index.html 32.3 KB
Newer Older
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
1 2 3 4 5
<!DOCTYPE html>
<html class="no-js" lang="zh-CN">
  <head>
    <meta charset="utf-8">
    
LinuxSuRen's avatar
LinuxSuRen 已提交
6 7 8
    <link rel="preload" href="https://jenkins-zh.cn/files/muli-latin-200.woff2" as="font" type="font/woff2" crossorigin>
    <link rel="preload" href="https://jenkins-zh.cn/files/muli-latin-400.woff2" as="font" type="font/woff2" crossorigin>
    <link rel="preload" href="https://jenkins-zh.cn/files/muli-latin-800.woff2" as="font" type="font/woff2" crossorigin>
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
9 10 11

    <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
     
LinuxSuRen's avatar
LinuxSuRen 已提交
12 13
     <title>Kubernetes 中的渐进式交付:蓝绿部署和金丝雀部署 - Jenkins 中文社区</title>
     <meta name="HandheldFriendly" content="True">
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
14
    <meta name="MobileOptimized" content="320">
LinuxSuRen's avatar
LinuxSuRen 已提交
15 16 17 18
    
    <meta name="description" content="本文介绍 Kubernetes 中与渐进式交付相关的三个有趣的项目:Shipper、Istio 以及 Flagger ">
    
    
LinuxSuRen's avatar
LinuxSuRen 已提交
19
    <meta name="keywords" content="Jenkins,Jenkins中文社区,Jenkins官方公众号,持续集成,持续交付,开源社区,DevOps">
LinuxSuRen's avatar
LinuxSuRen 已提交
20
    
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
21 22

    <meta name="viewport" content="width=device-width,minimum-scale=1">
LinuxSuRen's avatar
LinuxSuRen 已提交
23
     <meta name="generator" content="Hugo 0.54.0" />
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
24 25

      
LinuxSuRen's avatar
LinuxSuRen 已提交
26
        <META NAME="ROBOTS" CONTENT="INDEX, FOLLOW">
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
27 28
      

LinuxSuRen's avatar
LinuxSuRen 已提交
29
    <link href='/dist/main.css' rel='stylesheet' type="text/css" /><style>
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
30 31 32 33 34 35 36 37
  img.avatar {
    width: 32px;
    display: inline;
  }
</style>
<meta property="og:title" content="Kubernetes 中的渐进式交付:蓝绿部署和金丝雀部署" />
<meta property="og:description" content="本文介绍 Kubernetes 中与渐进式交付相关的三个有趣的项目:Shipper、Istio 以及 Flagger " />
<meta property="og:type" content="article" />
LinuxSuRen's avatar
LinuxSuRen 已提交
38
<meta property="og:url" content="https://jenkins-zh.cn/wechat/articles/2019/04/2019-04-24-progressive-delivery-in-kubernetes-blue-green-and-canary-deployments/" />
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56
<meta property="article:published_time" content="2019-04-24T00:00:00&#43;00:00"/>
<meta property="article:modified_time" content="2019-04-24T00:00:00&#43;00:00"/>

<meta itemprop="name" content="Kubernetes 中的渐进式交付:蓝绿部署和金丝雀部署">
<meta itemprop="description" content="本文介绍 Kubernetes 中与渐进式交付相关的三个有趣的项目:Shipper、Istio 以及 Flagger ">


<meta itemprop="datePublished" content="2019-04-24T00:00:00&#43;00:00" />
<meta itemprop="dateModified" content="2019-04-24T00:00:00&#43;00:00" />
<meta itemprop="wordCount" content="398">



<meta itemprop="keywords" content="progressive delivery,kubernetes,k8s,shipper,istio,flagger," />
<meta name="twitter:card" content="summary"/>
<meta name="twitter:title" content="Kubernetes 中的渐进式交付:蓝绿部署和金丝雀部署"/>
<meta name="twitter:description" content="本文介绍 Kubernetes 中与渐进式交付相关的三个有趣的项目:Shipper、Istio 以及 Flagger "/>

LinuxSuRen's avatar
LinuxSuRen 已提交
57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80
        
<script async src="https://www.googletagmanager.com/gtag/js?id=UA-4216293-5"></script>
<script>
  window.dataLayer = window.dataLayer || [];
  function gtag(){dataLayer.push(arguments);}
  gtag('js', new Date());

  gtag('config', 'UA-4216293-5');



var trackOutboundLink = function(id, url) {
  console.log("track:", id, url)
  gtag('event', 'click', {
    'event_category': 'outbound',
    'event_label': id,
    'transport_type': 'beacon',
    'event_callback': function(){document.location = url;}
  });
}

</script>

      
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
81 82 83 84 85 86 87 88
  </head>
  <body class="ma0 sans-serif bg-primary-color-light">
    
<nav class="bg-primary-color-dark pv4 w-100" role="navigation">

  <div class="center flex-ns flex-wrap items-center justify-start mw9">

    <h1 class="dim f3 lh-solid ml0-ns mr0 mr4-l mv0 pl3 pl4-ns">
LinuxSuRen's avatar
LinuxSuRen 已提交
89
      <a href="https://jenkins-zh.cn/" class="link white">
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
90 91 92 93 94 95 96 97 98 99
         Jenkins 中文社区
      </a>
    </h1>
    <ul class="list ma0 pa0 dn dib-l">
      
