Namhlanje sifuna ukuthetha ngeVMware Tanzu, umgca omtsha weemveliso kunye neenkonzo ezibhengezwe kwinkomfa ye-VMWorld yonyaka ophelileyo. Kwi-ajenda sesinye sezona zixhobo zinomdla kakhulu: ULawulo lweMishini yeTanzu.
Qaphela: kukho imifanekiso emininzi phantsi kokusikwa.
Yintoni uLawulo lweMishini
Njengoko inkampani ngokwayo isitsho kwibhlog yayo, eyona njongo iphambili ye-VMware Tanzu Mission Control "kukuzisa ucwangco kwisiphithiphithi." Ulawulo lweMishini liqonga eliqhutywa yi-API eliza kuvumela abalawuli ukuba basebenzise imigaqo-nkqubo kumaqela okanye amaqela eqela kunye nokumisela imithetho yokhuseleko. Izixhobo ezisekelwe kwi-SaaS zidibanisa ngokukhuselekileyo kumaqela e-Kubernetes nge-arhente kunye nokuxhasa imisebenzi eyahlukeneyo yeqela eliqhelekileyo, kubandakanywa imisebenzi yokulawula ubomi bokuphila (ukuthunyelwa, ukulinganisa, ukucima, njl.).
Ingcamango yomgca weTanzu isekelwe kubuninzi bokusetyenziswa kobuchwephesha bomthombo ovulekileyo. Ukulawula umjikelezo wobomi bamaqela e-Tanzu Kubernetes Grid, i-Cluster API isetyenzisiweyo, i-Velero isetyenziselwa i-backups kunye nokubuyisela, i-Sonobuoy isetyenziselwa ukubeka esweni ukuthotyelwa koqwalaselo lwamaqela e-Kubernetes kunye ne-Contour njengomlawuli we-ingress.
Uluhlu olubanzi lwemisebenzi yoLawulo lweMishini yeTanzu lujongeka ngolu hlobo:
- ulawulo oluphakathi kwawo onke amaqela akho eKubernetes;
- identity and access management (IAM);
- ukuxilongwa kunye nokubeka esweni ubume beqela;
- ukulawula uqwalaselo noseto lokhuseleko;
- ukucwangcisa uhlolo lwezempilo lwamaqela rhoqo;
- ukudala i-backups kunye nokubuyisela;
- ulawulo lwesabelo;
- ukubonakaliswa okubonakalayo kokusetyenziswa kobutyebi.
Kutheni kubalulekile
I-Tanzu Mission Control iya kunceda amashishini asombulule ingxaki yokulawula iinqwelo ezinkulu ze-Kubernetes zamaqela abekwe kwindawo, kwifu kunye nababoneleli abaninzi beqela lesithathu. Kungekudala okanye kamva, nayiphi na inkampani imisebenzi yayo ibotshelelwe kwi-IT izifumana inyanzelekile ukuba ixhase amaqela amaninzi ahlukeneyo abekwe kubaboneleli abahlukeneyo. Iqela ngalinye lijika libe yibhola ekhephu elifuna umbutho onobuchule, iziseko ezingundoqo ezifanelekileyo, imigaqo-nkqubo, ukhuseleko, iinkqubo zokubeka iliso kunye nokunye okuninzi.
Kule mihla, naliphi na ishishini lizama ukunciphisa iindleko kunye neenkqubo ezizenzekelayo zesiqhelo. Kwaye imeko ye-IT enzima ngokucacileyo ayikhuthazi ukonga kunye nokugxila kwimisebenzi ephambili. I-Tanzu Mission Control inika imibutho amandla okusebenza amaqela amaninzi e-Kubernetes asetyenziswe kubo bonke ababoneleli abaninzi ngelixa ehambelana nemodeli yokusebenza.
