k8s灰度更新_基于ambassador实现K8S灰度发布

为什么需要灰度发布

灰度发布(又名金丝雀发布)是指在黑与白之间，能够平滑过渡的一种发布方式。在其上可以进行A/B testing，即让一部分用户继续用产品特性A，一部分用户开始用产品特性B，如果用户对B没有什么反对意见，那么逐步扩大范围，把所有用户都迁移到B上面来。

总结下一些应用场景：

微服务依赖很多组件，需要在实际环境验证

部署新功能有风险，然后可以通过导流一小部分用户实际使用，来减小风险

让特定的用户访问新版本，比如部署一个版本，只让测试使用

A/B Testing，部署两个版本，进行版本对比，比如验证两个推荐服务的推荐效果

灰度发布可以保证整体系统的稳定，在初始灰度的时候就可以发现、调整问题，以保证其影响度。

ambassador介绍

ambassador[æmˈbæsədər]，是Kubernetes微服务 API gateway,基于Envoy Proxy。

Open Source Kubernetes-Native API Gateway built on the Envoy Proxy

官方地址：

部署ambassador

按官网提示部署ambassador

cat <

---

apiVersion: v1

kind: Service

metadata:

labels:

service: ambassador-admin

name: ambassador-admin

spec:

type: NodePort

ports:

- name: ambassador-admin

port: 8877

targetPort: 8877

selector:

service: ambassador

---

apiVersion: rbac.authorization.k8s.io/v1beta1

kind: ClusterRole

metadata:

name: ambassador

rules:

- apiGroups: [""]

resources: [ "endpoints", "namespaces", "secrets", "services" ]

verbs: ["get", "list", "watch"]

- apiGroups: [ "getambassador.io" ]

resources: [ "*" ]

verbs: ["get", "list", "watch"]

- apiGroups: [ "apiextensions.k8s.io" ]

resources: [ "customresourcedefinitions" ]

verbs: ["get", "list", "watch"]

- apiGroups: [ "networking.internal.knative.dev" ]

resources: [ "clusteringresses", "ingresses" ]

verbs: ["get", "list", "watch"]

- apiGroups: [ "networking.internal.knative.dev" ]

resources: [ "ingresses/status", "clusteringresses/status" ]

verbs: ["update"]

- apiGroups: [ "extensions" ]

resources: [ "ingresses" ]

verbs: ["get", "list", "watch"]

- apiGroups: [ "extensions" ]

resources: [ "ingresses/status" ]

verbs: ["update"]

---

apiVersion: v1

kind: ServiceAccount

metadata:

name: ambassador

---

apiVersion: rbac.authorization.k8s.io/v1beta1

kind: ClusterRoleBinding

metadata:

name: ambassador<