I-ecosystem yobuchwepheshe bokufaka iziqukathi ishintsha ngokushesha futhi iyashintsha, ngakho-ke kukhona ukuntuleka kwezindlela zokusebenza ezinhle kule ndawo. Kodwa-ke, i-Kubernetes neziqukathi zisetshenziswa ngokwandayo, kokubili ukwenza izinhlelo zokusebenza zefa zibe zesimanje kanye nokuthuthukisa izinhlelo zokusebenza zamafu zesimanje.
Ithimba izibikezelo eziqoqiwe, izeluleko nezindlela ezinhle kakhulu zabaholi bemakethe abavela ku-Gartner, 451 Research, StacxRoΡ
nabanye. Azokwenza futhi asheshise ukuthunyelwa kweziqukathi ezindaweni zokukhiqiza.
Ungazi Kanjani Uma Inkampani Yakho Isikulungele Ukuthumela Iziqukathi Endaweni Yokukhiqiza
, ngo-2022, izinhlangano ezingaphezu kuka-75% zizosebenzisa izinhlelo zokusebenza ezifakiwe ekukhiqizeni. Lokhu kungaphezulu kakhulu kunamanje, lapho izinkampani ezingaphansi kwama-30% ezisebenzisa lezi zicelo.
Ngokusho Imakethe ehlongozwayo yezicelo zobuchwepheshe beziqukathi ngo-2022 izoba ngama-dollar ayizigidi eziyizinkulungwane ezingama-4,3. Lokhu kungaphezu kokuphindwe kabili kwenani elihlongozwayo ngo-2019, ngezinga lokukhula kwemakethe lama-30%.
Π U-87% wabaphenduli uthe njengamanje usebenzisa ubuchwepheshe bamakhonteyna. Uma kuqhathaniswa, ngo-2017 kwakukhona i-55% yabaphenduli abanjalo.
Ngaphandle kwentshisekelo ekhulayo nokwamukelwa kweziqukathi, ukuzifaka ekukhiqizeni kudinga ijika lokufunda ngenxa yokungavuthwa kwezobuchwepheshe kanye nokuntula ulwazi. Izinhlangano kufanele zibe namaqiniso mayelana nezinqubo zebhizinisi ezidinga ukufaka isicelo. Abaholi be-IT kufanele bahlole ukuthi banalo yini ikhono lokuqhubekela phambili nesidingo sokufunda ngokushesha.
Sicabanga ukuthi imibuzo esesithombeni esingezansi izokusiza ukuthi unqume ukuthi usukulungele yini ukusebenzisa iziqukathi ekukhiqizeni:
Amaphutha ajwayelekile uma usebenzisa iziqukathi ekukhiqizeni
Izinhlangano zivame ukuwubukela phansi umzamo odingekayo ukuze kusetshenziswe iziqukathi ekukhiqizeni. Amanye amaphutha ajwayelekile ezimeni zekhasimende lapho kusetshenziswa iziqukathi ezindaweni zokukhiqiza:
Uzigcina kanjani iziqukathi zivikelekile
Ukuphepha akukwazi ukubhekwana nakho βkamuvaβ. Kumele yakhelwe kunqubo ye-DevOps, yingakho kukhona ngisho negama elikhethekile - i-DevSecOps. Izinhlangano kumele zihlele kuwo wonke umjikelezo wokuphila wokuthuthukisa, ohlanganisa inqubo yokwakha nokuthuthukiswa, ukuthunyelwa nokwethulwa kohlelo lokusebenza.
:
- Hlanganisa inqubo yokuskena izithombe zohlelo lokusebenza ukuze uthole ubungozi epayipini lakho lokuhlanganisa/ukulethwa okuqhubekayo (CI/CD). Izicelo ziskenwa ekwakhiweni kwesoftware nasezigabeni zokuqalisa. Gcizelela isidingo sokuskena nokuhlonza izingxenye zomthombo ovulekile, imitapo yolwazi, nezinhlaka. Onjiniyela abasebenzisa izinguqulo ezindala, ezisengozini ingenye yezimbangela eziyinhloko zobungozi beziqukathi.
- Thuthukisa ukumisa kwakho nge-Center for Internet Security tests (), ezitholakala kuzo zombili i-Docker ne-Kubernetes.
- Qiniseka ukuthi usebenzisa izilawuli zokufinyelela, uqinisekise ukuhlukaniswa kwemisebenzi, futhi usebenzise inqubomgomo yokuphatha izimfihlo. Ulwazi olubucayi, olufana nokhiye be-Secure Sockets Layer (SSL) noma imininingwane yesizindalwazi, ibethelwa i-orchestrator noma izinsizakalo zokuphatha zezinkampani zangaphandle futhi zivezwe ngesikhathi sokusebenza.
