资源 C. ⽀支持原⽣生istio特性，如负载均衡，限流，熔断，L7路路由控制等 stateless ratelimit monitoring loadBalancer L7 traffic outlierDetection service deployment gateway virtualservice destinationrule istio ingress operator Exporter AZ 2 (Local File) Alert Manager gossip Kubernetes 互相监控 AZ 1 Kube-State-Metrics Kubernetes APIServer cAdvisor Node-Exporter KUN-Agent Alert Manager Prometheus (Local File) Monitor

为什么要做多云多K8S多环境 ‣ 标准的dev test pre prod环境 ‣ 存在的问题 • 标准的四套环境 DEV TEST PRE PROD • 标准的CICD流程 Developer LOCAL DEV Jenkins 构建 Git Maven Docker kubectl Jenkins pipeline 开课吧CI/CD架构 GitLab Maven Repository(nexus) 注册 Redis ES Mysql • 多云多K8S多环境的挑战 挑战 多云发布一致性 1 跨云数据同步保证 2 多环境一套模板适配性 3 多K8S的监控 4 • 基于Istio的智能路由 Istio层 IstioIngressGateway v5897 v5897 Gateway VirtualService DestinationRule Service Kubernetes层

Migrate Move up, out or both? Google is a recognized leader in Open Source Cloud Kubernetes Istio Apache Beam TensorFlow Service Communication Management Container Orchestration Data Processing services on GCP such as Cloud Build, Container Registry, Audit Logging, and more. ● Integration with Istio, Knative, Marketplace Solutions ALPHA IN FALL Run your cluster the way Google does ● The same tools Node Control Plane Node GKE On-Prem Node Control Plane Node Hybrid Use Cases Legacy Software Local Execution Edge / IoT Cloud bursting Ecommerce site Catalog, ERP Warehouse Factory Branch Augmented

的节奏进行发布 YAML 文件 YAML 文件 HorizontalPodAutoscaler CustomMetricsServer Prometheus Service Monitor Istio Virtual Service Deployment Ingress Service YAML 文件 代码、应用、CICD 流水线 容器 Pod Controller 调度 Node virtualservices.networking.istio.io annotations: alias: traffic spec: appliesTo: - apps.k8s.io conflictsWith: - services.k8s.io definition: virtualservices.networking.istio.io 应用管理引擎 能力注册 $ kubectl virtualservices.networking.istio.io apps.k8s.io services.k8s.io route route.core.oam.dev apps.k8s.io tls tls.core.oam.dev apps.k8s.io Workload 与 Trait 注册与发现机制 # 示例：将 Istio VirtualService 注册为平台 的流量管理能力

DevOps 工作流 多云编排 基于 Karmada 构建多云实例/负载/策略管理 微服务引擎 基于 Nacos/Sentinel/Eureka 等微服务治理中心和网关 服务网格 基于 Istio 定制的增强版网格化治理 版权 © 2023 DaoCloud 第 9 页 中间件 RMQ, Kafka, ES, Kafka, MinIO, MySQL, Redis, PG 管控、缓存等插件，支持一键开启/ 停用插件。 ➢ 监控告警：微服务网关在部署时会自动配置监控、告警等功能。每个网关都自带完善 的资源监控和网关业务监控。 服务网格 服务网格是基于 Istio 开源技术构建的面向云原生应用的下一代服务网格。 服务网格是一种具备高性能、高易用性的全托管服务网格产品，通过提供完整 的非侵入式的微服务治理方案，能够统一治理多云多集群的复杂环境， 以基础 控、以及传统 微服务（SpringCloud、Dubbo）接入。 版权 © 2023 DaoCloud 第 14 页 DCE 5.0 的服务网格兼容社区原生 Istio 开源服务网格，提供原生 Istio 接入管 理能力。在较高的层次上，服务网格有助于降低服务治理的复杂性，减轻开发 运维团队的压力。 服务网格作为 DCE 5.0 产品的体系一员，无缝对接容器管理平台，可以为用户

发布 YAML 文件 YAML 文件 HorizontalPodAutoscaler CustomMetricsServer Prometheus Service Monitor Istio Virtual Service Deployment Ingress Service YAML 文件 代码、应用、CICD 流水线 容器 Pod Controller 调度 Node

⽀支持IoT设备通过Device twin 和 MQTT 协议与边缘节点 通信。� Release V2.0+ Function List：（TBD）� ➔ 使⽤用 KubeEdge 和 Istio 构建服务⽹网格。� ➔ 提⾼高 Kubedge 基础设施的性能和可靠性。� ➔ 在边缘端提供函数即服务（Function as a Service， FaaS）。� ➔ 在边缘端节点⽀支持更更多类型的设备协议，如

install -y oracle-java8-installer maven ADD . /usr/local/petclinic RUN cd /usr/local/petclinic && mvn install CMD ["/usr/bin/java", "-cp", "/usr/local/petclinic/target/petclinic-1.0.jar", "petclinic.WebServer"] running the container Java Development on Kubernetes Skaffold + Jib Continuous development for Kubernetes Skaffold is a command line tool that facilitates continuous development for Kubernetes applications applications. You can iterate on your application source code locally then deploy to local or remote Kubernetes clusters. Skaffold handles the workflow for building, pushing and deploying your application

Hypervisor VMs Docker Containers User Cases 9 •Ready-to-go development •Self-service portal Developer Sandbox • New application development • 12-factor apps, PCF Cloud Native •Simplify app maintenance IP for external access • Interfaces with local iptables • Load-balance interface for Pods • Creates virtual IP for external access • Interfaces with local iptables The Kubernetes Runtime Components

About us Thomas Hector Head of IT Operations Key Qualifications ● 12+ years’ experience with development and operations ● Automating everything ● Been handling Kubernetes clusters in production for for 2 years Jan-Erik Revsbech CTO Key Qualifications ● 20+ year of experience in web-development & operation/hosting ● OpenSource advocate ● Extensive hand-on experience with Kubernetes and Containerization and orchestration Containerized development and production environment Cloud orchestration with Kubernetes Hosted on AWS Deployment, CI and CD Local development Gitlab runner