工单系统量计费 虚拟机服务（vm-service） 虚机自服务及运营 容器云集群服务（container-service） 容器云集群服务 运营分析（operation-analytics） IT 容量管理、趋势分析、健康分析、优化 大屏（screen-display） 可视化大屏，实时展示云管平台各项关键数据 公有云网络管理（network-service） 公有云网络管理 杭州飞致云信息科技有限公司 云管平台是可扩展的，开发人员基于扩展模块的标准规范进行二次开 发，来满足企业的个性化定制需求。 以下扩展模块是 CloudExplorer 云管平台已经有的扩展模块： 模块名称 描述 对象存储服务（oss-service） 对象存储服务，支持常用私有云和公有云对象存储 漏洞扫描（scan） 绿盟漏洞扫描对接和漏洞分析 堡垒机（jumpserver） 用于 Jumpserver 堡垒机对接 AWS 费用管理（aws-billing-data） 费用管理（aws-billing-data） AWS 费用可视化分析、优化及分摊 物理机管理（physical-machine） 物理机自动发现及自助申请 负载均衡（loadbalancer-service） 负载均衡自服务及资源管理 数据库服务（paas-service） 数据库自服务、资源池管理及运营 2.1.4 模块镜像 杭州飞致云信息科技有限公司 7 2.2 组件间关系 CloudExplorer 的每个模块都

system. THE GITOPS GUIDE TO BUILDING & MANAGING INTERNAL PLATFORMS 3 weave.works ▼ Self-service developer experience (DX) In the past, the only way a developer could get access to servers, data team delivers self-service APIs to developers. This team builds and maintains the platform that is consumed by development teams. The platform they build is a collection of self-service APIs, tools, services are internal customers of the platform team. In order to properly fulfill its role as an internal service provider, the platform team must take a strategic approach to resource management. “The challenge

features, failure rate of code changes, frequency of deployment and the time it takes to restore service following an outage. In this white paper, we’ll explain the best way to achieve the results achieved performing well reported an average lead time of between one and six months. 3. Time to restore service This is defined by DORA as the average time from the detection of a user-impacting incident to one week Between one week and one month Between one month and six months Time to restore service Less than one hour Less than one day Less than one day Between one week and one month Change

IstioCon 2021 IstioCon 2021 is the inaugural community conference for the industry's most popular service mesh. IstioCon is a community-led event, showcasing the lessons learned from running Istio in production London ● Have 2 cats @rytswd #IstioCon Briefly about UPSIDER ● Startup providing B2B payment service ● Uses Istio extensively in production ● Headquarter in Tokyo, Japan ● Remote team around the world Gateway Istio Egress Gateway @rytswd DestinationRule ServiceEntry Gateway VirtualService Some service outside of cluster Version 1 Version 2 #IstioCon Brush up on Istio resources (cont’d) Target

kustomization.yaml └── services └── service-a ├── base │ ├── config │ │ ├── 300-deployment.yaml │ │ ├── 310-service.yaml │ │ └── kustomization.yaml dev-deployment.yaml ├── dev-service.yaml └── kustomization.yaml ├── base │ ├── deployment.yaml │ ├── kustomization.yaml │ └── service.yaml └── overlays ├── development Kustomize └── apps └── myapp ├── base │ ├── kustomization.yaml │ ├── service.yaml │ ├── route.yaml │ └── deployment.yaml │ └── overlays

delivery. It allows the teams that wrote, delivered, and supported the software to work together in service of that goal. DevOps isn’t necessarily a department, but rather a culture in your organization. scribed in a 2021 blog post [1.7], is very interesting. Back in 2017, Weaveworks was a Software-as-a-Service (SaaS) company that hosted applications on their platform using Kubernetes as the infrastructure Dynatrace, Keptn [2.11] was designed to provide visibility into your envi- ronments. It aims to provide Service Level Objectives (SLOs) throughout the multi- stage deployment–for example, response time must not

Machine，指通过软件模拟的具有完整硬件系统功能的、运行在一 个完全隔离环境中的完整计算机系统。在实体计算机中能够完成的工作在 虚拟机中都能够实现。 云磁盘 云硬盘（Elastic Volume Service）是一种为 ECS 等计算服务提供持久性 块存储的服务，通过数据冗余和缓存加速等多项技术，提供高可用性和持 久性，以及稳定的低时延性能。您可以对云硬盘做格式化、创建文件系统 等操作，并对数据做持久化存储 的计算机之间才能“直接”互通，不同网络号的计算机要通过网关 （Gateway）才能互通。但这样的划分在某些情况下显得并不十分灵活。 为此 IP 网络还允许划分成更小的网络，称为子网（Subnet）。 ITSM 全称 IT Service and Management，是诸多大中型企业采用的 IT 变更请 求管理工具，用于 IT 部门面向应用业务开发测试、业务部门以及 IT 部门内 部成员提交 IT 服务请求，流程管理、流程审批，派发，沟通反馈操作结果 （4）配置域名解析（如果 OpenStack 访问使用内网域名的话）。 图 3-5 配置云管服务器 hosts 文件 docker-compose.yml 文件（management-center 和 vm-service 配置部分）： management-center: image: xxx.xxx.xxx.xxx/management-center container_name: management-center

guarantees to track and manage changes across the entire cluster. P.7 Run Weaveworks on Amazon Web Service (AWS) Weavework’s invented and honed GitOps to accelerate and automate the installation of production-grade production-grade Kubernetes. The Weave Kubernetes Platform (WKP) works with Amazon Elastic Kubernetes Service (Amazon EKS). WKP includes enterprise-grade features that extend the richness of GitOps using a their add-ons and components through a simple Git clone. Amazon EKS is a fully managed Kubernetes service used by Fortune 100 companies to run their most sensitive and mission critical applications because

• https://github.com/microservices-demo/front-end - This is the front-end service of the Sock Shop application. You will update the color the buttons in this example. • https://github View the Sock Shop in Your Browser Find the port that the cluster allocated for the front-end service by running: kubectl describe svc front-end -n sock-shop Launch the Sock Shop in your browser by for developers to build and operate containerized applications. The Weave Cloud operations-as-a-service platform provides a continuous delivery pipeline for building and operating applications, letting

container orchestration capabilities like: • Automated rollouts and rollbacks of deployments • Service discovery and load balancing capabilities − As Kubernetes gives its own IP address to Pods and translates into a faster turnaround for new features and functionality for the customer. SELF-SERVICE With the existing CI/CD approach, the development team remains dependent on the operations team empowers teams to become more efficient and strategic. It enables development teams to be more self-service in nature as they would be less dependent on platform and operations teams to deploy and handle