Izindlela ezi-7 ezihamba phambili zokusebenzisa iziqukathi ngokuya nge-Google

Qaphela. transl.: Umbhali we-athikili yangempela ngu-ThΓ©o Chamley, I-Google Cloud Solutions Architect. Kulokhu okuthunyelwe kwebhulogi ye-Google Cloud, unikeza isifinyezo segayidi enemininingwane eyengeziwe yenkampani yakhe, ebizwa ngokuthi "Izindlela Ezinhle Kakhulu Zokusebenzisa Iziqukathi" Kuyo, ochwepheshe be-Google baqoqe imikhuba engcono kakhulu yeziqukathi zokusebenza kumongo wokusebenzisa i-Google Kubernetes Engine nokuningi, okuthinta izihloko eziningi: kusukela ekuvikelekeni kuya ekuhlolweni nasekugawulweni kwemithi. Ngakho-ke yiziphi izinqubo zokuqukatha ezibaluleke kakhulu ngokusho kwe-Google?

Izindlela ezi-7 ezihamba phambili zokusebenzisa iziqukathi ngokuya nge-Google

Kubernetes Engine (Isevisi esekelwe ku-Kubernetes yokusebenzisa izinhlelo zokusebenza ezifakwe esitsheni ku-Google Cloud - cishe. ukuhumusha) ingenye yezindlela ezingcono kakhulu zokuqhuba imithwalo yemisebenzi edinga ukukala. Kubernetes izoqinisekisa ukusebenza kahle kwezinhlelo zokusebenza eziningi uma zifakwe esitsheni. Kodwa uma ufuna uhlelo lwakho lokusebenza kube lula ukuphatha futhi ufuna ukusebenzisa ngokugcwele i-Kubernetes, udinga ukulandela izinqubo ezihamba phambili. Bazokwenza lula ukusebenza kohlelo lokusebenza, ukuqapha nokulungisa iphutha, futhi bakhulise nokuphepha.

Kulesi sihloko, sizodabula uhlu lwezinto okufanele uzazi futhi uzenze ukuze usebenzise iziqukathi ngempumelelo ku-Kubernetes. Abafisa ukujula emininingwaneni kufanele bayifunde indaba Izindlela Ezinhle Kakhulu Zokusebenzisa Iziqukathi, futhi futhi unake yethu okuthunyelwe kwangaphambili mayelana nokuhlanganisa iziqukathi.

1. Sebenzisa izindlela zomdabu zokugawula iziqukathi

Uma uhlelo lokusebenza lusebenza kuqoqo le-Kubernetes, akukho okuningi okudingekayo kumalogi. Isistimu yokugawula emaphakathi cishe isivele yakhelwe kuqoqo olisebenzisayo. Endabeni yokusebenzisa i-Kubernetes Engine, lokhu kunesibopho Ukungena kwe-Stackdriver. (Qaphela. transl.: Futhi uma usebenzisa ukufakwa kwakho kwe-Kubernetes, sincoma ukuthi ubhekisise isisombululo sethu soMthombo Ovulekile - indlu yezigodo.) Gcina impilo yakho ilula futhi usebenzise izindlela zomdabu zokugawula iziqukathi. Bhala amalogi ku-stdout naku-stderr - azotholwa ngokuzenzakalelayo, agcinwe futhi akhonjwe.

Uma uthanda, ungaphinda ubhale izingodo ku Ifomethi ye-JSON. Le ndlela izokwenza kube lula ukwengeza imethadatha kubo. Futhi ngazo, Ukuloga Kwe-Stackdriver kuzoba nekhono lokusesha amalogi kusetshenziswa le methadatha.

2. Qiniseka ukuthi iziqukathi azinasimo futhi aziguquki

Ukuze iziqukathi zisebenze kahle kuqoqo le-Kubernetes, kufanele zingabi nasimo futhi zingaguquki. Uma lezi zimo sezihlangatshezwana nazo, i-Kubernetes ingakwazi ukwenza umsebenzi wayo, idale futhi ibhubhise izinhlangano ezifaka izicelo ngesikhathi nalapho kudingeka.

