Qaphela. transl.: Umbhali we-athikili yangempela ngu-ThΓ©o Chamley, I-Google Cloud Solutions Architect. Kulokhu okuthunyelwe kwebhulogi ye-Google Cloud, unikeza isifinyezo segayidi enemininingwane eyengeziwe yenkampani yakhe, ebizwa ngokuthi "
Kulesi sihloko, sizodabula uhlu lwezinto okufanele uzazi futhi uzenze ukuze usebenzise iziqukathi ngempumelelo ku-Kubernetes. Abafisa ukujula emininingwaneni kufanele bayifunde indaba
1. Sebenzisa izindlela zomdabu zokugawula iziqukathi
Uma uhlelo lokusebenza lusebenza kuqoqo le-Kubernetes, akukho okuningi okudingekayo kumalogi. Isistimu yokugawula emaphakathi cishe isivele yakhelwe kuqoqo olisebenzisayo. Endabeni yokusebenzisa i-Kubernetes Engine, lokhu kunesibopho
Uma uthanda, ungaphinda ubhale izingodo ku
2. Qiniseka ukuthi iziqukathi azinasimo futhi aziguquki
Ukuze iziqukathi zisebenze kahle kuqoqo le-Kubernetes, kufanele zingabi nasimo futhi zingaguquki. Uma lezi zimo sezihlangatshezwana nazo, i-Kubernetes ingakwazi ukwenza umsebenzi wayo, idale futhi ibhubhise izinhlangano ezifaka izicelo ngesikhathi nalapho kudingeka.
Akunalutho kusho ukuthi noma yisiphi isimo (idatha eqhubekayo yanoma yiluphi uhlobo) igcinwa ngaphandle kwesiqukathi. Kulokhu, kuye ngezidingo, izinhlobo ezahlukene zesitoreji sangaphandle zingasetshenziswa:
Akuguquki kusho ukuthi isiqukathi ngeke silungiswe phakathi nokuphila kwaso: azikho izibuyekezo, amapeshi, izinguquko zokucushwa. Uma udinga ukubuyekeza ikhodi yakho yohlelo lokusebenza noma usebenzise ipheshi, dala isithombe esisha futhi usisebenzise. Kunconywa ukuhambisa ukucushwa kwesiqukathi (imbobo yokulalela, izinketho zemvelo yesikhathi sokusebenza, njll.) ngaphandle - ukuze
Isibonelo sokubuyekeza ukucushwa kokuthunyelwa ku-Kubernetes kusetshenziswa i-ConfigMap efakwe kuma-pods njengesilungiselelo
3. Gwema iziqukathi ezinelungelo
Awusebenzisi izinhlelo zokusebenza njengempande kumaseva akho, akunjalo? Uma umhlaseli engena kuhlelo lokusebenza, uzothola ukufinyelela kwezimpande. Ukucatshangelwa okufanayo kuyasebenza ekungasebenzisi iziqukathi ezinelungelo. Uma udinga ukushintsha izilungiselelo kumsingathi, unganikeza isiqukathi esiqondile amandla usebenzisa inketho securityContext
Uma ulawula iqoqo, ungasebenzisa
4. Gwema ukugijima njengempande
Iziqukathi ezinelungelo sezixoxiwe, kodwa kuzoba ngcono nakakhulu uma, ngaphezu kwalokhu, ungasebenzisi izinhlelo zokusebenza ngaphakathi kwesitsha njengempande. Uma umhlaseli ethola ukuba sengozini kwesilawuli kude kuhlelo lokusebenza olunamalungelo empande oluvumela ukusetshenziswa kwekhodi, ngemva kwalokho akwazi ukushiya isiqukathi ngobungozi obungaziwa okwamanje, uzothola impande kumsingathi.
