo. Ngokutsho kwe-Statefull, kusekho iingxaki ezininzi, okanye kunoko, ama-nuances. Yonke into ekhoyo sele isisebenzela kakuhle, kodwa sithi. Kuyakuthatha ubuncinci iminyaka embalwa ukuba oku kusebenzele wonke umntu. Oku akusiyo isalathisi esibalwayo, kodwa imvakalelo yam evela entloko yam.
Ngokufutshane, i-statefull kufuneka- kwaye iya--phuhlisa ngamandla, kuba zonke izicelo zethu zigcina ubume; akukho zicelo ezingenammiselo. Le yinkohliso; uhlala ufuna uhlobo oluthile lwesiseko sedatha kunye nenye into. I-Statefull imalunga nokulungisa yonke into enokwenzeka, ukulungisa zonke iziphene, ukuphucula zonke iingxaki abantu abajongene nazo ngoku - masiyibize ngokwamkelwa.
Inqanaba lezinto ezingaziwayo, inqanaba leengxaki ezingasonjululwanga, inqanaba lokunokwenzeka lokuhlangabezana nento liya kuhla kakhulu. Eli libali elibalulekileyo. Kwaye nabaqhubi - yonke into enxulumene nekhowudi yolawulo lwengqiqo, ingqiqo yokulawula ukuze ufumane inkonzo elula: inkonzo elula ye-MySQL, inkonzo elula ye-RabbitMQ, inkonzo elula ye-Memcache - ngokubanzi, zonke ezi zixhobo kufuneka ziqinisekiswe ukuba sisebenze ngaphandle kwazo. ibhokisi. Oku kusombulula nje intlungu esifuna isiseko sedatha, kodwa asifuni ukuyilawula, okanye sifuna i-Kubernetes, kodwa asifuni ukuyilawula.
Eli bali lophuhliso lwabaqhubi ngendlela enye okanye enye iya kubaluleka kwiminyaka embalwa ezayo.
Ndicinga ukuba ukusetyenziswa lula kufuneka kwandise kakhulu - ibhokisi iya kuba mnyama ngakumbi nangakumbi, ithembekile ngakumbi, inamaqhina alula ngakumbi.
Ndakhe ndamamela udliwanondlebe oludala kunye no-Isaac Asimov osuka kwiminyaka engama-80 kwiYouTube kumboniso wangoMgqibelo ebusuku-inkqubo efana ne-Urgant, enomdla kuphela. Bambuza ngekamva leekhompyuter. Uthe ikamva lilula, kanye njengokuba kwakunjalo kunomathotholo. Umamkeli werediyo ekuqaleni wayeyinto entsonkothileyo. Ukuze ubambe amaza, kufuneka ujike amaqhosha emizuzu eli-15, ujike i-skewers kwaye wazi ngokubanzi ukuba yonke into isebenza njani, uqonde i-physics yokuhanjiswa kwamaza erediyo. Ngenxa yoko, kwakusele iqhosha elinye kuphela kunomathotholo.
Ngowuphi unomathotholo ngoku ngo-2019? Kwimoto, umamkeli werediyo ufumana onke amaza kunye namagama ezitishi. Ifiziksi yenkqubo ayitshintshanga kwiminyaka eyi-100, kodwa kulula ukuyisebenzisa. Ngoku, kwaye kungekhona ngoku kuphela, sele ngo-1980, xa kwakukho udliwano-ndlebe no-Azimov, wonke umntu wasebenzisa unomathotholo kwaye akukho mntu wacinga malunga nendlela esebenza ngayo. Ihlala isebenza β yinto ethile.
U-Asimov ke wathi kuya kufana neekhompyuter. ukusetyenziswa lula kuya kwanda. Ukuba ngo-1980 kufuneka ufumane imfundo ekhethekileyo ukuze ucinezele amaqhosha kwikhompyutheni, ngoko kwixesha elizayo oku akuyi kuba njalo.
Ndinemvakalelo yokuba kunye neKubernetes kunye neziseko zophuhliso kuya kubakho ukwanda okukhulu kokusetyenziswa ngokulula. Oku, ngokombono wam, kucacile - kulele phezulu.
Yintoni enokuyenza ngeenjineli?
- Kuya kwenzeka ntoni ke kwiinjineli kunye nabalawuli benkqubo abaxhasa uKubernetes?
Dmitry: Kwenzeka ntoni kwi-accountant emva kokufika kwe-1C? Malunga ngokufanayo. Ngaphambi koku, babala ephepheni - ngoku kwiprogram. Imveliso yabasebenzi iye yanda ngemiyalelo yobukhulu, kodwa umsebenzi wona awukapheli. Ukuba ngaphambili bekuthatha iinjineli ezili-10 ukujija ibhalbhu yesibane, ngoku enye iya kwanela.
