I-Slurm Mega. Ukufakwa kweqoqo elilungele ukukhiqizwa, amathiphu angu-3 awusizo avela kuzikhulumi kanye ne-Slurm kanye no-Luke Skywalker kanye ne-R2D2

Ngomhla zingama-24 kuLwezi, i-Slurm Mega, isifundo esithuthukisiwe se-Kubernetes, yaphela. I-Mega elandelayo izoba seMoscow ngoMeyi 18-20.

Umqondo we-Slurm Mega: sibheka ngaphansi kwe-hood yeqoqo, sihlaziye ngethiyori futhi sijwayeze ubunkimbinkimbi bokufaka nokumisa iqoqo elilungele ukukhiqiza ("indlela-engekho-kakhulu"), sicabangele izindlela ukuze kuqinisekiswe ukuphepha kanye nokubekezelelwa kwamaphutha kwezicelo.

Ibhonasi ye-Mega: Labo abaphumelele i-Slurm Basic kanye ne-Slurm Mega bathola lonke ulwazi oludingekayo ukuze baphumelele ukuhlolwa CKA kuya CNCF kanye nesaphulelo esingu-50% ekuhlolweni.

Sibonga ngokukhethekile ku-Selectel ngokunikeza ifu lokuzilolonga, ngenxa yokuthi umhlanganyeli ngamunye asebenze eqoqweni lakhe eligcwele ngokugcwele, futhi akuzange kudingeke ukuthi sengeze izinkulungwane ezi-5 enanini lamathikithi lalokhu.

Ngeke ngikutshele ukuthi uBondarev noSelivanov bangobani, kulabo abanentshisekelo, funda lapha.

I-Slurm Mega. Usuku lokuqala.

Ngosuku lokuqala lwe-Slurm Mega, salayisha ababambiqhaza ngezihloko ezi-4. U-Pavel Selivanov ukhulume ngenqubo yokudala iqoqo le-failover kusuka ngaphakathi, mayelana nomsebenzi we-Kubeadm, kanye nokuhlola nokuxazulula inkinga yeqoqo.

Ikhefu lokuqala lekhofi. Ngokuvamile “insimbi kathisha,” kodwa kwa-Slurm, lapho abafundi bephuza ikhofi, othisha bayaqhubeka nokuphendula imibuzo.

Futhi naphezu kokuthi ifu elithi "Break II" lihamba phezu kwekhanda likaPavel Selivanov, akusona isiphetho sakhe sokuhamba ngekhefu.

USergei Bondarev noMarcel Ibraev balinde ithuba labo lokuya epulpiti.

Ngesikhathi sekhefu, ngaya kuSergey Bondarev ngambuza: “Isiphi iseluleko ongasinikeza bonke onjiniyela bakwa-Kubernetes ngokusekelwe kokuhlangenwe nakho kwakho kokusebenza namaqoqo amakhasimende ethu?”

USergey unikeze isincomo esilula: “Vimba ukufinyelela kusuka ku-inthanethi kuya kuseva ye-API. Ngoba ngezikhathi ezithile kuba nezinsongo zokuphepha ezivumela abasebenzisi abangagunyaziwe ukuthi bathole ukufinyelela kuqoqo.»

Ngemva kwemizuzu embalwa kanye nebhodlela lamanzi amaminerali, u-Pavel Selivanov waphuthuma empini nesithunzi sesihloko esithi "Ukugunyazwa kuqoqo kusetshenziswa umhlinzeki wangaphandle," okuyi-LDAP (Nginx + Python) kanye ne-OIDC (Dex + Gangway).

Ngesikhathi sekhefu elilandelayo, uMarcel Ibraev, isikhulumi se-Slurm, u-Certified Kubernetes Administrator, unikeze iseluleko sakhe konjiniyela bakwa-Kubernetes: “Ngizosho into ebonakala iwubala, kodwa uma ngibheka ukuthi kaningi kangakanani ngihlangabezana nalokhu, nginokusola ukuthi akubona bonke abakucabangela lokhu. Akufanele ukholwe ngobumpumputhe noma iyiphi i-How-To evela ku-inthanethi ezokutshela ukuthi lokhu noma leso sixazululo sisebenza kahle kangakanani. Kumongo we-Kubernetes, lokhu kuthatha incazelo ekhethekile. Ngoba i-Kubernetes iyisistimu eyinkimbinkimbi futhi enezela isisombululo kuyo engazange ihlolwe kuphrojekthi yakho ethile futhi ukufakwa kweqoqo lakho kungaholela emiphumeleni ebuhlungu, naphezu kweqiniso lokuthi babhale ku-inthanethi mayelana nokubanda kwayo. Ngisho neKubernetes ngokwayo ngaphandle kwendlela elinganiselayo ingalimaza iphrojekthi yakho, "okulungele umuntu waseRussia ukufa komJalimane." Ngakho-ke, siyahlola, sihlole, futhi sihlole noma yisiphi isisombululo ngaphambi kokusisebenzisa ngokwethu. Yile ndlela kuphela ozocabangela ngayo wonke ama-nuances angavela.".

Ngemva kokudla kwasemini, Sergei Bondarev wangena empini. Isihloko sakhe sithi Inqubomgomo Yenethiwekhi, okuyisingeniso se-CNI kanye Nenqubomgomo Yokuphepha Yenethiwekhi.

I-inthanethi igcwele izindatshana ezimayelana Nenqubomgomo Yenethiwekhi. Kunombono phakathi kwabaphathi wokuthi Izinqubomgomo Zenethiwekhi zingakhishwa, kodwa ochwepheshe bezokuphepha bathanda ngempela leli thuluzi futhi bafuna ukuthi Izinqubomgomo Zenethiwekhi zinikwe amandla.

