
Ngomsebenzi ogcwele ngohlelo, ulwazi lwezinsiza zomugqa womyalo lubalulekile: esimweni se-Kubernetes, lokhu kubectl. Ngakolunye uhlangothi, ukuxhumana okuklanywe kahle, okucatshangelwayo kungenzaΠΎimisebenzi eminingi evamile futhi uvule amathuba engeziwe okusebenza kwezinhlelo.
Ngonyaka odlule sishicilele okuhunyushiwe ye-Kubernetes, iphelelwe isikhathi ukuze iqondane nesimemezelo sokusebenzelana kwewebhu . Umbhali waleyo ndatshana kanye nensiza uqobo, uHenning Jacobs waseZalando, usanda kubeka umkhiqizo omusha njengokuthi βkubectl yewebhuβ. Wayefuna ukudala ithuluzi elinamandla okusebenzisa kalula ukusebenzisana ngefomethi yokusekelwa kwezobuchwepheshe (isibonelo, ukukhombisa inkinga ngokushesha ngesixhumanisi sewebhu) kanye nokuphendula izehlakalo, ukucinga izinkinga kumaqoqo amaningi ngesikhathi esisodwa. Inzalo yakhe ikhula kulesi sikhathi samanje (ikakhulukazi ngemizamo yombhali ngokwakhe).
Njengoba sisebenzela amaqoqo amaningi e-Kubernetes osayizi abahlukahlukene, sinentshisekelo yokukwazi ukunikeza ithuluzi elibonakalayo kumakhasimende ethu. Lapho ukhetha isixhumi esibonakalayo esifanele, izici ezilandelayo bezibalulekile kithi:
- ukwesekwa kokuhlukaniswa kwamalungelo abasebenzisi (RBAC);
- ukubonwa kwesimo se-namespace kanye nama-primitives ajwayelekile e-Kubernetes (Deployment, StatefulSet, Service, Cronjob, Job, Ingress, ConfigMap, Secret, PVC);
- ukuthola ukufinyelela kulayini womyalo ngaphakathi kwe-pod;
- ukubuka izingodo ze-pods;
- buka isimo se-pods (
describe status); - ukususa ama-pods.
Eminye imisebenzi, njengokubuka izinsiza ezidliwe (kumongo wama-pods / abalawuli / izindawo zamagama), ukudala / ukuhlela ama-K8s okuqala, akuhambisani nokuhamba komsebenzi wethu.
Sizoqala ukubuyekeza nge-Kubernetes Dashboard yakudala, okuyindinganiso yethu. Njengoba umhlaba unganyakazi (okusho ukuthi i-Kubernetes inama-GUI amaningi amasha), sizophinde sikhulume ngezinye izindlela zayo zamanje, sifingqa konke etafuleni lokuqhathanisa ekupheleni kwesihloko.
NB: Ekubuyekezweni, ngeke siphinde ngalezo zixazululo esezivele zicatshangelwe kuzo , nokho, ngenxa yokuphelela, izinketho ezifanele ezivela kuyo (K8Dash, Octant, Kubernetes Web View) zifakiwe kuthebula lokugcina.
1. Ideshibhodi ye-Kubernetes
- ;
- (8000+ GitHub izinkanyezi);
- Ilayisensi: Apache 2.0;
- Ngamafuphi: βIsixhumi esibonakalayo sewebhu jikelele samaqoqo e-Kubernetes. Ivumela abasebenzisi ukuthi baphathe futhi baxazulule izinhlelo zokusebenza ezisebenza kuqoqo, futhi baphathe iqoqo ngokwalo.β

Leli yiphaneli yenhloso evamile embozwe ababhali be-Kubernetes embhalweni osemthethweni (kodwa okuzenzakalelayo). Yenzelwe izidingo zokusebenza kwansuku zonke kanye nokulungisa amaphutha kwezinhlelo zokusebenza kuqoqo. Ekhaya, siyisebenzisa njengethuluzi eligcwele eligcwele elibonakalayo elingasindi elisivumela ukuthi sinikeze onjiniyela ukufinyelela okudingekayo nokwanele kuqoqo. Amakhono ayo ahlanganisa zonke izidingo zabo ezivela ohlelweni lokusebenzisa iqoqo (v sibonise izici ezithile zephaneli). Njengoba ungase uqagele, lokhu kusho ukuthi kugcwalisa zonke izidingo zethu ezibalwe ngenhla.