        <li class="f5 dib mr4" role="menuitem">
            
            
          <a href="/wechat/" class="dim link light-silver"
            >
LinuxSuRen's avatar
LinuxSuRen 已提交
100
            博客
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
101 102 103 104 105
              
            
          </a>
        </li>
      
LinuxSuRen's avatar
LinuxSuRen 已提交
106 107 108 109 110 111 112 113 114 115 116
        <li class="f5 dib mr4" role="menuitem">
            
            
          <a href="/tutorial/" class="dim link light-silver"
            >
            教程
              
            
          </a>
        </li>
      
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
117 118 119 120 121 122 123 124 125 126 127
        <li class="f5 dib mr4" role="menuitem">
            
            
          <a href="/event/" class="dim link light-silver"
            >
            活动
              
            
          </a>
        </li>
      
LinuxSuRen's avatar
LinuxSuRen 已提交
128 129 130 131 132 133 134 135 136 137 138
        <li class="f5 dib mr4" role="menuitem">
            
            
          <a href="/partner/" class="dim link light-silver"
            >
            合作伙伴
              
            
          </a>
        </li>
      
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205
        <li class="f5 dib mr4" role="menuitem">
            
            
          <a href="/about/" class="dim link light-silver"
            >
            关于我们
              
            
          </a>
        </li>
      
        <li class="f5 dib mr4" role="menuitem">
            
            
          <a href="http://jenkins.io/zh" class="dim link light-silver"
            target="_blank">
            Jenkins 官网
              
            
              <svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="10" height="10" viewBox="0 0 32 32" class="fill-current v-base" aria-label="External Link">
<path d="M25.152 16.576v5.696q0 2.144-1.504 3.648t-3.648 1.504h-14.848q-2.144 0-3.648-1.504t-1.504-3.648v-14.848q0-2.112 1.504-3.616t3.648-1.536h12.576q0.224 0 0.384 0.16t0.16 0.416v1.152q0 0.256-0.16 0.416t-0.384 0.16h-12.576q-1.184 0-2.016 0.832t-0.864 2.016v14.848q0 1.184 0.864 2.016t2.016 0.864h14.848q1.184 0 2.016-0.864t0.832-2.016v-5.696q0-0.256 0.16-0.416t0.416-0.16h1.152q0.256 0 0.416 0.16t0.16 0.416zM32 1.152v9.12q0 0.48-0.352 0.8t-0.8 0.352-0.8-0.352l-3.136-3.136-11.648 11.648q-0.16 0.192-0.416 0.192t-0.384-0.192l-2.048-2.048q-0.192-0.16-0.192-0.384t0.192-0.416l11.648-11.648-3.136-3.136q-0.352-0.352-0.352-0.8t0.352-0.8 0.8-0.352h9.12q0.48 0 0.8 0.352t0.352 0.8z"></path>
</svg>

            
          </a>
        </li>
      
    </ul>

    <div class="db dib-ns pl3"><form id="site-search-form" action="" role="search">
  <fieldset class="bn ma0 pa0">
    <label class="clip" for="email-address">Search</label>
    <input type="search" id="search-input" class="needs-js bg-left bg-transparent bn f5 input-reset lh-solid mt3 mt0-ns pl4 pv2 w5 white"
      placeholder="搜索文档" type="text"
      name="email-address" value="" style="background-image:url('/images/icon-search.png');background-size:16px 16px;">
  </fieldset>
</form>
</div>

    <div class="list ma0 pa0 dn dib-l"></div>

    <span class="absolute mt1 mt2-l pr3 right-0 top-0">

<a class="github-button needs-js link primary-color-dark" href="https://github.com/jenkins-zh/jenkins-zh/" data-size="large" data-show-count="false" aria-label="Star Jenkins WeChat GitHub">Star</a>
</span>

  </div>
</nav>

    
    <main role="main" class="content-with-sidebar min-vh-100 pb7 pb0-ns">
      
<main>
  <article class="w-100 ph4 pb5 pb6-ns pt1 pt5-ns">
    <div class="flex-l">
      

      <div class="order-2 w-100 w-20-l ph5-m ph0-l mb4 sticky">





  <aside class="mw5 br3 mv3 nested-links">
    
    
      
LinuxSuRen's avatar
LinuxSuRen 已提交
206
        <h3 class="f4 dib author">
LinuxSuRen's avatar
LinuxSuRen 已提交
207
            Donghui Wang
LinuxSuRen's avatar
LinuxSuRen 已提交
208 209 210 211
        </h3>

      
      
LinuxSuRen's avatar
LinuxSuRen 已提交
212
        <p class="lh-copy measure center mt0 f6 black-60 bio">
LinuxSuRen's avatar
LinuxSuRen 已提交
213 214
          a long-time Jenkins user and contributor
        </p>
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
215
      