Isixa sesoftware kunye nenani lemisebenzi, kubonakala kum, ngoku ikhula ngokukhawuleza kunokuba i-DevOps entsha ibonakala kwaye ukusebenza kakuhle kuyanda. Ngoku kukho ukunqongophala okuthile kwimarike kwaye kuya kuhlala ixesha elide. Kamva, yonke into iya kubuyela kwisiqhelo esithile, apho ukusebenza kakuhle komsebenzi kuya kwanda, kuya kubakho ngakumbi nangaphezulu, i-neuron iya kuqhotyoshelwa kwi-Kubernetes, eya kukhetha zonke izibonelelo ngokuchanekileyo njengoko kufanelekile, kwaye ngokubanzi. yenza yonke into ngokwayo, njengoko kufanelekile - umntu uya kuhamba kwaye angaphazamisi.
Kodwa kuseza kufuneka umntu enze izigqibo. Kucacile ukuba inqanaba leziqinisekiso kunye nobuchule balo mntu liphezulu. Namhlanje, kwisebe le-accounting, awudingi abasebenzi abayi-10 abagcina iincwadi ukuze izandla zabo zingadinwa. Akuyomfuneko nje. Amaxwebhu amaninzi askenwa ngokuzenzekelayo kwaye aqatshelwe yinkqubo yolawulo lwamaxwebhu e-elektroniki. Omnye umgcini-mali oyintloko ohlakaniphileyo wanele, sele enezakhono ezinkulu kakhulu, ngokuqonda kakuhle.
Ngokubanzi, le yindlela kuwo onke amashishini. Kuyafana neemoto: ngaphambili, imoto yeza nomkhandi kunye nabaqhubi abathathu. Kule mihla, ukuqhuba imoto yinkqubo elula esithatha inxaxheba kuyo yonke imihla. Akukho mntu ucinga ukuba imoto yinto entsonkothileyo.
I-DevOps okanye iinkqubo zobunjineli aziyi kuhamba-izinga eliphezulu kunye nomsebenzi osebenzayo uya kwanda.
- Ndeva nombono onomdla wokuba umsebenzi uya kwanda.
Dmitry: Ewe, ikhulu leepesenti! Ngenxa yokuba isixa sesoftware esiyibhalayo sikhula rhoqo. Inani lemiba esiyisombulula ngesoftware likhula rhoqo. Inani lomsebenzi liyakhula. Ngoku imarike yeDevOps ishushu kakhulu. Oku kunokubonwa kulindelo lwemivuzo. Ngendlela elungileyo, ngaphandle kokungena kwiinkcukacha, kufuneka kubekho abancinci abafuna i-X, abaphakathi abafuna i-1,5X, kunye nabadala abafuna i-2X. Kwaye ngoku, ukuba ujonga kwimarike yemivuzo ye-DevOps yaseMoscow, i-junior ifuna ukusuka kwi-X ukuya kwi-3X kunye ne-senior ifuna ukusuka kwi-X ukuya kwi-3X.
Akukho mntu waziyo ukuba yimalini. Inqanaba lomvuzo lilinganiswa ngokuzithemba kwakho - i-madhouse epheleleyo, ukunyaniseka, imarike eshushu kakhulu.
Ngokuqinisekileyo, le meko iya kutshintsha ngokukhawuleza - kufuneka kubekho ukugcwala. Akunjalo nophuhliso lwesoftware - ngaphandle kwento yokuba wonke umntu ufuna abaphuhlisi, kwaye wonke umntu ufuna abaphuhlisi abalungileyo, imakethi iyaqonda ukuba ngubani oxabisa ntoni - ishishini lizinzile. Oku akunjalo nge-DevOps ngoku.
- Ukususela kwinto endiyivileyo, ndagqiba ekubeni umlawuli wenkqubo yangoku akafanele akhathazeke kakhulu, kodwa lixesha lokuphucula izakhono zakhe kwaye alungiselele ukuba kusasa kuya kuba nomsebenzi omningi, kodwa kuya kuba kufaneleka kakhulu.
Dmitry: Ikhulu leepesenti. Ngokubanzi, siphila ngo-2019 kwaye umthetho wobomi ngulo: ukufunda ubomi bonke - sifunda ubomi bethu bonke. Kubonakala kum ukuba ngoku wonke umntu sele uyazi kwaye uvakalelwa oku, kodwa ukwazi akwanele - kufuneka uyenze. Yonke imihla kufuneka sitshintshe. Ukuba asikwenzi oku, kungekudala okanye kamva siya kulahlwa ecaleni komsebenzi.