Phakathi kwezici eziyinhloko ze-Kubernetes Dashboard:
- Ukuzulazula: buka izinto eziyinhloko zama-K8 kumongo wezikhala zamagama.
- Uma unamalungelo omlawuli, iphaneli ibonisa ama-node, izikhala zamagama, kanye namavolumu aqhubekayo. Kumanodi, izibalo ziyatholakala ngokusetshenziswa kwememori, iphrosesa, ukwabiwa kwezinsiza, amamethrikhi, isimo, imicimbi, njll.
- Buka izinhlelo zokusebenza ezifakwe endaweni yamagama ngohlobo lwazo (Deployment, StatefulSet, njll.), ubudlelwano phakathi kwazo (ReplicaSet, Horizontal Pod Autoscaler), izibalo ezijwayelekile nezomuntu siqu kanye nolwazi.
- Buka amasevisi nama-Ingresses, kanye nobudlelwano bawo nama-pods nama-endpoints.
- Buka izinto zefayela nokugcinwa: Ivolumu Eqhubekayo kanye Nesimangalo Somthamo Oqhubekayo.
- Buka futhi uhlele i-ConfigMap nemfihlo.
- Buka izingodo.
- Ukufinyelela komugqa womyalo ezitsheni.
I-drawback ephawulekayo (nokho, hhayi kithi) ukuthi akukho ukusekelwa komsebenzi wamaqoqo amaningi. Iphrojekthi ithuthukiswa ngokugcwele umphakathi futhi igcina izici ezifanele ngokukhishwa kwezinguqulo ezintsha kanye nokucaciswa kwe-Kubernetes API: inguqulo yakamuva yephaneli Meyi 22, 2020 - Ihlolelwe ukusebenzisana ne-Kubernetes 1.18.
2. Amalensi
- ;
- ;
- (~4800 GitHub izinkanyezi);
- Ilayisensi: MIT;
- Ngamafuphi: "Kubernetes IDE".

Le phrojekthi ibekwe njengendawo ephelele yokuthuthukisa edidiyelwe (IDE) ye-Kubernetes. Ngaphezu kwalokho, ilungiselelwe ukusebenza ngamaqoqo amaningi kanye nenani elikhulu lama-pods agijima kuwo (ahlolwe kuma-pods angu-25).
Izici/amandla amakhulu weLensi:
- Uhlelo lokusebenza oluzimele olungadingi ukufakwa ngaphakathi kweqembu (ngokuqondile, i-Prometheus iyadingeka ukuthola zonke izilinganiso, kodwa ukufakwa okukhona kungasetshenziswa kulokhu). Ukufakwa "okuyinhloko" kwenziwa kukhompyutha yomuntu siqu esebenza Linux, macOS noma Windows.
- Ukuphathwa kwamaqoqo amaningi (amakhulu amaqoqo asekelwe).
- Ukubona ngeso lengqondo isimo seqoqo ngesikhathi sangempela.
- Amagrafu okusetshenziswa kwensiza namathrendi anomlando osuselwe ku-Prometheus eyakhelwe ngaphakathi.
- Ukufinyelela kulayini womyalo weziqukathi nasemakhaleni eqoqo.
- Ukusekelwa okugcwele kwe-Kubernetes RBAC.
Ukukhishwa kwamanje - yamhla zingama-16 kuJuni 2020 Idalwe okokuqala ngu-Kontena, namuhla yonke impahla yengqondo idluliselwe enhlanganweni ekhethekile , ebizwa ngokuthi "inhlangano yamafu ochwepheshe bomdabu kanye nochwepheshe", enesibopho "sokulondoloza nokutholakala kwesofthiwe yomthombo ovulekile we-Kontena nemikhiqizo."
I-Lens iphrojekthi yesibili edume kakhulu ku-GitHub kusukela ku-GUI yesigaba se-Kubernetes, "ilahlekelwa" kuphela Ideshibhodi ye-Kubernets ngokwayo. Zonke ezinye izixazululo Zomthombo Ovulekile ezingasuki kusigaba se-CLI* ziphansi kakhulu ngokuduma.
* Bona mayelana nama-K9s engxenyeni yebhonasi yokubuyekeza.