- Gwema iziqukathi eziphakeme ngokuphatha izinqubomgomo zokuphepha ukuze unciphise izingozi ezingaba khona zokuphulwa komthetho.
- Sebenzisa amathuluzi okuvikela anikeza ukugunyazwa, ukuqapha ukuziphatha, nokutholwa okudidayo ukuze uvimbele umsebenzi onobungozi.
:
- Sebenzisa amandla akhelwe ngaphakathi e-Kubernetes. Setha ukufinyelela kwabasebenzisi usebenzisa izindima. Qiniseka ukuthi awunikezi izimvume ezingadingekile emabhizinisini angawodwana, nakuba kungase kuthathe isikhathi ukucabanga ngezimvume ezincane ezidingekayo. Kungase kulingeke ukunikeza umlawuli weqoqo amalungelo abanzi njengoba lokhu konga isikhathi ekuqaleni. Nokho, noma yikuphi ukuyekethisa noma amaphutha ku-akhawunti kungaholela emiphumeleni elimazayo ngokuhamba kwesikhathi.
- Gwema izimvume zokufinyelela eziyimpinda. Kungase kube usizo ngezinye izikhathi ukuba nezindima ezihlukene ezigqagqene, kodwa lokhu kungaholela ezinkingeni zokusebenza futhi kudale nezindawo eziyimpumputhe lapho kususwa izimvume. Kubalulekile futhi ukususa izindima ezingasetshenzisiwe nezingasebenzi.
- Setha izinqubomgomo zenethiwekhi: hlukanisa amamojula ukuze ukhawulele ukufinyelela kuwo; vumela ngokucacile ukufinyelela kwe-inthanethi kulawo mamojula awadingayo usebenzisa omaka; Vumela ngokusobala ukuxhumana phakathi kwalawo mamojuli adinga ukuxhumana namanye.
Ungahlela kanjani ukuqashwa kweziqukathi kanye nezinsizakalo ezikuzo
Ukuphepha Nokuqapha - lapho kuthunyelwa amaqoqo e-Kubernetes. Onjiniyela bahlale begxile kakhulu kuzici zezinhlelo zokusebenza abazithuthukisayo kunezici .
:
- Zama ukuqapha isimo seziqukathi noma izinsizakalo ezikuzo ngokuhambisana nokuqapha amasistimu okusingatha.
- Bheka abathengisi namathuluzi anokuhlanganiswa okujulile ku-orchestration yesiqukathi, ikakhulukazi i-Kubernetes.
- Khetha amathuluzi anikeza ukuloga okunemininingwane, ukutholwa kwesevisi okuzenzakalelayo, nezincomo zesikhathi sangempela usebenzisa izibalo kanye/noma ukufunda komshini.
:
- Sebenzisa amathuluzi ukuze uthole futhi ulandelele ngokuzenzakalelayo amamethrikhi esiqukathi, amamethrikhi okusebenza ahlobanisa njenge-CPU, inkumbulo, nesikhathi.
- Qinisekisa ukuhlelwa komthamo okuphelele ngokubikezela izinsuku zokuqedwa kwamandla ngokusekelwe kumamethrikhi okuqapha esiqukathi.
- Gada izinhlelo zokusebenza ezifakwe esitsheni ngokutholakala nokusebenza, ziwusizo kukho kokubili ukuhlelwa kwamandla kanye nezinkinga zokusebenza zokuxazulula izinkinga.
- Yenza ngokuzenzakalela ukugeleza komsebenzi ngokunikeza ukwesekwa kokuphatha nokukala kweziqukathi kanye nezindawo zazo zokubamba.
- Ukulawula ukufinyelela ngokuzenzakalela ukuze kuqashwe isisekelo somsebenzisi wakho, ukukhubaza ama-akhawunti angasebenzi kanye nezihambeli, futhi ususe amalungelo angadingekile.
- Qinisekisa ukuthi isethi yakho yamathuluzi ingaqapha lezi ziqukathi nezinhlelo zokusebenza ezindaweni eziningi (ifu, endaweni, noma ingxubevange) ukuze ubone ngeso lengqondo nokusebenza kwebhentshimakhi kuyo yonke ingqalasizinda, inethiwekhi, amasistimu, nezinhlelo zokusebenza.
Indlela yokugcina idatha futhi uqinisekise ukuphepha kwayo
Ngokukhula kweziqukathi zezisebenzi ezisezingeni eliphezulu, amaklayenti adinga ukucabangela ukuba khona kwedatha ngaphandle komsingathi kanye nesidingo sokuvikela leyo datha.
