Yadda Ake Nginx akan Kungiyar Kubernetes


A cikin labarinmu na ƙarshe, mun tattauna yadda za a kafa da gudanar da ernungiyar Kubernetes, bari mu tattauna yadda za mu iya tura sabis na NGINX a kan gungu.

Zan gudanar da wannan aika-aikar a kan Injin Kirkirar wanda aka samar ta hanyar mai samar da gajimaren jama'a. Kamar yadda yake tare da yawancin sabis ɗin gajimare na jama'a, da yawa galibi suna kula da tsarin IP na jama'a da masu zaman kansu don Kayan Mashin ɗin su.

Master Node - Public IP: 104.197.170.99 and Private IP: 10.128.15.195
Worker Node 1 - Public IP: 34.67.149.37 and Private IP: 10.128.15.196
Worker Node 2 - Public IP: 35.232.161.178 and Private IP: 10.128.15.197

Naddamar da NGINX akan ernungiyar Kubernetes

Za mu gudanar da wannan turawa daga babban tashar.

Bari mu fara da duba matsayin gungu. Duk node ɗinku su kasance cikin yanayin SHIRYI.

# kubectl get nodes

Mun ƙirƙiri tura NGINX ta amfani da hoton NGINX.

# kubectl create deployment nginx --image=nginx

Yanzu zaka iya ganin yanayin aikinda kake yi.

# kubectl get deployments

Idan kuna son ganin ƙarin daki-daki game da tura ku, za ku iya gudanar da kwatancen umarnin. Misali, yana yiwuwa a iya tantance adadin rubutattun kayan aiki da ke gudana. A halinmu, muna sa ran ganin kwatankwacin 1 yana gudana (maimaita 1/1).

# kubectl describe deployment nginx

Yanzu aikin Nginx yana aiki, kuna so ku fallasa sabis na NGINX ga jama'a na IP wanda za'a iya isa akan intanet.

Kubernetes yana ba da zaɓuɓɓuka da yawa lokacin fallasa sabis ɗinku bisa ga fasalin da ake kira Kubernetes Sabis-nau'ikan kuma sune:

  1. ClusterIP - Wannan nau'in sabis ɗin yana fallasa sabis ɗin a cikin IP na ciki, ana iya samunsa ne kawai a cikin gungu, kuma mai yuwuwa ne kawai a cikin gungu-nodes.
  2. NodePort - Wannan shine mafi kyawun zaɓi don fallasa sabis ɗin ku don samun dama a wajen ƙungiyar ku, a wani takamaiman tashar jiragen ruwa (wanda ake kira NodePort) akan kowane kumburi a cikin tarin. Za mu iya kwatanta wannan zaɓin ba da daɗewa ba.
  3. LoadBalancer - Wannan zaɓin yana amfani da ayyukan Load-Balancing na waje wanda wasu masu samarwa ke bayarwa don ba da damar isa ga sabis ɗin ku. Wannan zaɓi ne mafi amintacce yayin tunanin babban wadata don sabis ɗinku, kuma yana da ƙarin fasalin da ya wuce damar tsoho.
  4. Sunan Waje - Wannan sabis ɗin yana tura zirga-zirga zuwa sabis a waje da gungu. Kamar wannan ne aka tsara sabis ɗin zuwa sunan DNS wanda za'a iya karɓar bakuncin daga ƙungiyar ku. Yana da mahimmanci a lura cewa wannan baya amfani da wakilci.

Nau'in Sabis na asali shine ClusterIP.

A cikin yanayin mu, muna so muyi amfani da nau'in NodePort Sabis saboda muna da adireshin IP na jama'a da na sirri kuma ba mu buƙatar mai ɗaukar kayan waje daga yanzu. Tare da wannan nau'in-sabis ɗin, Kubernetes zai sanya wannan sabis ɗin a tashar jiragen ruwa akan zangon 30000 +.

# kubectl create service nodeport nginx --tcp=80:80

Gudanar da umarnin samun svc don ganin taƙaitaccen sabis ɗin da kuma tashoshin da aka fallasa.

# kubectl get svc

Yanzu zaku iya tabbatar da cewa ana iya samun shafin Nginx akan dukkan nodes ta amfani da umarnin curl.

# curl master-node:30386
# curl node-1:30386
# curl node-2:30386

Kamar yadda kake gani,\"Maraba da zuwa NGINX!" za'a iya isa shafi.

Kamar yadda wataƙila kuka lura, Kubernetes ya ba da rahoton cewa ba ni da rijistar IP na Jama'a mai aiki, ko kuma a'a babu rijistar-waje ta IP.

# kubectl get svc

Bari mu tabbatar idan gaskiya ne, cewa bani da IP na zahiri wanda aka haɗe zuwa cikin musaya ta amfani da umarnin IP.

# ip a

Babu IP na jama'a kamar yadda kuke gani.

Kamar yadda aka ambata a baya, a yanzu haka ina gudanar da wannan aika-aika a kan Injin kirkira wanda mai ba da girgije na jama'a ya bayar. Don haka, yayin da babu wani keɓaɓɓen keɓaɓɓen da aka sanya IP na jama'a, mai ba da VM ya ba da adireshin IP na Efesral na waje.

Adireshin IP na waje mai ɗorewa adireshin IP ne na ɗan lokaci wanda ya kasance a haɗe da VM har sai an dakatar da misali na kamala. Lokacin da aka sake farawa fasalin kamala, an sanya sabon IP na waje. Asali sanya shi, hanya ce mai sauƙi ga masu samar da sabis don yin amfani da IPs ɗin jama'a marasa aiki.

Kalubale a nan, banda gaskiyar cewa IP ɗinku na jama'a ba tsayayyu bane, shine cewa meungiyar Jama'a ta Ephewararren Epheararrakin isari ne kawai (ko wakili) na IP ɗin mai zaman kansa, kuma saboda wannan dalili, za a isa ga sabis ɗin ne kawai a tashar jirgin ruwa 30386. Wannan yana nufin cewa za a sami damar yin amfani da sabis ɗin a kan URL , wato 104.197.170.99:30386, wanda idan ka bincika burauzarka, ya kamata ka sami damar ganin shafin maraba.

Da wannan, muka sami nasarar tura NGINX akan 3-node ɗin ku na Kubernetes.