3. Kubernetic
- ;
- ;
- (200+ GitHub izinkanyezi);
- Ilayisensi: ubunikazi;
- Ngamafuphi: "Ukuphathwa kweqoqo kwenziwe kwaba lula."

Lolu uhlelo lokusebenza oluyimfihlo olufakwe kukhompyutha yomuntu siqu (olusekelwayo Linux, macOS, WindowsAbadali bayo bathembisa ukufaka esikhundleni esiphelele sensiza yomugqa womyalo, okususa isidingo sokukhumbula imiyalo futhi kwandise ngisho nesivinini sokusebenza ngokuphindwe kayishumi.
Esinye sezici ezithakazelisayo zethuluzi ukusekelwa okwakhelwe ngaphakathi kwamashadi e-Helm, futhi enye yezingqinamba ukuntuleka kwamamethrikhi okusebenza kwesicelo.
Izici eziyinhloko ze-Kubernetic:
- Ukuboniswa okulula kwesimo seqoqo. Isikrini esisodwa sokubuka zonke izinto zeqoqo ezihlobene nokuncika kwazo; isimo esibomvu/ esiluhlaza sokulungela zonke izinto; Imodi yokubuka isimo se-cluster enezibuyekezo zesimo sesikhathi sangempela.
- Izinkinobho zesenzo esisheshayo sokususa nokukala uhlelo lokusebenza.
- Ukusekela ukusebenza kwamaqoqo amaningi.
- Umsebenzi olula onezikhala zamagama.
- Ukusekelwa kwamashadi e-Helm nezinqolobane ze-Helm (kufaka phakathi eziyimfihlo). Ukufaka nokuphatha amashadi kusixhumi esibonakalayo sewebhu.
Izindleko zamanje zomkhiqizo inkokhelo yesikhathi esisodwa yama-euro angu-30 ngokusetshenziswa kwawo umuntu oyedwa kunoma iyiphi inombolo yezikhala zamagama namaqoqo.
4. Kubevious
- ;
- ;
- (~500 GitHub izinkanyezi);
- Ilayisensi: Apache 2.0
- Ngamafuphi: "I-Kubevious yenza amaqoqo e-Kubernetes, ukumiswa kohlelo lokusebenza nokubuka isimo kuphephe futhi kube lula ukukuqonda."

Umqondo wephrojekthi uwukwenza ithuluzi eliklanyelwe ukuhlaziya nokulungisa iphutha lokuhlelwa kwezinhlelo zokusebenza ezifakwe kuqoqo. Ababhali bagxile kakhulu ekusetshenzisweni kwalezi zici, beshiya izinto ezijwayelekile ezizosetshenziswa kamuva.
Izici ezibalulekile nemisebenzi ye-Kubevious:
- Ukubuka kweqoqo ngendlela emaphakathi nesicelo: izinto ezihlobene kusixhumi esibonakalayo zihlanganiswa, zikleliswe ngokulandelana.
- Ukuboniswa okubonakalayo kokuncika ekucushweni kanye nemiphumela ekhulayo yezinguquko zabo.
- Ukuboniswa kwamaphutha okulungiselelwa kweqoqo: ukusetshenziswa kabi kwamalebula, izimbobo ezigejiwe, njll. (Ngendlela, uma unentshisekelo kulesi sici, naka mayelana nathi .)
- Ngaphezu kwephuzu langaphambilini, ukutholakala kweziqukathi ezingase zibe yingozi kuyatholakala, i.e. ukuba namalungelo amaningi kakhulu (izimfanelo
hostPID,hostNetwork,hostIPC, intabadocker.socknjll). - Uhlelo lokusesha oluthuthukisiwe lweqoqo (hhayi kuphela ngamagama ezinto, kodwa nangezakhiwo zazo).
- Amathuluzi okuhlela amandla kanye nokwenza kahle izinsiza.
- Okwakhelwe ngaphakathi "umshini wesikhathi" (ikhono lokubona izinguquko zangaphambilini ekucushweni kwezinto).
- Ukuphathwa kwe-RBAC ngethebula elihlobene le-pivot Lezindima, I-RoleBindings, i-ServiceAccounts.
- Isebenza ngeqoqo elilodwa kuphela.
