Inkampani ye-URUS izamile i-Kubernetes ngezindlela ezihlukene: ukuthunyelwa okuzimele ensimbi engenalutho, ku-Google Cloud, yase idlulisela inkundla yayo efwini le-Mail.ru Cloud Solutions (MCS). U-Igor Shishkin utshela ukuthi bakhethe kanjani umhlinzeki omusha wamafu nokuthi bakwazi kanjani ukuthuthela kuyo ngerekhodi amahora amabili (), umlawuli omkhulu wesistimu e-URUS.
I-URUS yenzani?
Ziningi izindlela zokuthuthukisa izinga lendawo yasemadolobheni, futhi enye yazo ukulenza lihambisane nemvelo. Yilokhu kanye inkampani ye-URUS - Smart Digital Services esebenza kukho. Lapha basebenzisa izixazululo ezisiza amabhizinisi aqaphe izinkomba ezibalulekile zezemvelo futhi anciphise umthelela ongemuhle emvelweni. Izinzwa ziqoqa idatha ekubunjweni komoya, izinga lomsindo namanye amapharamitha, bese izithumela kuplathifomu ehlanganisiwe ye-URUS-Ekomon ukuze ihlaziywe futhi yenze izincomo.
Isebenza kanjani i-URUS kusuka ngaphakathi
Iklayenti elijwayelekile le-URUS yinkampani etholakala noma eduze nendawo yokuhlala. Lokhu kungaba imboni, itheku, idepho yezitimela noma iyiphi enye indawo. Uma iklayenti lethu selivele lithole isixwayiso, lahlawuliswa ukungcoliswa kwemvelo, noma lifuna ukwenza umsindo omncane, ukunciphisa inani lezinto ezikhishwayo eziyingozi, liza kithi, futhi sesivele simnikeze isisombululo esenziwe ngomumo sokuqapha imvelo.
Igrafu yokuqapha ukugxilisa ingqondo ye-H2S ibonisa ukukhishwa kwekhabhoni yasebusuku evamile evela esitshalweni esiseduze
Amadivayisi esiwasebenzisa e-URUS aqukethe izinzwa ezimbalwa eziqoqa ulwazi mayelana nokuqukethwe kwamagesi athile, amazinga omsindo kanye nenye idatha yokuhlola isimo semvelo. Inani eliqondile lezinzwa lihlala linqunywa umsebenzi othize.
Ngokuya ngemininingwane yezilinganiso, amadivaysi anezinzwa angatholakala ezindongeni zezakhiwo, izigxobo nezinye izindawo ezingafanele. Idivayisi enjalo iqoqa ulwazi, iluhlanganise bese iluthumela esangweni lokwamukela idatha. Lapho silondoloza idatha ukuze sigcinwe isikhathi eside futhi siyicubungule kusengaphambili ukuze sihlaziywe. Isibonelo esilula salokho esikuthola ngenxa yokuhlaziya inkomba yekhwalithi yomoya, eyaziwa nangokuthi i-AQI.
Ngokuhambisanayo, ezinye izinsiza eziningi zisebenza endaweni yethu, kodwa zingezesevisi. Isibonelo, isevisi yesaziso ithumela izaziso kumakhasimende uma noma iyiphi ipharamitha egadiwe (isibonelo, okuqukethwe kwe-CO2) idlula inani elivunyelwe.
Siyigcina kanjani idatha. Indaba kaKubernetes ngensimbi engenalutho
Iphrojekthi ye-URUS yokuqapha imvelo inezindawo ezimbalwa zokugcina idatha. Kokunye sigcina idatha "eluhlaza" - esikuthole ngokuqondile kumadivayisi ngokwawo. Lesi sitoreji siyi-tape βmagneticβ, njengakumakhasethi amadala, anomlando wazo zonke izinkomba. Uhlobo lwesibili lokugcina lusetshenziselwa idatha ecutshungulwe ngaphambili - idatha evela kumadivayisi, ahlanganiswe imethadatha emayelana nokuxhumana phakathi kwezinzwa nokufundwa kwamadivayisi ngokwawo, ukusebenzelana nezinhlangano, izindawo, njll. Lolu lwazi lukuvumela ukuthi uhlole ngamandla ukuthi inkomba ethile isebenze kanjani. yashintsha phakathi nenkathi ethile yesikhathi . Sisebenzisa ukugcinwa kwedatha "okungavuthiwe", phakathi kwezinye izinto, njengesipele kanye nokubuyisela idatha ecutshungulwe ngaphambili, uma isidingo esinjalo sivela.