LinuxSuRen's avatar
LinuxSuRen 已提交
216
      <a href="https://github.com/donhui" target="_blank" class="link dim v-mid dib">
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
217 218 219 220 221
        <svg version="1.1" fill="gray" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="16" height="18" viewBox="0 0 27 32">
<path d="M9.28 21.44q0.064-0.128-0.064-0.256-0.16-0.128-0.256-0.032-0.064 0.128 0.064 0.224 0.16 0.128 0.256 0.064zM8.768 20.704q-0.096-0.128-0.224-0.096-0.096 0.096 0 0.224 0.128 0.16 0.224 0.096t0-0.224zM8.032 19.968q0.032-0.064-0.096-0.128-0.128-0.032-0.128 0.032-0.064 0.096 0.064 0.16 0.16 0.032 0.16-0.064zM8.416 20.384q0.032 0 0.032-0.064t-0.064-0.096q-0.128-0.128-0.192-0.064t0.032 0.192q0.096 0.096 0.192 0.032zM9.952 21.728q0.032-0.128-0.16-0.192-0.16-0.064-0.224 0.064t0.16 0.192q0.16 0.064 0.224-0.064zM10.688 21.792q0-0.16-0.192-0.16t-0.192 0.16 0.192 0.128 0.192-0.128zM11.392 21.664q-0.032-0.128-0.224-0.096t-0.16 0.16q0.032 0.16 0.192 0.096t0.192-0.16zM22.848 16q0-3.776-2.656-6.464t-6.464-2.688-6.464 2.688-2.688 6.464q0 2.976 1.76 5.376t4.48 3.296q0.32 0.064 0.48-0.096t0.16-0.352q0-0.928-0.032-1.696-0.096 0.032-0.256 0.064t-0.64 0.032-0.864-0.096-0.768-0.352-0.544-0.736q-0.416-1.056-1.024-1.312-0.032-0.032-0.064-0.064l-0.16-0.16t-0.096-0.16 0.064-0.128 0.352-0.064q0.096 0 0.256 0.032t0.544 0.288 0.576 0.64q0.288 0.48 0.672 0.736t0.768 0.256 0.704-0.064 0.512-0.16q0.128-0.864 0.608-1.248-0.896-0.096-1.536-0.32t-1.312-0.704-0.992-1.344-0.352-2.144q0-1.408 0.96-2.464-0.448-1.088 0.096-2.4 0.32-0.128 0.96 0.128t1.088 0.512l0.448 0.288q1.056-0.288 2.304-0.288t2.272 0.288q0.192-0.128 0.512-0.32t0.992-0.448 1.024-0.16q0.512 1.312 0.096 2.4 0.928 1.056 0.928 2.464 0 1.024-0.256 1.792t-0.64 1.248-0.928 0.8-1.12 0.448-1.216 0.224q0.608 0.544 0.608 1.696 0 0.704 0 1.6t-0.032 0.896q0 0.224 0.16 0.352t0.48 0.096q2.752-0.928 4.512-3.296t1.728-5.376zM27.424 7.424v17.152q0 2.112-1.504 3.616t-3.648 1.536h-17.12q-2.144 0-3.648-1.536t-1.504-3.616v-17.152q0-2.112 1.504-3.616t3.648-1.536h17.12q2.144 0 3.648 1.536t1.504 3.616z"></path>
</svg>

      </a>
LinuxSuRen's avatar
LinuxSuRen 已提交
222 223 224 225 226 227 228 229 230

  
  <div>
    作者:<span class="originalAuthor">Carlos Sanchez</span>
    <div>
      <a class="originalLink" href="https://blog.csanchez.org/2019/01/22/progressive-delivery-in-kubernetes-blue-green-and-canary-deployments/" target="_blank">原文链接</a>
    </div>
  </div>
  
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246
  </aside>


<aside class="fixed-lTK mw5-l right-0 f6 bl-l b--moon-gray pv4 pv0-ns ph4-l nested-list-reset nested-links nested-copy-line-height">
	

	<div date-pref>
		<a href=".." class="dib f6 pl1 hover-bg-light-gray br-100">
			<svg class="fill-current" height="30px" viewBox="0 0 24 24" width="30px" xmlns="http://www.w3.org/2000/svg">
      <path transform="rotate(90 11.704999923706055,12.000000000000002) " d="m15.41,7.41l-1.41,-1.41l-6,6l6,6l1.41,-1.41l-4.58,-4.59l4.58,-4.59z" id="svg_1"/>
    <path d="M0 0h24v24H0z" fill="none"/>
</svg>

		</a>
		
		
LinuxSuRen's avatar
LinuxSuRen 已提交
247
			<a href="https://jenkins-zh.cn/wechat/articles/2019/04/2019-04-25-jenkins-ansible-nginx/" class="dib f6 pl1 hover-bg-light-gray br-100" title="使用 Jenkins &#43; Ansible 实现自动化部署 Nginx ">
LinuxSuRen's avatar
LinuxSuRen 已提交
248 249 250 251 252 253 254
				<svg class="fill-current" height="30px" viewBox="0 0 24 24" width="30px" xmlns="http://www.w3.org/2000/svg">
    <path d="M15.41 7.41L14 6l-6 6 6 6 1.41-1.41L10.83 12z"/>
    <path d="M0 0h24v24H0z" fill="none"/>
</svg>