Uyilo lwesisombululo
I-Tanzu Mission Control yi-platform ehlala abantu abaninzi enika abasebenzisi ukufikelela kwiseti yemigaqo-nkqubo eqwalaselwe kakhulu enokuthi isetyenziswe kumaqela e-Kubernetes kunye namaqela amaqela. Umsebenzisi ngamnye ubotshelelwe kuMbutho, "oyingcambu" yemithombo-amaqela eqela kunye neendawo zokusebenzela.
Yintoni enokwenziwa nguTanzu Mission Control
Ngaphezulu sele sidwelise ngokufutshane uluhlu lwemisebenzi yesisombululo. Makhe sibone ukuba oku kuphunyezwa njani kwi-interface.
Umbono omnye wawo onke amaqela eKubernetes kwishishini:
Ukudala iqela elitsha:
Ungabela ngokukhawuleza iqela kwiqela, kwaye liyakudla ilifa imigaqo-nkqubo eyabelwe kulo.
Uqhagamshelwano lweqela:
Amaqela asele ekho anokudityaniswa ngokulula usebenzisa i-arhente ekhethekileyo.
Ukwahlulahlula amaqela:
Kumaqela eQela, ungamaqela eqela ukuze uzuze njengelifa imigaqo-nkqubo eyabelwe ngoko nangoko kwinqanaba leqela, ngaphandle kokungenelela okwenziwa ngesandla.
Iindawo zokusebenza:
Ibonelela ngokukwazi ukuqwalasela ngokuguquguqukayo ukufikelela kwisicelo esibekwe phakathi kweendawo zamagama ezininzi, amaqela kunye neziseko zamafu.
Makhe sijonge ngakumbi kwimigaqo yokusebenza yeTanzu Mission Control kumsebenzi waselebhu.
ILab #1
Ewe kunjalo, kunzima ukucinga ngokweenkcukacha ukusebenza koLawulo lweMishini kunye nezisombululo ezintsha zeTanzu ngaphandle kokuziqhelanisa. Ukuze uhlolisise iimpawu eziphambili zomgca, i-VMware ibonelela ngokufikelela kwiibhentshi ezininzi zebhubhoratri. Ezi bhentshi zikuvumela ukuba wenze umsebenzi webhubhoratri usebenzisa imiyalelo yesinyathelo ngesinyathelo. Ukongeza kwi-Tanzu Mission Control ngokwayo, ezinye izisombululo ziyafumaneka ukuze kuhlolwe kwaye kufundwe. Uluhlu olupheleleyo lwemisebenzi yaselabhoratri inokufumaneka .
Ukuqhelana okusebenzayo kunye nezisombululo ezahlukeneyo (kubandakanywa "umdlalo" omncinci kwi-vSAN) amanani ahlukeneyo exesha abelwe. Ungakhathazeki, la ngamanani azalanayo kakhulu. Umzekelo, ilebhu kwi-Tanzu Mission Control "inokusonjululwa" ukuya kuthi ga kwiiyure ezili-9 kunye nesiqingatha xa udlula ekhaya. Ukongeza, nokuba isibali-xesha siphelile, ungabuyela umva kwaye uhambe kuyo yonke into kwakhona.
Ukupasa umsebenzi waselebhu #1
Ukufikelela kwiilebhu, uya kufuna iakhawunti yeVMware. Emva kogunyaziso, i-pop-up window iya kuvula ngolwandlalo oluphambili lomsebenzi. Imiyalelo eneenkcukacha iya kubekwa kwicala lasekunene kwesikrini.
Emva kokufunda isingeniso esifutshane kuTanzu, uya kumenywa ukuba uziqhelanise neMission Control interactive simulation.