Ngenkathi sifuna ukuxazulula inkinga yethu yokugcina izinto eminyakeni embalwa edlule, besinezinketho ezimbili zeplathifomu: I-Kubernetes ne-OpenStack. Kepha njengoba lokhu kwakamuva kubukeka kubi kakhulu (bheka nje ukwakheka kwayo ukuze ukholwe ngalokhu), sahlala kwaKubernetes. Enye ingxabano evuna yona kwaba ukulawulwa kwesoftware okulula, ikhono lokusika kalula ngisho namanodi wehadiwe ngokuya ngezinsiza.
Ngokuhambisana nokwenza kahle i-Kubernetes ngokwayo, siphinde safunda izindlela zokugcina idatha, ngenkathi sigcina sonke isitoreji sethu ku-Kubernetes ku-hardware yethu, sathola ubuchwepheshe obuhle kakhulu. Konke esasinakho ngaleso sikhathi sasihlala ku-Kubernetes: isitoreji esigcwele, uhlelo lokuqapha, i-CI/CD. I-Kubernetes isiphenduke inkundla yethu sonke.
Kodwa besifuna ukusebenzisana ne-Kubernetes njengesevisi, futhi singazibandakanyi ekusekeleni nasekuthuthukisweni kwayo. Ngaphezu kwalokho, asikuthandanga ukuthi kubiza malini ukuyigcina ensimbi engenalutho, futhi sasidinga ukuthuthukiswa njalo! Isibonelo, omunye wemisebenzi yokuqala kwakuwukuhlanganisa abalawuli be-Kubernetes Ingress kungqalasizinda yenethiwekhi yenhlangano yethu. Lona umsebenzi onzima, ikakhulukazi uma kucatshangelwa ukuthi ngaleso sikhathi akukho lutho olwalulungele ukuphathwa kwezinsiza ezihleliwe njengamarekhodi e-DNS noma ukwabiwa kwamakheli e-IP. Kamuva saqala ukuhlola isitoreji sedatha sangaphandle. Asizange sisondele ekusebenziseni isilawuli se-PVC, kodwa nalapho kwacaca ukuthi lena indawo enkulu yomsebenzi edinga ochwepheshe abazinikele.
Ukushintshela ku-Google Cloud Platform kuyisixazululo sesikhashana
Sibonile ukuthi lokhu akukwazanga ukuqhubeka, futhi sahambisa idatha yethu isuka ensimbi engenalutho yayisa ku-Google Cloud Platform. Eqinisweni, ngaleso sikhathi zazingekho izinketho eziningi ezithakazelisayo zenkampani yaseRussia: ngaphandle kwe-Google Cloud Platform, i-Amazon kuphela enikeza isevisi efanayo, kodwa sisaxazulule isisombululo esivela ku-Google. Khona-ke kubonakala ngathi kunenzuzo eyengeziwe yezomnotho, eduze ne-Upstream, ingasaphathwa eyokuthi i-Google ngokwayo iwuhlobo lwe-PoC Kubernetes ekukhiqizeni.
Inkinga yokuqala enkulu yavela emkhathizwe njengoba isizinda samakhasimende ethu sikhula. Lapho sinesidingo sokugcina idatha yomuntu siqu, sasibhekene nokukhetha: noma sisebenza ne-Google futhi sephule imithetho yaseRussia, noma sifuna enye indlela e-Russian Federation. Ukukhetha, kukonke, bekubikezelwa. π
Sibone kanjani isevisi yamafu ekahle
Ekuqaleni kokusesha, sase sesazi ukuthi yini ebesifuna ukuyithola kumhlinzeki wamafu wesikhathi esizayo. Iyiphi isevisi ebesiyifuna:
- Kuyashesha futhi kuyavumelana nezimo. Ukuze sikwazi ukwengeza ngokushesha inodi entsha noma sikhiphe okuthile nganoma isiphi isikhathi.