			</a>
		
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
255 256

		
LinuxSuRen's avatar
LinuxSuRen 已提交
257
			<a href="https://jenkins-zh.cn/wechat/articles/2019/04/2019-04-23-jenkins-master-shared-home/" class="dib f6 pr1 hover-bg-light-gray br-100" title="关于 Jenkins master 共享 JENKINS_HOME 目录的实验">
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
258 259 260 261 262 263 264 265 266 267 268 269 270
			<svg class="fill-current" height="30px" viewBox="0 0 24 24" width="30px" xmlns="http://www.w3.org/2000/svg">
    <path d="M10 6L8.59 7.41 13.17 12l-4.58 4.59L10 18l6-6z"/>
    <path d="M0 0h24v24H0z" fill="none"/>
</svg>

			</a>
		
	</div>

</aside>
</div>

      <div class="order-1 w-80-l mw8 ph0 ph5-ns mid-gray nested-copy-line-height no-underline nested-links nested-img nested-copy-seperator nested-blockquote mt0-ns" style="flex-grow:1;">
LinuxSuRen's avatar
LinuxSuRen 已提交
271
        <button id="copyMe" onclick="copyMe()" style="display: none">Copy Me</button>
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299
        <div class="documentation-copy center mw8">
          <div id="readout" class="fixed right-0 bottom-0">
          </div>
          <header class="flex-none w-100">
  
  <h1 class="lh-title mb3 mv0 pt3 primary-color-dark">Kubernetes 中的渐进式交付:蓝绿部署和金丝雀部署</h1>
</header>

<aside class="bt bw1 pt3 mt2 mid-gray b--mid-gray fn w-100">
  
    <div class="f4 fw4 lh-copy">
      本文介绍 Kubernetes 中与渐进式交付相关的三个有趣的项目:Shipper、Istio 以及 Flagger
    </div>
  

  
</aside>



<div class="prose" id="prose">



<p><a href="https://redmonk.com/jgovernor/2018/08/06/towards-progressive-delivery/">渐进式交付</a>是持续交付的下一步,
它将新版本部署到用户的一个子集,并在将其滚动到全部用户之前对其正确性和性能进行评估,
如果不匹配某些关键指标,则进行回滚。</p>

LinuxSuRen's avatar
LinuxSuRen 已提交
300
<p><img src="kubernetes.png" alt="" /></p>
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441

<p>这里有一些有趣的项目,使得渐进式交付在 Kubernetes 中变得更简单。
我将使用一个 <a href="https://github.com/carlossg/croc-hunter-jenkinsx-serverless">Jenkins X 示例项目</a>
对它们之中的三个进行讨论:Shipper、Istio 以及 Flagger。</p>

<h2 id="shipper">Shipper</h2>

<p><a href="https://github.com/bookingcom/shipper">shipper</a> 是来自 booking.com 的一个项目,
它对 Kubernetes 进行了扩展,添加了复杂的部署策略和多集群编排(<a href="https://docs.shipper-k8s.io/en/latest/index.html">文档</a>)。
它支持从一个集群到多个集群的部署,允许多区域部署。</p>

<p>Shipper 通过一个 shipperctl 命令行进行<a href="https://docs.shipper-k8s.io/en/latest/start/install.html">安装</a>
它增加不同集群的配置文件来进行管理。
请注意这个与 GKE 上下文相关的<a href="https://github.com/bookingcom/shipper/issues/61">问题</a></p>

<p>Shipper 使用 Helm 包来部署,但是它们没有随着 Helm 一起安装,它们不会在 helm list 的输出显示。
同样地,deployments 的版本必须是 apps/v1 ,
否则 shipper 将不能编辑 deployment 来添加正确的标签和副本数量。</p>

<p>使用 shipper 部署都是与从旧版本(<strong>现有版本</strong>)过渡到新版本(<strong>竞争版本</strong>)相关。
这是通过创建一个新的<a href="https://docs.shipper-k8s.io/en/latest/user/rolling-out.html#application-object">应用对象</a>实现的,
它定义了部署需要通过的多个阶段。例如下面 3 个步骤过程:
1. Staging:部署新版本到一个 pod ,没有流量
2. 50 / 50:部署新版本到 50% 的 pods,50% 的流量
3. Full on:部署新版本到全部的 pods,全部的流量</p>

<pre><code class="language-yaml">strategy:
  steps:
  - name: staging
    capacity:
      contender: 1
      incumbent: 100
    traffic:
      contender: 0
      incumbent: 100
  - name: 50/50
    capacity:
      contender: 50
      incumbent: 50
    traffic:
      contender: 50
      incumbent: 50
  - name: full on
    capacity:
      contender: 100
      incumbent: 0
    traffic:
      contender: 100
      incumbent: 0
</code></pre>

<p>如果发布的某个步骤没有将流量发送到 pods ,
则可以使用 kubectl port-forward 访问它们,如:kubectl port-forward mypod 8080:8080,
这对于在用户看到新版本之前进行测试非常有用。</p>

<p>Shipper 支持多集群的概念,但是以相同的方式对待所有集群,仅使用区域并通过 capabilities (配置在集群对象中)进行筛选,
所有对一个应用对象来说,这里没有一个 dev, staging, prod 集群的选项。
但是我们可以有两个应用对象:
- myapp-staging 部署到 &ldquo;staging&rdquo; 区域
- myapp 部署到其它区域</p>