Akunalutho kusho ukuthi noma yisiphi isimo (idatha eqhubekayo yanoma yiluphi uhlobo) igcinwa ngaphandle kwesiqukathi. Kulokhu, kuye ngezidingo, izinhlobo ezahlukene zesitoreji sangaphandle zingasetshenziswa: Isitoreji sefu, Amadiski Aphikelelayo, Redis, I-Cloud SQL noma ezinye isizindalwazi esiphethwe. (Qaphela. transl.: Funda kabanzi ngalokhu esihlokweni sethu "Ama-Opharetha e-Kubernetes: ukuthi zisebenza kanjani izinhlelo zokusebenza ezisezingeni eliphakeme".)

Akuguquki kusho ukuthi isiqukathi ngeke silungiswe phakathi nokuphila kwaso: azikho izibuyekezo, amapeshi, izinguquko zokucushwa. Uma udinga ukubuyekeza ikhodi yakho yohlelo lokusebenza noma usebenzise ipheshi, dala isithombe esisha futhi usisebenzise. Kunconywa ukuhambisa ukucushwa kwesiqukathi (imbobo yokulalela, izinketho zemvelo yesikhathi sokusebenza, njll.) ngaphandle - ukuze Secrets ΠΈ I-ConfigMaps. Angabuyekezwa ngaphandle kokwakha isithombe esisha sesitsha. Ukuze udale kalula amapayipi ngokuhlanganiswa kwesithombe, ungasebenzisa I-Cloud Build. (Qaphela. transl.: Sisebenzisa ithuluzi lomthombo ovulekile kulezi zinhloso i-dapp.)

Izindlela ezi-7 ezihamba phambili zokusebenzisa iziqukathi ngokuya nge-Google
Isibonelo sokubuyekeza ukucushwa kokuthunyelwa ku-Kubernetes kusetshenziswa i-ConfigMap efakwe kuma-pods njengesilungiselelo

3. Gwema iziqukathi ezinelungelo

Awusebenzisi izinhlelo zokusebenza njengempande kumaseva akho, akunjalo? Uma umhlaseli engena kuhlelo lokusebenza, uzothola ukufinyelela kwezimpande. Ukucatshangelwa okufanayo kuyasebenza ekungasebenzisi iziqukathi ezinelungelo. Uma udinga ukushintsha izilungiselelo kumsingathi, unganikeza isiqukathi esiqondile amandla usebenzisa inketho securityContext e Kubernetes. Uma udinga ukushintsha syscls, Kubernetes has abstract ehlukene kwalokhu. Ngokuvamile, zama ukusebenzisa ngokugcwele init- kanye neziqukathi ze-sidecar ukwenza imisebenzi eyilungelo efanayo. Akudingeki ukuba zifinyeleleke kuthrafikhi yangaphakathi noma yangaphandle.

Uma ulawula iqoqo, ungasebenzisa Inqubomgomo Yokuphepha Ye-Pod ngemikhawulo ekusetshenzisweni kweziqukathi ezinelungelo.

4. Gwema ukugijima njengempande

Iziqukathi ezinelungelo sezixoxiwe, kodwa kuzoba ngcono nakakhulu uma, ngaphezu kwalokhu, ungasebenzisi izinhlelo zokusebenza ngaphakathi kwesitsha njengempande. Uma umhlaseli ethola ukuba sengozini kwesilawuli kude kuhlelo lokusebenza olunamalungelo empande oluvumela ukusetshenziswa kwekhodi, ngemva kwalokho akwazi ukushiya isiqukathi ngobungozi obungaziwa okwamanje, uzothola impande kumsingathi.

Indlela engcono kakhulu yokugwema lokhu ukuthi ungagijimi noma yini njengempande kwasekuqaleni. Ukuze wenze lokhu, ungasebenzisa isiqondiso USER Π² Dockerfile noma runAsUser e Kubernetes. Umlawuli weqoqo angaphinda alungiselele ukuziphatha kokuphoqelela esebenzisa Inqubomgomo Yokuphepha Ye-Pod.