- Okungabizi. Besikhathazeke kakhulu ngodaba lwezezimali, njengoba sasishoda ngezinsiza. Sasazi kakade ukuthi sifuna ukusebenzisana noKubernetes, futhi manje umsebenzi wawuwukunciphisa izindleko zawo ukuze kwandiswe noma okungenani kugcinwe ukusebenza kahle kokusebenzisa lesi sixazululo.
- Okuzenzakalelayo. Sihlele ukusebenza nensizakalo nge-API, ngaphandle kwabaphathi nezingcingo noma izimo lapho sidinga ukuphakamisa mathupha amanodi ambalwa kumodi ephuthumayo. Njengoba izinqubo zethu eziningi zizenzakalela, besilindele okufanayo kusukela kusevisi yamafu.
- Ngamaseva eRussian Federation. Vele, sahlela ukuhambisana nomthetho waseRussia kanye naleyo 152-FZ efanayo.
Ngaleso sikhathi, babembalwa abahlinzeki be-Kubernetes aaS e-Russia, futhi lapho sikhetha umhlinzeki, kwakubalulekile ngathi ukuthi singayekethisi izinto eziza kuqala kithi. Ithimba le-Mail.ru Cloud Solutions, esiqale ukusebenza nalo futhi sisasebenzisana nalo, lisinikeze isevisi ezenzakalelayo ngokugcwele, ngokusekelwa kwe-API kanye nephaneli yokulawula elula ehlanganisa i-Horizon - ngayo singaphakamisa ngokushesha inani elithile lama-node.
Sakwazi kanjani ukuthuthela ku-MCS emahoreni amabili
Ezinyathelweni ezinjalo, izinkampani eziningi zibhekana nobunzima nezingqinamba, kodwa kithi zazingekho. Sibe nenhlanhla: njengoba besesivele sisebenzela i-Kubernetes ngaphambi kokuthi kuqale ukuthutha, simane salungisa amafayela amathathu futhi sethula amasevisi ethu endaweni entsha yamafu, i-MCS. Ake ngikukhumbuze ukuthi ngaleso sikhathi sase sishiye insimbi engenalutho futhi sihlala ku-Google Cloud Platform. Ngakho-ke, umnyakazo ngokwako awuthathanga amahora angaphezu kwamabili, kanye nesikhathi esithe xaxa (cishe ihora) esichithwe sikopisha idatha kumadivayisi ethu. Ngaleso sikhathi sase sivele sisebenzisa i-Spinnaker (isevisi ye-CD enamafu amaningi ukuhlinzeka ngokulethwa Okuqhubekayo). Siphinde sanezela ngokushesha eqenjini elisha futhi saqhubeka nokusebenza njengenjwayelo.
Ngenxa yokuzenzakalela kwezinqubo zokuthuthukisa kanye ne-CI/CD, i-Kubernetes e-URUS iphethwe uchwepheshe oyedwa (futhi yimi lowo). Ngesinye isikhathi, omunye umqondisi wesistimu wasebenza nami, kodwa kwabe sekuvela ukuthi sesivele sizenzele yonke inqubo eyinhloko futhi kwakukhona imisebenzi eminingi engxenyeni yomkhiqizo wethu oyinhloko futhi kunengqondo ukuqondisa izinsiza kulokhu.
Sithole ebesikulindele kumhlinzeki wamafu, njengoba saqala ukubambisana ngaphandle kokukhohlisa. Uma bekukhona izigameko, iningi bezingobuchwepheshe kanye nalezo ebezingachazwa kalula ubusha besevisi. Into eyinhloko ukuthi ithimba le-MCS liqeda ngokushesha ukushiyeka futhi liphendula ngokushesha imibuzo kuzithunywa.