<p>在 GKE 中,你可以轻松地配置<a href="https://cloud.google.com/kubernetes-engine/docs/how-to/multi-cluster-ingress">多集群 ingress </a>
该入口将公开在多个集群中运行的服务,并从离你所在位置最近的集群提供服务。</p>

<h2 id="局限性">局限性</h2>

<p>Shipper 中的主要的局限性有:
- Chart 限制:Chart 必须有一个部署对象。
Deployment 的名称必须使用 {{.Release.Name}} 模板化。
Deployment 对象应该有 apiVersion:apps/v1 。
- 基于 Pod 的流量切换:这里没有细粒度的流量路由,例如:发送 1% 的流量到新版本,它基于正在运行的 Pod 数量。
- 如果 Shipper 不工作了,新的 Pod 将获取不到流量。</p>

<h2 id="istio">Istio</h2>

<p><a href="https://istio.io/">Istio</a> 不是<a href="https://istio.io/docs/concepts/what-is-istio/">一个部署工具,而是一个服务网格</a>
然而,它很令人感兴趣,因为它已经变得非常流行,并且允许流量管理,例如,将一定比例的流量发送到不同的服务和其他高级网络。</p>

<p>在 GKE 中,只需在集群配置中选中复选框即可启用 Istio 。
在其它集群中,<a href="https://istio.io/docs/setup/kubernetes/quick-start/">可以通过 Helm 手动安装</a></p>

<p>有了 Istio ,我们可以创建一个网关,通过 Ingress 网关处理所有外部流量,并创建<a href="https://istio.io/docs/reference/config/istio.networking.v1alpha3/#VirtualService">虚拟服务</a>来管理到我们服务的路由。
为此,只需找到 <a href="https://istio.io/docs/tasks/traffic-management/ingress/#determining-the-ingress-ip-and-ports">ingress 网关的 ip 地址</a>并为其配置通配符 DNS 。
然后创建一个网关,通过 Ingress 网关路由所有外部流量。</p>

<pre><code class="language-yaml">apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
 name: public-gateway
 namespace: istio-system
spec:
 selector:
   istio: ingressgateway
 servers:
 - port:
     number: 80
     name: http
     protocol: HTTP
   hosts:
   - &quot;*&quot;
</code></pre>

<p>Isito 不管理应用的生命周期,只管理网络。
我们可以创建一个虚拟服务,为所有进入 ingress 网关的请求
向 pull request 或 master 分支中部署的服务发送 1% 的流量。</p>

<pre><code class="language-yaml">apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
 name: croc-hunter-jenkinsx
 namespace: jx-production
spec:
 gateways:
 - public-gateway.istio-system.svc.cluster.local
 - mesh
 hosts:
 - croc-hunter.istio.example.org
 http:
 - route:
   - destination:
       host: croc-hunter-jenkinsx.jx-production.svc.cluster.local
       port:
         number: 80
     weight: 99
   - destination:
       host: croc-hunter-jenkinsx.jx-staging.svc.cluster.local
       port:
         number: 80
     weight: 1
</code></pre>

<h2 id="flagger">Flagger</h2>

<p><a href="https://github.com/stefanprodan/flagger">Flagger</a> 是一个由 Weaveworks 赞助的使用了 Istio 的项目,
该项目使用 Prometheus 的指标进行自动化金丝雀发布和回滚。
它超越了 Isito 提供了基于指标的自动化渐进式发布和回滚。</p>

<p>Flager 需要将 <a href="https://docs.flagger.app/install/install-istio">Istio与 Prometheus、Servicegraph</a> 和某些系统的配置一起安装,
另外还要<a href="https://docs.flagger.app/install/install-flagger">安装 Flager 控制器</a>本身。
它也提供了一个 <a href="https://docs.flagger.app/install/install-grafana">Grfana 面板</a>来监控部署进度。</p>

LinuxSuRen's avatar
LinuxSuRen 已提交
442
<p><img src="grafana-canary-analysis.png" alt="grafana-canary-analysis.png" /></p>
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562

<p><a href="https://docs.flagger.app/usage/progressive-delivery">部署 rollout </a>通过 Canary 对象定义,
它会生成主要的和金丝雀 Deployment 对象。
编辑 Deployment 时,例如要使用新的镜像版本,
 Flagger 控制器将负载从 0% 切换到 50% ,每分钟增加 10% ,然后它将切换到新的 deployment
 或者如果响应错误和请求持续时间等指标失败则进行回滚。</p>

<h2 id="比较">比较</h2>

<p>此表总结了 Shipper 和 Flagger 在几个渐进式交付特性方面的优势和劣势。</p>

<table>
<thead>
<tr>
<th></th>
<th>Shipper</th>
<th>Flagger</th>
</tr>
</thead>

<tbody>
<tr>
<td>流量路由</td>
<td>k8s 原生的按 Pods 的百分比进行均衡</td>
<td>基于 Istio 的高级流量路由(请求的百分比)</td>
</tr>

<tr>
<td>部署进度 UI</td>
<td></td>
<td>Grafana 面板</td>
</tr>

<tr>
<td>支持的 Deployments</td>
<td>具有较强<a href="https://docs.shipper-k8s.io/en/latest/limitations.html">限制</a>的 Helm charts</td>
<td>任何 Deployment</td>
</tr>