Ngokusho , ukuvikeleka kwedatha kubeka phezulu ohlwini lokukhathazeka ngokuvikeleka okukhulunywe ngakho iningi labaphenduli (61%).
Ukubethelwa kwedatha kuyisu eliyinhloko lokuvikela (64%), kodwa abaphendulayo futhi basebenzisa ukuqapha kwesikhathi sokusebenza
(49%), ukuskena okubhaliswa ukuze kutholakale ubungozi (49%), ukuskena ubungozi kumapayipi e-CI/CD (49%), kanye nokuvimbela okudidayo ngokuvikela isikhathi sokusebenza (48%).
:
- Khetha izixazululo zesitoreji ezakhelwe phezu kwezimiso . Kungcono ukugxila kulezo ezihlangabezana nezidingo zokugcinwa kwedatha yezinsizakalo zeziqukathi, ezizimele zehadiwe, ziqhutshwa i-API, zinezakhiwo ezisabalalisiwe, zisekela ukuthunyelwa kwendawo kanye nokuthunyelwa efwini lomphakathi.
- Gwema ama-plugin obunikazi nezixhumi ezibonakalayo. Khetha abathengisi abahlinzeka ngokuhlanganiswa kwe-Kubernetes kanye nokusekelwa kokuxhumana okujwayelekile okufana ne-CSI (I-Container Storage Interfaces).
Ungasebenza kanjani ngamanethiwekhi
Imodeli yenethiwekhi yebhizinisi evamile, lapho amaqembu e-IT enza khona ukuthuthukiswa kwenethiwekhi, ukuhlola, ukuqinisekiswa kwekhwalithi, nezimo zokukhiqiza zephrojekthi ngayinye, ayihlali ihambisana kahle nokugeleza komsebenzi wokuthuthukiswa okuqhubekayo. Ngaphezu kwalokho, amanethiwekhi esiqukathi ahlanganisa izendlalelo eziningi.
Π imithetho esezingeni eliphezulu ukuqaliswa kwesisombululo senethiwekhi yeqoqo okumele kuthotshelwe:
- Amaphodi ahlelwe endaweni efanayo kufanele akwazi ukuxhumana namanye ama-pod ngaphandle kokusebenzisa i-NAT (I-Network Address Translation).
- Wonke ama-daemon esistimu (izinqubo zangemuva ezifana ne-kubelet) asebenza endaweni ethile angaxhumana nama-pods asebenza endaweni efanayo.
- Ama-pods asetshenziswa kufanele ikwazi ukuxhumana nawo wonke amanye ama-pods kuwo wonke amanye ama-node ngaphandle kokusebenzisa i-NAT. Sicela uqaphele ukuthi inethiwekhi yosokhaya isekelwa kuphela kubasingathi be-Linux.
Izisombululo zenethiwekhi kufanele zihlanganiswe ngokuqinile nezakudala nezinqubomgomo ze-Kubernetes. Abaholi be-IT kufanele balwele izinga eliphezulu lokuzenzakalela kwenethiwekhi futhi banikeze abathuthukisi ngamathuluzi afanele kanye nokuvumelana nezimo okwanele.
:
- Thola ukuthi i-CaaS yakho (isitsha njengesevisi) noma i-SDN (Inethiwekhi Ecacisiwe Yesofthiwe) iyawasekela yini amanethiwekhi e-Kubernetes. Uma kungenjalo noma usekelo lunganele, sebenzisa inethiwekhi ye-CNI (Container Network Interface) yeziqukathi zakho, esekela ukusebenza okudingekayo nezinqubomgomo.
- Qiniseka ukuthi i-CaaS noma i-PaaS yakho (inkundla njengesevisi) isekela ukudalwa kwezilawuli ezingenayo kanye/noma izilinganisi zokulayisha ezisabalalisa ithrafikhi engenayo phakathi kwamanodi eqoqo. Uma lokhu kungeyona inketho, hlola usebenzisa ama-proxi ezinkampani zangaphandle noma ama-meshes wesevisi.
- Qeqesha onjiniyela benethiwekhi yakho kumanethiwekhi e-Linux namathuluzi enethiwekhi ezishintshayo ukuze unciphise igebe lamakhono futhi ukhuphule ukusebenza kahle.
Uwuphatha kanjani umjikelezo wempilo wohlelo lokusebenza
Ngokulethwa kohlelo lokusebenza okuzenzakalelayo nokungenazihibe, udinga ukuhambisana ne-orchestration yesiqukathi namanye amathuluzi ezishintshayo, njengengqalasizinda njengemikhiqizo yekhodi (IaC). Lezi zihlanganisa Chef, Puppet, Ansible kanye Terraform.
