NgoMeyi 27-29 sibambe i-Slurm yesine: sigxile kakhulu ku-Kubernetes.
Ibhonasi: izifundo eziku-inthanethi ku-Docker, Ansible, Ceph
Sithole ezihlokweni ze-Slurm ezibalulekile ekusebenzeni ne-Kubernetes, kodwa ezingahlobene ngokuqondile nama-k8. Kanjani, kungani futhi kwenzekani - ngaphansi kokunqunywa.
Bonke abahlanganyeli be-Slurm 4 bazokwazi ukufinyelela lezi zifundo.
Imbuyiselo ephelele yemali ngosuku lokuqala
E-St. Petersburg Slurm, abahlanganyeli ababili bahamba
Uma uthola ukuthi yini ongayithandi nhlobo nge-Slurm, usuku lokuqala bhalela noma yibaphi abahleli. Sizokhubaza ukufinyelela futhi sibuyisele inani eligcwele lokubamba iqhaza.
Abeluleki bezobuchwepheshe
Uma ekhona owaziyo
Yini i-Slurm
I-Slurm-4: izifundo eziyisisekelo (May 27-29)
Idizayinelwe labo ababona i-Kubernetes okokuqala noma abafuna ukuhlela ulwazi lwabo.
Umhlanganyeli ngamunye uzodala iqoqo lakhe efwini le-Selectel futhi asebenzise uhlelo lokusebenza lapho.
Inani: 25 izinkulungwane
Uhlelo
Isihloko #1: Isingeniso ku-Kubernetes, izingxenye eziyinhloko
• Isingeniso kubuchwepheshe be-k8s. Incazelo, isicelo, imiqondo
• I-Pod, ReplicaSet, Deployment, Service, Ingress, PV, PVC, ConfigMap, Secret
• Zilolonge
Isihloko No. 2: Idizayini yeqoqo, izingxenye eziyinhloko, ukubekezelela amaphutha, inethiwekhi ye-k8s
• Ukwakhiwa kweqoqo, izingxenye eziyinhloko, ukubekezelela amaphutha
• inethiwekhi ye-k8s
Isihloko #3: I-Kubespray, ukulungisa nokumisa iqoqo le-Kubernetes
• I-Kubespray, ukumisa nokushuna kweqoqo le-Kubernetes
• Zilolonge
Isihloko #4: I-Ceph, ukusethwa kweqoqo nezici zokusebenza ekukhiqizeni
• I-Ceph, ukusethwa kweqoqo nezici zokusebenza ekukhiqizeni
• Prakthiza: ukusetha i-ceph
Isihloko #5: Okuthuthukisiwe kwe-Kubernetes Abstractions
• I-DaemonSet, StatefulSet, RBAC, Job, CronJob, Pod Sheduling, InitContainer
Isihloko #6: Isingeniso se-Helm
• Isingeniso se-Helm
• Zilolonge
Isihloko #7: Izinsizakalo zokushicilela nezinhlelo zokusebenza
• Uhlolojikelele lwezindlela zokushicilela isevisi: I-NodePort vs LoadBalancer vs Ingress
• Isilawuli sokungena (Nginx): ukulinganisa ithrafikhi engenayo
• Umphathi we-Сert: thola ngokuzenzakalelayo izitifiketi ze-SSL/TLS
• Zilolonge
Isihloko #8: Ukugawula nokuqapha
• Ukuqapha Cluster, Prometheus
• Ukugawula amaqoqo, Fluentd/Elastic/Kibana
• Zilolonge
Isihloko No. 9: I-CI/CD, ukuthunyelwa kwesakhiwo kuqoqo kusukela ekuqaleni
Isihloko No. 10: Umsebenzi ongokoqobo, ukufakwa kwe-docker kwesicelo kanye nokwethulwa kuqoqo
I-MegaSlurm: izifundo ezithuthukisiwe (May 31 - June 2)
Idizayinelwe onjiniyela nabadwebi bezakhiwo bakwa-Kubernetes, kanye nabaphothule izifundo eziyisisekelo.
Silungiselela iqoqo ukuze siqalise ngesikhathi esisodwa ukubuyekezwa kwezingxenye zeqoqo kanye nokuphakelwa kuqoqo.
