I-Slurm: I-Kubernetes inamandla. Uhlelo namabhonasi

NgoMeyi 27-29 sibambe i-Slurm yesine: sigxile kakhulu ku-Kubernetes.

I-Slurm: I-Kubernetes inamandla. Uhlelo namabhonasi

Ibhonasi: izifundo eziku-inthanethi ku-Docker, Ansible, Ceph
Sithole ezihlokweni ze-Slurm ezibalulekile ekusebenzeni ne-Kubernetes, kodwa ezingahlobene ngokuqondile nama-k8. Kanjani, kungani futhi kwenzekani - ngaphansi kokunqunywa.
Bonke abahlanganyeli be-Slurm 4 bazokwazi ukufinyelela lezi zifundo.

Imbuyiselo ephelele yemali ngosuku lokuqala
E-St. Petersburg Slurm, abahlanganyeli ababili bahamba Izibuyekezo ezimbi kakhulu. Yeka indlela engangizisola ngayo ngokuthi kwakungenakwenzeka ukubuyela emuva futhi ngihlukane nabo ngaphandle kwezicelo ezifanayo.
Uma uthola ukuthi yini ongayithandi nhlobo nge-Slurm, usuku lokuqala bhalela noma yibaphi abahleli. Sizokhubaza ukufinyelela futhi sibuyisele inani eligcwele lokubamba iqhaza.

Abeluleki bezobuchwepheshe
Uma ekhona owaziyo UDmitry Simonov (wakha iklabhu yabaqondisi bezobuchwepheshe), sammemela e-Slurm (ukufunda, hhayi ukuyodlala). Uthembise ukweluleka wonke umuntu. Lokhu cishe ngeke kube nentshisekelo kubaphathi nabathuthukisi, kodwa kuzobajabulisa kakhulu abaphathi be-IT.

Yini i-Slurm

I-Slurm: I-Kubernetes inamandla. Uhlelo namabhonasi

I-Slurm-4: izifundo eziyisisekelo (May 27-29)
Idizayinelwe labo ababona i-Kubernetes okokuqala noma abafuna ukuhlela ulwazi lwabo.
Umhlanganyeli ngamunye uzodala iqoqo lakhe efwini le-Selectel futhi asebenzise uhlelo lokusebenza lapho.

Inani: 25 izinkulungwane

Uhlelo

Isihloko #1: Isingeniso ku-Kubernetes, izingxenye eziyinhloko
• Isingeniso kubuchwepheshe be-k8s. Incazelo, isicelo, imiqondo
• I-Pod, ReplicaSet, Deployment, Service, Ingress, PV, PVC, ConfigMap, Secret
• Zilolonge

Isihloko No. 2: Idizayini yeqoqo, izingxenye eziyinhloko, ukubekezelela amaphutha, inethiwekhi ye-k8s
• Ukwakhiwa kweqoqo, izingxenye eziyinhloko, ukubekezelela amaphutha
• inethiwekhi ye-k8s

Isihloko #3: I-Kubespray, ukulungisa nokumisa iqoqo le-Kubernetes
• I-Kubespray, ukumisa nokushuna kweqoqo le-Kubernetes
• Zilolonge

Isihloko #4: I-Ceph, ukusethwa kweqoqo nezici zokusebenza ekukhiqizeni
• I-Ceph, ukusethwa kweqoqo nezici zokusebenza ekukhiqizeni
• Prakthiza: ukusetha i-ceph

Isihloko #5: Okuthuthukisiwe kwe-Kubernetes Abstractions
• I-DaemonSet, StatefulSet, RBAC, Job, CronJob, Pod Sheduling, InitContainer

Isihloko #6: Isingeniso se-Helm
• Isingeniso se-Helm
• Zilolonge

Isihloko #7: Izinsizakalo zokushicilela nezinhlelo zokusebenza
• Uhlolojikelele lwezindlela zokushicilela isevisi: I-NodePort vs LoadBalancer vs Ingress
• Isilawuli sokungena (Nginx): ukulinganisa ithrafikhi engenayo
• Umphathi we-Сert: thola ngokuzenzakalelayo izitifiketi ze-SSL/TLS
• Zilolonge

Isihloko #8: Ukugawula nokuqapha
• Ukuqapha Cluster, Prometheus
• Ukugawula amaqoqo, Fluentd/Elastic/Kibana
• Zilolonge

Isihloko No. 9: I-CI/CD, ukuthunyelwa kwesakhiwo kuqoqo kusukela ekuqaleni

Isihloko No. 10: Umsebenzi ongokoqobo, ukufakwa kwe-docker kwesicelo kanye nokwethulwa kuqoqo

Iwebhusayithi ye-Slurm

I-MegaSlurm: izifundo ezithuthukisiwe (May 31 - June 2)
Idizayinelwe onjiniyela nabadwebi bezakhiwo bakwa-Kubernetes, kanye nabaphothule izifundo eziyisisekelo.
Silungiselela iqoqo ukuze siqalise ngesikhathi esisodwa ukubuyekezwa kwezingxenye zeqoqo kanye nokuphakelwa kuqoqo.