<tr>
<td>多集群部署</td>
<td></td>
<td></td>
</tr>

<tr>
<td>在不同命名空间(如 jx-staging 和 jx-production )的金丝雀部署或蓝绿部署</td>
<td></td>
<td>否,但是要做到它可以手动编辑<a href="https://istio.io/docs/reference/config/istio.networking.v1alpha3/">虚拟服务</a></td>
</tr>

<tr>
<td>在不同集群的金丝雀部署或蓝绿部署</td>
<td>是,但是有点极客,使用一个新应用并将它链接到新区域</td>
<td>也许可以使用 <a href="https://istio.io/docs/setup/kubernetes/multicluster-install/">Istio 多集群</a>?</td>
</tr>

<tr>
<td>自动部署</td>
<td>否,操作者必须手动完成这些步骤</td>
<td>是,每分钟增加 10% 的流量,可配置的</td>
</tr>

<tr>
<td>自动回滚</td>
<td>否,操作者必须发现错误并手动完成这些步骤</td>
<td>是,基于 Prometheus 指标</td>
</tr>

<tr>
<td>必需品</td>
<td></td>
<td>Istio,Prometheus</td>
</tr>

<tr>
<td>告警</td>
<td></td>
<td><a href="https://docs.flagger.app/usage/alerting">Slack</a></td>
</tr>
</tbody>
</table>

<p>综上所述,我看到了 Shipper 在多集群管理和简单性方面的价值,它不需要 Kubernetes 以外的任何东西,但是它有一些严重的局限性。</p>

<p>Flager 确实在自动部署和回滚以及对流量进行细粒度控制的过程中付出了额外的努力,它以更高的复杂性成本提供了所需的所有额外服务( Isito、Prometheus )。</p>

<p>这里可以查看 <a href="https://github.com/carlossg/croc-hunter-jenkinsx-serverless/tree/master/shipper">Shipper</a><a href="https://github.com/carlossg/croc-hunter-jenkinsx-serverless/tree/master/istio">Isito</a><a href="https://github.com/carlossg/croc-hunter-jenkinsx-serverless/tree/master/flagger">Flager</a> 的示例代码。</p>

</div>


<aside class="bt bw1 pt3 mt2 mid-gray b--mid-gray fn w-100">

</aside>




<script src="https://utteranc.es/client.js"
        repo="jenkins-zh/jenkins-zh.github.io"
        issue-term="pathname"
        theme="github-light"
        crossorigin="linuxsuren"
        async>
</script>


          

        </div>
      </div>
      

    </div>
  </article>

  <div class="w-100 bg-light-gray">
    <div class="mw7 pa4 center nested-lh-copy lh-copy">
      <h6 class="f4 dark-gray mb2">
LinuxSuRen's avatar
LinuxSuRen 已提交
563
  <a href="https://jenkins-zh.cn/wechat/articles/2019/04/2019-04-24-progressive-delivery-in-kubernetes-blue-green-and-canary-deployments/" class="hide-child link primary-color">
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
564 565 566
  <span class="nl3 child"><svg class="grow" fill="" height="14px" viewBox="0 0 24 24" width="14px" xmlns="http://www.w3.org/2000/svg"><path d="M0 0h24v24H0z" fill="none"/><path d="M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z"/></svg>
</span>
    “Kubernetes 中的渐进式交付:蓝绿部署和金丝雀部署”
LinuxSuRen's avatar
LinuxSuRen 已提交
567
  </a> 更新于:April 24, 2019
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626
</h6>

      <a href="https://github.com/jenkins-zh/jenkins-zh/edit/master/content/wechat/articles/2019/04/2019-04-24-progressive-delivery-in-kubernetes-blue-green-and-canary-deployments.md" class="
f6 ph3 pv1 br2 dib  tc ttu mv3 bg-primary-color white hover-bg-green link
" target="_blank">改善此页</a>

      

  
  
  

  <div class="nested-lh-copy">
    <ul class="list dib nested-links ml0 pl0">
      
        <li class="db mb2 b">
          Tags:
        </li>
        
          <li class="db dib-l mr3">
            <a class="tag" href="/tags/progressive-delivery">
              progressive delivery
            </a>
          </li>
        
          <li class="db dib-l mr3">
            <a class="tag" href="/tags/kubernetes">
              kubernetes
            </a>
          </li>
        
          <li class="db dib-l mr3">
            <a class="tag" href="/tags/k8s">
              k8s
            </a>
          </li>
        
          <li class="db dib-l mr3">
            <a class="tag" href="/tags/shipper">
              shipper
            </a>
          </li>
        
          <li class="db dib-l mr3">
            <a class="tag" href="/tags/istio">
              istio
            </a>
          </li>
        
          <li class="db dib-l mr3">
            <a class="tag" href="/tags/flagger">
              flagger
            </a>
          </li>
        
              
      
        
        
LinuxSuRen's avatar
LinuxSuRen 已提交
627 628 629 630 631 632 633 634 635 636 637 638 639
          <li class="db dib-l mb2 mr3">
            <a href="/wechat/articles/2019/04/2019-04-26-progressive-delivery-with-jenkins-x/" class="link">
              使用 Jenkins X 渐进式交付
            </a>
          </li>
        