Uma ngiqhathanisa ulwazi lwami ne-Google Cloud Platform, esimweni sabo ngangingazi nokuthi inkinobho yokuphendula yayikuphi, njengoba sasingekho isidingo sayo. Futhi uma izinkinga zenzekile, i-Google ngokwayo ithumele izaziso ngokuhlangene. Kodwa endabeni ye-MCS, ngicabanga ukuthi inzuzo enkulu ukuthi iseduze ngangokunokwenzeka kumakhasimende aseRussia - kokubili ngokwendawo nangokwengqondo.
Sibona kanjani ukusebenza namafu esikhathini esizayo
Manje umsebenzi wethu usondelene kakhulu ne-Kubernetes, futhi usifanela ngokuphelele ngokombono wemisebenzi yengqalasizinda. Ngakho-ke, asihlele ukufuduka kuyo noma kuphi, nakuba sihlala sethula imikhuba namasevisi amasha ukuze senze imisebenzi evamile ibe lula futhi senze emisha, sikhulise ukuzinza nokwethembeka kwezinsizakalo... Manje sethula isevisi ye-Chaos Monkey (ikakhulukazi). , sisebenzisa i-chaoskube, kodwa lokhu akuwushintshi umqondo: ), owadalwa ekuqaleni yi-Netflix. I-Chaos Monkey yenza into eyodwa elula: isusa i-Kubernetes pod engahleliwe ngesikhathi esingahleliwe. Lokhu kuyadingeka ukuze insizakalo yethu iphile ngokujwayelekile nenani lezimo ezingu-nβ1, ngakho siyaziqeqesha ukuze silungele noma yiziphi izinkinga.
Manje ngibona ukusetshenziswa kwezixazululo zezinkampani zangaphandle - amapulatifomu amafu afanayo - njengento kuphela efanelekile ezinkampanini ezincane. Ngokuvamile, ekuqaleni kohambo lwabo, balinganiselwe ezinsizeni, kokubili ezomuntu nezezimali, futhi ukwakha nokugcina isikhungo sabo samafu noma sedatha kubiza kakhulu futhi kufuna umsebenzi omkhulu. Abahlinzeki bamafu bakuvumela ukuthi unciphise lezi zindleko; ungathola kubo ngokushesha izinsiza ezidingekayo ekusebenzeni kwezinsizakalo lapha futhi manje, futhi ukhokhele lezi zinsiza ngemuva kweqiniso. Ngokuqondene nenkampani ye-URUS, sizohlala sithembekile ku-Kubernetes efwini okwamanje. Kodwa kwazi bani, kungase kudingeke ukuthi sande ngokwendawo, noma sisebenzise izixazululo ezisekelwe kumishini ethile ethile. Noma mhlawumbe inani lezinsiza ezisetshenzisiwe lizothethelela i-Kubernetes eyakho nge-bare-metal, njengasezinsukwini zakudala ezinhle. π
Esikufundile ekusebenzeni ngamasevisi wamafu
Saqala ukusebenzisa i-Kubernetes ngensimbi engenalutho, futhi nalapho yayiyinhle ngendlela yayo. Kodwa amandla ayo embulwe ngokunembile njengengxenye ye-aaS efwini. Uma uzibekela umgomo futhi wenze yonke into ngokuzenzakalelayo ngangokunokwenzeka, uzokwazi ukugwema ukukhiya umthengisi futhi ukuhamba phakathi kwabahlinzeki bamafu kuzothatha amahora ambalwa, futhi amaseli ezinzwa azohlala nathi. Singakwazi ukweluleka ezinye izinkampani: uma ufuna ukuqalisa eyakho isevisi (yefu), enezinsiza ezilinganiselwe kanye nesivinini esiphezulu sokuthuthukiswa, qala khona manje ngokuqasha izinsiza zamafu, futhi wakhe isikhungo sakho sedatha ngemva kokuba i-Forbes ibhale ngawe.
Source: www.habr.com