Inani: izinkulungwane ezingama-60 (izinkulungwane ezingama-45 zabahlanganyeli be-Slurm-4)
Uhlelo
Isihloko #1: Inqubo yokudala iqoqo le-failover kusuka ngaphakathi
• Ukusebenza neKubespray
• Ukufakwa kwezingxenye ezengeziwe
• Ukuhlolwa kweqoqo nokuxazulula inkinga
• Zilolonge
Isihloko #2: Ukugunyazwa kuqoqo kusetshenziswa umhlinzeki wangaphandle
• I-LDAP (Nginx + Python)
• I-OIDC (Dex + Gangway)
• Zilolonge
Isihloko #3: Inqubomgomo yenethiwekhi
• Isingeniso ku-CNI
• Inqubomgomo Yokuphepha Kwenethiwekhi
• Zilolonge
Isihloko #4: Vikela futhi izinhlelo zokusebenza ezitholakalayo kakhulu kuqoqo
• I-PodSecurityPolicy
• I-PodDisruptionBudget
Isihloko #5: Kubernetes. Ake sibheke ngaphansi kwesivalo
• Ukwakheka kwesilawuli
• Ama-opharetha nama-CRD
• Zilolonge
Isihloko #6: Izinhlelo zokusebenza ezinomthetho kuqoqo
• Kwethulwa iqoqo lesizindalwazi kusetshenziswa i-PostgreSQL njengesibonelo
• Kwethulwa iqoqo le-RabbitMQ
• Zilolonge
Isihloko #7: Ukugcina Izimfihlo
• Ukuphatha izimfihlo ku-Kubernetes
• I-Vault
Isihloko #8: I-Horizontal Pod Autoscaler
• Ithiyori
• Zilolonge
Isihloko #9: Isipele Nokutholwa Kwenhlekelele
• Ukwenza ikhophi yasenqolobaneni nokuthola usizo lweqoqo kusetshenziswa i-Heptio Velero (owayekade eyi-Ark) kanye nokunye
• Zilolonge
Isihloko #10: Ukuthunyelwa Kwesicelo
•I-Lint
• Amathuluzi okwenza isifanekiso nawokuphakela
• Amasu okusabalalisa
Isihloko No. 11: Umsebenzi ongokoqobo
• Ukwakha i-CI/CD ukuze kufakwe izicelo
• Ukubuyekezwa kweqoqo
I-Docker, i-Ansible ne-Ceph
Uhambo lomlando
I-Slurm yokuqala kwaba ukuhlolwa. Izikhulumi zaziphothula ngokoqobo izethulo zazo esiteji, futhi ezilalelini kuhlezi abaphathi bezinga kangangokuthi kwase kuyisikhathi sokubamema njengezikhulumi.
Isifundo esiyisisekelo sangempela senzeka ku-Slurm yesibili: U-80% wabahlanganyeli babone u-Kubernetes okokuqala, kanti owesithathu wayengakaze asebenze no-Docker.
Kwakucacile ukuthi kwakunzima kangakanani kubantu ukulalela inkulumo nge-Docker ekuseni futhi basebenze nayo kumodi yokulwa kusihlwa.
UCeph udale ubunzima obuningi. Ngaphezu kwalokho, kwakukhona abantu abangu-20 ezilalelini ababedinga ngempela ukuchaza uCeph, kanye nabanye abangu-60 ababengamdingi nhlobo uCeph.
Nge-Slurm yesithathu, sihambise i-Docker ne-Ansible kumawebinars ahlukene, sikhulula isikhathi esengeziwe se-Kubernetes. Isixazululo sabonakala sisebenza ngokuyisisekelo futhi asithuthukisiwe ekusetshenzisweni: inkulumo yayingathandeki kubafana abanolwazi, futhi ingxoxo yayingathandeki kwabaqalayo.
Nge-Slurm yesine, senze izifundo ze-inthanethi ku-Docker, i-Ansible ne-Ceph. Umqondo ulula: labo abawudingayo bazothatha isifundo ngokucabangisisa, labo abangasidingi bazokushaya indiva ngomoya ophansi. Uma kubhekwa iqembu labahloli, isifundo se-Docker sithatha amahora angu-6-8. U-Ansible no-Ceph abakawashi.
Ukuzikhulula:
- izifundo zokuhlola. Ezinye izinqumo cishe ngeke ziphumelele.
- inkundla (Stepik.org) ayinangqondo, futhi asikaze sisebenze nayo ngaphambilini. Mhlawumbe kuzoba namaqhubu kanye nama-snags.
- Izifundo zahlolwa kubasebenzi baseSouthbridge kuphela. Impela kuzomele uqedele okuthile njengoba uhamba.
Ngolunye usuku nje engxoxweni ye-Slurm yokuqala bakhumbula ukuthi kwakumnandi futhi kumnandi kangakanani, naphezu kwakho konke okwesabekayo kwenhlangano. Okokuqala ukuthola okuvelayo okucace kakhulu. Ake sibone ukuthi kwenzekani kubafundi bokuqala bezifundo ze-inthanethi. 🙂
Source: www.habr.com