k8s 以sidecar的模式部署java应用.

k8s 以sidecar形式部署java应用

Muroidea

640人浏览 · 2022-07-05 10:17:19

Muroidea · 2022-07-05 10:17:19 发布

k8s部署java应用

一般模式
sidecar 模式
总结

一般模式

将base 镜像和业务jar直接打包到一个新的镜像中. 类似于
dockerfile

	FROM openjdk:17.0.3-jre-bullseye
	ENV LANG en_US.UTF-8
	RUN ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
	WORKDIR /app
	COPY ./xxx/build/apps/*.jar /app/

apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: demo
  name: demo
  namespace: dev
spec:
  replicas: 1
  selector:
    matchLabels:
      app: demo
  template:
    metadata:
      labels:
        app: demo
    spec:
      containers:
        - image: app:latest
          name: demo
          command:
            - "java"
          args:
            - "-XX:MaxRAMPercentage=90.0"
            - "--add-opens"
            - "java.base/java.lang=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.io=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.lang.invoke=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.lang.reflect=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.text=ALL-UNNAMED"
            - "--add-opens"
            - "java.desktop/java.awt.font=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.math=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.net=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.nio=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.security=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.text=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.time=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.util=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/jdk.internal.access=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/jdk.internal.misc=ALL-UNNAMED"
            - "-agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=5005"
            - "-jar"
            - "-Dspring.profiles.active=test"
            - "-Dserver.port=8080"
            - "-Duser.timezone=GMT+08"
            - "-Dfile.encoding=UTF-8"
            - "demo.jar"
          livenessProbe:
            httpGet:
              path: /actuator/health/liveness
              port: 8080
              httpHeaders:
                - name: Authorization
                  value: 'Basic xxx'
            initialDelaySeconds: 60
            timeoutSeconds: 2
            periodSeconds: 60
            successThreshold: 1
            failureThreshold: 10
          readinessProbe:
            httpGet:
              path: /actuator/health/readiness
              port: 8080
              httpHeaders:
                - name: Authorization
                  value: 'Basic xxx'
          env:
            - name: LANG
              value: "zh_CN.UTF-8"
            - name: user.language
              value: "zh"
            - name: user.region
              value: "CN"
          resources:
            limits:
              cpu: 2000m
              memory: 2Gi
            requests:
              cpu: 200m
              memory: 256m