Le phrojekthi inomlando omfushane kakhulu (ukukhishwa kokuqala kwenzeka ngoFebhuwari 11, 2020) futhi kubonakala sengathi kube nesikhathi sokuzinza noma sokwehla kwentuthuko. Uma izinguqulo zangaphambilini bezikhishwa kaningi, khona-ke ukukhishwa kwakamuva ( Ephreli 15, 2020) sisalele ngemuva kwejubane lokuqala lokuthuthuka. Lokhu mhlawumbe kungenxa yenani elincane labanikeli: kukhona aba-4 kuphela emlandweni wenqolobane, futhi wonke umsebenzi wangempela wenziwa umuntu oyedwa.
5. Kubewise
- ;
- Ilayisensi: okuphathelene (izoba Umthombo Ovulekile);
- Ngamafuphi: "Iklayenti le-multi-platform ye-Kubernetes."

Umkhiqizo omusha ovela ku-VMware, odalwe ekuqaleni njengengxenye ye-hackathon yangaphakathi (ngoJuni 2019). Ifakwe kukhompuyutha yomuntu siqu, isebenza ngesisekelo se (kusekelwa) Linux, macOS ΠΈ Windows) futhi idinga i-kubectl engekho ngaphansi kwe-v1.14.0.
Izici eziyinhloko ze-Kubewise:
- Ukusebenzisana kwesixhumi esibonakalayo namabhizinisi e-Kubernetes asetshenziswa kakhulu: izindawo, izindawo zamagama, njll.
- Ukusekelwa kwamafayela amaningi e-kubeconfig amaqoqo ahlukene.
- Itheminali enekhono lokusetha i-variable yemvelo
KUBECONFIG. - Khiqiza amafayela e-kubeconfig ngokwezifiso endaweni yamagama enikeziwe.
- Izici zokuphepha ezithuthukile (i-RBAC, amaphasiwedi, ama-akhawunti wesevisi).
Kuze kube manje, iphrojekthi inokukhishwa okukodwa kuphela - inguqulo yanamuhla 26 Novemba 2019. Ngaphezu kwalokho, ababhali bahlele ukuyikhipha ngokushesha njengomthombo ovulekile, kodwa ngenxa yezinkinga zangaphakathi (ezingahambisani nezinkinga zobuchwepheshe) abakwazanga ukwenza lokhu. Kusukela ngoMeyi 2020, ababhali basebenzela ekukhishweni okulandelayo futhi kufanele baqale inqubo yokuvula ikhodi ngesikhathi esifanayo.
6. I-OpenShift Console
- ;
- (~150 GitHub izinkanyezi);
- Ilayisensi: Apache 2.0;
- Ngamafuphi: "I-UI yamaqoqo e-OpenShift".

Ngaphandle kweqiniso lokuthi lesi sikhombimsebenzisi sewebhu siyingxenye yokusabalalisa kwe-OpenShift (ifakwe lapho kusetshenziswa ), ababhali ikhono lokuyifaka / ukuyisebenzisa ekufakweni okujwayelekile (i-vanilla) Kubernetes.
I-OpenShift Console ibilokhu ithuthukiswa isikhathi eside, ngakho ihlanganise izici eziningi. Sizobala eziyinhloko:
- Indlela yokusebenzelana eyabiwe - "imibono" emibili yamathuba atholakalayo kukhonsoli: eyabalawuli kanye neyonjiniyela. Imodi umbono wonjiniyela ihlanganisa izinto ngendlela eqondakala kakhudlwana konjiniyela (ngezinhlelo zokusebenza) futhi igxilisa isixhumi esibonakalayo ekuxazululeni imisebenzi evamile efana nokukhipha izinhlelo zokusebenza, ukulandelela isimo sokwakha / sokuphakelwa, ngisho nokuhlela ikhodi nge-Eclipse Che.
- Ukuphathwa kwemithwalo yomsebenzi, inethiwekhi, isitoreji, amalungelo okufinyelela.
- Ukuhlukaniswa okunengqondo komthwalo wemisebenzi kumaphrojekthi nezinhlelo zokusebenza. Kokunye okukhishiwe kwakamuva - v4.3 - okukhethekile ideshibhodi yephrojekthi, ebonisa idatha evamile (inombolo nezimo zokusetshenziswa, ama-pods, njll.; ukusetshenziswa kwensiza namanye amamethrikhi) kusiqeshana sephrojekthi.