      
        
          <li class="db b mt4 mb2 mr2">
            Related entries:
          </li>
        
        
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
640 641 642 643 644 645 646 647 648
      
    </ul>
  </div>


    </div>
  </div>
</main>

LinuxSuRen's avatar
LinuxSuRen 已提交
649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733 734
<script type="text/javascript">
if(window.location.search == "?copy=true") {
  showCopyBut();
}

function copyMe(){
  var tempElements = [];

  var logoZone = document.createElement("div");
  logoZone.innerHTML = "<a href=\"https://jenkins-zh.cn\"><img width=\"520\" src=\"https://jenkins-zh.cn/wechat/images/grey-backgroud-jenkins-slogan.jpg\"/></a>";
  document.getElementById('prose').append(logoZone);
  tempElements.push(logoZone);
  var doc = document.getElementsByClassName('documentation-copy')[0];

  var articleHeader = document.createElement("div");
  tempElements.push(articleHeader);
  articleHeader.innerHTML = "本文首发于:<a href=\"https:\/\/jenkins-zh.cn\/wechat\/articles\/2019\/04\/2019-04-24-progressive-delivery-in-kubernetes-blue-green-and-canary-deployments\/\">Jenkins 中文社区</a>";

  
  var rangeToSelect = document.createRange();
  rangeToSelect.selectNodeContents(doc);

  var data = window.getSelection();
  data.addRange(rangeToSelect);

  tempElements.push(appendArticleFooter(data.getRangeAt(0)));
  data.getRangeAt(0).insertNode(articleHeader);
  document.execCommand("copy", true, null);

  
  for(var i in tempElements) {
    tempElements[i].remove();
  }
  clearSelection();

  hideCopyBut();
}

function clearSelection(){
  window.getSelection().empty();
}

function showCopyBut() {
  document.getElementById('copyMe').style="";
}

function hideCopyBut() {
  document.getElementById('copyMe').style="display:none";
}

function appendArticleFooter(range) {
  var articleFooter = createArticleFooter();
  range.insertNode(articleFooter);
  return articleFooter;
}

function createArticleFooter() {
  var articleFooter = document.createElement("div");
  var authors = document.getElementsByClassName("author");
  var originalAuthors = document.getElementsByClassName("originalAuthor");
  var originalLinks = document.getElementsByClassName("originalLink");
  var articleFooterHtml = "";
  var isTranslated = false;
  if(originalAuthors.length > 0){
    articleFooterHtml += "<div>";
    if(originalLinks.length > 0){
      articleFooterHtml += "<a href=" + originalLinks[0].innerText + ">原文链接</a>&nbsp;&nbsp;&nbsp;&nbsp;";
    }
    articleFooterHtml += "作者:" + originalAuthors[0].innerText;
    articleFooterHtml += "</div>";
    isTranslated = true;
  }
  if(authors.length > 0){
    articleFooterHtml += "<div>";
    if(isTranslated) {
      articleFooterHtml += "译者:" + authors[0].innerText;
    } else {
      articleFooterHtml += "作者:" + authors[0].innerText;
    }
    articleFooterHtml += "</div>";
  }
  articleFooter.innerHTML = articleFooterHtml;
  return articleFooter;
}
</script>

LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759
    </main>

    <footer class="bg-primary-color-dark ph4-ns pt4 relative w-100" role="contentinfo">
  <div class="center flex-ns flex-wrap justify-between mw9 w-90">
    <div class="pb3 pt4 w-100 w-50-ns">

      <div class="b f3  light-gray mb3 nested-links tc">
<a href="https://github.com/jenkins-zh/jenkins-zh/graphs/contributors" target="_blank" class="link">Jenkins 社区贡献者</a> 维护<br/>
      </div>

      <ul class="center f6 list ma0 mv3 pa0 tc" style="display:none"><li class="dib mr3"><a href="https://github.com/jenkins-zh/jenkins-zh/issues/new" class="dim link light-gray pv2">File an Issue</a></li></ul>

      <ul class="center f6 list ma0 mv4 pa0 tc">
        <li class="dib mr3">
          <a href="https://twitter.com/suren69811254" target="_blank" class="dim link light-gray pv2">@suren69811254</a>
        </li>
        <li class="dib mr3">
          <a href="https://www.youtube.com/channel/UC63xz3pq26BBgwB3cnwCoqQ" target="_blank" class="dim link light-gray pv2">YouTube</a>
        </li>
      </ul>

      
    </div>

    <div>
LinuxSuRen's avatar
LinuxSuRen 已提交
760 761 762
        <div style="color: #ffffff; display: inline-block; text-align: center; margin-right: 5px; margin-left: 5px;">优酷视频
          <div>
            <a href="https://i.youku.com/jenkinszh" target="_blank">
LinuxSuRen's avatar
LinuxSuRen 已提交
763
              <img src="/images/youku-qrcode.png" with="100" height="100">
LinuxSuRen's avatar
LinuxSuRen 已提交
764 765 766 767 768 769 770 771 772 773 774
            </a>
          </div>
        </div>
        <div style="color: #ffffff; display: inline-block; text-align: center; margin-right: 5px; margin-left: 5px;">微信公众号
          <div>
            <a href="https://mp.weixin.qq.com/s/vifdduC3kRGSIMpyL03yVA" target="_blank">
              <img src="https://jenkins.io/images/jenkins-wechat.png" with="100" height="100">
            </a>
          </div>
        </div>
      </div>
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790

