AI 에이전트의 경우: 문서 인덱스는 https://www.mongodb.com/ko-kr/docs/llms.txt에서 사용할 수 있으며, 모든 페이지의 마크다운 버전은 어떤 URL 경로에 .md를 추가하여 사용할 수 있습니다.

서비스 메시가 없는 멀티 클러스터 샤드 클러스터

여러 Kubernetes 클러스터에 MongoDB Sharded Clusters를 배포할 수 있습니다. 멀티 클러스터 기능을 사용하면 다음을 수행할 수 있습니다.

  • 각각 다른 지리적 리전 에 있는 여러 Kubernetes 클러스터에 배포하여 배포서버 의 회복 탄력성 개선합니다.

  • 해당 데이터에 의존하는 애플리케이션 또는 클라이언트에 더 가까운 다양한 Kubernetes 클러스터에 지정된 샤드의 프라이머리 노드를 배포하여 지리적 샤딩 위한 배포서버 구성하고 지연 시간 줄입니다.

  • 성능 향상을 위해 배포서버 조정합니다. 예시 를 들어, 다른 Kubernetes 클러스터의 모든 또는 지정된 샤드에 대해 또는 사용자 지정된 리소스 할당을 사용하여 읽기 전용 분석 노드를 배포 할 수 있습니다.

전제 조건

다음 절차를 시작하기 전에 다음 조치를 수행하세요.

# This script builds on top of the environment configured in the setup guides.# It depends (uses) the following env variables defined there to work correctly.# If you don't use the setup guide to bootstrap the environment, then define them here.#  ${K8S_CLUSTER_0_CONTEXT_NAME}#  ${K8S_CLUSTER_1_CONTEXT_NAME}#  ${K8S_CLUSTER_2_CONTEXT_NAME}#  ${MDB_NAMESPACE}#  ${CUSTOM_DOMAIN}
export SC_RESOURCE_NAME=mdb-shexport MONGODB_VERSION="8.0.5-ent"
export MDB_CLUSTER_0_EXTERNAL_DOMAIN="${K8S_CLUSTER_0}.${CUSTOM_DOMAIN}"export MDB_CLUSTER_1_EXTERNAL_DOMAIN="${K8S_CLUSTER_1}.${CUSTOM_DOMAIN}"export MDB_CLUSTER_2_EXTERNAL_DOMAIN="${K8S_CLUSTER_2}.${CUSTOM_DOMAIN}"

소스 코드

포함된 모든 소스 코드 MongoDB Kubernetes Operator 리포지토리 에서 찾을 수 있습니다.

절차

1

TLS 인증서를 생성합니다.

다음 명령을 실행하여 각 샤드, mongos 및 config 서버에 필요한 TLS 인증서를 생성합니다.