- Kubuyekezwe ekubonisweni kwesikhathi sangempela kwesimo seqoqo, izinguquko (izenzakalo) ezenzeke kuyo; ukubuka izingodo.
- Buka idatha yokuqapha esekelwe ku-Prometheus, Alertmanager kanye ne-Grafana.
- Ukuphathwa kwabaqhubi abamelwe ku .
- Phatha izakhiwo ezihamba nge-Docker (kusuka endaweni yokugcina ethile ene-Dockerfile), noma izinsiza zangaphandle ezingafanele.
NB: Asingezanga ezinye esiqhathanisweni Kubernetes ukusatshalaliswa (ngokwesibonelo, engaziwa kakhulu ): naphezu kokuthi i-GUI ingaba phambili kakhulu kuzo, ngokuvamile iza njengengxenye yesitaki esihlanganisiwe sesistimu enkulu. Kodwa-ke, uma ucabanga ukuthi azikho izixazululo ezanele ezisebenza ngokugcwele ekufakweni kwe-vanilla K8s, sazise kumazwana.
Ibhonasi
1. I-Portiner ku-Kubernetes ku-Beta
- ;
- (~100 GitHub izinkanyezi);
- Ilayisensi: Zlib(?) (okufanayo kuphrojekthi yomzali).
Iphrojekthi evela eqenjini le-Portiner, ethuthukise isixhumi esibonakalayo esidumile segama elifanayo lokusebenza ne-Docker. Njengoba iphrojekthi isesigabeni sokuqala sokuthuthuka (inguqulo ye-beta yokuqala neyokuphela kwayo Ephreli 16, 2020), asizange sizihlole izici zayo. Kodwa-ke, kungase kube nesithakazelo kwabaningi: uma lokhu kumayelana nawe, landela ukuthuthukiswa.
2. I-IcePanel
- ;
- Ilayisensi: ubunikazi;
- Ngamafuphi: "I-Visual Kubernetes Editor".

Lolu hlelo lokusebenza olusha lwedeskithophu luhlose ukubona ngeso lengqondo nokuphatha izinsiza ze-Kubernetes ngesikhathi sangempela ngesixhumi esibonakalayo esilula sokudonsa nokulahla. Izinto ezisekelwayo okwamanje yi-Pod, isevisi, i-Deployment, i-StatefulSet, i-PersistentVolume, i-PersistentVolumeClaim, i-ConfigMap ne-Secret. Ngokushesha bathembisa ukwengeza ukusekelwa kuHelm. Okubi okuyinhloko ukusondelana kwekhodi (kulindelwe ) kanye nokuntuleka kokusekelwa Linux (izinguqulo kuphela okwamanje ezitholakalayo Windows ΠΈ macOS, nakuba lokhu kungenzeka kakhulu ukuthi kuyindaba yesikhathi nje).
3.k9s
- ;
- ;
- (~7700 GitHub izinkanyezi);
- Ilayisensi: Apache 2.0;
- Ngamafuphi: "Isixhumi esibonakalayo se-Kubernetes esikuvumela ukuthi uphathe iqoqo lakho ngesitayela."

Insiza ibiyingxenye yebhonasi kuphela yokubuyekezwa ngesizathu sokuthi inikeza i-console GUI. Kodwa-ke, ababhali bacindezela ngokoqobo isiphetho, benganikezeli nje kuphela isixhumi esibonakalayo esisebenziseka kalula, kodwa nezindikimba ezichazwe ngaphambilini eziyisi-6, nohlelo oluthuthukisiwe lwezinqamuleli zekhibhodi neziteketiso zokuyala. Indlela yabo ephelele ayizange ilinganiselwe ekubukekeni: izici ze-k9s zihlaba umxhwele ngokujabulisayo: ukuphathwa kwezinsiza, ukubonisa isimo seqoqo, ukubonisa izinsiza ekumeleleni kwesigaba esincike ekutheni, izingodo zokubuka, ukusekelwa kwe-RBAC, ukunweba amandla ngama-plugin ... Konke lokhu kukhangisiwe. emphakathini wama-K8 obanzi: inombolo Izinkanyezi ze-GitHub zephrojekthi zicishe zifane ne-Kubernetes Dashboard esemthethweni!