Amathuluzi okuzenzakalelayo okwakha kanye nokukhipha izinhlelo zokusebenza nawo ayadingeka (bona β"). Iziqukathi ziphinde zinikeze amandla okunwebeka afana nalawo atholakalayo lapho kuthunyelwa imishini ebonakalayo (ama-VM). Ngakho-ke, abaholi be-IT kufanele babe .
:
- Setha izindinganiso zezithombe zesiqukathi esisekelwe kusayizi, ukugunyazwa, nokuvumelana nezimo ukuze onjiniyela bengeze izingxenye.
- Sebenzisa amasistimu okuphatha ukulungisa ukuze ulawule umjikelezo wempilo weziqukathi ezinesendlalelo sokucushwa okusekelwe ezithombeni eziyisisekelo ezitholakala kumakhosombe asesidlangalaleni noma angasese.
- Hlanganisa iplathifomu yakho ye-CaaS ngamathuluzi azenzakalelayo ukuze wenze ngokuzenzakalelayo lonke uhlelo lwakho lokusebenza.
Indlela yokuphatha iziqukathi ezinama-orchestrators
Umsebenzi owumongo wokuphakela iziqukathi unikezwa ku-orchestration nesendlalelo sokuhlela. Ngesikhathi sokuhlela, iziqukathi zibekwa kubasingathi abangcono kakhulu kuqoqo, njengoba kushiwo izidingo zesendlalelo se-orchestration.
I-Kubernetes isiphenduke indinganiso ye-orchestration yesiqukathi se-de facto nomphakathi osebenzayo futhi isekelwa abathengisi abaningi bezentengiselwano abahamba phambili.
:
- Chaza izidingo eziyisisekelo zezilawuli zokuphepha, ukuqapha, ukuphathwa kwenqubomgomo, ukuphikelela kwedatha, ukunethiwekha kanye nokuphathwa komjikelezo wempilo yesiqukathi.
- Ngokusekelwe kulezi zidingo, khetha ithuluzi elifanelana kangcono nezidingo zakho kanye namacala okusebenzisa.
- Sebenzisa ucwaningo lwe-Gartner (bona "") ukuze uqonde okuhle nokubi kwamamodeli ahlukene okuthunyelwa kwe-Kubernetes bese ukhetha elungele uhlelo lwakho lokusebenza.
- Khetha umhlinzeki onganikeza i-hybrid orchestration yeziqukathi zomsebenzi ezindaweni eziningi ezinokuhlanganiswa okuqinile kwasemuva, izinhlelo zokuphatha ezivamile, namamodeli entengo angashintshi.
Asetshenziswa kanjani amakhono abahlinzeki bamafu
leyo ntshisekelo yokuthumela iziqukathi kumafu omphakathi i-IaaS iyakhula ngenxa yokutholakala kweminikelo ye-CaaS eseyenziwe ngomumo, kanye nokuhlanganiswa okuqinile kwalokhu kunikezwa neminye imikhiqizo ehlinzekwa abahlinzeki bamafu.
Amafu e-IaaS anikezela ngokusetshenziswa kwensiza okudingekayo, ukukala okusheshayo kanye , okuzosiza ekugwemeni isidingo solwazi olujulile lwengqalasizinda nokugcinwa kwayo. Abahlinzeki abaningi bamafu banikeza isevisi yokuphatha iziqukathi, futhi abanye banikeza izinketho eziningi zokucula.
Abahlinzeki besevisi abaphethwe ngamafu ababalulekile bethulwa kuthebula:
Umhlinzeki wamafu
Uhlobo lwesevisi
Umkhiqizo/isevisi
Alibaba
Isevisi Yamafu Yomdabu
Isevisi ye-Alibaba Cloud Container, i-Alibaba Cloud Container Service ye-Kubernetes
Ama-Web Web Services (AWS)
Isevisi Yamafu Yomdabu
I-Amazon Elastic Container Services (ECS), i-Amazon ECS ye-Kubernetes (EKS), i-AWS Fargate
I-Giant Swarm
MSP
I-Giant Swarm Ephethe Ingqalasizinda ye-Kubernetes
-Google
Isevisi Yamafu Yomdabu
I-Google Container Engine (GKE)
IBM
Isevisi Yamafu Yomdabu
Isevisi ye-IBM Cloud Kubernetes
Microsoft
Isevisi Yamafu Yomdabu
Isevisi ye-Azure Kubernetes, Indwangu Yesevisi ye-Azure
Oracle
Isevisi Yamafu Yomdabu
Injini Yesiqukathi ye-OCI ye-Kubernetes
I-Platform9
MSP
Uphethwe u-Kubernetes
I-Red Hat
Isevisi ephethwe
I-OpenShift Inikezelwe & Iku-inthanethi
VMware
Isevisi ephethwe
Cloud PKS (Beta)
I-Mail.ru Cloud Solutions*
Isevisi Yamafu Yomdabu
I-Mail.ru Cloud Containers
* Ngeke sikufihle, sizingezile lapha ngesikhathi sokuhumusha :)
Abahlinzeki bamafu omphakathi nabo bengeza amakhono amasha futhi bakhipha imikhiqizo esemagcekeni. Esikhathini esizayo esiseduze, abahlinzeki bamafu bazothuthukisa ukusekelwa kwamafu ayingxube nezindawo ezinamafu amaningi.