Indlela engcono kakhulu yokugwema lokhu ukuthi ungagijimi noma yini njengempande kwasekuqaleni. Ukuze wenze lokhu, ungasebenzisa isiqondiso USER
Π² Dockerfile
noma runAsUser
e Kubernetes. Umlawuli weqoqo angaphinda alungiselele ukuziphatha kokuphoqelela esebenzisa
5. Yenza isicelo kube lula ukuqapha
Njengokungena ngemvume, ukuqapha kuyingxenye ebalulekile yokuphathwa kohlelo lokusebenza. Isixazululo esidumile sokuqapha emphakathini wakwaKubernetes
Ideshibhodi ye-Kubernetes ku-Stackdriver
U-Prometheus ulindele ukuthi uhlelo lokusebenza ludlulisele amamethrikhi endaweni yokugcina ye-HTTP. Itholakalela lokhu
6. Yenza isimo sezempilo sohlelo lokusebenza sitholakale
Ukuphathwa kohlelo lokusebenza ekukhiqizeni kusizwa ikhono lakho lokuxhumana nesimo saso kulo lonke uhlelo. Ingabe uhlelo lokusebenza luyasebenza? Kulungile? Ingabe usukulungele ukuthola ithrafikhi? Uziphatha kanjani? Indlela evamile yokuxazulula le nkinga ukusebenzisa ukuhlolwa kwezempilo (ukuhlolwa kwezempilo). I-Kubernetes inezinhlobo ezimbili:
Okwe-liveness probe (ukuhlolwa kokuphila) uhlelo lokusebenza kufanele lube nesiphetho se-HTTP esibuyisela impendulo ethi "200 OK" uma sisebenza futhi ukuncika kwayo okuyisisekelo kwaneliswa. Ukuze ulungiselele uphenyo (ukuhlola ukulungela isevisi) isicelo kufanele sibe nesinye isiphetho se-HTTP esibuyisela impendulo ethi "200 OK" uma isicelo sisesimweni esihle, izinyathelo zokuqalisa seziqediwe futhi noma yisiphi isicelo esivumelekile asibangeli iphutha. I-Kubernetes izohambisa ithrafikhi kuphela esitsheni uma isicelo sesilungile ngokwala masheke. Amaphoyinti okugcina amabili angahlanganiswa uma kungekho mehluko phakathi kwezindawo zokuhlala kanye nokulungela.
Ungafunda kabanzi ngalokhu esihlokweni esihlobene esivela ku-Sandeep Dinesh, Ummeli Wonjiniyela wakwa-Google: β
7. Khetha inguqulo yesithombe sakho ngokucophelela
Izithombe eziningi ezisesidlangalaleni neziyimfihlo zisebenzisa isistimu yokumaka efana naleyo echazwe kuyo latest
ingasuka kaningi isuka esithombeni iye kwesinye - ayinakuthenjelwa kukho uma udinga ukwakhiwa nokufakwa okungabikezelwa nokuphindaphindwayo.
Ungasebenzisa ithegi X.Y.Z
(cishe azishintshile njalo), kodwa kulokhu, gcina ithrekhi yazo zonke iziqephu nezibuyekezo zesithombe. Uma isithombe osisebenzisayo sinomaka X.Y
, lena inketho enhle yencazelo yegolide. Ngokuyikhetha, uthola ngokuzenzakalelayo ama-patches futhi ngesikhathi esifanayo uthembele kunguqulo ezinzile yohlelo lokusebenza.
I-PS evela kumhumushi
Funda futhi kubhulogi yethu:
- Β«
Izibalo ezintsha ze-CNCF ezitsheni, imvelo yamafu kanye ne-Kubernetes "; - Β«
7 Izimiso Zokuklama Izicelo Ezisekelwe Kwisitsha "; - Β«
Izindlela Eziyi-11 Zokuba (Hhayi) Ukuba yisisulu Se-Kubernetes Hack "; - Β«
Okuhlangenwe nakho kwethu ne-Kubernetes kumaphrojekthi amancane Β» (buyekeza kanye nombiko wevidiyo); - Β«
Ukuqapha kanye ne-Kubernetes Β» (buyekeza kanye nombiko wevidiyo); - Β«
Sakha izithombe ze-Docker ze-CI/CD ngokushesha futhi kalula nge-dapp Β» (buyekeza kanye nombiko wevidiyo); - Β«
Imikhuba Eqhubekayo Yokulethwa Nge-Docker Β» (buyekeza kanye nombiko wevidiyo); - Β«
Ukufa kwe-microservice madness ngo-2018 ".
Source: www.habr.com