ceil(sum(CurrentPodsCPUUtilization) / Target) � ��Kubernetes�HPA�Horizontal Pod Autoscaling���� ����������� CurrentPodsCPUUtilization�����pod�CPU���� Target������CPU����� ��Target ���50%�����CPU��������60%� /0.5�=12������12-10=2 ��� Pod 1 Pod 2 Pod N …� Pod 1 Scale RC/Deployment� 0oah容器金丝雀发布P发布流程 0oah容器金丝雀发布P灰度发布 Service- center client Proxy� service� pod� ���� ��� weight�100� weight�100� weight�100� service� pod� service� pod� Service- center client Proxy� service� �pod� ���� ��� weight�10� weight�100� service� pod� service� pod� weight�100� weight�100� Service- center

ceil(sum(CurrentPodsCPUUtilization) / Target) ! ��Kubernetes�HPA�Horizontal Pod Autoscaling����� ���������� CurrentPodsCPUUtilization�����pod�CPU���� Target������CPU����� ��Target ���50%�����CPU��������60%�� 10�������CurrentPodsCPUUtilization=60%*10=6�� TargetNumOfPods=ceil�6/0.5�=12������12-10=2��� Pod 1! Pod 2! Pod N! … Pod 1! Scale! RC/Deployment 86 Janus���� VGW! NGINX! VGW��! JANUS! APP! VGW! 110 ���Service Mesh��� Proxy! pod ! pod ! ���1 • ���������pod • �������1�osp-proxy • ��pod��1���Docker�� • osp-proxy��daemonset������� ����pod��������proxy��� ����������� Proxy

Handler chain Invocatio n Huawei Confidential Quick Deployment: Sidecar-injector Principles 8 Pod A Mesher A Sidecar- injector Kubernetes AdmissionWebhook Prerequisites: • Kubernetes 1.9 or later configmap, and mutatingwebhookconfigurations access permissions are available. Service Configurations: Pod Spec comment: sidecar.mesher.io/inject: yes Namespace label: kubectl label myns sidecar-injector=enabled

different ecosystems. 13 Kubernetes Master 14 Deployment — Community Solution Kubernetes Node Pod Service Mesher kubectl Sidecar Injector Create Kube API server Deploy Call 15 Deployment — management System maintenance HUAWEI CLOUD storage 17 18 Atlas UPredict Service Region Pod Mesher Concrete service instance (OCR 1.0.0) UPredict MetaDB Mesher Concrete service instance

不接入Mixer服务，而是直接接入不同生态系统 13 Huawei Confidential Kubernetes Master 14 部署-社区方案 Kubernetes Node Pod Service Mesher kubectl Side car Injector create KubeAPI server Deploy call Huawei Confidential 高级管理 系统维护 华为云存储 Huawei Confidential 17 Huawei Confidential 18 Atlas UPredict Service Region Pod Mesher Concrete service instance (OCR 1.0.0) UPredict MetaDB Mesher Concrete service instance

B ����� ����� request Handler chain invocation Huawei Confidential �P���sidecar-injector�� 8 pod A mesher A sidecar-injector �������������������������� ����� • ���,��,9,��� �������9,� • ��9�9��

server Envoy Http server mesher wrk Http server mesher 商用案例 Atlas UPredict Service Region Pod Mesher Concrete service instance (OCR 1.0.0) UPredict MetaDB Mesher Concrete service instance

以容器作为错误边界，使服务能够正确推出 • 独⽴立回滚与更新 第⼆二代：HSA SideCar • 2016年，基于Java 微服务 框架开发 • 提供SOAP协议转换 • 与微服务部署在⼀一个Pod • 占⽤用资源很⾼高 Mesher • Service Mesh的⼀一种实现 • 基于⾃自研的Go语⾔言微服务框架（即将开源）开发 • 使⽤用CSE注册中⼼心与配置中⼼心 • 以