Zilungiselele ukujika okubukhali kwe-180-degree. Andiyikunqanda ukuba kunokwenzeka ukuba into ethile iya kutshintsha ngokukhawuleza, okanye into entsha iya kuveliswa-iyenzeka. Hop! - kwaye ngoku senza ngokwahlukileyo. Kubalulekile ukuba ulungele oku kwaye ungakhathazeki. Kungenzeka ukuba ngomso yonke into endiyenzayo iya kuba yimfuneko - akukho nto, ndifunde ubomi bam bonke kwaye ndilungele ukufunda enye into. Akuyongxaki. Akufanele uloyike ukhuseleko lomsebenzi, kodwa kufuneka ulungele ukufunda into entsha rhoqo.
Iminqweno kunye nomzuzu wentengiso
β Ngaba kukho nawuphi na umnqweno onawo?
Dmitry: Ewe, ndineminqweno emininzi.
Okokuqala kunye neyona mercantile - bhalisela . Bafundi abathandekayo, yiya kuYouTube kwaye ubhalise kwitshaneli yethu. Kwisithuba esingangenyanga siza kuqalisa ukwandiswa okusebenzayo kwinkonzo yevidiyo.Siza kuba nomxholo omninzi wemfundo malunga neKubernetes, evulekileyo neyahlukileyo: ukusuka kwizinto ezisebenzayo, ukuya kuthi ga kwiilabhoratri, ukuya kwizinto ezinzulu zethiyori kunye nendlela yokusebenzisa uKubernetes inqanaba lemigaqo kunye neepateni.
Umnqweno wesibini we-mercantile kukuya kwaye sibeke iinkwenkwezi kuba siyazondla. Ukuba awusiniki iinkwenkwezi, asiyi kuba nanto yokutya. Kufana ne-mana kumdlalo wekhompyuter. Senza into, senze into, sizame, umntu uthi ezi bhayisikile ezoyikekayo, umntu ukuba yonke into ayilunganga ngokupheleleyo, kodwa siyaqhubeka kwaye senze ngokunyanisekileyo. Sibona ingxaki, siyisombulule kwaye sabelane ngamava ethu. Ke ngoko, sinike inkwenkwezi, ayiyi kukuhlawula, kodwa iya kusinceda, kuba sizondla kubo.
Okwesithathu, okubalulekileyo, kwaye akusekho mercantile umnqweno yeka ukukholelwa kwiintsomi. Nizingcali. I-DevOps ngumsebenzi onzima kakhulu kwaye onoxanduva. Yeka ukudlala kwindawo osebenza kuyo. Yivumele ikucofe kwaye uya kuyiqonda. Khawube nomfanekiso wakho ufika esibhedlele, nalapho ugqirha wenza ilingelo ngawe. Ndiyaqonda ukuba oku kunokukhubekisa umntu, kodwa ngokunokwenzeka, oku akukho malunga nawe, kodwa ngomnye umntu. Xelela abanye ukuba bayeke. Oku kuyabutshabalalisa ngokwenene ubomi bethu sonke-abaninzi baqala ukuphatha imisebenzi, ii-admins kunye ne-DevOps njengama-dudes abophule into kwakhona. Oku "kwaphukile" rhoqo ngenxa yokuba siye kudlala, kwaye asizange sijonge ngengqondo ebandayo ukuba yintoni elapha kwaye yintoni elapha.
Oku akuthethi ukuba akufuneki ulinge. Kufuneka sizame, sikwenza oku ngokwethu. Ukunyaniseka, nathi ngamanye amaxesha sidlala - oku, kunjalo, kubi kakhulu, kodwa akukho nto ingaqhelekanga kuthi. Masibhengeze u-2019 njengonyaka weemvavanyo ezinzulu, ezicingisiswe kakuhle, hayi imidlalo yemveliso. Mhlawumbi kunjalo.
- Enkosi kakhulu!
Dmitry: Enkosi, Vitaly, zombini ngexesha lakho kunye nodliwano-ndlebe. Bafundi abathandekayo, enkosi kakhulu ukuba ngequbuliso nifikelele kweli nqanaba. Ndiyathemba ukuba sikuphathele nokuba ingcinga ezimbalwa.
Kudliwano-ndlebe, uDmitry uchukumise umba we-werf. Ngoku le yimela yaseSwitzerland esombulula phantse zonke iingxaki. Kodwa kwakungasoloko kunjalo. Vula emthendelekweni UDmitry Stolyarov uya kuthetha ngesi sixhobo ngokweenkcukacha. Kwingxelo Kuya kubakho yonke into: iingxaki kunye ne-nuances efihliweyo ye-Kubernetes, iinketho zokusombulula obu bunzima kunye nokuphunyezwa kwangoku kwe-werf ngokweenkcukacha. Sijoyine nge-27 kunye ne-28 kaMeyi, siya kudala izixhobo ezifanelekileyo.
umthombo: www.habr.com