kubectl apply --context "${K8S_CLUSTER_0_CONTEXT_NAME}" -n "${MDB_NAMESPACE}" -f - <<EOFapiVersion: cert-manager.io/v1kind: Certificatemetadata:  name: mdb-sh-certspec:  dnsNames:  - "*.${MDB_CLUSTER_0_EXTERNAL_DOMAIN}"  - "*.${MDB_CLUSTER_1_EXTERNAL_DOMAIN}"  - "*.${MDB_CLUSTER_2_EXTERNAL_DOMAIN}"  duration: 240h0m0s  issuerRef:    name: my-ca-issuer    kind: ClusterIssuer  renewBefore: 120h0m0s  secretName: cert-prefix-mdb-sh-cert  usages:  - server auth  - client auth---apiVersion: cert-manager.io/v1kind: Certificatemetadata:  name: mdb-sh-0-certspec:  dnsNames:  - "*.${MDB_CLUSTER_0_EXTERNAL_DOMAIN}"  - "*.${MDB_CLUSTER_1_EXTERNAL_DOMAIN}"  - "*.${MDB_CLUSTER_2_EXTERNAL_DOMAIN}"  duration: 240h0m0s  issuerRef:    name: my-ca-issuer    kind: ClusterIssuer  renewBefore: 120h0m0s  secretName: cert-prefix-mdb-sh-0-cert  usages:  - server auth  - client auth---apiVersion: cert-manager.io/v1kind: Certificatemetadata:  name: mdb-sh-1-certspec:  dnsNames:  - "*.${MDB_CLUSTER_0_EXTERNAL_DOMAIN}"  - "*.${MDB_CLUSTER_1_EXTERNAL_DOMAIN}"  - "*.${MDB_CLUSTER_2_EXTERNAL_DOMAIN}"  duration: 240h0m0s  issuerRef:    name: my-ca-issuer    kind: ClusterIssuer  renewBefore: 120h0m0s  secretName: cert-prefix-mdb-sh-1-cert  usages:  - server auth  - client auth---apiVersion: cert-manager.io/v1kind: Certificatemetadata:  name: mdb-sh-2-certspec:  dnsNames:  - "*.${MDB_CLUSTER_0_EXTERNAL_DOMAIN}"  - "*.${MDB_CLUSTER_1_EXTERNAL_DOMAIN}"  - "*.${MDB_CLUSTER_2_EXTERNAL_DOMAIN}"  duration: 240h0m0s  issuerRef:    name: my-ca-issuer    kind: ClusterIssuer  renewBefore: 120h0m0s  secretName: cert-prefix-mdb-sh-2-cert  usages:  - server auth  - client auth---apiVersion: cert-manager.io/v1kind: Certificatemetadata:  name: mdb-sh-config-certspec:  dnsNames:  - "*.${MDB_CLUSTER_0_EXTERNAL_DOMAIN}"  - "*.${MDB_CLUSTER_1_EXTERNAL_DOMAIN}"  - "*.${MDB_CLUSTER_2_EXTERNAL_DOMAIN}"  duration: 240h0m0s  issuerRef:    name: my-ca-issuer    kind: ClusterIssuer  renewBefore: 120h0m0s  secretName: cert-prefix-mdb-sh-config-cert  usages:  - server auth  - client auth---apiVersion: cert-manager.io/v1kind: Certificatemetadata:  name: mdb-sh-mongos-certspec:  dnsNames:  - "*.${MDB_CLUSTER_0_EXTERNAL_DOMAIN}"  - "*.${MDB_CLUSTER_1_EXTERNAL_DOMAIN}"  - "*.${MDB_CLUSTER_2_EXTERNAL_DOMAIN}"  duration: 240h0m0s  issuerRef:    name: my-ca-issuer    kind: ClusterIssuer  renewBefore: 120h0m0s  secretName: cert-prefix-mdb-sh-mongos-cert  usages:  - server auth  - client authEOF
2

MongoDB 사용자 지정 리소스 배포합니다.

다음 명령을 실행하여 사용자 지정 리소스를 배포 .

kubectl apply --context "${K8S_CLUSTER_0_CONTEXT_NAME}" -n "${MDB_NAMESPACE}" -f - <<EOFapiVersion: mongodb.com/v1kind: MongoDBmetadata:  name: ${SC_RESOURCE_NAME}spec:  shardCount: 3  topology: MultiCluster  type: ShardedCluster  version: ${MONGODB_VERSION}  opsManager:    configMapRef:      name: mdb-org-project-config  credentials: mdb-org-owner-credentials  persistent: true  backup:    mode: enabled  security:    certsSecretPrefix: cert-prefix    tls:      ca: ca-issuer    authentication:      enabled: true      modes: ["SCRAM"]  mongos:    clusterSpecList:      - clusterName: ${K8S_CLUSTER_0_CONTEXT_NAME}        members: 2        externalAccess:          externalDomain: "${MDB_CLUSTER_0_EXTERNAL_DOMAIN}"          externalService:            annotations:               external-dns.alpha.kubernetes.io/hostname: "{podName}.${MDB_CLUSTER_0_EXTERNAL_DOMAIN}"  configSrv:    clusterSpecList:      - clusterName: ${K8S_CLUSTER_0_CONTEXT_NAME}        members: 3 # config server will have 3 members in main cluster        externalAccess:          externalDomain: "${MDB_CLUSTER_0_EXTERNAL_DOMAIN}"          externalService:            annotations:               external-dns.alpha.kubernetes.io/hostname: "{podName}.${MDB_CLUSTER_0_EXTERNAL_DOMAIN}"      - clusterName: ${K8S_CLUSTER_1_CONTEXT_NAME}        members: 1 # config server will have additional non-voting, read-only member in this cluster        memberConfig:          - votes: 0            priority: "0"        externalAccess:          externalDomain: "${MDB_CLUSTER_1_EXTERNAL_DOMAIN}"          externalService:            annotations:               external-dns.alpha.kubernetes.io/hostname: "{podName}.${MDB_CLUSTER_1_EXTERNAL_DOMAIN}"  shard:    clusterSpecList:      - clusterName: ${K8S_CLUSTER_0_CONTEXT_NAME}        members: 3 # each shard will have 3 members in this cluster        externalAccess:          externalDomain: "${MDB_CLUSTER_0_EXTERNAL_DOMAIN}"          externalService:            annotations:               external-dns.alpha.kubernetes.io/hostname: "{podName}.${MDB_CLUSTER_0_EXTERNAL_DOMAIN}"      - clusterName: ${K8S_CLUSTER_1_CONTEXT_NAME}        members: 1 # each shard will have additional non-voting, read-only member in this cluster        memberConfig:          - votes: 0            priority: "0"        externalAccess:          externalDomain: "${MDB_CLUSTER_1_EXTERNAL_DOMAIN}"          externalService:            annotations:               external-dns.alpha.kubernetes.io/hostname: "{podName}.${MDB_CLUSTER_1_EXTERNAL_DOMAIN}"EOF
3