Iwindow entsha yomatshini wokuzivelela iya kuvula kwaye uya kucelwa ukuba wenze imisebenzi embalwa esisiseko:
- yenza iqela
- qwalasela iparameters zayo ezisisiseko
- hlaziya iphepha kwaye uqinisekise ukuba yonke into iqwalaselwe kakuhle
- seta imigaqo-nkqubo kwaye ujonge iqela
- yenza indawo yokusebenza
- yenza isithuba samagama
- sebenza ngemigaqo-nkqubo kwakhona, inyathelo ngalinye lichazwe ngokweenkcukacha kwincwadana yemigaqo
- uphuculo lweqela ledemo
Ngokuqinisekileyo, ukulinganisa okusebenzisanayo akuboneleli ngenkululeko eyaneleyo yokufunda ngokuzimeleyo: uhamba kunye nomzila obekwe ngaphambili ngabaphuhlisi.
ILab #2
Apha sele sijongene nenye into enzulu ngakumbi. Lo msebenzi waselabhorathri awubophelelekanga “kwimizila” njengaleyo yangaphambili kwaye ufuna uphononongo olucokisekileyo. Asiyi kuyibonisa apha ngokupheleleyo: ukugcina ixesha lakho, siya kuhlalutya kuphela imodyuli yesibini, eyokuqala inikezelwe kwinkalo yethiyori yomsebenzi weTanzu Mission Control. Ukuba unqwenela, unokuhamba kuyo ngokupheleleyo ngokwakho. Le modyuli isinika ukuntywila nzulu kulawulo lomjikelo wobomi beqela ngoLawulo lweMishini yeTanzu.
Qaphela: Umsebenzi welebhu yoLawulo lweTanzu uhlaziywa rhoqo kwaye usulungekiswe. Ukuba naziphi na izikrini okanye amanyathelo ahlukile kwezi zingezantsi njengoko ugqibezela ilebhu, landela izalathiso kwicala lasekunene lesikrini. Siza kuhamba ngenguqu yangoku ye-LR ngexesha lokubhala kwaye siqwalasele izinto zayo eziphambili.
Ukupasa umsebenzi waselebhu #2
Emva kwenkqubo yokugunyazisa kwiiNkonzo zeLifu le-VMware, siqalisa iTanzu Mission Control.
Inyathelo lokuqala elicetyiswe yilebhu kukusebenzisa iqela leKubernetes. Okokuqala, kufuneka sifikelele kwiVM nge Ubuntu usebenzisa iPuTTY. Qalisa isixhobo kwaye ukhethe iseshoni nge Ubuntu.
Senza imiyalelo emithathu ngokulandelelana:
- ukwenza iqela:
kind create cluster --config 3node.yaml --name=hol - ilayisha ifayile KUBECONFIG:
export KUBECONFIG="$(kind get kubeconfig-path --name="hol")" - imveliso yenodi:
kubectl get nodes
Ngoku iqela esilenzileyo kufuneka longezwe kuLawulo lweMishini yeTanzu. Ukusuka kwiPuTTY sibuyela kwiChrome, yiya kwiiClusters kwaye ucofe QAPHELA IQELA.
Khetha iqela kwimenyu eyehlayo - Engagqibekanga, ngenisa igama elicetyiswe yilabhu kwaye ucofe INCWADI.
Khuphela umyalelo ofunyenweyo kwaye uye kwiPuTTY.
Senza umyalelo ofunyenweyo.
Ukulandelela inkqubela, sebenzisa omnye umyalelo: watch kubectl get pods -n vmware-system-tmc. Silinda de zonke izikhongozeli zibe nesimo Ubaleko okanye Kugqityiwe.
Buyela kwi-Tanzu Mission Control kwaye ucofe QINISEKISA UQHAGAMSHELO. Ukuba yonke into ihambe kakuhle, izikhombisi zazo zonke iitshekhi kufuneka zibe luhlaza.
Ngoku makhe iqela elitsha lamaqela kwaye sibeke iqela elitsha apho. Yiya kumaqela Cluster kwaye ucofe IQELA ELITSHA LEKLASTA. Faka igama kwaye ucofe Dala.
Iqela elitsha kufuneka livele ngoko nangoko kuluhlu.
Masibeke iqela elitsha: yiya ku Amaqela, cinezela IQELA ELITSHA kwaye ukhethe ukhetho olunxulumene nomsebenzi waselabhoratri.