U-Pavel Selivanov uthathe izintambo zokuphatha u-Kubernetes ku-Sergey Bondarev ngesihloko esithi "Izinhlelo zokusebenza ezivikelekile nezitholakala kakhulu kuqoqo." Unezihloko azithandayo: PodSecurityPolicy, PodDisruptionBudget, LimitRange/ResourceQuota.

Isihloko seMega, uPavel asikhuluma ku-DevOpsConf: kanjani ukuphula kalula futhi ngokushesha iqoqo le-Kubernetes futhi uthole wonke amalungelo emizuzwini emi-5.

Ngemuva kokusho ukuthi iqoqo le-Kubernetes lingagetshengwa kalula kangakanani, abaphathi abangabazayo bathi: “Yebo, ngikutshelile, i-Kubernetes yakho igcwele izimbobo.” U-Pavel uchaza ukuthi kungenzeka ukulungisa ukuphepha kuqoqo, futhi akunzima, ukuthi izilungiselelo zokuphepha zikhutshaziwe ngokuzenzakalelayo. Imininingwane ekulotshiweyo umbiko.

— Ubani ophule iqoqo? Wahlephula iqoqo! Ngibona kahle ukusuka lapha!

Kwa-Slurms, yonke into ayilula futhi kulula, ukuze ungadinwa. Kodwa kulokhu iTelegram yanquma ukukhombisa wonke umuntu iphuzu lesihlanu:

Марсель Ибраев, [22 нояб. 2019 г., 16:52:52]:
Коллеги, в данный момент наблюдаются сбои в работе Телеграм, имейте это ввиду

Lokhu kwaphetha usuku lokuqala, luqhakazile futhi lugcwele ulwazi oluwusizo. Ngosuku lwesibili kuzoba nomkhuba owengeziwe, ukwethula iqoqo ledatha kusetshenziswa i-PostgreSQL njengesibonelo, kwethulwa iqoqo le-RabbitMQ, ukuphatha izimfihlo ku-Kubernetes.

I-Slurm Mega. Usuku lwesibili.

Umethuli uqale usuku lwesibili ngesimemezelo esijabulisayo: “Ekuseni, njengoba uPavel esho izolo, silindelwe kanzima. Ngolimi lodokotela abahlinzayo, sizongena emathunjini eKubernetes!”

Umthokozisi omkhulu uyindaba ehlukile. Enye yezinkinga nge-Slurm ukuthi abantu bayacisha ulwazi olugcwele bese belala. Besihlala sifuna indlela yokwenza okuthile ngakho, futhi imidlalo emincane enezithameli isebenze kahle ku-Slurm yokugcina. Kulokhu siqashe umuntu oqeqeshwe ngokukhethekile. Kwakukhona amahlaya amaningi engxoxweni mayelana “nemiqhudelwano ethokozisayo,” kodwa iqiniso liwukuthi asikaze sibabone abahlanganyeli abajabule kangaka.

Basiza uMarcel Ibraev - futhi waqala ukutadisha izicelo ezisemthethweni eqenjini. Okungukuthi, ukwethula iqoqo lesizindalwazi kusetshenziswa i-PostgreSQL njengesibonelo kanye nokwethula iqoqo le-RabbitMQ.

Ngemva kokudla kwasemini, uSergei Bondarev waqala ukusebenza ku-K8S. Futhi isihloko sasithi “Ukugcina Izimfihlo.” UMulder noScully bammboze. Ufunde ukuphatha okuyimfihlo eKubernetes naseVault. Futhi futhi "Iqiniso likhona".

Okuqhubeka kwaze kwaba kusihlwa, lapho uPavel Selivanov eqala ukukhuluma ngeHorizontal Pod Autoscaler.

I-Slurm Mega. Ngosuku lwesithathu.

Ngokucacile nangenjabulo, kusukela ekuseni kakhulu, u-Sergei Bondarev wavusa izethameli ngama-backups kanye nokululama ekuhlulekeni. Ngihlole isipele nokutholwa kweqoqo ngisebenzisa i-Heptio Velero kanye nokunye.

U-Sergey waqhubeka nesihloko sokuzungeziswa kwaminyaka yonke kwezitifiketi kuqoqo: ukuvuselelwa kwezitifiketi zokulawula indiza kusetshenziswa i-beadm. Ngaphambi nje kwesidlo sasemini, ukuze avuse isifiso sabahlanganyeli noma ababulale ngokuphelele, uPavel Selivanov waphakamisa isihloko sokuthumela isicelo.

Kwacatshangelwa amathuluzi okwenza isifanekiso nawokusabalalisa, kanye namasu okuthumela.

U-Pavel Selivanov ukhulume ngesihloko esisha: I-Service Mesh, ukufakwa kwe-Istio. Isihloko sibonakale sicebile kangangokuthi ungenza isifundo esihlukile kuso. Sixoxa ngezinhlelo, hlala ulindele izimemezelo.

Into eyinhloko ukuthi konke kusebenza ngendlela efanele. Ngoba yisikhathi sokuzijwayeza:
ukwakha i-CI/CD ukuze kwethulwe kanyekanye ukuthunyelwa kwezicelo kanye nokuvuselelwa kweqoqo. Kumaphrojekthi wokufundisa konke kusebenza kahle. Futhi ukuphila ngezinye izikhathi kugcwele lezimanga.

Kwangathi i-Slurm ingaba nawe!

Source: www.habr.com