Inani: izinkulungwane ezingama-60 (izinkulungwane ezingama-45 zabahlanganyeli be-Slurm-4)

Uhlelo

Isihloko #1: Inqubo yokudala iqoqo le-failover kusuka ngaphakathi
• Ukusebenza neKubespray
• Ukufakwa kwezingxenye ezengeziwe
• Ukuhlolwa kweqoqo nokuxazulula inkinga
• Zilolonge

Isihloko #2: Ukugunyazwa kuqoqo kusetshenziswa umhlinzeki wangaphandle
• I-LDAP (Nginx + Python)
• I-OIDC (Dex + Gangway)
• Zilolonge

Isihloko #3: Inqubomgomo yenethiwekhi
• Isingeniso ku-CNI
• Inqubomgomo Yokuphepha Kwenethiwekhi
• Zilolonge

Isihloko #4: Vikela futhi izinhlelo zokusebenza ezitholakalayo kakhulu kuqoqo
• I-PodSecurityPolicy
• I-PodDisruptionBudget

Isihloko #5: Kubernetes. Ake sibheke ngaphansi kwesivalo
• Ukwakheka kwesilawuli
• Ama-opharetha nama-CRD
• Zilolonge

Isihloko #6: Izinhlelo zokusebenza ezinomthetho kuqoqo
• Kwethulwa iqoqo lesizindalwazi kusetshenziswa i-PostgreSQL njengesibonelo
• Kwethulwa iqoqo le-RabbitMQ
• Zilolonge

Isihloko #7: Ukugcina Izimfihlo
• Ukuphatha izimfihlo ku-Kubernetes
• I-Vault

Isihloko #8: I-Horizontal Pod Autoscaler
• Ithiyori
• Zilolonge

Isihloko #9: Isipele Nokutholwa Kwenhlekelele
• Ukwenza ikhophi yasenqolobaneni nokuthola usizo lweqoqo kusetshenziswa i-Heptio Velero (owayekade eyi-Ark) kanye nokunye
• Zilolonge

Isihloko #10: Ukuthunyelwa Kwesicelo
•I-Lint
• Amathuluzi okwenza isifanekiso nawokuphakela
• Amasu okusabalalisa

Isihloko No. 11: Umsebenzi ongokoqobo
• Ukwakha i-CI/CD ukuze kufakwe izicelo
• Ukubuyekezwa kweqoqo

Iwebhusayithi ye-MegaSlurm

I-Docker, i-Ansible ne-Ceph

I-Slurm: I-Kubernetes inamandla. Uhlelo namabhonasi

Uhambo lomlando

I-Slurm yokuqala kwaba ukuhlolwa. Izikhulumi zaziphothula ngokoqobo izethulo zazo esiteji, futhi ezilalelini kuhlezi abaphathi bezinga kangangokuthi kwase kuyisikhathi sokubamema njengezikhulumi.

Isifundo esiyisisekelo sangempela senzeka ku-Slurm yesibili: U-80% wabahlanganyeli babone u-Kubernetes okokuqala, kanti owesithathu wayengakaze asebenze no-Docker.
Kwakucacile ukuthi kwakunzima kangakanani kubantu ukulalela inkulumo nge-Docker ekuseni futhi basebenze nayo kumodi yokulwa kusihlwa.
UCeph udale ubunzima obuningi. Ngaphezu kwalokho, kwakukhona abantu abangu-20 ezilalelini ababedinga ngempela ukuchaza uCeph, kanye nabanye abangu-60 ababengamdingi nhlobo uCeph.

Nge-Slurm yesithathu, sihambise i-Docker ne-Ansible kumawebinars ahlukene, sikhulula isikhathi esengeziwe se-Kubernetes. Isixazululo sabonakala sisebenza ngokuyisisekelo futhi asithuthukisiwe ekusetshenzisweni: inkulumo yayingathandeki kubafana abanolwazi, futhi ingxoxo yayingathandeki kwabaqalayo.

Nge-Slurm yesine, senze izifundo ze-inthanethi ku-Docker, i-Ansible ne-Ceph. Umqondo ulula: labo abawudingayo bazothatha isifundo ngokucabangisisa, labo abangasidingi bazokushaya indiva ngomoya ophansi. Uma kubhekwa iqembu labahloli, isifundo se-Docker sithatha amahora angu-6-8. U-Ansible no-Ceph abakawashi.

Ukuzikhulula:

  • izifundo zokuhlola. Ezinye izinqumo cishe ngeke ziphumelele.
  • inkundla (Stepik.org) ayinangqondo, futhi asikaze sisebenze nayo ngaphambilini. Mhlawumbe kuzoba namaqhubu kanye nama-snags.
  • Izifundo zahlolwa kubasebenzi baseSouthbridge kuphela. Impela kuzomele uqedele okuthile njengoba uhamba.

I-Slurm: I-Kubernetes inamandla. Uhlelo namabhonasi

Ngolunye usuku nje engxoxweni ye-Slurm yokuqala bakhumbula ukuthi kwakumnandi futhi kumnandi kangakanani, naphezu kwakho konke okwesabekayo kwenhlangano. Okokuqala ukuthola okuvelayo okucace kakhulu. Ake sibone ukuthi kwenzekani kubafundi bokuqala bezifundo ze-inthanethi. 🙂

I-Slurm: I-Kubernetes inamandla. Uhlelo namabhonasi

Source: www.habr.com

Engeza amazwana