리소스가 회전할 때까지 기다립니다.

다음 명령을 실행하여 모든 리소스가 실행 확인합니다.

echo; echo "Waiting for MongoDB to reach Running phase..."kubectl --context "${K8S_CLUSTER_0_CONTEXT_NAME}" -n "${MDB_NAMESPACE}" wait --for=jsonpath='{.status.phase}'=Running "mdb/${SC_RESOURCE_NAME}" --timeout=900secho; echo "Pods running in cluster ${K8S_CLUSTER_0_CONTEXT_NAME}"kubectl --context "${K8S_CLUSTER_0_CONTEXT_NAME}" -n "${MDB_NAMESPACE}" get podsecho; echo "Pods running in cluster ${K8S_CLUSTER_1_CONTEXT_NAME}"kubectl --context "${K8S_CLUSTER_1_CONTEXT_NAME}" -n "${MDB_NAMESPACE}" get podsecho; echo "Pods running in cluster ${K8S_CLUSTER_2_CONTEXT_NAME}"kubectl --context "${K8S_CLUSTER_2_CONTEXT_NAME}" -n "${MDB_NAMESPACE}" get pods
4

MongoDB 사용자 및 자격 증명 만듭니다.

다음 명령을 실행하여 샤딩된 클러스터 에 사용자 및 자격 증명 생성합니다.

kubectl apply --context "${K8S_CLUSTER_0_CONTEXT_NAME}" -n "${MDB_NAMESPACE}" -f - <<EOFapiVersion: v1kind: Secretmetadata:  name: sc-user-passwordtype: OpaquestringData:  password: password---apiVersion: mongodb.com/v1kind: MongoDBUsermetadata:  name: sc-userspec:  passwordSecretKeyRef:    name: sc-user-password    key: password  username: "sc-user"  db: "admin"  mongodbResourceRef:    name: ${SC_RESOURCE_NAME}  roles:  - db: "admin"    name: "root"EOF
kubectl --context "${K8S_CLUSTER_0_CONTEXT_NAME}" wait --for=jsonpath='{.status.phase}'=Updated -n "${MDB_NAMESPACE}" mdbu/sc-user --timeout=300s
5

MongoDB Shell 과의 연결을 확인합니다.

다음 명령을 실행하여 샤딩된 클러스터 의 MongoDB 리소스 에 액세스할 수 있는지 확인합니다.

external_ip="$(kubectl get --context "${K8S_CLUSTER_0_CONTEXT_NAME}" -n "${MDB_NAMESPACE}" svc "${SC_RESOURCE_NAME}-mongos-0-0-svc-external" -o=jsonpath="{.status.loadBalancer.ingress[0].ip}")"
mkdir -p certskubectl get --context "${K8S_CLUSTER_0_CONTEXT_NAME}" -n "${MDB_NAMESPACE}" cm/ca-issuer -o=jsonpath='{.data.ca-pem}' > certs/ca.crt
mongosh --host "${external_ip}" --username sc-user --password password --tls --tlsCAFile certs/ca.crt --tlsAllowInvalidHostnames --eval "db.runCommand({connectionStatus : 1})"
{  authInfo: {    authenticatedUsers: [ { user: 'sc-user', db: 'admin' } ],    authenticatedUserRoles: [ { role: 'root', db: 'admin' } ]  },  ok: 1,  '$clusterTime': {    clusterTime: Timestamp({ t: 1757587970, i: 3 }),    signature: {      hash: Binary.createFromBase64('uCXOM8wmgGch1JPShJ/5NKdx4HY=', 0),      keyId: Long('7548782382841593879')    }  },  operationTime: Timestamp({ t: 1757587970, i: 3 })}
돌아가기
멀티 클러스터 복제본 세트
다음
참조
이 페이지 평가하기

이 페이지의 내용