Masifake igama leqela, khetha iqela elinikezelwe kulo - kwimeko yethu, izandla-kwi-labs - kunye nommandla wokuthunyelwa.
Kukho ezinye iinketho ezikhoyo xa usenza i-cluster, kodwa akukho sizathu sokutshintsha ngexesha lebhu. Khetha ubumbeko olufunayo kwaye ucofe Okulandelayo.
Ezinye iiparameters kufuneka zihlelwe, ukwenza oku, cofa Hlela.
Masikhulise inani leenodi zokusebenza ukuya ezimbini, gcina iiparamitha kwaye ucofe Dala.
Ngexesha lenkqubo uza kubona ibar yenkqubela phambili efana nale.
Emva kokuthunyelwa ngempumelelo, uya kuwubona lo mfanekiso. Zonke iirisithi mazibe luhlaza.
Ngoku sifuna ukukhuphela ifayile ye KUBECONFIG ukulawula iqela usebenzisa imiyalelo esemgangathweni ye kubectl. Oku kunokwenziwa ngokuthe ngqo ngeTanzu Mission Control yomsebenzisi ujongano lomsebenzisi. Khuphela ifayile kwaye uqhubeke nokukhuphela i-Tanzu Mission Control CLI ngokuchofoza Cofa apha.
Khetha inguqulelo oyifunayo kwaye ukhuphele i-CLI.
Ngoku kufuneka sifumane uphawu lwe-API. Ukwenza oku, yiya ku I-akhawunti yam kwaye wenze ithokheni entsha.
Gcwalisa iindawo kwaye ucofe NGOKUBANZI.
Khuphela ithokheni enesiphumo kwaye ucofe QHUBEKA. Vula iShell yaMandla kwaye ufake i-tmc-login umyalelo, emva koko ithokheni esiyifumeneyo kwaye siyikhuphele kwinyathelo elidlulileyo, emva koko Ngena Ngegama Lomxholo. Khetha info iilogi ezivela kwezo zicetywayo, ummandla kunye i-olympus-default njengeqhosha le-ssh.
Sifumana izithuba zamagama:kubectl --kubeconfig=C:UsersAdministratorDownloadskubeconfig-aws-cluster.yml get namespaces.
Yazisa kubectl --kubeconfig=C:UsersAdministratorDownloadskubeconfig-aws-cluster.yml get nodesukuqinisekisa ukuba zonke iindawo zikwimo lungele.
Ngoku kufuneka sibeke isicelo esincinci kweli qela. Masenze i-deployments ezimbini - ikofu kunye neti - ngendlela yeenkonzo zekhofi-svc kunye ne-tea-svc, nganye apho isungula imifanekiso eyahlukeneyo - nginxdemos / hello kunye ne-nginxdemos / hello:-plain-text. Oku kwenziwa ngolu hlobo lulandelayo.
Ngayo PowerShell yiya kukhuphelo kwaye ufumane ifayile cafe-iinkonzo.yaml.
Ngenxa yolunye utshintsho kwi-API, kuya kufuneka siyihlaziye.
Imigaqo-nkqubo yoKhuseleko lwePod yenziwe ngokungagqibekanga. Ukusebenzisa usetyenziso ngamalungelo athile, kufuneka uqhagamshele iakhawunti yakho.
Yenza isibophelelo: kubectl --kubeconfig=kubeconfig-aws-cluster.yml create clusterrolebinding privileged-cluster-role-binding --clusterrole=vmware-system-tmc-psp-privileged --group=system:authenticated
Masisebenzise isicelo: kubectl --kubeconfig=kubeconfig-aws-cluster.yml apply -f cafe-services.yaml
Ukuhlola: kubectl --kubeconfig=kubeconfig-aws-cluster.yml get pods
Imodyuli yesi-2 igqityiwe, umhle kwaye uyamangalisa! Sicebisa ukuba ugqibezele iimodyuli ezishiyekileyo, kuquka ulawulo lomgaqo-nkqubo kunye nokuhlolwa kokuthotyelwa, ngokwakho.