5. Yenza isicelo kube lula ukuqapha

Njengokungena ngemvume, ukuqapha kuyingxenye ebalulekile yokuphathwa kohlelo lokusebenza. Isixazululo esidumile sokuqapha emphakathini wakwaKubernetes Prometheus - uhlelo oluthola ngokuzenzakalelayo ama-pods namasevisi adinga ukuqapha. (Qaphela. transl.: Bheka futhi wethu umbiko onemininingwane esihlokweni sokuqapha kusetshenziswa i-Prometheus ne-Kubernetes.) I-Stackdriver iyakwazi ukuqapha amaqoqo e-Kubernetes futhi ihlanganisa nenguqulo yayo ye-Prometheus yokuqapha uhlelo lokusebenza.

Izindlela ezi-7 ezihamba phambili zokusebenzisa iziqukathi ngokuya nge-Google
Ideshibhodi ye-Kubernetes ku-Stackdriver

U-Prometheus ulindele ukuthi uhlelo lokusebenza ludlulisele amamethrikhi endaweni yokugcina ye-HTTP. Itholakalela lokhu Imitapo yolwazi yeklayenti le-Prometheus. Ifomethi efanayo isetshenziswa amanye amathuluzi afana I-OpenCensus ΠΈ Istio.

6. Yenza isimo sezempilo sohlelo lokusebenza sitholakale

Ukuphathwa kohlelo lokusebenza ekukhiqizeni kusizwa ikhono lakho lokuxhumana nesimo saso kulo lonke uhlelo. Ingabe uhlelo lokusebenza luyasebenza? Kulungile? Ingabe usukulungele ukuthola ithrafikhi? Uziphatha kanjani? Indlela evamile yokuxazulula le nkinga ukusebenzisa ukuhlolwa kwezempilo (ukuhlolwa kwezempilo). I-Kubernetes inezinhlobo ezimbili: ukuphila kanye ukulungela probe.

Okwe-liveness probe (ukuhlolwa kokuphila) uhlelo lokusebenza kufanele lube nesiphetho se-HTTP esibuyisela impendulo ethi "200 OK" uma sisebenza futhi ukuncika kwayo okuyisisekelo kwaneliswa. Ukuze ulungiselele uphenyo (ukuhlola ukulungela isevisi) isicelo kufanele sibe nesinye isiphetho se-HTTP esibuyisela impendulo ethi "200 OK" uma isicelo sisesimweni esihle, izinyathelo zokuqalisa seziqediwe futhi noma yisiphi isicelo esivumelekile asibangeli iphutha. I-Kubernetes izohambisa ithrafikhi kuphela esitsheni uma isicelo sesilungile ngokwala masheke. Amaphoyinti okugcina amabili angahlanganiswa uma kungekho mehluko phakathi kwezindawo zokuhlala kanye nokulungela.

Ungafunda kabanzi ngalokhu esihlokweni esihlobene esivela ku-Sandeep Dinesh, Ummeli Wonjiniyela wakwa-Google: β€œIzindlela ezihamba phambili ze-Kubernetes: Ukusetha ukuhlolwa kwezempilo ngokulungela kanye ne-liveness probe".

7. Khetha inguqulo yesithombe sakho ngokucophelela

Izithombe eziningi ezisesidlangalaleni neziyimfihlo zisebenzisa isistimu yokumaka efana naleyo echazwe kuyo Izindlela Ezinhle Kakhulu Zokwakha Iziqukathi. Uma isithombe sisebenzisa isistimu eseduze inguqulo ye-semantic, kuyadingeka ukucabangela imininingwane yokumaka. Ngokwesibonelo, umaka latest ingasuka kaningi isuka esithombeni iye kwesinye - ayinakuthenjelwa kukho uma udinga ukwakhiwa nokufakwa okungabikezelwa nokuphindaphindwayo.

Ungasebenzisa ithegi X.Y.Z (cishe azishintshile njalo), kodwa kulokhu, gcina ithrekhi yazo zonke iziqephu nezibuyekezo zesithombe. Uma isithombe osisebenzisayo sinomaka X.Y, lena inketho enhle yencazelo yegolide. Ngokuyikhetha, uthola ngokuzenzakalelayo ama-patches futhi ngesikhathi esifanayo uthembele kunguqulo ezinzile yohlelo lokusebenza.

I-PS evela kumhumushi

Funda futhi kubhulogi yethu:

Source: www.habr.com

Engeza amazwana