:
- Hlola ngokunenhloso ikhono lenhlangano yakho lokusebenzisa nokuphatha amathuluzi afanelekile, futhi ucabangele amanye amasevisi okuphatha isiqukathi sefu.
- Khetha isofthiwe ngokucophelela, sebenzisa umthombo ovulekile lapho kungenzeka khona.
- Khetha abahlinzeki abanamamodeli okusebenza avamile ezindaweni ezixubile ezinikeza ifasitelana elilodwa lokuphathwa kwengilazi yamaqoqo ahlanganisiwe, kanye nabahlinzeki abenza kube lula ukuzibambela wena ngokwakho i-IaaS.
:
- Kuyafaneleka ukufuna ukusabalalisa okusekela ukutholakala okuphezulu ngaphandle kwebhokisi. Lokhu kuhlanganisa ukusekelwa kwezakhiwo eziningi ezinkulu, izingxenye ezitholakala kakhulu njlld, nokwenza isipele nokuthola usizo.
- Ukuze uqinisekise ukuhamba endaweni yakho ye-Kubernetes, kungcono ukhethe abahlinzeki bamafu abasekela inhlobo ebanzi yamamodeli okuthunyelwa, kusukela endaweni okukuyo ukuya ku-hybrid ukuya kumafu amaningi.
- Iminikelo yabahlinzeki kufanele futhi ihlolwe ngokusekelwe ekubeni lula kokusetha, ukufakwa, nokudala iqoqo, kanye nezibuyekezo, ukuqapha, nokuxazulula izinkinga. Imfuneko eyisisekelo iwukusekela ngokugcwele izibuyekezo zeqoqo ezingasebenzi isikhathi sokuphumula. Isixazululo osikhethayo kufanele futhi sikuvumele ukuthi wenze izibuyekezo mathupha.
- Ubunikazi nokuphathwa kokufinyelela kubalulekile ngokokubheka kokubili ukuphepha nokuphatha. Qiniseka ukuthi ukusabalalisa kwe-Kubernetes oyikhethayo kusekela ukuhlanganiswa namathuluzi okufakazela ubuqiniso nokugunyaza owasebenzisa ngaphakathi. I-RBAC nokulawula kokufinyelela okuhlaziywe kahle nakho kuyisethi yezici ezibalulekile.
- Ukusabalalisa okukhethayo kufanele kube nesixazululo sohleloxhumano esichazwe yi-software esihlanganisa ububanzi obubanzi bezidingo zezinhlelo zokusebenza ezihlukene noma ingqalasizinda, noma sisekele ukusetshenziswa kwenethiwekhi okusekelwe ku-CNI okudumile, okuhlanganisa i-Flannel, i-Calico, i-kube-router, noma i-OVN.
Ukwethulwa kweziqukathi ekukhiqizeni sekuyiyona ndlela ehamba phambili, njengoba kufakazelwa yimiphumela yocwaningo olwenziwe kungqalasizinda, imisebenzi namasu amafu (IOCS) ngoDisemba 2018:
Njengoba ubona, u-27% wabaphenduli kakade usebenzisa iziqukathi emsebenzini wabo, futhi u-63% uhlela ukwenza kanjalo.
Π U-24% wabaphenduli babike ukuthi batshala imali engaphezu kwengxenye yesigidi samadola ngonyaka kubuchwepheshe bamakhonteyna, futhi u-17% wabaphenduli basebenzisa imali engaphezu kwesigidi samadola ngonyaka kubo.
I-athikili ilungiswe ithimba lenkundla yamafu .
Yini enye ongayifunda esihlokweni:
- .
- .
- .
Source: www.habr.com