  </div>

  <div class="f7 gray mb5 mb0-ns ph3 w-100" style="display:none"> 
    <p class="dib mr4">Jenkins&reg; is a registered trademark of <a href="https://www.spi-inc.org/" class="link">Software in the Public Interest, Inc.</a></p>
    <p class="dib">Copyright 2018–2019 the original authors.</p>
  </div>


  <div class="bg-primary-color-dark bottom-0 left-0 right-0 dn-l fixed pb3 ph3 w-100"><div  class="globalmenu mobilemenu pb3 dn">
    

<ul class="list hidden dib ph0 ma0 scrolling-touch tc">
  
    <li  class="tl dib ma0 hover-bg-black w-100">
        <a href="/wechat/" class="ttu f6 link primary-color-light overflow hover-white db brand-font  ma0 w-100 pv3 ph4">
LinuxSuRen's avatar
LinuxSuRen 已提交
791
          博客
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
792 793 794
        </a>
    </li>
  
LinuxSuRen's avatar
LinuxSuRen 已提交
795 796 797 798 799 800
    <li  class="tl dib ma0 hover-bg-black w-100">
        <a href="/tutorial/" class="ttu f6 link primary-color-light overflow hover-white db brand-font  ma0 w-100 pv3 ph4">
          教程
        </a>
    </li>
  
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
801 802 803 804 805 806 807
    <li  class="tl dib ma0 hover-bg-black w-100">
        <a href="/event/" class="ttu f6 link primary-color-light overflow hover-white db brand-font  ma0 w-100 pv3 ph4">
          活动
        </a>
    </li>
  
    <li  class="tl dib ma0 hover-bg-black w-100">
LinuxSuRen's avatar
LinuxSuRen 已提交
808 809 810 811 812 813
        <a href="/partner/" class="ttu f6 link primary-color-light overflow hover-white db brand-font  ma0 w-100 pv3 ph4">
          合作伙伴
        </a>
    </li>
  
    <li  class="tl dib ma0 hover-bg-black w-100">
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849
        <a href="/about/" class="ttu f6 link primary-color-light overflow hover-white db brand-font  ma0 w-100 pv3 ph4">
          关于我们
        </a>
    </li>
  
    <li  class="tl dib ma0 hover-bg-black w-100">
        <a href="http://jenkins.io/zh" class="ttu f6 link primary-color-light overflow hover-white db brand-font  ma0 w-100 pv3 ph4">
          Jenkins 官网
        </a>
    </li>
  
</ul>

</div>
<div  class="docsmenu mobilemenu pb3 dn">
    

<ul class="list dib ph0 ma0 scrolling-touch tc">
  
</ul>

</div>

<div class="flex dn-l justify-between">
  <button class="js-toggle flex-auto dib dn-l f6 tc db mt4-ns ph3 pv2 link mr2 white bg-primary-color-dark hover-bg-primary-color ba b--white-40 w-auto" data-target=".globalmenu">Menu</button>

  <button class="js-toggle flex-auto dib dn-l f6 tc db mt4-ns ph3 pv2 link white bg-primary-color-dark hover-bg-primary-color ba b--white-40 w-auto" data-target=".docsmenu">Docs Menu</button>
</div>
</div>

</footer>

    
<link href="/dist/auto-complete.css" rel="stylesheet">
<script type="text/javascript">
    
LinuxSuRen's avatar
LinuxSuRen 已提交
850
        var baseurl = "https:\/\/jenkins-zh.cn\/";
LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
851 852 853 854 855 856 857 858
    
</script>
<script src="/dist/lunr.js"></script>
<script src="/dist/autocomplete.js"></script>
<script src="/dist/jquery-3.2.1.min.js"></script>
<script src="/dist/search.js"></script>

<script async defer src="https://buttons.github.io/buttons.js"></script>
LinuxSuRen's avatar
LinuxSuRen 已提交
859 860 861 862 863 864 865 866 867
<script>
    var _hmt = _hmt || [];
    (function() {
      var hm = document.createElement("script");
      hm.src = "https://hm.baidu.com/hm.js?6db234f713318730f0e5f6a95bdd8d47";
      var s = document.getElementsByTagName("script")[0]; 
      s.parentNode.insertBefore(hm, s);
    })();
</script>
LinuxSuRen's avatar
LinuxSuRen 已提交
868 869 870 871 872 873 874
<script>
(function(){
var src = (document.location.protocol == "http:") ? "http://js.passport.qihucdn.com/11.0.1.js?6276dcef5c15f276644151772390c1f9":"https://jspassport.ssl.qhimg.com/11.0.1.js?6276dcef5c15f276644151772390c1f9";
document.write('<script src="' + src + '" id="sozz"><\/script>');
})();
</script>

LinuxSuRen's avatar
deploy  
LinuxSuRen 已提交
875 876 877

  </body>
</html>