sidecar 模式

将业务jar和openjdk镜像分开. 使用 initContainers + volumes 方式放到一个volumes中.
dockfile

FROM busybox:latest
COPY ./xxx/build/apps/demo.jar /tmp

apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: demo
  name: demo
  namespace: test
spec:
  replicas: 1
  selector:
    matchLabels:
      app: demo
  template:
    metadata:
      labels:
        app: demo
    spec:
      initContainers:
        - name: biz-demo
          image: app:latest
          imagePullPolicy: IfNotPresent
          command:
            - cp
            - /tmp/demo.jar
            - /app/demo.jar
          resources:
            limits:
              cpu: '1'
              memory: 1Gi
            requests:
              cpu: 200m
              memory: 256m
          volumeMounts:
            - mountPath: /app
              name: jar-volume
      containers:
        - image: openjdk:17.0.2
          name: openjdk-demo
          resources:
            limits:
              cpu: 1000m
              memory: 1024Mi
            requests:
              cpu: 200m
              memory: 256m
          command:
            - "java"
          args:
            - "-XX:+UseContainerSupport"
            - "-XX:InitialRAMPercentage=95.0"
            - "-XX:MaxRAMPercentage=95.0"
            - "-XX:+HeapDumpOnOutOfMemoryError"
            - "-XX:HeapDumpPath=./dump-%t.hprof"
            - "-XX:+UnlockDiagnosticVMOptions"
            - "-XX:+UnlockExperimentalVMOptions"
            - "-XX:-OmitStackTraceInFastThrow"
            - "-Xlog:gc*=debug:file=./gc-%t.log:utctime,level,tags:filecount=10,filesize=100M"
            - "-Xlog:jit+compilation=info:file=./jit_compile-%t.log:utctime,level,tags:filecount=10,filesize=10M"
            - "-Xlog:safepoint=debug:file=./safepoint-%t.log:utctime,level,tags:filecount=10,filesize=10M"
            - "-XX:+DisableExplicitGC"
            - "-XX:GuaranteedSafepointInterval=0"
            - "-XX:+UseCountedLoopSafepoints"
            - "-XX:StartFlightRecording=disk=true,maxsize=4096m,maxage=3d"
            - "-XX:FlightRecorderOptions=maxchunksize=128m"
            - "--add-opens"
            - "java.base/java.lang=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.io=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.lang.invoke=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.lang.reflect=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.text=ALL-UNNAMED"
            - "--add-opens"
            - "java.desktop/java.awt.font=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.math=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.net=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.nio=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.security=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.text=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.time=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/java.util=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/jdk.internal.access=ALL-UNNAMED"
            - "--add-opens"
            - "java.base/jdk.internal.misc=ALL-UNNAMED"
            - "-Dspring.profiles.active=test"
            - "-Dserver.port=8080"
            - "-Duser.timezone=GMT+08"
            - "-Dfile.encoding=UTF-8"
            - "-Djava.security.egd=file:/dev/./urandom"
            - "-Dnetworkaddress.cache.ttl=10"
            - "-jar"
            - "/app/demo.jar"
          livenessProbe:
            httpGet:
              path: /actuator/health/liveness
              port: 8080
              httpHeaders:
                - name: Authorization
                  value: 'Basic xxx'
            initialDelaySeconds: 60
            timeoutSeconds: 2
            periodSeconds: 60
            successThreshold: 1
            failureThreshold: 10
          readinessProbe:
            httpGet:
              path: /actuator/health/readiness
              port: 8080
              httpHeaders:
                - name: Authorization
                  value: 'Basic xxx'
          env:
            - name: LANG
              value: "zh_CN.UTF-8"
            - name: user.language
              value: "zh"
            - name: user.region
              value: "CN"
          volumeMounts:
            - mountPath: /app
              name: jar-volume
      volumes:
        - name: jar-volume
          emptyDir: { }

总结

一般模式的镜像打包出来比较大. 且无法重用. 打包速度慢
sidecar 模式. 基础镜像一般是不变的. 所有pod都可以用同一个镜像. 只有业务jar是变化的. 可以减少镜像的大小. 利于发布, 打包速度快

K8S/Kubernetes

K8S/Kubernetes社区为您提供最前沿的新闻资讯和知识内容

更多推荐

【深度】阿里巴巴万级规模 K8s 集群全局高可用体系之美

作者 | 韩堂、柘远、沉醉来源 | 阿里巴巴云原生公众号前言台湾作家林清玄在接受记者采访的时候，如此评价自己 30 多年写作生涯：“第一个十年我才华横溢，‘贼光闪现’，令周边黯然失色；第二个十年，我终于‘宝光现形’，不再去抢风头，反而与身边的美丽相得益彰；进入第三个十年，繁华落尽见真醇，我进入了‘醇光初现’的阶段，真正体味到了境界之美”。长夜有穷，真水无香。领略过了 K8s“身在江

K8S/Kubernetes

如何基于 K8s 构建下一代 DevOps 平台？

作者 | 孙健波（天元）导读：当前云原生 DevOps 体系现状如何？面临哪些挑战？如何通过 OAM 解决云原生 DevOps 场景下的诸多问题？云原生开发应用模型 OAM(Open Application Model) 社区核心成员孙健波将为大家一一解答，并分享如何基于 OAM 和 Kubernetes 打造无限能力的下一代 DevOps 平台。什么是 DevOps？为什么基于 Kub