4. Amaphaneli okulawula uhlelo lokusebenza
Futhi ekupheleni kokubuyekezwa - isigaba esincane esihlukile. Ifake izixhumanisi ezimbili zewebhu eziklanyelwe ukuphathwa okuphelele kwamaqoqo e-Kubernetes, kodwa ukuphatha lokho okufakwe kuzo.
Njengoba wazi, elinye lamathuluzi avuthiwe futhi asabalele kakhulu ekuthumeleni izinhlelo zokusebenza eziyinkimbinkimbi e-Kubernetes yi-Helm. Phakathi nesikhathi sokuba khona kwayo, amaphakheji amaningi (Amashadi e-Helm) aqoqiwe ukuze asetshenziswe kalula. . Ngakho-ke, ukubonakala kwamathuluzi afanelekile abonakalayo akuvumela ukuthi ulawule umjikelezo wempilo wamashadi kunengqondo impela.
4.1. I-Monocular
- (1300+ GitHub izinkanyezi);
- Ilayisensi: Apache 2.0;
- Ngamafuphi: βUhlelo lokusebenza lwewebhu lokusesha nokuthola amashadi e-Helm kumakhosombe amaningi. Isebenza njengesisekelo sephrojekthi ye-Helm hub."

Lokhu kuthuthukiswa okuvela kubabhali be-Helm kufakwe ku-Kubernetes futhi kusebenza ngaphakathi kweqoqo elifanayo, lenza umsebenzi. Kodwa-ke, okwamanje, iphrojekthi cishe ayithuthukisiwe. Inhloso yayo enkulu ukusekela ubukhona be-Helm Hub. Kwezinye izidingo, ababhali batusa i-Kubeapps (bona ngezansi) noma I-Red Hat Automation Broker (ingxenye ye-OpenShift, kodwa futhi engasathuthukiswa).
4.2. Kubeapps
- ;
- ;
- (~2100 GitHub izinkanyezi);
- Ilayisensi: Apache 2.0
- Ngamafuphi: "Ideshibhodi yesicelo sakho se-Kubernetes."

Umkhiqizo ovela ku-Bitnami, ophinde ufakwe kuqoqo le-Kubernetes, kodwa uhlukile ku-Monocular ekugxileni kwawo kokuqala ekusebenzeni namakhosombe angasese.
Imisebenzi esemqoka kanye nezici ze-Kubeapps:
- Buka futhi ufake amashadi e-Helm asuka kumakhosombe.
- Hlola, buyekeza, futhi ususe izinhlelo zokusebenza ezisekelwe ku-Helm ezifakwe kuqoqo.
- Ukusekelwa kwamakhosombe eshadi angokwezifiso nezizimele (isekela i-ChartMuseum ne-JFrog Artifactory).
- Ukubuka nokusebenza ngamasevisi angaphandle - kusuka kukhathalogi yesevisi kanye nama-Service Brokers.
- Ukushicilela izinhlelo zokusebenza ezifakiwe kusetshenziswa indlela ye-Service Catalogue Bindings.
- Ukusekela ukuqinisekiswa nokuhlukaniswa kwamalungelo kusetshenziswa i-RBAC.
Ithebula elifingqiwe
Ngezansi kunethebula lesifinyezo lapho sizame khona ukufingqa futhi sihlanganise izici eziyinhloko zezixhumi ezibonakalayo ezikhona ukuze senze ukuqhathanisa:
(Inguqulo ye-inthanethi yethebula .)
isiphetho
Ama-GUI we-Kubernetes ayi-niche ethize futhi encane. Kodwa-ke, ikhula ngenkuthalo kakhulu: kakade kungenzeka ukuthola kokubili izixazululo ezivuthiwe, kanye nezincane kakhulu, ezisenayo indawo yokukhula. Zibhekana nezinhlobonhlobo zezinhlelo zokusebenza, zinikeza izici futhi zibukeka zifanelana cishe nakho konke ukunambitheka. Sithemba ukuthi lokhu kubuyekezwa kuzokusiza ukhethe ithuluzi elifanelana nezidingo zakho zamanje.
PS
Ngiyabonga ngedatha eku-OpenShift Console yethebula lokuqhathanisa!
Funda futhi kubhulogi yethu:
- Β«";
- Β«";
- Β«";
- Β«".
Source: www.habr.com