Ukuba ungathanda ukugqiba le lebhu ngokupheleleyo, ungayifumana apha . Kwaye siya kuqhubela phambili kwinxalenye yokugqibela yenqaku. Makhe sithethe ngento esiye sakwazi ukuyibona, senze izigqibo ezichanekileyo zokuqala kwaye sithethe ngokweenkcukacha ukuba yintoni iTanzu Mission Control ngokumalunga neenkqubo zokwenyani zoshishino.
Izimvo kunye nezigqibo
Ewe, kuselithuba ukuba uthethe ngemiba ephathekayo yokusebenza noTanzu. Akukho zixhobo ezininzi zokuzifundela, kwaye namhlanje akunakwenzeka ukuba usebenzise ibhentshi yokuvavanya ukuba "ipoke" imveliso entsha evela kumacala onke. Nangona kunjalo, nakwidatha ekhoyo, izigqibo ezithile zinokuthathwa.
Iinzuzo zoLawulo lweMishini yeTanzu
Inkqubo yabonakala inomdla ngokwenene. Ndingathanda ukuphawula ngokukhawuleza izinto ezimbalwa ezifanelekileyo neziluncedo:
- Unokwenza amaqela ngokusebenzisa iphaneli yewebhu kunye nekhonsoli, abaphuhlisi abaya kuyithanda ngokwenene.
- Ulawulo lwe-RBAC ngeendawo zokusebenza luphunyezwa kwi-interface yomsebenzisi. Ayisebenzi kwilebhu okwangoku, kodwa kwithiyori yinto entle kakhulu.
- Ulawulo lwamalungelo olusekwe kwithempleyithi
- Ufikelelo olupheleleyo kwizithuba zamagama.
- Umhleli we-YAML.
- Ukudala imigaqo-nkqubo yenethiwekhi.
- Ukujongwa kwezempilo kwimbumba.
- Ukukwazi ukwenza i-backup kunye nokubuyisela nge-console.
- Lawula izabelo kunye nezibonelelo ngokubonwa kokusetyenziswa kokwenyani.
- Ukuqaliswa ngokuzenzekelayo kokuhlolwa kweqela.
Kwakhona, amacandelo amaninzi aphantsi kophuhliso, ngoko ke kusesekuseni kakhulu ukuthetha ngokupheleleyo malunga neenzuzo kunye neengxaki zezinye izixhobo. Ngendlela, i-Tanzu MC, esekelwe kumboniso, inokuphucula i-cluster kwi-fly kwaye, ngokubanzi, ibonelele umjikelezo wobomi beqela lababoneleli abaninzi kanye.
Nantsi eminye imizekelo “yenqanaba eliphezulu”.
Kwiqela lomnye umntu elinomqulu walo
Masithi uneqela lophuhliso elineendima ezicacileyo kunye noxanduva. Wonke umntu uxakeke ngeshishini lakhe kwaye akufuneki aphazamise ngempazamo umsebenzi wabalingane bakhe. Okanye iqela linengcali enye okanye ngaphezulu abanamava kangako ongafuniyo ukunika amalungelo angeyomfuneko kunye nenkululeko. Masicinge kwakhona ukuba une-Kubernetes evela kubaboneleli abathathu kanye. Ngokufanelekileyo, ukuze unciphise amalungelo kwaye uwazise kwi-dinominator efanayo, kuya kufuneka uye kwipaneli yokulawula nganye nganye kwaye ubhalise yonke into ngesandla. Vuma, hayi eyona ndlela yokuzonwabisa inemveliso. Kwaye okukhona unezibonelelo ezininzi, kokukhona inkqubo idinayo. I-Tanzu Mission Control iya kukuvumela ukuba ulawule ukuchazwa kweendima "kwifestile enye". Ngokombono wethu, lo ngumsebenzi olula kakhulu: akukho mntu uya kuphula nantoni na ukuba ulibale ngengozi ukucacisa amalungelo ayimfuneko kwindawo ethile.
