Consul 1.9测试版发布：新增拓扑图和改进的Kubernetes集成

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"Hashicorp发布"},{"type":"link","attrs":{"href":"https:\/\/www.hashicorp.com\/blog\/announcing-hashicorp-consul-1-9","title":"","type":null},"content":[{"type":"text","text":"Consul 1.9测试版"}]},{"type":"text","text":"，为其服务网格平台添加了新特性。这个版本包括对意图模型的增强，以支持Layer 7构造、新的验证配置可视化，以及Kubernetes自定义资源。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"随着"},{"type":"link","attrs":{"href":"https:\/\/www.consul.io\/docs\/connect\/intentions","title":"","type":null},"content":[{"type":"text","text":"应用程序感知意图"}]},{"type":"text","text":"的引入，现在可以制定支持L7交互的策略，包括支持基于HTTP请求头和URL路径来判断是否允许服务间通信。在以前的版本中，意图只支持L4交互，现在可以将L4和L7混合成一个意图声明："}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"codeblock","attrs":{"lang":"plain"},"content":[{"type":"text","text":"Kind = \"service-intentions\"\nName = \"api\"\nSources = [\n {\n Name = \"hackathon-project\"\n Action = \"deny\"\n },\n {\n Name = \"web\"\n Action = \"allow\"\n },\n {\n Name = \"nightly-reconciler\"\n Permissions = [\n {\n Action = \"allow\"\n HTTP {\n PathExact = \"\/v1\/reconcile-data\"\n Methods = [\"POST\"]\n }\n }\n ]\n }\n]\n"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"上面的"},{"type":"link","attrs":{"href":"https:\/\/www.consul.io\/docs\/agent\/config-entries\/service-intentions#interaction-with-other-config-entries","title":"","type":null},"content":[{"type":"text","text":"示例"}]},{"type":"text","text":"定义了“api”的公共目标意图。第一个意图拒绝来自“hackathon-project”的连接，同时允许来自“web”的连接。对于“nightly-reconciler”，只允许使用POST方法从指定路径发送的HTTP流量。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"传统上，Consul的调试和故障排除需要依赖错误日志、命令行输出和发送遥测到外部系统。Consul缺乏一种简单的方法来可视化服务网格拓扑，从而简化故障排除。这个版本添加了一个新的"},{"type":"link","attrs":{"href":"https:\/\/www.hashicorp.com\/blog\/service-mesh-visualization-in-hashicorp-consul-1-9","title":"","type":null},"content":[{"type":"text","text":"Topology选项卡"}]},{"type":"text","text":"，用于展示拓扑关系图以及关键的服务网格指标，如请求、错误率和时间。"},{"type":"link","attrs":{"href":"https:\/\/learn.hashicorp.com\/collections\/consul\/day-2-operations","title":"","type":null},"content":[{"type":"text","text":"维护和监控操作指南"}]},{"type":"text","text":"提供了更多的细节和最佳实践。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"在拓扑图中可以看到网格内服务之间的交互。两个服务之间的明确拒绝将显示为带x的红线。我们可以通过拓扑图将拒绝调整为允许。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"image","attrs":{"src":"https:\/\/static001.infoq.cn\/resource\/image\/b1\/17\/b1c7acc4b6919dcea081e4b0427b8a17.png","alt":null,"title":"","style":[{"key":"width","value":"75%"},{"key":"bordertype","value":"none"}],"href":"","fromPaste":false,"pastePass":false}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"Consul UI的新拓扑选项卡显示被拒绝的连接（感谢："},{"type":"link","attrs":{"href":"https:\/\/www.hashicorp.com\/blog\/service-mesh-visualization-in-hashicorp-consul-1-9","title":"","type":null},"content":[{"type":"text","text":"Hashicorp"}]},{"type":"text","text":"）"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"为了改善kubernets优先的体验，该版本将引入对自定义资源定义的支持，可通过kubernets风格的对象来简化Consul的配置。现在可以通过CRD管理服务配置。在发布时，以下的"},{"type":"link","attrs":{"href":"https:\/\/learn.hashicorp.com\/tutorials\/consul\/kubernetes-custom-resource-definitions","title":"","type":null},"content":[{"type":"text","text":"配置项"}]},{"type":"text","text":"可以作为CRD："}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"bulletedlist","content":[{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"proxy-defaults——控制代理配置；"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"service-defaults——为给定服务的所有实例配置默认值；"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"service-resolver——匹配带有特定Connect上游请求的服务实例；"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"service-router——定义向何处发送L7流量（基于HTTP路由）；"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"service-splitter——定义如何基于百分比划分HTTP路由请求；"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"service-intentions——定义服务与服务之间的交互限制。"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"作为与Kubernetes集成的一个额外改进，Consul现在可以通过它的"},{"type":"link","attrs":{"href":"https:\/\/kubernetes.io\/docs\/tasks\/configure-pod-container\/configure-liveness-readiness-startup-probes\/","title":"","type":null},"content":[{"type":"text","text":"就绪状态探针"}]},{"type":"text","text":"来检测Kubernetes的健康状态。这样就可以根据"},{"type":"link","attrs":{"href":"https:\/\/www.consul.io\/docs\/agent\/checks","title":"","type":null},"content":[{"type":"text","text":"Consul的运行状况检查"}]},{"type":"text","text":"和原生Kubernetes的运行状况检查来决定流量应该流向哪里。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"流的引入提高了Consul大规模部署时的CPU和网络带宽使用率。在"},{"type":"link","attrs":{"href":"https:\/\/www.consul.io\/api-docs\/features\/blocking","title":"","type":null},"content":[{"type":"text","text":"阻塞查询"}]},{"type":"text","text":"的更新通知方面做出了重大的架构改进。服务"},{"type":"link","attrs":{"href":"https:\/\/www.consul.io\/api-docs\/health#list-nodes-for-service","title":"","type":null},"content":[{"type":"text","text":"健康检查HTTP端点"}]},{"type":"text","text":"提供了流功能，可以通过配置标志和缓存的URL参数来启用。未来的版本将有更多的端点提供流功能。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"Consul 1.9现已发布测试版。Hashicorp不保证向前兼容，因此建议将其安装在允许发生故障的集群中。更多的发布细节可以查看"},{"type":"link","attrs":{"href":"https:\/\/github.com\/hashicorp\/consul\/blob\/master\/CHANGELOG.md#190-beta1-october-12-2020","title":"","type":null},"content":[{"type":"text","text":"变更日志"}]},{"type":"text","text":"。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"strong"}],"text":"原文链接"},{"type":"text","text":"："}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"link","attrs":{"href":"https:\/\/www.infoq.com\/news\/2020\/11\/consul-1-9-beta\/","title":"","type":null},"content":[{"type":"text","text":"HashiCorp Enhances Consul with Topology Maps and Improved Kubernetes Integrations"}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}}]}