Ngendlela, oogxa bethu abavela kwi-MTS kwibhlog yabo I-Kubernetes evela kumthengisi kunye nomthombo ovulekileyo. Ukuba kudala ufuna ukwazi ukuba yintoni umahluko kwaye ujonge ntoni xa ukhetha, wamkelekile.
Umsebenzi odibeneyo kunye nezigodo
Omnye umzekelo ovela kubomi bokwenyani usebenza ngezigodo. Makhe sicinge ukuba iqela linaye umvavanyi. Ngenye imini uza kubaphuhlisi kwaye abhengeze: "I-bug ifunyenwe kwisicelo, siza kuyilungisa ngokukhawuleza." Kungokwemvelo ukuba into yokuqala umphuhlisi aya kufuna ukuqhelana nayo ziilogi. Ukuzithumela njengeefayile nge-imeyile okanye ngeTelegram zizimilo ezimbi kunye nenkulungwane edlulileyo. Ulawulo lweMishini lubonelela ngenye indlela: ungaseta amalungelo akhethekileyo kumphuhlisi ukuze bakwazi ukufunda kuphela iilog kwindawo ethile yamagama. Kule meko, umvavanyi ufuna nje ukuthi: "kukho iibhugi kwisicelo esinje kunye, kwindawo enjalo kunye nenye, kwindawo enjalo kunye negama," kwaye umphuhlisi unokuvula ngokulula iilog kwaye akwazi ukubeka indawo. ingxaki. Kwaye ngenxa yamalungelo alinganiselweyo, awuyi kukwazi ukuyilungisa ngokukhawuleza ukuba ubuchule bakho abuvumeli.
Iqela elisempilweni linesicelo esisempilweni.
Olunye uphawu oluhle lwe-Tanzu MC kukulandela umkhondo wezempilo. Ngokujonga izinto zokuqala, inkqubo ikuvumela ukuba ujonge ezinye izibalo. Okwangoku, kunzima ukuthetha ngokuthe ngqo ukuba olu lwazi luya kuba njani: ukuza kuthi ga ngoku yonke into ibonakala ithozamile kwaye ilula. Kukho ukubeka iliso kwe-CPU kunye nomthwalo we-RAM, isimo sawo onke amacandelo abonisiwe. Kodwa nakwifomu enjalo ye-spartan iluncedo kakhulu kwaye ineenkcukacha ezisebenzayo.
Iziphumo
Ewe, kunikezelo lwelabhoratri yoLawulo lweMishini, kwiimeko ezibonakala zingenazintsholongwane, kukho imiphetho erhabaxa. Wena ngokwakho uya kubaqaphela ukuba uthatha isigqibo sokuhamba ngomsebenzi. Eminye imiba ayenziwa ngokuqonda ngokwaneleyo - kwanomlawuli onamava kuya kufuneka ayifunde incwadi yokufundisa ukuqonda ujongano kunye nesakhono salo.
Nangona kunjalo, ngenxa yobunzima bemveliso, ukubaluleka kwayo kunye nendima eya kudlala kuyo kwiimarike, kwavela kakhulu. Kubonakala ngathi abadali bazama ukuphucula ukuhamba komsebenzisi. Yenza into nganye yolawulo isebenze kwaye iqondeke kangangoko kunokwenzeka.
Ekuphela kwento eseleyo kukuzama iTanzu kwibhentshi yovavanyo ukuqonda ngokwenene zonke izinto eziluncedo, ezimbi kunye nezinto ezintsha. Nje ukuba ithuba elinjalo livele, siya kwabelana nabafundi bakaHabr ingxelo eneenkcukacha malunga nokusebenza nemveliso.
umthombo: www.habr.com
